Sep  7 00:05:01 power systemd[2042953]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:06:01 power systemd[2043910]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 00:07:01 power systemd[2044746]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 00:10:01 power systemd[2046758]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:12:01 power systemd[2048292]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 00:15:01 power systemd[2050496]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:20:01 power systemd[2054608]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:25:01 power systemd[2058406]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:30:01 power systemd[2066933]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:30:01 power systemd[2066934]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 00:30:01 power systemd[2066937]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 00:30:01 power systemd[2066935]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 00:35:02 power systemd[2071080]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:36:01 power systemd[2072028]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 00:37:01 power systemd[2072727]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 00:40:01 power systemd[2075076]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:42:01 power systemd[2076960]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 00:42:59 power sudo[2077638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 00:42:59 power sudo[2077638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077638]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 00:42:59 power sudo[2077643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077643]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 00:42:59 power sudo[2077647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077647]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=XARajIkfOh'
Sep  7 00:42:59 power sudo[2077651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077651]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 00:42:59 power sudo[2077657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077657]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 00:42:59 power sudo[2077661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077661]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 00:42:59 power sudo[2077665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077665]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 00:42:59 power sudo[2077673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077673]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 00:42:59 power sudo[2077683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077683]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 00:42:59 power sudo[2077687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077687]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 00:42:59 power sudo[2077691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077691]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 00:42:59 power sudo[2077695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077695]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 00:42:59 power sudo[2077699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:42:59 power sudo[2077699]: pam_unix(sudo:session): session closed for user root
Sep  7 00:42:59 power sudo[2077703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 00:42:59 power sudo[2077703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:00 power sudo[2077703]: pam_unix(sudo:session): session closed for user root
Sep  7 00:43:01 power sudo[2077738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 00:43:01 power sudo[2077738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:01 power sudo[2077738]: pam_unix(sudo:session): session closed for user root
Sep  7 00:43:01 power sudo[2077743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 00:43:01 power sudo[2077743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:01 power sudo[2077743]: pam_unix(sudo:session): session closed for user root
Sep  7 00:43:01 power sudo[2077749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pelagoni user-2=socioloz user-3=avtogumi user-4=evolvepl user-5=caramk user-6=frizered user-7=hidrommk user-8=nefrolog user-9=ekostoc1 user-10=oncolog1 user-11=levantmk user-12=cajsproc user-13=hotammk user-14=youthgua user-15=anitermc user-16=raremk user-17=oouslave user-18=uhostmk5 user-19=bauerbg user-20=stojnevi user-21=enaspotc user-22=vmro user-23=trudovop user-24=viewinn user-25=dadarmk user-26=proverim user-27=tealmk user-28=gocruise user-29=goodnews user-30=mstmmk user-31=dnevnoin user-32=tradeyou user-33=gjorgeiv user-34=holiyayt user-35=rastiraz user-36=pecakome user-37=wondersp user-38=robustco user-39=stravelm user-40=edomcomm user-41=berbermk user-42=dikimk12 user-43=sprintst user-44=herbalpl user-45=enochmk user-46=seloviro user-47=nolimits user-48=centarba user-49=nlpmkorg user-50=kolened1
Sep  7 00:43:01 power sudo[2077749]: wp-toolkit : (command continued) user-51=jpparkin user-52=inotekso user-53=drleomk user-54=premiums user-55=daris user-56=butelmk user-57=ideaplus user-58=nasaidni user-59=karpospo user-60=screenme user-61=arturaco user-62=cetplatf user-63=dalmacom user-64=kouzonco user-65=premiuma user-66=custome1 user-67=palenzok user-68=zampmk user-69=zvskopje user-70=busymard user-71=klimimk user-72=sparkupm user-73=stokovna user-74=bovincom user-75=stojano1 user-76=vezilkac user-77=cabinetm user-78=janiboja user-79=itradeco user-80=wikicamp user-81=urbanexp user-82=mspmk user-83=infobadi user-84=spdcompu user-85=detskagr user-86=datelcom user-87=maleshne user-88=bizporta user-89=vfxnestc user-90=polyeste user-91=sedcmk user-92=ivanjord user-93=groskome user-94=velmk user-95=gogovan1 user-96=univerz1 user-97=kujnamon user-98=datalink user-99=agrosind user-100=mpbmk user-101=goartsym user-102=volkanco user-103=dhamachi user-104=mfashion user-105=delcevca
Sep  7 00:43:01 power sudo[2077749]: wp-toolkit : (command continued) user-106=simbiome user-107=getaldus user-108=barececo user-109=workandt user-110=rasmorgm user-111=bianasho user-112=makoasmk user-113=skyapart user-114=radekrat user-115=starluxm user-116=fffhpcwr user-117=versusmk user-118=ambitiou user-119=fiziosmk user-120=solemor1 user-121=mapaspla user-122=onlinesh user-123=nationa2 user-124=tcieuroc user-125=zdmgpsor user-126=v5srybi9dcdx user-127=supremel user-128=gorsajmk user-129=aquatech user-130=taneccom user-131=bozinovm user-132=fnjorgmk user-133=dslmk user-134=darkogor user-135=prizmapl user-136=innofabl user-137=premiumi user-138=vacuacti user-139=inkigaic user-140=modernar user-141=glammace user-142=albuname user-143=imdskopj user-144=pravekom user-145=vtranseu user-146=infopor1 user-147=elektrot user-148=zapovim1 user-149=cosmatob user-150=euromaki user-151=nutrivim user-152=chemhemc user-153=samasped user-154=kardiome user-155=mediasol user-156=bogdanos
Sep  7 00:43:01 power sudo[2077749]: wp-toolkit : (command continued) user-157=carrent1 user-158=apgrupmk user-159=euronic2 user-160=matratze user-161=nucktra1 user-162=lblawcom user-163=intelek1 user-164=mediatag user-165=nikolov1 user-166=hausmark user-167=aptekazd user-168=nikimare user-169=forzares user-170=mbmehani user-171=workbenc user-172=ismassag user-173=wineberr user-174=viplastc user-175=solarinv user-176=eurofarm user-177=trigemat user-178=eliksirz user-179=naksorgm user-180=electrol user-181=golakkom user-182=progress user-183=animatem user-184=cleanerm user-185=atspedco user-186=sssoluti user-187=jaramk user-188=solointe user-189=recorgmk user-190=taktcomm user-191=pelagini user-192=kaoilmk user-193=biplmk user-194=bbbustou user-195=makdrone user-196=tehnodro user-197=izzomk user-198=jpkomuna user-199=gradbai1 user-200=evacommk user-201=aptekafa user-202=madzomk user-203=peshkai1 user-204=fxxcom user-205=eaptekam user-206=dimpalne user-207=bauerin2 user-208=folklore
Sep  7 00:43:01 power sudo[2077749]: wp-toolkit : (command continued) user-209=conserva user-210=euronic3 user-211=vegemk1 user-212=cupidpro user-213=bonitavi user-214=evberasm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 00:43:01 power sudo[2077749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:02 power sudo[2077749]: pam_unix(sudo:session): session closed for user root
Sep  7 00:43:02 power sudo[2077767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 00:43:02 power sudo[2077767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:02 power sudo[2077767]: pam_unix(sudo:session): session closed for user root
Sep  7 00:43:02 power sudo[2077771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0WdEH3E14dH4rhvu.~
Sep  7 00:43:02 power sudo[2077771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:02 power sudo[2077771]: pam_unix(sudo:session): session closed for user root
Sep  7 00:43:02 power sudo[2077775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0WdEH3E14dH4rhvu.~\''
Sep  7 00:43:02 power sudo[2077775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:02 power sudo[2077775]: pam_unix(sudo:session): session closed for user root
Sep  7 00:43:02 power sudo[2077780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0WdEH3E14dH4rhvu.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 00:43:02 power sudo[2077780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:02 power sudo[2077780]: pam_unix(sudo:session): session closed for user root
Sep  7 00:43:02 power sudo[2077784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 00:43:02 power sudo[2077784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:02 power sudo[2077784]: pam_unix(sudo:session): session closed for user root
Sep  7 00:43:02 power sudo[2078206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 00:43:02 power sudo[2078206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 00:43:02 power sudo[2078206]: pam_unix(sudo:session): session closed for user root
Sep  7 00:45:01 power systemd[2080491]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:50:01 power systemd[2084904]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 00:55:02 power systemd[2089545]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:00:01 power systemd[2093419]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:00:01 power systemd[2093421]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 01:00:01 power systemd[2093422]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 01:00:01 power systemd[2093424]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 01:05:01 power systemd[2098997]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:06:01 power systemd[2100311]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 01:07:01 power systemd[2101462]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 01:10:01 power systemd[2104005]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:12:01 power systemd[2105808]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 01:15:01 power systemd[2108199]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:20:02 power systemd[2112926]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:21:32 power sudo[2114389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 01:21:32 power sudo[2114389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:21:32 power sudo[2114389]: pam_unix(sudo:session): session closed for user root
Sep  7 01:21:32 power sudo[2114395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep  7 01:21:32 power sudo[2114395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:21:32 power sudo[2114395]: pam_unix(sudo:session): session closed for user root
Sep  7 01:21:32 power sudo[2114402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon Mime list_redirects --output=json'
Sep  7 01:21:32 power sudo[2114402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:21:32 power sudo[2114402]: pam_unix(sudo:session): session closed for user root
Sep  7 01:25:01 power systemd[2117865]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:30:01 power systemd[2122857]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:30:01 power systemd[2122859]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 01:30:01 power systemd[2122858]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 01:30:01 power systemd[2122861]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 01:35:01 power systemd[2128113]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:36:01 power systemd[2129085]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 01:37:02 power systemd[2130028]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 01:40:01 power systemd[2132712]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:42:01 power systemd[2134932]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 01:42:59 power sudo[2135789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 01:42:59 power sudo[2135789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135789]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 01:42:59 power sudo[2135793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135793]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 01:42:59 power sudo[2135797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135797]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=7SAXwI72bV'
Sep  7 01:42:59 power sudo[2135801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135801]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 01:42:59 power sudo[2135807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135807]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 01:42:59 power sudo[2135811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135811]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 01:42:59 power sudo[2135815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135815]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 01:42:59 power sudo[2135819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135819]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 01:42:59 power sudo[2135828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135828]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 01:42:59 power sudo[2135832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135832]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 01:42:59 power sudo[2135836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135836]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 01:42:59 power sudo[2135840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135840]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 01:42:59 power sudo[2135844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:42:59 power sudo[2135844]: pam_unix(sudo:session): session closed for user root
Sep  7 01:42:59 power sudo[2135849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 01:42:59 power sudo[2135849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:00 power sudo[2135849]: pam_unix(sudo:session): session closed for user root
Sep  7 01:43:01 power sudo[2135887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 01:43:01 power sudo[2135887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:02 power sudo[2135887]: pam_unix(sudo:session): session closed for user root
Sep  7 01:43:02 power sudo[2135892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 01:43:02 power sudo[2135892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:02 power sudo[2135892]: pam_unix(sudo:session): session closed for user root
Sep  7 01:43:02 power sudo[2135904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tcieuroc user-2=nationa2 user-3=onlinesh user-4=mapaspla user-5=solemor1 user-6=fiziosmk user-7=ambitiou user-8=versusmk user-9=fffhpcwr user-10=starluxm user-11=radekrat user-12=modernar user-13=inkigaic user-14=vacuacti user-15=innofabl user-16=premiumi user-17=prizmapl user-18=fnjorgmk user-19=darkogor user-20=dslmk user-21=bozinovm user-22=taneccom user-23=aquatech user-24=gorsajmk user-25=supremel user-26=v5srybi9dcdx user-27=zdmgpsor user-28=samasped user-29=chemhemc user-30=nutrivim user-31=cosmatob user-32=euromaki user-33=zapovim1 user-34=elektrot user-35=infopor1 user-36=vtranseu user-37=pravekom user-38=imdskopj user-39=albuname user-40=glammace user-41=forzares user-42=nikimare user-43=aptekazd user-44=hausmark user-45=nikolov1 user-46=mediatag user-47=intelek1 user-48=lblawcom user-49=nucktra1
Sep  7 01:43:02 power sudo[2135904]: wp-toolkit : (command continued) user-50=matratze user-51=euronic2 user-52=apgrupmk user-53=carrent1 user-54=bogdanos user-55=mediasol user-56=kardiome user-57=golakkom user-58=electrol user-59=naksorgm user-60=eliksirz user-61=trigemat user-62=eurofarm user-63=solarinv user-64=viplastc user-65=wineberr user-66=ismassag user-67=workbenc user-68=mbmehani user-69=bbbustou user-70=biplmk user-71=kaoilmk user-72=pelagini user-73=recorgmk user-74=taktcomm user-75=solointe user-76=jaramk user-77=sssoluti user-78=atspedco user-79=cleanerm user-80=animatem user-81=progress user-82=dimpalne user-83=eaptekam user-84=fxxcom user-85=peshkai1 user-86=madzomk user-87=aptekafa user-88=evacommk user-89=gradbai1 user-90=jpkomuna user-91=izzomk user-92=tehnodro user-93=makdrone user-94=evberasm user-95=bonitavi user-96=cupidpro user-97=vegemk1 user-98=euronic3 user-99=conserva user-100=folklore user-101=bauerin2 user-102=ekostoc1 user-103=oncolog1
Sep  7 01:43:02 power sudo[2135904]: wp-toolkit : (command continued) user-104=levantmk user-105=nefrolog user-106=hidrommk user-107=frizered user-108=caramk user-109=evolvepl user-110=socioloz user-111=avtogumi user-112=pelagoni user-113=viewinn user-114=trudovop user-115=vmro user-116=enaspotc user-117=stojnevi user-118=bauerbg user-119=uhostmk5 user-120=oouslave user-121=raremk user-122=anitermc user-123=youthgua user-124=hotammk user-125=cajsproc user-126=stravelm user-127=robustco user-128=wondersp user-129=pecakome user-130=rastiraz user-131=holiyayt user-132=gjorgeiv user-133=tradeyou user-134=dnevnoin user-135=mstmmk user-136=goodnews user-137=gocruise user-138=tealmk user-139=proverim user-140=dadarmk user-141=kolened1 user-142=nlpmkorg user-143=centarba user-144=nolimits user-145=seloviro user-146=herbalpl user-147=enochmk user-148=sprintst user-149=dikimk12 user-150=berbermk user-151=edomcomm user-152=premiuma user-153=kouzonco user-154=dalmacom user-155=cetplatf
Sep  7 01:43:02 power sudo[2135904]: wp-toolkit : (command continued) user-156=screenme user-157=arturaco user-158=nasaidni user-159=karpospo user-160=ideaplus user-161=daris user-162=butelmk user-163=premiums user-164=drleomk user-165=inotekso user-166=jpparkin user-167=itradeco user-168=janiboja user-169=cabinetm user-170=vezilkac user-171=stojano1 user-172=bovincom user-173=stokovna user-174=sparkupm user-175=klimimk user-176=zampmk user-177=zvskopje user-178=busymard user-179=palenzok user-180=custome1 user-181=groskome user-182=ivanjord user-183=sedcmk user-184=polyeste user-185=vfxnestc user-186=bizporta user-187=maleshne user-188=datelcom user-189=detskagr user-190=spdcompu user-191=infobadi user-192=mspmk user-193=urbanexp user-194=wikicamp user-195=skyapart user-196=makoasmk user-197=bianasho user-198=rasmorgm user-199=workandt user-200=barececo user-201=getaldus user-202=delcevca user-203=simbiome user-204=mfashion user-205=dhamachi user-206=volkanco user-207=goartsym
Sep  7 01:43:02 power sudo[2135904]: wp-toolkit : (command continued) user-208=mpbmk user-209=agrosind user-210=datalink user-211=kujnamon user-212=univerz1 user-213=velmk user-214=gogovan1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 01:43:02 power sudo[2135904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:02 power sudo[2135904]: pam_unix(sudo:session): session closed for user root
Sep  7 01:43:02 power sudo[2135911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 01:43:02 power sudo[2135911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:02 power sudo[2135911]: pam_unix(sudo:session): session closed for user root
Sep  7 01:43:02 power sudo[2135915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-46JJERC8lmiuht7b.~
Sep  7 01:43:02 power sudo[2135915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:02 power sudo[2135915]: pam_unix(sudo:session): session closed for user root
Sep  7 01:43:02 power sudo[2135919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-46JJERC8lmiuht7b.~\''
Sep  7 01:43:02 power sudo[2135919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:02 power sudo[2135919]: pam_unix(sudo:session): session closed for user root
Sep  7 01:43:02 power sudo[2135925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-46JJERC8lmiuht7b.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 01:43:02 power sudo[2135925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:02 power sudo[2135925]: pam_unix(sudo:session): session closed for user root
Sep  7 01:43:02 power sudo[2135929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 01:43:02 power sudo[2135929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:02 power sudo[2135929]: pam_unix(sudo:session): session closed for user root
Sep  7 01:43:03 power sudo[2136409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 01:43:03 power sudo[2136409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 01:43:03 power sudo[2136409]: pam_unix(sudo:session): session closed for user root
Sep  7 01:45:01 power systemd[2138580]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:50:01 power systemd[2144020]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 01:55:01 power systemd[2148203]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:00:01 power systemd[2152756]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:00:01 power systemd[2152766]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 02:00:01 power systemd[2152767]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 02:00:01 power systemd[2152769]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 02:05:01 power systemd[2158216]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:06:01 power systemd[2159318]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 02:07:01 power systemd[2160159]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 02:10:01 power systemd[2162755]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:12:01 power systemd[2164587]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 02:15:01 power systemd[2167550]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:20:01 power systemd[2172251]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:25:01 power systemd[2176528]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:30:01 power systemd[2180614]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:30:01 power systemd[2180616]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 02:30:01 power systemd[2180617]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 02:30:01 power systemd[2180620]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 02:35:01 power systemd[2186340]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:36:01 power systemd[2187334]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 02:37:01 power systemd[2188138]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 02:40:01 power systemd[2191191]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:42:01 power systemd[2192720]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 02:42:59 power sudo[2193350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 02:42:59 power sudo[2193350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193350]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 02:42:59 power sudo[2193354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193354]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 02:42:59 power sudo[2193358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193358]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=xMwGsdCviD'
Sep  7 02:42:59 power sudo[2193364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193364]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 02:42:59 power sudo[2193369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193369]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 02:42:59 power sudo[2193373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193373]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 02:42:59 power sudo[2193377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193377]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 02:42:59 power sudo[2193381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193381]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 02:42:59 power sudo[2193388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193388]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 02:42:59 power sudo[2193392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193392]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 02:42:59 power sudo[2193396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193396]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 02:42:59 power sudo[2193400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193400]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 02:42:59 power sudo[2193404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:42:59 power sudo[2193404]: pam_unix(sudo:session): session closed for user root
Sep  7 02:42:59 power sudo[2193409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 02:42:59 power sudo[2193409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:00 power sudo[2193409]: pam_unix(sudo:session): session closed for user root
Sep  7 02:43:02 power sudo[2193442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 02:43:02 power sudo[2193442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:02 power sudo[2193442]: pam_unix(sudo:session): session closed for user root
Sep  7 02:43:02 power sudo[2193448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 02:43:02 power sudo[2193448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:02 power sudo[2193448]: pam_unix(sudo:session): session closed for user root
Sep  7 02:43:02 power sudo[2193454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=hausmark user-2=nikolov1 user-3=forzares user-4=aptekazd user-5=nikimare user-6=lblawcom user-7=nucktra1 user-8=intelek1 user-9=mediatag user-10=euronic2 user-11=matratze user-12=kardiome user-13=apgrupmk user-14=mediasol user-15=bogdanos user-16=carrent1 user-17=nutrivim user-18=samasped user-19=chemhemc user-20=elektrot user-21=zapovim1 user-22=euromaki user-23=cosmatob user-24=pravekom user-25=vtranseu user-26=infopor1 user-27=glammace user-28=albuname user-29=imdskopj user-30=inkigaic user-31=modernar user-32=taneccom user-33=premiumi user-34=innofabl user-35=vacuacti user-36=bozinovm user-37=fnjorgmk user-38=prizmapl user-39=dslmk user-40=darkogor user-41=supremel user-42=v5srybi9dcdx user-43=gorsajmk user-44=aquatech user-45=zdmgpsor user-46=tcieuroc user-47=mapaspla user-48=solemor1 user-49=nationa2
Sep  7 02:43:02 power sudo[2193454]: wp-toolkit : (command continued) user-50=onlinesh user-51=versusmk user-52=fiziosmk user-53=ambitiou user-54=radekrat user-55=starluxm user-56=fffhpcwr user-57=bonitavi user-58=evberasm user-59=conserva user-60=vegemk1 user-61=cupidpro user-62=euronic3 user-63=bauerin2 user-64=folklore user-65=peshkai1 user-66=fxxcom user-67=dimpalne user-68=eaptekam user-69=gradbai1 user-70=evacommk user-71=aptekafa user-72=madzomk user-73=jpkomuna user-74=izzomk user-75=makdrone user-76=tehnodro user-77=bbbustou user-78=kaoilmk user-79=biplmk user-80=pelagini user-81=solointe user-82=jaramk user-83=recorgmk user-84=taktcomm user-85=animatem user-86=cleanerm user-87=progress user-88=atspedco user-89=sssoluti user-90=electrol user-91=trigemat user-92=naksorgm user-93=eliksirz user-94=golakkom user-95=solarinv user-96=eurofarm user-97=viplastc user-98=wineberr user-99=mbmehani user-100=ismassag user-101=workbenc user-102=nolimits user-103=nlpmkorg
Sep  7 02:43:02 power sudo[2193454]: wp-toolkit : (command continued) user-104=centarba user-105=kolened1 user-106=seloviro user-107=sprintst user-108=herbalpl user-109=enochmk user-110=dikimk12 user-111=berbermk user-112=edomcomm user-113=rastiraz user-114=holiyayt user-115=wondersp user-116=stravelm user-117=robustco user-118=pecakome user-119=dnevnoin user-120=tradeyou user-121=gjorgeiv user-122=gocruise user-123=mstmmk user-124=goodnews user-125=proverim user-126=dadarmk user-127=tealmk user-128=vmro user-129=trudovop user-130=viewinn user-131=enaspotc user-132=uhostmk5 user-133=bauerbg user-134=raremk user-135=oouslave user-136=stojnevi user-137=youthgua user-138=anitermc user-139=hotammk user-140=cajsproc user-141=nefrolog user-142=oncolog1 user-143=ekostoc1 user-144=levantmk user-145=caramk user-146=frizered user-147=hidrommk user-148=evolvepl user-149=pelagoni user-150=socioloz user-151=avtogumi user-152=rasmorgm user-153=bianasho user-154=makoasmk user-155=skyapart
Sep  7 02:43:02 power sudo[2193454]: wp-toolkit : (command continued) user-156=mfashion user-157=goartsym user-158=volkanco user-159=dhamachi user-160=workandt user-161=delcevca user-162=getaldus user-163=simbiome user-164=barececo user-165=agrosind user-166=mpbmk user-167=velmk user-168=gogovan1 user-169=univerz1 user-170=kujnamon user-171=datalink user-172=vfxnestc user-173=polyeste user-174=ivanjord user-175=groskome user-176=sedcmk user-177=datelcom user-178=maleshne user-179=bizporta user-180=mspmk user-181=infobadi user-182=detskagr user-183=spdcompu user-184=urbanexp user-185=wikicamp user-186=cabinetm user-187=vezilkac user-188=itradeco user-189=janiboja user-190=bovincom user-191=stojano1 user-192=klimimk user-193=sparkupm user-194=stokovna user-195=custome1 user-196=busymard user-197=zampmk user-198=zvskopje user-199=palenzok user-200=dalmacom user-201=cetplatf user-202=premiuma user-203=kouzonco user-204=premiums user-205=butelmk user-206=daris user-207=screenme
Sep  7 02:43:02 power sudo[2193454]: wp-toolkit : (command continued) user-208=arturaco user-209=ideaplus user-210=karpospo user-211=nasaidni user-212=drleomk user-213=jpparkin user-214=inotekso feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 02:43:02 power sudo[2193454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:03 power sudo[2193454]: pam_unix(sudo:session): session closed for user root
Sep  7 02:43:03 power sudo[2193465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 02:43:03 power sudo[2193465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:03 power sudo[2193465]: pam_unix(sudo:session): session closed for user root
Sep  7 02:43:03 power sudo[2193470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A3ZZh4stbur1aOWm.~
Sep  7 02:43:03 power sudo[2193470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:03 power sudo[2193470]: pam_unix(sudo:session): session closed for user root
Sep  7 02:43:03 power sudo[2193474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A3ZZh4stbur1aOWm.~\''
Sep  7 02:43:03 power sudo[2193474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:03 power sudo[2193474]: pam_unix(sudo:session): session closed for user root
Sep  7 02:43:03 power sudo[2193481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A3ZZh4stbur1aOWm.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 02:43:03 power sudo[2193481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:03 power sudo[2193481]: pam_unix(sudo:session): session closed for user root
Sep  7 02:43:03 power sudo[2193486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 02:43:03 power sudo[2193486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:03 power sudo[2193486]: pam_unix(sudo:session): session closed for user root
Sep  7 02:43:03 power sudo[2193823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 02:43:03 power sudo[2193823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 02:43:03 power sudo[2193823]: pam_unix(sudo:session): session closed for user root
Sep  7 02:45:01 power systemd[2195912]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:50:01 power systemd[2200324]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 02:51:48 power sshd[2201722]: Connection closed by 45.79.181.104 port 24892 [preauth]
Sep  7 02:51:49 power sshd[2201729]: Connection closed by 45.79.181.104 port 24902 [preauth]
Sep  7 02:51:49 power sshd[2201745]: Connection closed by 45.79.181.104 port 24916 [preauth]
Sep  7 02:55:01 power systemd[2204452]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:00:01 power systemd[2208293]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:00:01 power systemd[2208296]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 03:00:01 power systemd[2208297]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 03:00:01 power systemd[2208299]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 03:05:01 power systemd[2213458]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:06:01 power systemd[2214383]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 03:07:01 power systemd[2215339]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 03:10:02 power systemd[2218449]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:12:01 power systemd[2220232]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 03:15:01 power systemd[2222862]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:20:01 power systemd[2227947]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:25:01 power systemd[2233119]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:26:14 power sshd[2235254]: error: kex_exchange_identification: banner line contains invalid characters
Sep  7 03:26:14 power sshd[2235254]: banner exchange: Connection from 104.152.52.222 port 53259: invalid format
Sep  7 03:26:14 power sshd[2235259]: error: kex_exchange_identification: banner line contains invalid characters
Sep  7 03:26:14 power sshd[2235259]: banner exchange: Connection from 104.152.52.227 port 33947: invalid format
Sep  7 03:26:14 power sshd[2235304]: error: kex_exchange_identification: banner line contains invalid characters
Sep  7 03:26:14 power sshd[2235304]: banner exchange: Connection from 104.152.52.217 port 43155: invalid format
Sep  7 03:26:14 power sshd[2235281]: Connection closed by 104.152.52.224 port 41115 [preauth]
Sep  7 03:26:14 power sshd[2235284]: Connection closed by 104.152.52.221 port 52373 [preauth]
Sep  7 03:26:15 power sshd[2235314]: Connection closed by 104.152.52.218 port 48587 [preauth]
Sep  7 03:26:26 power sshd[2235683]: error: kex_exchange_identification: banner line contains invalid characters
Sep  7 03:26:26 power sshd[2235683]: banner exchange: Connection from 104.152.52.162 port 46107: invalid format
Sep  7 03:26:27 power sshd[2235695]: Connection closed by 104.152.52.165 port 41317 [preauth]
Sep  7 03:27:01 power systemd[2236486]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  7 03:30:01 power systemd[2240316]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:30:01 power systemd[2240319]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 03:30:01 power systemd[2240321]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 03:30:01 power systemd[2240322]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 03:33:01 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 03:35:01 power systemd[2247664]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:36:01 power systemd[2249009]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 03:37:01 power systemd[2250386]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 03:40:01 power systemd[2253857]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:42:01 power systemd[2256473]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 03:42:59 power sudo[2257421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 03:42:59 power sudo[2257421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:42:59 power sudo[2257421]: pam_unix(sudo:session): session closed for user root
Sep  7 03:42:59 power sudo[2257425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 03:42:59 power sudo[2257425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:42:59 power sudo[2257425]: pam_unix(sudo:session): session closed for user root
Sep  7 03:42:59 power sudo[2257429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 03:42:59 power sudo[2257429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:42:59 power sudo[2257429]: pam_unix(sudo:session): session closed for user root
Sep  7 03:42:59 power sudo[2257434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=Z5zaGVctGp'
Sep  7 03:42:59 power sudo[2257434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:42:59 power sudo[2257434]: pam_unix(sudo:session): session closed for user root
Sep  7 03:42:59 power sudo[2257439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 03:42:59 power sudo[2257439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:42:59 power sudo[2257439]: pam_unix(sudo:session): session closed for user root
Sep  7 03:42:59 power sudo[2257443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 03:42:59 power sudo[2257443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:42:59 power sudo[2257443]: pam_unix(sudo:session): session closed for user root
Sep  7 03:42:59 power sudo[2257448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 03:42:59 power sudo[2257448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:42:59 power sudo[2257448]: pam_unix(sudo:session): session closed for user root
Sep  7 03:42:59 power sudo[2257453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 03:42:59 power sudo[2257453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:42:59 power sudo[2257453]: pam_unix(sudo:session): session closed for user root
Sep  7 03:42:59 power sudo[2257464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 03:42:59 power sudo[2257464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:42:59 power sudo[2257464]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:00 power sudo[2257469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 03:43:00 power sudo[2257469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:00 power sudo[2257469]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:00 power sudo[2257474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 03:43:00 power sudo[2257474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:00 power sudo[2257474]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:00 power sudo[2257478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 03:43:00 power sudo[2257478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:00 power sudo[2257478]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:00 power sudo[2257482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 03:43:00 power sudo[2257482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:00 power sudo[2257482]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:00 power sudo[2257486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 03:43:00 power sudo[2257486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:00 power sudo[2257486]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:02 power sudo[2257516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 03:43:02 power sudo[2257516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:02 power sudo[2257516]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:02 power sudo[2257524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 03:43:02 power sudo[2257524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:02 power sudo[2257524]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:02 power sudo[2257531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=golakkom user-2=electrol user-3=trigemat user-4=eliksirz user-5=naksorgm user-6=eurofarm user-7=solarinv user-8=viplastc user-9=wineberr user-10=ismassag user-11=workbenc user-12=mbmehani user-13=bbbustou user-14=kaoilmk user-15=biplmk user-16=pelagini user-17=recorgmk user-18=taktcomm user-19=solointe user-20=jaramk user-21=atspedco user-22=sssoluti user-23=animatem user-24=cleanerm user-25=progress user-26=dimpalne user-27=eaptekam user-28=peshkai1 user-29=fxxcom user-30=evacommk user-31=madzomk user-32=aptekafa user-33=gradbai1 user-34=jpkomuna user-35=izzomk user-36=tehnodro user-37=makdrone user-38=bonitavi user-39=evberasm user-40=vegemk1 user-41=cupidpro user-42=euronic3 user-43=conserva user-44=folklore user-45=bauerin2 user-46=tcieuroc user-47=nationa2 user-48=onlinesh user-49=mapaspla
Sep  7 03:43:02 power sudo[2257531]: wp-toolkit : (command continued) user-50=solemor1 user-51=fiziosmk user-52=ambitiou user-53=versusmk user-54=fffhpcwr user-55=radekrat user-56=starluxm user-57=modernar user-58=inkigaic user-59=innofabl user-60=premiumi user-61=vacuacti user-62=bozinovm user-63=dslmk user-64=prizmapl user-65=fnjorgmk user-66=darkogor user-67=taneccom user-68=gorsajmk user-69=aquatech user-70=supremel user-71=v5srybi9dcdx user-72=zdmgpsor user-73=samasped user-74=chemhemc user-75=nutrivim user-76=cosmatob user-77=euromaki user-78=zapovim1 user-79=elektrot user-80=infopor1 user-81=vtranseu user-82=pravekom user-83=imdskopj user-84=glammace user-85=albuname user-86=forzares user-87=aptekazd user-88=nikimare user-89=hausmark user-90=nikolov1 user-91=intelek1 user-92=mediatag user-93=lblawcom user-94=nucktra1 user-95=euronic2 user-96=matratze user-97=apgrupmk user-98=mediasol user-99=bogdanos user-100=carrent1 user-101=kardiome user-102=premiuma user-103=kouzonco
Sep  7 03:43:02 power sudo[2257531]: wp-toolkit : (command continued) user-104=dalmacom user-105=cetplatf user-106=screenme user-107=arturaco user-108=ideaplus user-109=nasaidni user-110=karpospo user-111=premiums user-112=daris user-113=butelmk user-114=drleomk user-115=jpparkin user-116=inotekso user-117=itradeco user-118=janiboja user-119=cabinetm user-120=vezilkac user-121=stojano1 user-122=bovincom user-123=sparkupm user-124=stokovna user-125=klimimk user-126=zvskopje user-127=zampmk user-128=busymard user-129=palenzok user-130=custome1 user-131=ivanjord user-132=groskome user-133=sedcmk user-134=vfxnestc user-135=polyeste user-136=bizporta user-137=datelcom user-138=maleshne user-139=detskagr user-140=spdcompu user-141=infobadi user-142=mspmk user-143=urbanexp user-144=wikicamp user-145=makoasmk user-146=bianasho user-147=skyapart user-148=rasmorgm user-149=workandt user-150=delcevca user-151=simbiome user-152=getaldus user-153=barececo user-154=mfashion user-155=goartsym
Sep  7 03:43:02 power sudo[2257531]: wp-toolkit : (command continued) user-156=volkanco user-157=dhamachi user-158=agrosind user-159=mpbmk user-160=datalink user-161=gogovan1 user-162=velmk user-163=univerz1 user-164=kujnamon user-165=nefrolog user-166=ekostoc1 user-167=oncolog1 user-168=levantmk user-169=frizered user-170=hidrommk user-171=caramk user-172=evolvepl user-173=socioloz user-174=avtogumi user-175=pelagoni user-176=vmro user-177=viewinn user-178=trudovop user-179=enaspotc user-180=stojnevi user-181=uhostmk5 user-182=bauerbg user-183=raremk user-184=oouslave user-185=youthgua user-186=anitermc user-187=hotammk user-188=cajsproc user-189=wondersp user-190=robustco user-191=stravelm user-192=pecakome user-193=rastiraz user-194=holiyayt user-195=gjorgeiv user-196=tradeyou user-197=dnevnoin user-198=mstmmk user-199=goodnews user-200=gocruise user-201=tealmk user-202=proverim user-203=dadarmk user-204=nlpmkorg user-205=centarba user-206=kolened1 user-207=nolimits
Sep  7 03:43:02 power sudo[2257531]: wp-toolkit : (command continued) user-208=seloviro user-209=sprintst user-210=enochmk user-211=herbalpl user-212=dikimk12 user-213=berbermk user-214=edomcomm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 03:43:02 power sudo[2257531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:02 power sudo[2257531]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:02 power sudo[2257539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 03:43:02 power sudo[2257539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:02 power sudo[2257539]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:02 power sudo[2257543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JsdWJ7ONsN3HTbBz.~
Sep  7 03:43:02 power sudo[2257543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:02 power sudo[2257543]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:02 power sudo[2257547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JsdWJ7ONsN3HTbBz.~\''
Sep  7 03:43:02 power sudo[2257547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:02 power sudo[2257547]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:02 power sudo[2257552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JsdWJ7ONsN3HTbBz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 03:43:02 power sudo[2257552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:02 power sudo[2257552]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:02 power sudo[2257556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 03:43:02 power sudo[2257556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:02 power sudo[2257556]: pam_unix(sudo:session): session closed for user root
Sep  7 03:43:03 power sudo[2258469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 03:43:03 power sudo[2258469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 03:43:03 power sudo[2258469]: pam_unix(sudo:session): session closed for user root
Sep  7 03:45:01 power systemd[2260610]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:50:01 power systemd[2265996]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 03:55:01 power systemd[2271257]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:00:01 power systemd[2275799]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:00:01 power systemd[2275800]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 04:00:01 power systemd[2275802]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 04:00:01 power systemd[2275804]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 04:05:01 power systemd[2280569]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:06:01 power systemd[2281506]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 04:07:01 power systemd[2282469]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 04:10:01 power systemd[2285270]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:12:01 power systemd[2287384]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 04:15:01 power systemd[2290251]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:20:01 power systemd[2297171]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:25:01 power systemd[2301634]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:30:01 power systemd[2305810]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 04:30:01 power systemd[2305806]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:30:01 power systemd[2305813]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 04:30:01 power systemd[2305814]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 04:30:01 power systemd[2305816]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  7 04:35:02 power systemd[2310632]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:36:01 power systemd[2311464]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 04:37:01 power systemd[2312546]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 04:40:01 power systemd[2315102]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:42:01 power systemd[2316757]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 04:42:59 power sudo[2317459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 04:42:59 power sudo[2317459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:42:59 power sudo[2317459]: pam_unix(sudo:session): session closed for user root
Sep  7 04:42:59 power sudo[2317463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 04:42:59 power sudo[2317463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:42:59 power sudo[2317463]: pam_unix(sudo:session): session closed for user root
Sep  7 04:42:59 power sudo[2317467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 04:42:59 power sudo[2317467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:42:59 power sudo[2317467]: pam_unix(sudo:session): session closed for user root
Sep  7 04:42:59 power sudo[2317471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=4MOBZbYrbO'
Sep  7 04:42:59 power sudo[2317471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:42:59 power sudo[2317471]: pam_unix(sudo:session): session closed for user root
Sep  7 04:42:59 power sudo[2317477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 04:42:59 power sudo[2317477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:42:59 power sudo[2317477]: pam_unix(sudo:session): session closed for user root
Sep  7 04:42:59 power sudo[2317481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 04:42:59 power sudo[2317481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:42:59 power sudo[2317481]: pam_unix(sudo:session): session closed for user root
Sep  7 04:42:59 power sudo[2317485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 04:42:59 power sudo[2317485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:42:59 power sudo[2317485]: pam_unix(sudo:session): session closed for user root
Sep  7 04:42:59 power sudo[2317493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 04:42:59 power sudo[2317493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:42:59 power sudo[2317493]: pam_unix(sudo:session): session closed for user root
Sep  7 04:42:59 power sudo[2317500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 04:42:59 power sudo[2317500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:42:59 power sudo[2317500]: pam_unix(sudo:session): session closed for user root
Sep  7 04:42:59 power sudo[2317504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 04:43:00 power sudo[2317504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:00 power sudo[2317504]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:00 power sudo[2317508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 04:43:00 power sudo[2317508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:00 power sudo[2317508]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:00 power sudo[2317512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 04:43:00 power sudo[2317512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:00 power sudo[2317512]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:00 power sudo[2317516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 04:43:00 power sudo[2317516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:00 power sudo[2317516]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:00 power sudo[2317521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 04:43:00 power sudo[2317521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:00 power sudo[2317521]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:02 power sudo[2317555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 04:43:02 power sudo[2317555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:02 power sudo[2317555]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:02 power sudo[2317565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 04:43:02 power sudo[2317565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:02 power sudo[2317565]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:02 power sudo[2317572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bovincom user-2=stojano1 user-3=cabinetm user-4=vezilkac user-5=itradeco user-6=janiboja user-7=custome1 user-8=zvskopje user-9=zampmk user-10=busymard user-11=palenzok user-12=klimimk user-13=stokovna user-14=sparkupm user-15=dalmacom user-16=cetplatf user-17=premiuma user-18=kouzonco user-19=drleomk user-20=inotekso user-21=jpparkin user-22=daris user-23=butelmk user-24=premiums user-25=arturaco user-26=screenme user-27=nasaidni user-28=karpospo user-29=ideaplus user-30=mfashion user-31=dhamachi user-32=goartsym user-33=volkanco user-34=workandt user-35=barececo user-36=simbiome user-37=delcevca user-38=getaldus user-39=rasmorgm user-40=skyapart user-41=bianasho user-42=makoasmk user-43=kujnamon user-44=univerz1 user-45=velmk user-46=gogovan1 user-47=datalink user-48=mpbmk user-49=agrosind user-50=maleshne
Sep  7 04:43:02 power sudo[2317572]: wp-toolkit : (command continued) user-51=datelcom user-52=bizporta user-53=polyeste user-54=vfxnestc user-55=ivanjord user-56=groskome user-57=sedcmk user-58=urbanexp user-59=wikicamp user-60=infobadi user-61=mspmk user-62=detskagr user-63=spdcompu user-64=bauerbg user-65=uhostmk5 user-66=oouslave user-67=raremk user-68=stojnevi user-69=viewinn user-70=trudovop user-71=vmro user-72=enaspotc user-73=hotammk user-74=cajsproc user-75=anitermc user-76=youthgua user-77=caramk user-78=hidrommk user-79=frizered user-80=oncolog1 user-81=ekostoc1 user-82=levantmk user-83=nefrolog user-84=pelagoni user-85=socioloz user-86=avtogumi user-87=evolvepl user-88=seloviro user-89=nolimits user-90=kolened1 user-91=nlpmkorg user-92=centarba user-93=berbermk user-94=edomcomm user-95=herbalpl user-96=enochmk user-97=sprintst user-98=dikimk12 user-99=dnevnoin user-100=gjorgeiv user-101=tradeyou user-102=rastiraz user-103=holiyayt user-104=stravelm user-105=robustco
Sep  7 04:43:02 power sudo[2317572]: wp-toolkit : (command continued) user-106=wondersp user-107=pecakome user-108=proverim user-109=dadarmk user-110=tealmk user-111=gocruise user-112=mstmmk user-113=goodnews user-114=pelagini user-115=bbbustou user-116=biplmk user-117=kaoilmk user-118=cleanerm user-119=animatem user-120=progress user-121=sssoluti user-122=atspedco user-123=solointe user-124=jaramk user-125=recorgmk user-126=taktcomm user-127=solarinv user-128=eurofarm user-129=electrol user-130=eliksirz user-131=naksorgm user-132=trigemat user-133=golakkom user-134=mbmehani user-135=ismassag user-136=workbenc user-137=viplastc user-138=wineberr user-139=conserva user-140=cupidpro user-141=vegemk1 user-142=euronic3 user-143=evberasm user-144=bonitavi user-145=bauerin2 user-146=folklore user-147=gradbai1 user-148=madzomk user-149=aptekafa user-150=evacommk user-151=fxxcom user-152=peshkai1 user-153=dimpalne user-154=eaptekam user-155=makdrone user-156=tehnodro user-157=jpkomuna
Sep  7 04:43:02 power sudo[2317572]: wp-toolkit : (command continued) user-158=izzomk user-159=taneccom user-160=vacuacti user-161=innofabl user-162=premiumi user-163=prizmapl user-164=dslmk user-165=fnjorgmk user-166=darkogor user-167=bozinovm user-168=inkigaic user-169=modernar user-170=zdmgpsor user-171=supremel user-172=v5srybi9dcdx user-173=aquatech user-174=gorsajmk user-175=mapaspla user-176=solemor1 user-177=nationa2 user-178=onlinesh user-179=tcieuroc user-180=starluxm user-181=radekrat user-182=fffhpcwr user-183=versusmk user-184=fiziosmk user-185=ambitiou user-186=lblawcom user-187=nucktra1 user-188=mediatag user-189=intelek1 user-190=hausmark user-191=nikolov1 user-192=forzares user-193=nikimare user-194=aptekazd user-195=kardiome user-196=apgrupmk user-197=bogdanos user-198=carrent1 user-199=mediasol user-200=matratze user-201=euronic2 user-202=zapovim1 user-203=elektrot user-204=cosmatob user-205=euromaki user-206=nutrivim user-207=chemhemc user-208=samasped
Sep  7 04:43:02 power sudo[2317572]: wp-toolkit : (command continued) user-209=albuname user-210=glammace user-211=imdskopj user-212=pravekom user-213=vtranseu user-214=infopor1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 04:43:02 power sudo[2317572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:02 power sudo[2317572]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:02 power sudo[2317588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 04:43:02 power sudo[2317588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:02 power sudo[2317588]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:02 power sudo[2317593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mXVc20TMXUxDLX39.~
Sep  7 04:43:02 power sudo[2317593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:02 power sudo[2317593]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:02 power sudo[2317597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mXVc20TMXUxDLX39.~\''
Sep  7 04:43:02 power sudo[2317597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:02 power sudo[2317597]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:02 power sudo[2317602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mXVc20TMXUxDLX39.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 04:43:02 power sudo[2317602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:02 power sudo[2317602]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:02 power sudo[2317606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 04:43:02 power sudo[2317606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:02 power sudo[2317606]: pam_unix(sudo:session): session closed for user root
Sep  7 04:43:03 power sudo[2318004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 04:43:03 power sudo[2318004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:43:03 power sudo[2318004]: pam_unix(sudo:session): session closed for user root
Sep  7 04:44:59 power sudo[2321297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 04:44:59 power sudo[2321297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:44:59 power sudo[2321297]: pam_unix(sudo:session): session closed for user root
Sep  7 04:44:59 power sudo[2321308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 04:44:59 power sudo[2321308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:44:59 power sudo[2321308]: pam_unix(sudo:session): session closed for user root
Sep  7 04:44:59 power sudo[2321331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 04:44:59 power sudo[2321331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:00 power sudo[2321331]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:00 power sudo[2321337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=solointe user-2=jaramk user-3=taktcomm user-4=recorgmk user-5=cleanerm user-6=animatem user-7=progress user-8=atspedco user-9=sssoluti user-10=bbbustou user-11=biplmk user-12=kaoilmk user-13=pelagini user-14=viplastc user-15=wineberr user-16=mbmehani user-17=ismassag user-18=workbenc user-19=electrol user-20=eliksirz user-21=naksorgm user-22=trigemat user-23=golakkom user-24=solarinv user-25=eurofarm user-26=bauerin2 user-27=folklore user-28=evberasm user-29=bonitavi user-30=conserva user-31=cupidpro user-32=vegemk1 user-33=euronic3 user-34=jpkomuna user-35=izzomk user-36=makdrone user-37=tehnodro user-38=fxxcom user-39=peshkai1 user-40=dimpalne user-41=eaptekam user-42=gradbai1 user-43=aptekafa user-44=madzomk user-45=evacommk user-46=supremel user-47=v5srybi9dcdx user-48=aquatech user-49=gorsajmk
Sep  7 04:45:00 power sudo[2321337]: wp-toolkit : (command continued) user-50=zdmgpsor user-51=inkigaic user-52=modernar user-53=taneccom user-54=vacuacti user-55=premiumi user-56=innofabl user-57=prizmapl user-58=darkogor user-59=dslmk user-60=fnjorgmk user-61=bozinovm user-62=versusmk user-63=fiziosmk user-64=ambitiou user-65=starluxm user-66=radekrat user-67=fffhpcwr user-68=tcieuroc user-69=mapaspla user-70=solemor1 user-71=nationa2 user-72=onlinesh user-73=matratze user-74=euronic2 user-75=kardiome user-76=apgrupmk user-77=bogdanos user-78=carrent1 user-79=mediasol user-80=nikolov1 user-81=hausmark user-82=forzares user-83=nikimare user-84=aptekazd user-85=lblawcom user-86=nucktra1 user-87=mediatag user-88=intelek1 user-89=pravekom user-90=vtranseu user-91=infopor1 user-92=albuname user-93=glammace user-94=imdskopj user-95=nutrivim user-96=chemhemc user-97=samasped user-98=elektrot user-99=zapovim1 user-100=cosmatob user-101=euromaki user-102=klimimk user-103=stokovna
Sep  7 04:45:00 power sudo[2321337]: wp-toolkit : (command continued) user-104=sparkupm user-105=custome1 user-106=zampmk user-107=zvskopje user-108=busymard user-109=palenzok user-110=cabinetm user-111=vezilkac user-112=itradeco user-113=janiboja user-114=bovincom user-115=stojano1 user-116=daris user-117=butelmk user-118=premiums user-119=arturaco user-120=screenme user-121=karpospo user-122=nasaidni user-123=ideaplus user-124=drleomk user-125=inotekso user-126=jpparkin user-127=dalmacom user-128=cetplatf user-129=premiuma user-130=kouzonco user-131=mpbmk user-132=agrosind user-133=kujnamon user-134=univerz1 user-135=velmk user-136=gogovan1 user-137=datalink user-138=rasmorgm user-139=skyapart user-140=bianasho user-141=makoasmk user-142=mfashion user-143=dhamachi user-144=volkanco user-145=goartsym user-146=workandt user-147=barececo user-148=delcevca user-149=simbiome user-150=getaldus user-151=mspmk user-152=infobadi user-153=detskagr user-154=spdcompu user-155=urbanexp
Sep  7 04:45:00 power sudo[2321337]: wp-toolkit : (command continued) user-156=wikicamp user-157=polyeste user-158=vfxnestc user-159=groskome user-160=ivanjord user-161=sedcmk user-162=maleshne user-163=datelcom user-164=bizporta user-165=anitermc user-166=youthgua user-167=hotammk user-168=cajsproc user-169=viewinn user-170=trudovop user-171=vmro user-172=enaspotc user-173=bauerbg user-174=uhostmk5 user-175=oouslave user-176=raremk user-177=stojnevi user-178=evolvepl user-179=pelagoni user-180=socioloz user-181=avtogumi user-182=ekostoc1 user-183=oncolog1 user-184=levantmk user-185=nefrolog user-186=caramk user-187=hidrommk user-188=frizered user-189=herbalpl user-190=enochmk user-191=sprintst user-192=dikimk12 user-193=berbermk user-194=edomcomm user-195=nolimits user-196=kolened1 user-197=nlpmkorg user-198=centarba user-199=seloviro user-200=gocruise user-201=mstmmk user-202=goodnews user-203=proverim user-204=dadarmk user-205=tealmk user-206=rastiraz user-207=holiyayt
Sep  7 04:45:00 power sudo[2321337]: wp-toolkit : (command continued) user-208=stravelm user-209=robustco user-210=wondersp user-211=pecakome user-212=dnevnoin user-213=gjorgeiv user-214=tradeyou feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 04:45:00 power sudo[2321337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:00 power sudo[2321337]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:00 power sudo[2321347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep  7 04:45:00 power sudo[2321347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:00 power sudo[2321347]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:00 power sudo[2321353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vmro --output=json'
Sep  7 04:45:00 power sudo[2321353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:00 power sudo[2321353]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:01 power systemd[2321463]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:45:03 power sudo[2321539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro /bin/sh -c 'cd /home/vmro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:45:03 power sudo[2321539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:03 power sudo[2321539]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:03 power sudo[2321547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vmro --user-current --json'
Sep  7 04:45:03 power sudo[2321547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:03 power sudo[2321547]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:03 power sudo[2321554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro LangPHP php_get_vhost_versions --output=json'
Sep  7 04:45:03 power sudo[2321554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:03 power sudo[2321554]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:03 power sudo[2321560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php83 --output=json'
Sep  7 04:45:03 power sudo[2321560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:04 power sudo[2321560]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:04 power sudo[2321589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:45:04 power sudo[2321589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:04 power sudo[2321589]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:04 power sudo[2321613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DomainInfo single_domain_data domain=vmro-dpmne.org.mk return_https_redirect_status=1 --output=json'
Sep  7 04:45:04 power sudo[2321613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:04 power sudo[2321613]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:04 power sudo[2321623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_vhost_ssl_components --output=json'
Sep  7 04:45:04 power sudo[2321623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:05 power sudo[2321623]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:05 power sudo[2321637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_ssl_vhosts --output=json'
Sep  7 04:45:05 power sudo[2321637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:05 power sudo[2321637]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:05 power sudo[2321642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro Mime list_redirects --output=json'
Sep  7 04:45:05 power sudo[2321642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:05 power sudo[2321642]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:07 power sudo[2321728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DirectoryPrivacy is_directory_protected dir=/home/vmro/public_html --output=json'
Sep  7 04:45:07 power sudo[2321728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:07 power sudo[2321728]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:11 power sudo[2321959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep  7 04:45:11 power sudo[2321959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:11 power sudo[2321959]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:11 power sudo[2321968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dadarmk --output=json'
Sep  7 04:45:11 power sudo[2321968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:11 power sudo[2321968]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:15 power sudo[2322070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/academy.dadar.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:45:15 power sudo[2322070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:15 power sudo[2322070]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:15 power sudo[2322076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep  7 04:45:15 power sudo[2322076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:15 power sudo[2322076]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:16 power sudo[2322083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk LangPHP php_get_vhost_versions --output=json'
Sep  7 04:45:16 power sudo[2322083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:16 power sudo[2322083]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:16 power sudo[2322089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:45:16 power sudo[2322089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:16 power sudo[2322089]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:16 power sudo[2322109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=academy.dadar.mk return_https_redirect_status=1 --output=json'
Sep  7 04:45:16 power sudo[2322109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:16 power sudo[2322109]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:16 power sudo[2322115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk Mime list_redirects --output=json'
Sep  7 04:45:16 power sudo[2322115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:16 power sudo[2322115]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:19 power sudo[2322220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/academy.dadar.mk --output=json'
Sep  7 04:45:19 power sudo[2322220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:19 power sudo[2322220]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:22 power sudo[2322420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep  7 04:45:22 power sudo[2322420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:23 power sudo[2322420]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:23 power sudo[2322426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=agrosind --output=json'
Sep  7 04:45:23 power sudo[2322426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:23 power sudo[2322426]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:29 power sudo[2322552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:45:29 power sudo[2322552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:29 power sudo[2322552]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:29 power sudo[2322559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user agrosind --user-current --json'
Sep  7 04:45:29 power sudo[2322559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:30 power sudo[2322559]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:30 power sudo[2322569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind LangPHP php_get_vhost_versions --output=json'
Sep  7 04:45:30 power sudo[2322569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:30 power sudo[2322569]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:30 power sudo[2322574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php81 --output=json'
Sep  7 04:45:30 power sudo[2322574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:30 power sudo[2322574]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:31 power sudo[2322581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:45:31 power sudo[2322581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:31 power sudo[2322581]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:31 power sudo[2322600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DomainInfo single_domain_data domain=agrosindikat.mk return_https_redirect_status=1 --output=json'
Sep  7 04:45:31 power sudo[2322600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:31 power sudo[2322600]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:31 power sudo[2322610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind Mime list_redirects --output=json'
Sep  7 04:45:31 power sudo[2322610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:31 power sudo[2322610]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:35 power sudo[2322712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DirectoryPrivacy is_directory_protected dir=/home/agrosind/public_html --output=json'
Sep  7 04:45:35 power sudo[2322712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:35 power sudo[2322712]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:36 power sudo[2322775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:45:36 power sudo[2322775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:36 power sudo[2322775]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:36 power sudo[2322780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:45:36 power sudo[2322780]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:45:36 power sudo[2322780]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:45:36 power sudo[2322780]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:45:36 power sudo[2322780]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:45:36 power sudo[2322780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:36 power sudo[2322780]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:36 power sudo[2322785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:45:36 power sudo[2322785]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:45:36 power sudo[2322785]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:45:36 power sudo[2322785]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:45:36 power sudo[2322785]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:45:36 power sudo[2322785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:36 power sudo[2322785]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:38 power sudo[2322902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:45:38 power sudo[2322902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:38 power sudo[2322902]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:38 power sudo[2322907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:45:38 power sudo[2322907]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:45:38 power sudo[2322907]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:45:38 power sudo[2322907]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:45:38 power sudo[2322907]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:45:38 power sudo[2322907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:38 power sudo[2322907]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:38 power sudo[2322912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:45:38 power sudo[2322912]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:45:38 power sudo[2322912]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:45:38 power sudo[2322912]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:45:38 power sudo[2322912]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:45:38 power sudo[2322912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:38 power sudo[2322912]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:39 power sudo[2322948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep  7 04:45:39 power sudo[2322948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:39 power sudo[2322948]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:39 power sudo[2322953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=fffhpcwr --output=json'
Sep  7 04:45:39 power sudo[2322953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:39 power sudo[2322953]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:44 power sudo[2323067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/al.rsbsp.org.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:45:44 power sudo[2323067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:44 power sudo[2323067]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:44 power sudo[2323073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep  7 04:45:44 power sudo[2323073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:44 power sudo[2323073]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:44 power sudo[2323082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr LangPHP php_get_vhost_versions --output=json'
Sep  7 04:45:44 power sudo[2323082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:44 power sudo[2323082]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:44 power sudo[2323087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:45:44 power sudo[2323087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:44 power sudo[2323087]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:45 power sudo[2323109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=al.rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep  7 04:45:45 power sudo[2323109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:45 power sudo[2323109]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:45 power sudo[2323115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr Mime list_redirects --output=json'
Sep  7 04:45:45 power sudo[2323115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:45 power sudo[2323115]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:48 power sudo[2323216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/al.rsbsp.org.mk --output=json'
Sep  7 04:45:48 power sudo[2323216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:48 power sudo[2323216]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:52 power sudo[2323459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep  7 04:45:52 power sudo[2323459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:53 power sudo[2323459]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:53 power sudo[2323464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ambitiou --output=json'
Sep  7 04:45:53 power sudo[2323464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:53 power sudo[2323464]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:57 power sudo[2323553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/public_html/site && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:45:57 power sudo[2323553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:57 power sudo[2323553]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:57 power sudo[2323559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep  7 04:45:57 power sudo[2323559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:57 power sudo[2323559]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:57 power sudo[2323567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou LangPHP php_get_vhost_versions --output=json'
Sep  7 04:45:57 power sudo[2323567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:57 power sudo[2323567]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:57 power sudo[2323576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep  7 04:45:57 power sudo[2323576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:58 power sudo[2323576]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:58 power sudo[2323592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:45:58 power sudo[2323592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:58 power sudo[2323592]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:59 power sudo[2323609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep  7 04:45:59 power sudo[2323609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:59 power sudo[2323609]: pam_unix(sudo:session): session closed for user root
Sep  7 04:45:59 power sudo[2323619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou Mime list_redirects --output=json'
Sep  7 04:45:59 power sudo[2323619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:45:59 power sudo[2323619]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:02 power sudo[2323751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/public_html/site --output=json'
Sep  7 04:46:02 power sudo[2323751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:02 power sudo[2323751]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:06 power sudo[2323953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep  7 04:46:06 power sudo[2323953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:06 power sudo[2323953]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:06 power sudo[2323965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=animatem --output=json'
Sep  7 04:46:06 power sudo[2323965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:06 power sudo[2323965]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:11 power sudo[2324080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem /bin/sh -c 'cd /home/animatem/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:46:11 power sudo[2324080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:11 power sudo[2324080]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:12 power sudo[2324087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user animatem --user-current --json'
Sep  7 04:46:12 power sudo[2324087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:12 power sudo[2324087]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:12 power sudo[2324098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem LangPHP php_get_vhost_versions --output=json'
Sep  7 04:46:12 power sudo[2324098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:12 power sudo[2324098]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:12 power sudo[2324103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php73 --output=json'
Sep  7 04:46:12 power sudo[2324103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:13 power sudo[2324103]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:13 power sudo[2324113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:46:13 power sudo[2324113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:13 power sudo[2324113]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:13 power sudo[2324128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DomainInfo single_domain_data domain=animate.mk return_https_redirect_status=1 --output=json'
Sep  7 04:46:13 power sudo[2324128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:13 power sudo[2324128]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:13 power sudo[2324137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem Mime list_redirects --output=json'
Sep  7 04:46:13 power sudo[2324137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:13 power sudo[2324137]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:18 power sudo[2324253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DirectoryPrivacy is_directory_protected dir=/home/animatem/public_html --output=json'
Sep  7 04:46:18 power sudo[2324253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:18 power sudo[2324253]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:21 power sudo[2324472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep  7 04:46:21 power sudo[2324472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:21 power sudo[2324472]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:21 power sudo[2324478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=anitermc --output=json'
Sep  7 04:46:21 power sudo[2324478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:21 power sudo[2324478]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:33 power sudo[2324637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc /bin/sh -c 'cd /home/anitermc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:46:33 power sudo[2324637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:33 power sudo[2324637]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:33 power sudo[2324643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user anitermc --user-current --json'
Sep  7 04:46:33 power sudo[2324643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:33 power sudo[2324643]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:33 power sudo[2324651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc LangPHP php_get_vhost_versions --output=json'
Sep  7 04:46:33 power sudo[2324651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:33 power sudo[2324651]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:33 power sudo[2324659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:46:33 power sudo[2324659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:33 power sudo[2324659]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:34 power sudo[2324682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DomainInfo single_domain_data domain=aniterm.com.mk return_https_redirect_status=1 --output=json'
Sep  7 04:46:34 power sudo[2324682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:34 power sudo[2324682]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:34 power sudo[2324689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc Mime list_redirects --output=json'
Sep  7 04:46:34 power sudo[2324689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:34 power sudo[2324689]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:41 power sudo[2324936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DirectoryPrivacy is_directory_protected dir=/home/anitermc/public_html --output=json'
Sep  7 04:46:41 power sudo[2324936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:41 power sudo[2324936]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:44 power sudo[2325134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep  7 04:46:44 power sudo[2325134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:45 power sudo[2325134]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:45 power sudo[2325139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wineberr --output=json'
Sep  7 04:46:45 power sudo[2325139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:45 power sudo[2325139]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:51 power sudo[2325269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/app.wineberry.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:46:51 power sudo[2325269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:51 power sudo[2325269]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:51 power sudo[2325276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep  7 04:46:51 power sudo[2325276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:51 power sudo[2325276]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:51 power sudo[2325285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr LangPHP php_get_vhost_versions --output=json'
Sep  7 04:46:51 power sudo[2325285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:51 power sudo[2325285]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:51 power sudo[2325292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:46:51 power sudo[2325292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:51 power sudo[2325292]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:53 power sudo[2325328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=app.wineberry.mk return_https_redirect_status=1 --output=json'
Sep  7 04:46:53 power sudo[2325328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:53 power sudo[2325328]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:53 power sudo[2325334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr Mime list_redirects --output=json'
Sep  7 04:46:53 power sudo[2325334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:53 power sudo[2325334]: pam_unix(sudo:session): session closed for user root
Sep  7 04:46:56 power sudo[2325460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/app.wineberry.mk/bck --output=json'
Sep  7 04:46:57 power sudo[2325460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:46:57 power sudo[2325460]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:00 power sudo[2325683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep  7 04:47:00 power sudo[2325683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:00 power sudo[2325683]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:00 power sudo[2325704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=aptekazd --output=json'
Sep  7 04:47:00 power sudo[2325704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:00 power sudo[2325704]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:05 power sudo[2325837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:47:05 power sudo[2325837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:05 power sudo[2325837]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:06 power sudo[2325844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user aptekazd --user-current --json'
Sep  7 04:47:06 power sudo[2325844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:06 power sudo[2325844]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:06 power sudo[2325854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd LangPHP php_get_vhost_versions --output=json'
Sep  7 04:47:06 power sudo[2325854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:06 power sudo[2325854]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:06 power sudo[2325864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:47:06 power sudo[2325864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:06 power sudo[2325864]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:06 power sudo[2325889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DomainInfo single_domain_data domain=aptekazdravje.mk return_https_redirect_status=1 --output=json'
Sep  7 04:47:06 power sudo[2325889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:07 power sudo[2325889]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:07 power sudo[2325897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd Mime list_redirects --output=json'
Sep  7 04:47:07 power sudo[2325897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:07 power sudo[2325897]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:10 power sudo[2326028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DirectoryPrivacy is_directory_protected dir=/home/aptekazd/public_html --output=json'
Sep  7 04:47:10 power sudo[2326028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:10 power sudo[2326028]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:11 power sudo[2326109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:47:11 power sudo[2326109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:11 power sudo[2326109]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:11 power sudo[2326114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:47:11 power sudo[2326114]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:47:11 power sudo[2326114]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:47:11 power sudo[2326114]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:47:11 power sudo[2326114]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:47:11 power sudo[2326114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:11 power sudo[2326114]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:11 power sudo[2326120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:47:11 power sudo[2326120]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:47:11 power sudo[2326120]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:47:11 power sudo[2326120]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:47:11 power sudo[2326120]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:47:11 power sudo[2326120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:11 power sudo[2326120]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:13 power sudo[2326248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:47:13 power sudo[2326248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:13 power sudo[2326248]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:13 power sudo[2326253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:47:13 power sudo[2326253]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:47:13 power sudo[2326253]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:47:13 power sudo[2326253]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:47:13 power sudo[2326253]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:47:13 power sudo[2326253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:13 power sudo[2326253]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:13 power sudo[2326258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:47:13 power sudo[2326258]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:47:13 power sudo[2326258]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:47:13 power sudo[2326258]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:47:13 power sudo[2326258]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:47:13 power sudo[2326258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:13 power sudo[2326258]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:14 power sudo[2326297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep  7 04:47:14 power sudo[2326297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:14 power sudo[2326297]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:14 power sudo[2326305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=progress --output=json'
Sep  7 04:47:14 power sudo[2326305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:14 power sudo[2326305]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:19 power sudo[2326412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress /bin/sh -c 'cd /home/progress/artivo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:47:19 power sudo[2326412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:19 power sudo[2326412]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:19 power sudo[2326421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user progress --user-current --json'
Sep  7 04:47:19 power sudo[2326421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:19 power sudo[2326421]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:19 power sudo[2326432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress LangPHP php_get_vhost_versions --output=json'
Sep  7 04:47:19 power sudo[2326432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:19 power sudo[2326432]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:19 power sudo[2326438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:47:19 power sudo[2326438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:19 power sudo[2326438]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:20 power sudo[2326473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DomainInfo single_domain_data domain=artivo.mk return_https_redirect_status=1 --output=json'
Sep  7 04:47:20 power sudo[2326473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:20 power sudo[2326473]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:20 power sudo[2326482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress Mime list_redirects --output=json'
Sep  7 04:47:20 power sudo[2326482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:20 power sudo[2326482]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:23 power sudo[2326629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DirectoryPrivacy is_directory_protected dir=/home/progress/artivo.mk --output=json'
Sep  7 04:47:23 power sudo[2326629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:23 power sudo[2326629]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:27 power sudo[2326865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep  7 04:47:27 power sudo[2326865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:27 power sudo[2326865]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:27 power sudo[2326877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bbbustou --output=json'
Sep  7 04:47:27 power sudo[2326877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:27 power sudo[2326877]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:33 power sudo[2327005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:47:33 power sudo[2327005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:34 power sudo[2327005]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:34 power sudo[2327015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep  7 04:47:34 power sudo[2327015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:34 power sudo[2327015]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:34 power sudo[2327020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou LangPHP php_get_vhost_versions --output=json'
Sep  7 04:47:34 power sudo[2327020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:34 power sudo[2327020]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:34 power sudo[2327028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php84 --output=json'
Sep  7 04:47:34 power sudo[2327028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:35 power sudo[2327028]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:35 power sudo[2327036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:47:35 power sudo[2327036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:35 power sudo[2327036]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:35 power sudo[2327058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=bbbustours.mk return_https_redirect_status=1 --output=json'
Sep  7 04:47:35 power sudo[2327058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:35 power sudo[2327058]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:35 power sudo[2327064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou Mime list_redirects --output=json'
Sep  7 04:47:35 power sudo[2327064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:35 power sudo[2327064]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:39 power sudo[2327179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/public_html --output=json'
Sep  7 04:47:39 power sudo[2327179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:39 power sudo[2327179]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:43 power sudo[2327385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep  7 04:47:43 power sudo[2327385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:43 power sudo[2327385]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:43 power sudo[2327394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nationa2 --output=json'
Sep  7 04:47:43 power sudo[2327394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:43 power sudo[2327394]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:47 power sudo[2327473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 /bin/sh -c 'cd /home/nationa2/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:47:47 power sudo[2327473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:47 power sudo[2327473]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:47 power sudo[2327479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nationa2 --user-current --json'
Sep  7 04:47:47 power sudo[2327479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:47 power sudo[2327479]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:47 power sudo[2327492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 LangPHP php_get_vhost_versions --output=json'
Sep  7 04:47:47 power sudo[2327492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:47 power sudo[2327492]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:47 power sudo[2327497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php74 --output=json'
Sep  7 04:47:47 power sudo[2327497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:48 power sudo[2327497]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:48 power sudo[2327507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:47:48 power sudo[2327507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:48 power sudo[2327507]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:48 power sudo[2327526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DomainInfo single_domain_data domain=beactiveday.mk return_https_redirect_status=1 --output=json'
Sep  7 04:47:48 power sudo[2327526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:48 power sudo[2327526]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:48 power sudo[2327533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 Mime list_redirects --output=json'
Sep  7 04:47:48 power sudo[2327533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:48 power sudo[2327533]: pam_unix(sudo:session): session closed for user root
Sep  7 04:47:50 power sudo[2327635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DirectoryPrivacy is_directory_protected dir=/home/nationa2/public_html --output=json'
Sep  7 04:47:50 power sudo[2327635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:47:51 power sudo[2327635]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:05 power sudo[2328852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep  7 04:49:05 power sudo[2328852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:05 power sudo[2328852]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:05 power sudo[2328860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cetplatf --output=json'
Sep  7 04:49:05 power sudo[2328860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:05 power sudo[2328860]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:10 power sudo[2328957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/beep.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:49:10 power sudo[2328957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:10 power sudo[2328957]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:10 power sudo[2328963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  7 04:49:10 power sudo[2328963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:10 power sudo[2328963]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:10 power sudo[2328972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf LangPHP php_get_vhost_versions --output=json'
Sep  7 04:49:10 power sudo[2328972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:10 power sudo[2328972]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:10 power sudo[2328989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:49:10 power sudo[2328989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:10 power sudo[2328989]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:10 power sudo[2329008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=beep.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 04:49:10 power sudo[2329008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:11 power sudo[2329008]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:11 power sudo[2329019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf Mime list_redirects --output=json'
Sep  7 04:49:11 power sudo[2329019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:11 power sudo[2329019]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:13 power sudo[2329114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/beep.cetplatform.mk --output=json'
Sep  7 04:49:13 power sudo[2329114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:14 power sudo[2329114]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:17 power sudo[2329335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep  7 04:49:17 power sudo[2329335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:17 power sudo[2329335]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:17 power sudo[2329342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bianasho --output=json'
Sep  7 04:49:17 power sudo[2329342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:18 power sudo[2329342]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:25 power sudo[2329483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho /bin/sh -c 'cd /home/bianasho/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:49:25 power sudo[2329483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:25 power sudo[2329483]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:25 power sudo[2329490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bianasho --user-current --json'
Sep  7 04:49:25 power sudo[2329490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:25 power sudo[2329490]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:25 power sudo[2329499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho LangPHP php_get_vhost_versions --output=json'
Sep  7 04:49:25 power sudo[2329499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:25 power sudo[2329499]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:25 power sudo[2329504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:49:25 power sudo[2329504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:25 power sudo[2329504]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:27 power sudo[2329525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DomainInfo single_domain_data domain=bianashoes.mk return_https_redirect_status=1 --output=json'
Sep  7 04:49:27 power sudo[2329525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:27 power sudo[2329525]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:27 power sudo[2329531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho Mime list_redirects --output=json'
Sep  7 04:49:27 power sudo[2329531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:27 power sudo[2329531]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:32 power sudo[2329665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DirectoryPrivacy is_directory_protected dir=/home/bianasho/public_html --output=json'
Sep  7 04:49:32 power sudo[2329665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:32 power sudo[2329665]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:36 power sudo[2329863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep  7 04:49:36 power sudo[2329863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:36 power sudo[2329863]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:36 power sudo[2329872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=velmk --output=json'
Sep  7 04:49:36 power sudo[2329872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:36 power sudo[2329872]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:42 power sudo[2329980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk /bin/sh -c 'cd /home/velmk/blog.vel.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:49:42 power sudo[2329980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:42 power sudo[2329980]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:42 power sudo[2329986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user velmk --user-current --json'
Sep  7 04:49:42 power sudo[2329986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:42 power sudo[2329986]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:42 power sudo[2329991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk LangPHP php_get_vhost_versions --output=json'
Sep  7 04:49:42 power sudo[2329991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:42 power sudo[2329991]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:42 power sudo[2329997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:49:42 power sudo[2329997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:42 power sudo[2329997]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:43 power sudo[2330025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DomainInfo single_domain_data domain=blog.vel.mk return_https_redirect_status=1 --output=json'
Sep  7 04:49:43 power sudo[2330025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:44 power sudo[2330025]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:44 power sudo[2330034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk Mime list_redirects --output=json'
Sep  7 04:49:44 power sudo[2330034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:44 power sudo[2330034]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:47 power sudo[2330123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DirectoryPrivacy is_directory_protected dir=/home/velmk/blog.vel.mk --output=json'
Sep  7 04:49:47 power sudo[2330123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:47 power sudo[2330123]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:51 power sudo[2330325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep  7 04:49:51 power sudo[2330325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:51 power sudo[2330325]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:51 power sudo[2330330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enaspotc --output=json'
Sep  7 04:49:51 power sudo[2330330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:51 power sudo[2330330]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:54 power sudo[2330381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/boiling.pt && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:49:54 power sudo[2330381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:54 power sudo[2330381]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:54 power sudo[2330387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep  7 04:49:54 power sudo[2330387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:54 power sudo[2330387]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:54 power sudo[2330392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc LangPHP php_get_vhost_versions --output=json'
Sep  7 04:49:54 power sudo[2330392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:55 power sudo[2330392]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:55 power sudo[2330401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:49:55 power sudo[2330401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:55 power sudo[2330401]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:55 power sudo[2330415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=boiling.pt return_https_redirect_status=1 --output=json'
Sep  7 04:49:55 power sudo[2330415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:55 power sudo[2330415]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:55 power sudo[2330421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc Mime list_redirects --output=json'
Sep  7 04:49:55 power sudo[2330421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:55 power sudo[2330421]: pam_unix(sudo:session): session closed for user root
Sep  7 04:49:57 power sudo[2330600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/boiling.pt --output=json'
Sep  7 04:49:57 power sudo[2330600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:49:57 power sudo[2330600]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:01 power sudo[2330909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep  7 04:50:01 power sudo[2330909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:01 power systemd[2331016]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:50:01 power sudo[2330909]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:01 power sudo[2331030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bonitavi --output=json'
Sep  7 04:50:01 power sudo[2331030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:02 power sudo[2331030]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:05 power sudo[2331258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi /bin/sh -c 'cd /home/bonitavi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:50:05 power sudo[2331258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:06 power sudo[2331258]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:06 power sudo[2331266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bonitavi --user-current --json'
Sep  7 04:50:06 power sudo[2331266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:06 power sudo[2331266]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:06 power sudo[2331280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi LangPHP php_get_vhost_versions --output=json'
Sep  7 04:50:06 power sudo[2331280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:06 power sudo[2331280]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:06 power sudo[2331288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:50:06 power sudo[2331288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:06 power sudo[2331288]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:06 power sudo[2331304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DomainInfo single_domain_data domain=bonita-vita.com return_https_redirect_status=1 --output=json'
Sep  7 04:50:06 power sudo[2331304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:06 power sudo[2331304]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:06 power sudo[2331313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi Mime list_redirects --output=json'
Sep  7 04:50:06 power sudo[2331313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:06 power sudo[2331313]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:10 power sudo[2331396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DirectoryPrivacy is_directory_protected dir=/home/bonitavi/public_html --output=json'
Sep  7 04:50:10 power sudo[2331396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:10 power sudo[2331396]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:12 power sudo[2331606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep  7 04:50:12 power sudo[2331606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:13 power sudo[2331606]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:13 power sudo[2331614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bovincom --output=json'
Sep  7 04:50:13 power sudo[2331614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:13 power sudo[2331614]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:20 power sudo[2331764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom /bin/sh -c 'cd /home/bovincom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:50:21 power sudo[2331764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:21 power sudo[2331764]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:21 power sudo[2331770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bovincom --user-current --json'
Sep  7 04:50:21 power sudo[2331770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:21 power sudo[2331770]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:21 power sudo[2331780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom LangPHP php_get_vhost_versions --output=json'
Sep  7 04:50:21 power sudo[2331780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:21 power sudo[2331780]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:21 power sudo[2331786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:50:21 power sudo[2331786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:21 power sudo[2331786]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:22 power sudo[2331818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DomainInfo single_domain_data domain=bovin.com.mk return_https_redirect_status=1 --output=json'
Sep  7 04:50:22 power sudo[2331818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:22 power sudo[2331818]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:22 power sudo[2331823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom Mime list_redirects --output=json'
Sep  7 04:50:22 power sudo[2331823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:22 power sudo[2331823]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:27 power sudo[2331949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DirectoryPrivacy is_directory_protected dir=/home/bovincom/public_html --output=json'
Sep  7 04:50:27 power sudo[2331949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:27 power sudo[2331949]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:31 power sudo[2332150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep  7 04:50:31 power sudo[2332150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:31 power sudo[2332150]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:31 power sudo[2332156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=butelmk --output=json'
Sep  7 04:50:31 power sudo[2332156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:31 power sudo[2332156]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:43 power sudo[2332360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk /bin/sh -c 'cd /home/butelmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:50:43 power sudo[2332360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:43 power sudo[2332360]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:44 power sudo[2332369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user butelmk --user-current --json'
Sep  7 04:50:44 power sudo[2332369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:44 power sudo[2332369]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:44 power sudo[2332377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk LangPHP php_get_vhost_versions --output=json'
Sep  7 04:50:44 power sudo[2332377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:44 power sudo[2332377]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:44 power sudo[2332382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  7 04:50:44 power sudo[2332382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:44 power sudo[2332382]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:44 power sudo[2332387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=alt-php73 --output=json'
Sep  7 04:50:44 power sudo[2332387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:45 power sudo[2332387]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:45 power sudo[2332397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:50:45 power sudo[2332397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:45 power sudo[2332397]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:45 power sudo[2332414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DomainInfo single_domain_data domain=butel.mk return_https_redirect_status=1 --output=json'
Sep  7 04:50:45 power sudo[2332414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:45 power sudo[2332414]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:45 power sudo[2332424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk Mime list_redirects --output=json'
Sep  7 04:50:45 power sudo[2332424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:45 power sudo[2332424]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:51 power sudo[2332571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DirectoryPrivacy is_directory_protected dir=/home/butelmk/public_html --output=json'
Sep  7 04:50:51 power sudo[2332571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:51 power sudo[2332571]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:56 power sudo[2332850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep  7 04:50:56 power sudo[2332850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:56 power sudo[2332850]: pam_unix(sudo:session): session closed for user root
Sep  7 04:50:56 power sudo[2332857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=izzomk --output=json'
Sep  7 04:50:56 power sudo[2332857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:50:56 power sudo[2332857]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:04 power sudo[2333035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/caffeizzo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:51:04 power sudo[2333035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:04 power sudo[2333035]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:04 power sudo[2333060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep  7 04:51:04 power sudo[2333060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:04 power sudo[2333060]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:04 power sudo[2333069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk LangPHP php_get_vhost_versions --output=json'
Sep  7 04:51:04 power sudo[2333069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:04 power sudo[2333069]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:04 power sudo[2333074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:51:04 power sudo[2333074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:04 power sudo[2333074]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:05 power sudo[2333102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=caffeizzo.mk return_https_redirect_status=1 --output=json'
Sep  7 04:51:05 power sudo[2333102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:05 power sudo[2333102]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:05 power sudo[2333109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk Mime list_redirects --output=json'
Sep  7 04:51:05 power sudo[2333109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:05 power sudo[2333109]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:09 power sudo[2333222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/caffeizzo.mk --output=json'
Sep  7 04:51:09 power sudo[2333222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:09 power sudo[2333222]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:17 power sudo[2333498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/cateye.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:51:17 power sudo[2333498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:17 power sudo[2333498]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:17 power sudo[2333504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  7 04:51:17 power sudo[2333504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:18 power sudo[2333504]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:18 power sudo[2333518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:51:18 power sudo[2333518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:18 power sudo[2333518]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:18 power sudo[2333532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cateye.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 04:51:18 power sudo[2333532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:18 power sudo[2333532]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:21 power sudo[2333630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/cateye.cetplatform.mk --output=json'
Sep  7 04:51:21 power sudo[2333630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:21 power sudo[2333630]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:29 power sudo[2333913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:51:29 power sudo[2333913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:29 power sudo[2333913]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:30 power sudo[2333919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  7 04:51:30 power sudo[2333919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:30 power sudo[2333919]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:30 power sudo[2333929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:51:30 power sudo[2333929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:30 power sudo[2333929]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:31 power sudo[2333951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 04:51:31 power sudo[2333951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:31 power sudo[2333951]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:34 power sudo[2334056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/public_html --output=json'
Sep  7 04:51:35 power sudo[2334056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:35 power sudo[2334056]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:38 power sudo[2334270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep  7 04:51:38 power sudo[2334270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:38 power sudo[2334270]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:38 power sudo[2334277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=chemhemc --output=json'
Sep  7 04:51:38 power sudo[2334277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:38 power sudo[2334277]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:42 power sudo[2334444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:51:42 power sudo[2334444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:42 power sudo[2334444]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:42 power sudo[2334450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep  7 04:51:42 power sudo[2334450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:43 power sudo[2334450]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:43 power sudo[2334459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc LangPHP php_get_vhost_versions --output=json'
Sep  7 04:51:43 power sudo[2334459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:43 power sudo[2334459]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:43 power sudo[2334464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:51:43 power sudo[2334464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:43 power sudo[2334464]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:43 power sudo[2334478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=chemhem.com return_https_redirect_status=1 --output=json'
Sep  7 04:51:43 power sudo[2334478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:43 power sudo[2334478]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:43 power sudo[2334484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc Mime list_redirects --output=json'
Sep  7 04:51:43 power sudo[2334484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:43 power sudo[2334484]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:45 power sudo[2334610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/public_html --output=json'
Sep  7 04:51:46 power sudo[2334610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:46 power sudo[2334610]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:47 power sudo[2334674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:51:47 power sudo[2334674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:47 power sudo[2334674]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:47 power sudo[2334680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:51:47 power sudo[2334680]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:51:47 power sudo[2334680]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:51:47 power sudo[2334680]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:51:47 power sudo[2334680]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:51:47 power sudo[2334680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:47 power sudo[2334680]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:47 power sudo[2334692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:51:47 power sudo[2334692]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:51:47 power sudo[2334692]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:51:47 power sudo[2334692]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:51:47 power sudo[2334692]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:51:47 power sudo[2334692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:47 power sudo[2334692]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:49 power sudo[2334823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:51:49 power sudo[2334823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:49 power sudo[2334823]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:49 power sudo[2334828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:51:49 power sudo[2334828]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:51:49 power sudo[2334828]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:51:49 power sudo[2334828]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:51:49 power sudo[2334828]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:51:49 power sudo[2334828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:49 power sudo[2334828]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:49 power sudo[2334833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:51:49 power sudo[2334833]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:51:49 power sudo[2334833]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:51:49 power sudo[2334833]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:51:49 power sudo[2334833]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:51:49 power sudo[2334833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:49 power sudo[2334833]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:49 power sudo[2334873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep  7 04:51:49 power sudo[2334873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:50 power sudo[2334873]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:50 power sudo[2334883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cosmatob --output=json'
Sep  7 04:51:50 power sudo[2334883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:50 power sudo[2334883]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:56 power sudo[2335000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob /bin/sh -c 'cd /home/cosmatob/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:51:57 power sudo[2335000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:57 power sudo[2335000]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:57 power sudo[2335006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cosmatob --user-current --json'
Sep  7 04:51:57 power sudo[2335006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:57 power sudo[2335006]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:57 power sudo[2335016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob LangPHP php_get_vhost_versions --output=json'
Sep  7 04:51:57 power sudo[2335016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:57 power sudo[2335016]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:57 power sudo[2335021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:51:57 power sudo[2335021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:57 power sudo[2335021]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:58 power sudo[2335038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DomainInfo single_domain_data domain=cosmatobacco.mk return_https_redirect_status=1 --output=json'
Sep  7 04:51:58 power sudo[2335038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:58 power sudo[2335038]: pam_unix(sudo:session): session closed for user root
Sep  7 04:51:58 power sudo[2335044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob Mime list_redirects --output=json'
Sep  7 04:51:58 power sudo[2335044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:51:58 power sudo[2335044]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:02 power sudo[2335151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DirectoryPrivacy is_directory_protected dir=/home/cosmatob/public_html --output=json'
Sep  7 04:52:02 power sudo[2335151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:02 power sudo[2335151]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:10 power sudo[2335509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:52:10 power sudo[2335509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:10 power sudo[2335509]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:10 power sudo[2335515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep  7 04:52:10 power sudo[2335515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:11 power sudo[2335515]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:11 power sudo[2335527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:52:11 power sudo[2335527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:11 power sudo[2335527]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:11 power sudo[2335544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=dadar.mk return_https_redirect_status=1 --output=json'
Sep  7 04:52:11 power sudo[2335544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:11 power sudo[2335544]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:13 power sudo[2335621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/public_html --output=json'
Sep  7 04:52:13 power sudo[2335621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:13 power sudo[2335621]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:17 power sudo[2335827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep  7 04:52:17 power sudo[2335827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:17 power sudo[2335827]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:17 power sudo[2335833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=delcevca --output=json'
Sep  7 04:52:17 power sudo[2335833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:17 power sudo[2335833]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:22 power sudo[2335942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:52:22 power sudo[2335942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:23 power sudo[2335942]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:23 power sudo[2335948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user delcevca --user-current --json'
Sep  7 04:52:23 power sudo[2335948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:23 power sudo[2335948]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:23 power sudo[2335958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca LangPHP php_get_vhost_versions --output=json'
Sep  7 04:52:23 power sudo[2335958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:23 power sudo[2335958]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:23 power sudo[2335965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:52:23 power sudo[2335965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:23 power sudo[2335965]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:23 power sudo[2335982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DomainInfo single_domain_data domain=delcevcani.mk return_https_redirect_status=1 --output=json'
Sep  7 04:52:23 power sudo[2335982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:23 power sudo[2335982]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:23 power sudo[2335988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca Mime list_redirects --output=json'
Sep  7 04:52:23 power sudo[2335988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:23 power sudo[2335988]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:27 power sudo[2336097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DirectoryPrivacy is_directory_protected dir=/home/delcevca/public_html --output=json'
Sep  7 04:52:27 power sudo[2336097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:27 power sudo[2336097]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:28 power sudo[2336161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:52:28 power sudo[2336161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:28 power sudo[2336161]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:28 power sudo[2336166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:52:28 power sudo[2336166]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:52:28 power sudo[2336166]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:52:28 power sudo[2336166]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:52:28 power sudo[2336166]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:52:28 power sudo[2336166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:28 power sudo[2336166]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:28 power sudo[2336171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:52:28 power sudo[2336171]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:52:28 power sudo[2336171]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:52:28 power sudo[2336171]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:52:28 power sudo[2336171]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:52:28 power sudo[2336171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:28 power sudo[2336171]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:28 power sudo[2336177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:52:28 power sudo[2336177]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:52:28 power sudo[2336177]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:52:28 power sudo[2336177]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:52:28 power sudo[2336177]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:52:28 power sudo[2336177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:28 power sudo[2336177]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:30 power sudo[2336294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:52:30 power sudo[2336294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:30 power sudo[2336294]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:30 power sudo[2336299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:52:30 power sudo[2336299]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:52:30 power sudo[2336299]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:52:30 power sudo[2336299]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:52:30 power sudo[2336299]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:52:30 power sudo[2336299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:30 power sudo[2336299]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:30 power sudo[2336304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:52:30 power sudo[2336304]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:52:30 power sudo[2336304]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:52:30 power sudo[2336304]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:52:30 power sudo[2336304]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:52:30 power sudo[2336304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:30 power sudo[2336304]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:30 power sudo[2336313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:52:30 power sudo[2336313]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:52:30 power sudo[2336313]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:52:30 power sudo[2336313]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:52:30 power sudo[2336313]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:52:30 power sudo[2336313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:30 power sudo[2336313]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:31 power sudo[2336352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep  7 04:52:31 power sudo[2336352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:31 power sudo[2336352]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:31 power sudo[2336358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=edomcomm --output=json'
Sep  7 04:52:31 power sudo[2336358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:31 power sudo[2336358]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:34 power sudo[2336439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:52:34 power sudo[2336439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:34 power sudo[2336439]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:34 power sudo[2336448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user edomcomm --user-current --json'
Sep  7 04:52:34 power sudo[2336448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:35 power sudo[2336448]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:35 power sudo[2336454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm LangPHP php_get_vhost_versions --output=json'
Sep  7 04:52:35 power sudo[2336454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:35 power sudo[2336454]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:35 power sudo[2336464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:52:35 power sudo[2336464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:35 power sudo[2336464]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:35 power sudo[2336481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=deosol.mk return_https_redirect_status=1 --output=json'
Sep  7 04:52:35 power sudo[2336481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:35 power sudo[2336481]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:35 power sudo[2336487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm Mime list_redirects --output=json'
Sep  7 04:52:35 power sudo[2336487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:35 power sudo[2336487]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:38 power sudo[2336586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/w --output=json'
Sep  7 04:52:38 power sudo[2336586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:38 power sudo[2336586]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:44 power sudo[2336922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/ekobalans.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:52:44 power sudo[2336922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:44 power sudo[2336922]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:44 power sudo[2336931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  7 04:52:44 power sudo[2336931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:44 power sudo[2336931]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:44 power sudo[2336939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:52:44 power sudo[2336939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:44 power sudo[2336939]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:45 power sudo[2336961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=ekobalans.mk return_https_redirect_status=1 --output=json'
Sep  7 04:52:45 power sudo[2336961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:45 power sudo[2336961]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:47 power sudo[2337064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/ekobalans.mk --output=json'
Sep  7 04:52:47 power sudo[2337064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:48 power sudo[2337064]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:56 power sudo[2337504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/moetodete.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:52:56 power sudo[2337504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:56 power sudo[2337504]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:56 power sudo[2337513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  7 04:52:56 power sudo[2337513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:56 power sudo[2337513]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:56 power sudo[2337523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:52:56 power sudo[2337523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:56 power sudo[2337523]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:56 power sudo[2337607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=moetodete.mk return_https_redirect_status=1 --output=json'
Sep  7 04:52:56 power sudo[2337607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:56 power sudo[2337607]: pam_unix(sudo:session): session closed for user root
Sep  7 04:52:59 power sudo[2337839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/moetodete.mk --output=json'
Sep  7 04:52:59 power sudo[2337839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:52:59 power sudo[2337839]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:03 power sudo[2338106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep  7 04:53:03 power sudo[2338106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:03 power sudo[2338106]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:03 power sudo[2338121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=detskagr --output=json'
Sep  7 04:53:03 power sudo[2338121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:03 power sudo[2338121]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:11 power sudo[2338359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:53:11 power sudo[2338359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:11 power sudo[2338359]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:11 power sudo[2338366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user detskagr --user-current --json'
Sep  7 04:53:11 power sudo[2338366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:12 power sudo[2338366]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:12 power sudo[2338372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr LangPHP php_get_vhost_versions --output=json'
Sep  7 04:53:12 power sudo[2338372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:12 power sudo[2338372]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:12 power sudo[2338380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:53:12 power sudo[2338380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:12 power sudo[2338380]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:12 power sudo[2338395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DomainInfo single_domain_data domain=detskagradinka-prolet.mk return_https_redirect_status=1 --output=json'
Sep  7 04:53:12 power sudo[2338395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:12 power sudo[2338395]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:12 power sudo[2338403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr Mime list_redirects --output=json'
Sep  7 04:53:12 power sudo[2338403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:12 power sudo[2338403]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:16 power sudo[2338496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DirectoryPrivacy is_directory_protected dir=/home/detskagr/public_html/wordpress --output=json'
Sep  7 04:53:16 power sudo[2338496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:16 power sudo[2338496]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:17 power sudo[2338560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:53:17 power sudo[2338560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:17 power sudo[2338560]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:17 power sudo[2338565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  7 04:53:17 power sudo[2338565]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  7 04:53:17 power sudo[2338565]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  7 04:53:17 power sudo[2338565]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  7 04:53:17 power sudo[2338565]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:53:17 power sudo[2338565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:17 power sudo[2338565]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:17 power sudo[2338570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  7 04:53:17 power sudo[2338570]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  7 04:53:17 power sudo[2338570]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  7 04:53:17 power sudo[2338570]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  7 04:53:17 power sudo[2338570]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:53:17 power sudo[2338570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:17 power sudo[2338570]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:17 power sudo[2338575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep  7 04:53:17 power sudo[2338575]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep  7 04:53:17 power sudo[2338575]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep  7 04:53:17 power sudo[2338575]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep  7 04:53:17 power sudo[2338575]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:53:17 power sudo[2338575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:17 power sudo[2338575]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:19 power sudo[2338701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:53:19 power sudo[2338701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:19 power sudo[2338701]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:19 power sudo[2338706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  7 04:53:19 power sudo[2338706]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  7 04:53:19 power sudo[2338706]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  7 04:53:19 power sudo[2338706]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  7 04:53:19 power sudo[2338706]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:53:19 power sudo[2338706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:19 power sudo[2338706]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:19 power sudo[2338712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  7 04:53:19 power sudo[2338712]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  7 04:53:19 power sudo[2338712]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  7 04:53:19 power sudo[2338712]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  7 04:53:19 power sudo[2338712]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:53:19 power sudo[2338712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:19 power sudo[2338712]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:19 power sudo[2338717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep  7 04:53:19 power sudo[2338717]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep  7 04:53:19 power sudo[2338717]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep  7 04:53:19 power sudo[2338717]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep  7 04:53:19 power sudo[2338717]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:53:19 power sudo[2338717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:19 power sudo[2338717]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:20 power sudo[2338757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep  7 04:53:20 power sudo[2338757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:20 power sudo[2338757]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:20 power sudo[2338763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eaptekam --output=json'
Sep  7 04:53:20 power sudo[2338763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:20 power sudo[2338763]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:25 power sudo[2338865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam /bin/sh -c 'cd /home/eaptekam/dev.eapteka.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:53:25 power sudo[2338865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:26 power sudo[2338865]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:26 power sudo[2338871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eaptekam --user-current --json'
Sep  7 04:53:26 power sudo[2338871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:26 power sudo[2338871]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:26 power sudo[2338887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam LangPHP php_get_vhost_versions --output=json'
Sep  7 04:53:26 power sudo[2338887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:26 power sudo[2338887]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:26 power sudo[2338893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:53:26 power sudo[2338893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:26 power sudo[2338893]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:27 power sudo[2338908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DomainInfo single_domain_data domain=dev.eapteka.mk return_https_redirect_status=1 --output=json'
Sep  7 04:53:27 power sudo[2338908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:27 power sudo[2338908]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:27 power sudo[2338919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam Mime list_redirects --output=json'
Sep  7 04:53:27 power sudo[2338919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:27 power sudo[2338919]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:30 power sudo[2339003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DirectoryPrivacy is_directory_protected dir=/home/eaptekam/dev.eapteka.mk --output=json'
Sep  7 04:53:30 power sudo[2339003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:30 power sudo[2339003]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:34 power sudo[2339196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep  7 04:53:34 power sudo[2339196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:34 power sudo[2339196]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:34 power sudo[2339208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dimpalne --output=json'
Sep  7 04:53:34 power sudo[2339208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:34 power sudo[2339208]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:38 power sudo[2339309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne /bin/sh -c 'cd /home/dimpalne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:53:38 power sudo[2339309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:38 power sudo[2339309]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:38 power sudo[2339315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dimpalne --user-current --json'
Sep  7 04:53:38 power sudo[2339315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:39 power sudo[2339315]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:39 power sudo[2339327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne LangPHP php_get_vhost_versions --output=json'
Sep  7 04:53:39 power sudo[2339327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:39 power sudo[2339327]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:39 power sudo[2339335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:53:39 power sudo[2339335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:39 power sudo[2339335]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:39 power sudo[2339351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DomainInfo single_domain_data domain=dimpal.net return_https_redirect_status=1 --output=json'
Sep  7 04:53:39 power sudo[2339351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:39 power sudo[2339351]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:39 power sudo[2339360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne Mime list_redirects --output=json'
Sep  7 04:53:39 power sudo[2339360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:39 power sudo[2339360]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:42 power sudo[2339446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DirectoryPrivacy is_directory_protected dir=/home/dimpalne/public_html --output=json'
Sep  7 04:53:42 power sudo[2339446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:42 power sudo[2339446]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:46 power sudo[2339660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep  7 04:53:46 power sudo[2339660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:46 power sudo[2339660]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:46 power sudo[2339670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dnevnoin --output=json'
Sep  7 04:53:46 power sudo[2339670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:46 power sudo[2339670]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:49 power sudo[2339756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin /bin/sh -c 'cd /home/dnevnoin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:53:49 power sudo[2339756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:49 power sudo[2339756]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:49 power sudo[2339762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dnevnoin --user-current --json'
Sep  7 04:53:49 power sudo[2339762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:50 power sudo[2339762]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:50 power sudo[2339769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin LangPHP php_get_vhost_versions --output=json'
Sep  7 04:53:50 power sudo[2339769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:50 power sudo[2339769]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:50 power sudo[2339776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:53:50 power sudo[2339776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:50 power sudo[2339776]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:50 power sudo[2339796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin DomainInfo single_domain_data domain=dnevnoinfo.mk return_https_redirect_status=1 --output=json'
Sep  7 04:53:50 power sudo[2339796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:50 power sudo[2339796]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:50 power sudo[2339802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin Mime list_redirects --output=json'
Sep  7 04:53:50 power sudo[2339802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:50 power sudo[2339802]: pam_unix(sudo:session): session closed for user root
Sep  7 04:53:53 power sudo[2339875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin DirectoryPrivacy is_directory_protected dir=/home/dnevnoin/public_html --output=json'
Sep  7 04:53:53 power sudo[2339875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:53:53 power sudo[2339875]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:00 power sudo[2340105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=dreamholidays.bbbustours.mk return_https_redirect_status=1 --output=json'
Sep  7 04:54:00 power sudo[2340105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:00 power sudo[2340105]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:02 power sudo[2340205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/dreamholidays.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:54:02 power sudo[2340205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:02 power sudo[2340205]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:02 power sudo[2340211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep  7 04:54:02 power sudo[2340211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:02 power sudo[2340211]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:02 power sudo[2340217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:54:02 power sudo[2340217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:02 power sudo[2340217]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:06 power sudo[2340357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/dreamholidays.mk --output=json'
Sep  7 04:54:06 power sudo[2340357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:06 power sudo[2340357]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:10 power sudo[2340580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep  7 04:54:10 power sudo[2340580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:10 power sudo[2340580]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:10 power sudo[2340586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=drleomk --output=json'
Sep  7 04:54:10 power sudo[2340586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:10 power sudo[2340586]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:14 power sudo[2340679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk /bin/sh -c 'cd /home/drleomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:54:14 power sudo[2340679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:14 power sudo[2340679]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:14 power sudo[2340685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user drleomk --user-current --json'
Sep  7 04:54:14 power sudo[2340685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:15 power sudo[2340685]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:15 power sudo[2340690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk LangPHP php_get_vhost_versions --output=json'
Sep  7 04:54:15 power sudo[2340690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:15 power sudo[2340690]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:15 power sudo[2340698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:54:15 power sudo[2340698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:15 power sudo[2340698]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:15 power sudo[2340713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DomainInfo single_domain_data domain=drleo.mk return_https_redirect_status=1 --output=json'
Sep  7 04:54:15 power sudo[2340713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:16 power sudo[2340713]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:16 power sudo[2340721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk Mime list_redirects --output=json'
Sep  7 04:54:16 power sudo[2340721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:16 power sudo[2340721]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:18 power sudo[2340840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DirectoryPrivacy is_directory_protected dir=/home/drleomk/public_html --output=json'
Sep  7 04:54:18 power sudo[2340840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:18 power sudo[2340840]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:22 power sudo[2341037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep  7 04:54:22 power sudo[2341037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:22 power sudo[2341037]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:22 power sudo[2341044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=goodnews --output=json'
Sep  7 04:54:22 power sudo[2341044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:23 power sudo[2341044]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:27 power sudo[2341130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:54:27 power sudo[2341130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:27 power sudo[2341130]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:27 power sudo[2341136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  7 04:54:27 power sudo[2341136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:27 power sudo[2341136]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:27 power sudo[2341142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews LangPHP php_get_vhost_versions --output=json'
Sep  7 04:54:27 power sudo[2341142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:27 power sudo[2341142]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:27 power sudo[2341147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:54:27 power sudo[2341147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:27 power sudo[2341147]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:28 power sudo[2341165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=elan.mk return_https_redirect_status=1 --output=json'
Sep  7 04:54:28 power sudo[2341165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:28 power sudo[2341165]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:28 power sudo[2341172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews Mime list_redirects --output=json'
Sep  7 04:54:28 power sudo[2341172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:28 power sudo[2341172]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:31 power sudo[2341272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/elan.mk --output=json'
Sep  7 04:54:31 power sudo[2341272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:31 power sudo[2341272]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:32 power sudo[2341329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:54:32 power sudo[2341329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:32 power sudo[2341329]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:32 power sudo[2341334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 04:54:32 power sudo[2341334]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 04:54:32 power sudo[2341334]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 04:54:32 power sudo[2341334]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 04:54:32 power sudo[2341334]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:54:32 power sudo[2341334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:32 power sudo[2341334]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:32 power sudo[2341339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 04:54:32 power sudo[2341339]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 04:54:32 power sudo[2341339]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 04:54:32 power sudo[2341339]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 04:54:32 power sudo[2341339]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:54:32 power sudo[2341339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:32 power sudo[2341339]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:34 power sudo[2341425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:54:34 power sudo[2341425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:34 power sudo[2341425]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:34 power sudo[2341430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 04:54:34 power sudo[2341430]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 04:54:34 power sudo[2341430]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 04:54:34 power sudo[2341430]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 04:54:34 power sudo[2341430]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:54:34 power sudo[2341430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:34 power sudo[2341430]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:34 power sudo[2341435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 04:54:34 power sudo[2341435]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 04:54:34 power sudo[2341435]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 04:54:34 power sudo[2341435]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 04:54:34 power sudo[2341435]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:54:34 power sudo[2341435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:34 power sudo[2341435]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:34 power sudo[2341467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep  7 04:54:34 power sudo[2341467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:34 power sudo[2341467]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:34 power sudo[2341476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=electrol --output=json'
Sep  7 04:54:34 power sudo[2341476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:34 power sudo[2341476]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:39 power sudo[2341581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol /bin/sh -c 'cd /home/electrol/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:54:39 power sudo[2341581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:39 power sudo[2341581]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:39 power sudo[2341591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user electrol --user-current --json'
Sep  7 04:54:39 power sudo[2341591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:39 power sudo[2341591]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:39 power sudo[2341596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol LangPHP php_get_vhost_versions --output=json'
Sep  7 04:54:39 power sudo[2341596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:39 power sudo[2341596]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:39 power sudo[2341601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:54:39 power sudo[2341601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:39 power sudo[2341601]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:40 power sudo[2341625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DomainInfo single_domain_data domain=electrolight.mk return_https_redirect_status=1 --output=json'
Sep  7 04:54:40 power sudo[2341625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:40 power sudo[2341625]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:40 power sudo[2341631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol Mime list_redirects --output=json'
Sep  7 04:54:40 power sudo[2341631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:41 power sudo[2341631]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:44 power sudo[2341731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DirectoryPrivacy is_directory_protected dir=/home/electrol/public_html --output=json'
Sep  7 04:54:44 power sudo[2341731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:44 power sudo[2341731]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:48 power sudo[2341942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep  7 04:54:48 power sudo[2341942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:48 power sudo[2341942]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:48 power sudo[2341951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=elektrot --output=json'
Sep  7 04:54:48 power sudo[2341951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:48 power sudo[2341951]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:50 power sudo[2342014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot /bin/sh -c 'cd /home/elektrot/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:54:50 power sudo[2342014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:50 power sudo[2342014]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:50 power sudo[2342021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user elektrot --user-current --json'
Sep  7 04:54:50 power sudo[2342021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:50 power sudo[2342021]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:51 power sudo[2342027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot LangPHP php_get_vhost_versions --output=json'
Sep  7 04:54:51 power sudo[2342027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:51 power sudo[2342027]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:51 power sudo[2342033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:54:51 power sudo[2342033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:51 power sudo[2342033]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:51 power sudo[2342048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DomainInfo single_domain_data domain=elektrotehnika-inzinering.mk return_https_redirect_status=1 --output=json'
Sep  7 04:54:51 power sudo[2342048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:51 power sudo[2342048]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:51 power sudo[2342058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot Mime list_redirects --output=json'
Sep  7 04:54:51 power sudo[2342058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:51 power sudo[2342058]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:53 power sudo[2342133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy is_directory_protected dir=/home/elektrot/public_html/wp --output=json'
Sep  7 04:54:53 power sudo[2342133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:53 power sudo[2342133]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:53 power sudo[2342138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy list_users dir=/home/elektrot/public_html/wp --output=json'
Sep  7 04:54:53 power sudo[2342138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:53 power sudo[2342138]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:58 power sudo[2342327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:54:58 power sudo[2342327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:58 power sudo[2342327]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:58 power sudo[2342334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep  7 04:54:58 power sudo[2342334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:58 power sudo[2342334]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:58 power sudo[2342341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:54:58 power sudo[2342341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:58 power sudo[2342341]: pam_unix(sudo:session): session closed for user root
Sep  7 04:54:59 power sudo[2342362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=enaspot.com return_https_redirect_status=1 --output=json'
Sep  7 04:54:59 power sudo[2342362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:54:59 power sudo[2342362]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:01 power systemd[2342496]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 04:55:02 power sudo[2342566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/public_html --output=json'
Sep  7 04:55:02 power sudo[2342566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:02 power sudo[2342566]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:06 power sudo[2342785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep  7 04:55:06 power sudo[2342785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:06 power sudo[2342785]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:06 power sudo[2342790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enochmk --output=json'
Sep  7 04:55:06 power sudo[2342790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:06 power sudo[2342790]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:11 power sudo[2342953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:55:12 power sudo[2342953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:12 power sudo[2342953]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:12 power sudo[2342966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enochmk --user-current --json'
Sep  7 04:55:12 power sudo[2342966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:12 power sudo[2342966]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:12 power sudo[2342973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk LangPHP php_get_vhost_versions --output=json'
Sep  7 04:55:12 power sudo[2342973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:12 power sudo[2342973]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:12 power sudo[2342983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:55:12 power sudo[2342983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:12 power sudo[2342983]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:13 power sudo[2343002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DomainInfo single_domain_data domain=enoch.mk return_https_redirect_status=1 --output=json'
Sep  7 04:55:13 power sudo[2343002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:13 power sudo[2343002]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:13 power sudo[2343012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk Mime list_redirects --output=json'
Sep  7 04:55:13 power sudo[2343012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:13 power sudo[2343012]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:17 power sudo[2343120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DirectoryPrivacy is_directory_protected dir=/home/enochmk/public_html --output=json'
Sep  7 04:55:17 power sudo[2343120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:17 power sudo[2343120]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:18 power sudo[2343187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:55:18 power sudo[2343187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:18 power sudo[2343187]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:18 power sudo[2343192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 04:55:18 power sudo[2343192]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 04:55:18 power sudo[2343192]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 04:55:18 power sudo[2343192]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 04:55:18 power sudo[2343192]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:55:18 power sudo[2343192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:18 power sudo[2343192]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:18 power sudo[2343197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 04:55:18 power sudo[2343197]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 04:55:18 power sudo[2343197]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 04:55:18 power sudo[2343197]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 04:55:18 power sudo[2343197]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:55:18 power sudo[2343197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:18 power sudo[2343197]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:20 power sudo[2343322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:55:20 power sudo[2343322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:20 power sudo[2343322]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:20 power sudo[2343328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 04:55:20 power sudo[2343328]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 04:55:20 power sudo[2343328]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 04:55:20 power sudo[2343328]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 04:55:20 power sudo[2343328]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:55:20 power sudo[2343328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:20 power sudo[2343328]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:20 power sudo[2343333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 04:55:20 power sudo[2343333]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 04:55:20 power sudo[2343333]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 04:55:20 power sudo[2343333]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 04:55:20 power sudo[2343333]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:55:20 power sudo[2343333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:20 power sudo[2343333]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:24 power sudo[2343428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/equip.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:55:24 power sudo[2343428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:24 power sudo[2343428]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:24 power sudo[2343442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  7 04:55:24 power sudo[2343442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:24 power sudo[2343442]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:24 power sudo[2343451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:55:24 power sudo[2343451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:24 power sudo[2343451]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:25 power sudo[2343465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=equip.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 04:55:25 power sudo[2343465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:25 power sudo[2343465]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:27 power sudo[2343562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/equip.cetplatform.mk --output=json'
Sep  7 04:55:27 power sudo[2343562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:27 power sudo[2343562]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:31 power sudo[2343780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep  7 04:55:31 power sudo[2343780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:31 power sudo[2343780]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:31 power sudo[2343789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eurofarm --output=json'
Sep  7 04:55:31 power sudo[2343789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:31 power sudo[2343789]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:38 power sudo[2343912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm /bin/sh -c 'cd /home/eurofarm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:55:38 power sudo[2343912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:39 power sudo[2343912]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:39 power sudo[2343918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eurofarm --user-current --json'
Sep  7 04:55:39 power sudo[2343918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:39 power sudo[2343918]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:39 power sudo[2343923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm LangPHP php_get_vhost_versions --output=json'
Sep  7 04:55:39 power sudo[2343923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:39 power sudo[2343923]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:39 power sudo[2343933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:55:39 power sudo[2343933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:39 power sudo[2343933]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:39 power sudo[2343948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DomainInfo single_domain_data domain=eurofarm.com.mk return_https_redirect_status=1 --output=json'
Sep  7 04:55:39 power sudo[2343948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:40 power sudo[2343948]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:40 power sudo[2343955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm Mime list_redirects --output=json'
Sep  7 04:55:40 power sudo[2343955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:40 power sudo[2343955]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:44 power sudo[2344069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DirectoryPrivacy is_directory_protected dir=/home/eurofarm/public_html --output=json'
Sep  7 04:55:44 power sudo[2344069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:44 power sudo[2344069]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:47 power sudo[2344287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep  7 04:55:47 power sudo[2344287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:48 power sudo[2344287]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:48 power sudo[2344292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=euromaki --output=json'
Sep  7 04:55:48 power sudo[2344292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:48 power sudo[2344292]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:52 power sudo[2344399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki /bin/sh -c 'cd /home/euromaki/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:55:52 power sudo[2344399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:52 power sudo[2344399]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:52 power sudo[2344405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user euromaki --user-current --json'
Sep  7 04:55:52 power sudo[2344405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:52 power sudo[2344405]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:52 power sudo[2344417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki LangPHP php_get_vhost_versions --output=json'
Sep  7 04:55:52 power sudo[2344417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:52 power sudo[2344417]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:52 power sudo[2344422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:55:52 power sudo[2344422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:52 power sudo[2344422]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:52 power sudo[2344437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DomainInfo single_domain_data domain=euromakinsurance.mk return_https_redirect_status=1 --output=json'
Sep  7 04:55:53 power sudo[2344437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:53 power sudo[2344437]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:53 power sudo[2344443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki Mime list_redirects --output=json'
Sep  7 04:55:53 power sudo[2344443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:53 power sudo[2344443]: pam_unix(sudo:session): session closed for user root
Sep  7 04:55:57 power sudo[2344562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DirectoryPrivacy is_directory_protected dir=/home/euromaki/public_html --output=json'
Sep  7 04:55:57 power sudo[2344562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:55:57 power sudo[2344562]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:00 power sudo[2344770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep  7 04:56:00 power sudo[2344770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:00 power sudo[2344770]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:00 power sudo[2344775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evberasm --output=json'
Sep  7 04:56:00 power sudo[2344775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:00 power sudo[2344775]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:07 power sudo[2344953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm /bin/sh -c 'cd /home/evberasm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:56:07 power sudo[2344953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:07 power sudo[2344953]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:07 power sudo[2344976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evberasm --user-current --json'
Sep  7 04:56:07 power sudo[2344976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:08 power sudo[2344976]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:08 power sudo[2344983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm LangPHP php_get_vhost_versions --output=json'
Sep  7 04:56:08 power sudo[2344983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:08 power sudo[2344983]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:08 power sudo[2344989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:56:08 power sudo[2344989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:08 power sudo[2344989]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:08 power sudo[2345006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DomainInfo single_domain_data domain=evberasmusplus.com.mk return_https_redirect_status=1 --output=json'
Sep  7 04:56:08 power sudo[2345006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:08 power sudo[2345006]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:08 power sudo[2345013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm Mime list_redirects --output=json'
Sep  7 04:56:08 power sudo[2345013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:08 power sudo[2345013]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:12 power sudo[2345133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DirectoryPrivacy is_directory_protected dir=/home/evberasm/public_html/wp --output=json'
Sep  7 04:56:12 power sudo[2345133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:13 power sudo[2345133]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:16 power sudo[2345341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep  7 04:56:16 power sudo[2345341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:16 power sudo[2345341]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:16 power sudo[2345348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evolvepl --output=json'
Sep  7 04:56:16 power sudo[2345348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:16 power sudo[2345348]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:20 power sudo[2345446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:56:20 power sudo[2345446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:20 power sudo[2345446]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:20 power sudo[2345456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evolvepl --user-current --json'
Sep  7 04:56:20 power sudo[2345456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:20 power sudo[2345456]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:20 power sudo[2345463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl LangPHP php_get_vhost_versions --output=json'
Sep  7 04:56:20 power sudo[2345463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:20 power sudo[2345463]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:20 power sudo[2345467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:56:20 power sudo[2345467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:20 power sudo[2345467]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:21 power sudo[2345488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DomainInfo single_domain_data domain=evolveplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 04:56:21 power sudo[2345488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:21 power sudo[2345488]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:21 power sudo[2345495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl Mime list_redirects --output=json'
Sep  7 04:56:21 power sudo[2345495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:21 power sudo[2345495]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:24 power sudo[2345569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DirectoryPrivacy is_directory_protected dir=/home/evolvepl/public_html --output=json'
Sep  7 04:56:24 power sudo[2345569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:24 power sudo[2345569]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:25 power sudo[2345628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:56:25 power sudo[2345628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:25 power sudo[2345628]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:25 power sudo[2345633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:56:25 power sudo[2345633]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:56:25 power sudo[2345633]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:56:25 power sudo[2345633]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:56:25 power sudo[2345633]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:56:25 power sudo[2345633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:25 power sudo[2345633]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:25 power sudo[2345638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:56:25 power sudo[2345638]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:56:25 power sudo[2345638]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:56:25 power sudo[2345638]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:56:25 power sudo[2345638]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:56:25 power sudo[2345638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:25 power sudo[2345638]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:25 power sudo[2345644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:56:25 power sudo[2345644]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:56:25 power sudo[2345644]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:56:25 power sudo[2345644]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:56:25 power sudo[2345644]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:56:25 power sudo[2345644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:26 power sudo[2345644]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:28 power sudo[2345748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:56:28 power sudo[2345748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:28 power sudo[2345748]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:28 power sudo[2345753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:56:28 power sudo[2345753]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:56:28 power sudo[2345753]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:56:28 power sudo[2345753]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:56:28 power sudo[2345753]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:56:28 power sudo[2345753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:28 power sudo[2345753]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:28 power sudo[2345758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:56:28 power sudo[2345758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:56:28 power sudo[2345758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:56:28 power sudo[2345758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:56:28 power sudo[2345758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:56:28 power sudo[2345758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:28 power sudo[2345758]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:28 power sudo[2345763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:56:28 power sudo[2345763]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:56:28 power sudo[2345763]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:56:28 power sudo[2345763]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:56:28 power sudo[2345763]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:56:28 power sudo[2345763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:28 power sudo[2345763]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:33 power sudo[2345888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/ey.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:56:33 power sudo[2345888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:33 power sudo[2345888]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:33 power sudo[2345894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  7 04:56:33 power sudo[2345894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:33 power sudo[2345894]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:33 power sudo[2345903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:56:33 power sudo[2345903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:33 power sudo[2345903]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:33 power sudo[2345926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=ey.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 04:56:33 power sudo[2345926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:34 power sudo[2345926]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:36 power sudo[2346014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/ey.cetplatform.mk --output=json'
Sep  7 04:56:36 power sudo[2346014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:36 power sudo[2346014]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:40 power sudo[2346236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep  7 04:56:40 power sudo[2346236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:40 power sudo[2346236]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:40 power sudo[2346244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=holiyayt --output=json'
Sep  7 04:56:40 power sudo[2346244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:40 power sudo[2346244]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:43 power sudo[2346393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/fitkit.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:56:43 power sudo[2346393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:43 power sudo[2346393]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:43 power sudo[2346399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep  7 04:56:43 power sudo[2346399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:43 power sudo[2346399]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:43 power sudo[2346405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt LangPHP php_get_vhost_versions --output=json'
Sep  7 04:56:43 power sudo[2346405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:43 power sudo[2346405]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:43 power sudo[2346411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:56:43 power sudo[2346411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:43 power sudo[2346411]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:43 power sudo[2346429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=fitkit.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep  7 04:56:43 power sudo[2346429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:43 power sudo[2346429]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:43 power sudo[2346436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt Mime list_redirects --output=json'
Sep  7 04:56:43 power sudo[2346436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:43 power sudo[2346436]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:45 power sudo[2346551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/fitkit.holiyaytravel.com --output=json'
Sep  7 04:56:45 power sudo[2346551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:45 power sudo[2346551]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:49 power sudo[2346765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep  7 04:56:49 power sudo[2346765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:49 power sudo[2346765]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:49 power sudo[2346775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=v5srybi9dcdx --output=json'
Sep  7 04:56:49 power sudo[2346775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:49 power sudo[2346775]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:51 power sudo[2346830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/flowoptstudio.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:56:51 power sudo[2346830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:52 power sudo[2346830]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:52 power sudo[2346837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep  7 04:56:52 power sudo[2346837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:52 power sudo[2346837]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:52 power sudo[2346843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx LangPHP php_get_vhost_versions --output=json'
Sep  7 04:56:52 power sudo[2346843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:52 power sudo[2346843]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:52 power sudo[2346848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:56:52 power sudo[2346848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:52 power sudo[2346848]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:52 power sudo[2346866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=flowoptstudio.com return_https_redirect_status=1 --output=json'
Sep  7 04:56:52 power sudo[2346866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:52 power sudo[2346866]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:52 power sudo[2346872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx Mime list_redirects --output=json'
Sep  7 04:56:52 power sudo[2346872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:52 power sudo[2346872]: pam_unix(sudo:session): session closed for user root
Sep  7 04:56:55 power sudo[2346953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/flowoptstudio.com --output=json'
Sep  7 04:56:55 power sudo[2346953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:56:55 power sudo[2346953]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:00 power sudo[2347166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep  7 04:57:00 power sudo[2347166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:00 power sudo[2347166]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:00 power sudo[2347174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=folklore --output=json'
Sep  7 04:57:00 power sudo[2347174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:00 power sudo[2347174]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:02 power sudo[2347255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:57:02 power sudo[2347255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:02 power sudo[2347255]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:02 power sudo[2347262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user folklore --user-current --json'
Sep  7 04:57:02 power sudo[2347262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:03 power sudo[2347262]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:03 power sudo[2347273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore LangPHP php_get_vhost_versions --output=json'
Sep  7 04:57:03 power sudo[2347273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:03 power sudo[2347273]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:03 power sudo[2347280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:57:03 power sudo[2347280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:03 power sudo[2347280]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:03 power sudo[2347301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DomainInfo single_domain_data domain=folklorefestivals.com return_https_redirect_status=1 --output=json'
Sep  7 04:57:03 power sudo[2347301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:03 power sudo[2347301]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:03 power sudo[2347307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore Mime list_redirects --output=json'
Sep  7 04:57:03 power sudo[2347307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:04 power sudo[2347307]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:05 power sudo[2347384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DirectoryPrivacy is_directory_protected dir=/home/folklore/public_html --output=json'
Sep  7 04:57:05 power sudo[2347384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:06 power sudo[2347384]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:06 power sudo[2347439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:57:06 power sudo[2347439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:06 power sudo[2347439]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:06 power sudo[2347444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:57:06 power sudo[2347444]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:57:06 power sudo[2347444]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:57:06 power sudo[2347444]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:57:06 power sudo[2347444]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:57:06 power sudo[2347444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:06 power sudo[2347444]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:06 power sudo[2347449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:57:06 power sudo[2347449]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:57:06 power sudo[2347449]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:57:06 power sudo[2347449]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:57:06 power sudo[2347449]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:57:06 power sudo[2347449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:07 power sudo[2347449]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:07 power sudo[2347455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:57:07 power sudo[2347455]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:57:07 power sudo[2347455]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:57:07 power sudo[2347455]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:57:07 power sudo[2347455]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:57:07 power sudo[2347455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:07 power sudo[2347455]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:08 power sudo[2347593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:57:08 power sudo[2347593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:08 power sudo[2347593]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:08 power sudo[2347598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:57:08 power sudo[2347598]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:57:08 power sudo[2347598]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:57:08 power sudo[2347598]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:57:08 power sudo[2347598]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:57:08 power sudo[2347598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:08 power sudo[2347598]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:08 power sudo[2347603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:57:08 power sudo[2347603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:57:08 power sudo[2347603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:57:08 power sudo[2347603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:57:08 power sudo[2347603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:57:08 power sudo[2347603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:08 power sudo[2347603]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:08 power sudo[2347610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:57:08 power sudo[2347610]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:57:08 power sudo[2347610]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:57:08 power sudo[2347610]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:57:08 power sudo[2347610]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:57:08 power sudo[2347610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:08 power sudo[2347610]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:09 power sudo[2347634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep  7 04:57:09 power sudo[2347634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:09 power sudo[2347634]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:09 power sudo[2347643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=forzares --output=json'
Sep  7 04:57:09 power sudo[2347643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:09 power sudo[2347643]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:14 power sudo[2347735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares /bin/sh -c 'cd /home/forzares/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:57:14 power sudo[2347735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:15 power sudo[2347735]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:15 power sudo[2347744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user forzares --user-current --json'
Sep  7 04:57:15 power sudo[2347744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:15 power sudo[2347744]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:15 power sudo[2347750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares LangPHP php_get_vhost_versions --output=json'
Sep  7 04:57:15 power sudo[2347750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:15 power sudo[2347750]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:15 power sudo[2347755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:57:15 power sudo[2347755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:15 power sudo[2347755]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:16 power sudo[2347777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DomainInfo single_domain_data domain=forzarestaurant.com.mk return_https_redirect_status=1 --output=json'
Sep  7 04:57:16 power sudo[2347777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:16 power sudo[2347777]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:16 power sudo[2347783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares Mime list_redirects --output=json'
Sep  7 04:57:16 power sudo[2347783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:16 power sudo[2347783]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:19 power sudo[2347902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DirectoryPrivacy is_directory_protected dir=/home/forzares/public_html --output=json'
Sep  7 04:57:19 power sudo[2347902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:19 power sudo[2347902]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:22 power sudo[2348079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep  7 04:57:22 power sudo[2348079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:22 power sudo[2348079]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:22 power sudo[2348086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=getaldus --output=json'
Sep  7 04:57:22 power sudo[2348086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:23 power sudo[2348086]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:25 power sudo[2348141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus /bin/sh -c 'cd /home/getaldus/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:57:25 power sudo[2348141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:25 power sudo[2348141]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:25 power sudo[2348149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user getaldus --user-current --json'
Sep  7 04:57:25 power sudo[2348149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:25 power sudo[2348149]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:25 power sudo[2348154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus LangPHP php_get_vhost_versions --output=json'
Sep  7 04:57:25 power sudo[2348154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:25 power sudo[2348154]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:25 power sudo[2348159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:57:25 power sudo[2348159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:25 power sudo[2348159]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:25 power sudo[2348172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DomainInfo single_domain_data domain=getaldus.mk return_https_redirect_status=1 --output=json'
Sep  7 04:57:25 power sudo[2348172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:26 power sudo[2348172]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:26 power sudo[2348183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus Mime list_redirects --output=json'
Sep  7 04:57:26 power sudo[2348183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:26 power sudo[2348183]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:27 power sudo[2348245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DirectoryPrivacy is_directory_protected dir=/home/getaldus/public_html --output=json'
Sep  7 04:57:27 power sudo[2348245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:27 power sudo[2348245]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:31 power sudo[2348450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep  7 04:57:31 power sudo[2348450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:31 power sudo[2348450]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:31 power sudo[2348455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gocruise --output=json'
Sep  7 04:57:31 power sudo[2348455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:31 power sudo[2348455]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:36 power sudo[2348560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise /bin/sh -c 'cd /home/gocruise/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:57:36 power sudo[2348560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:36 power sudo[2348560]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:36 power sudo[2348568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gocruise --user-current --json'
Sep  7 04:57:36 power sudo[2348568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:36 power sudo[2348568]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:36 power sudo[2348574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise LangPHP php_get_vhost_versions --output=json'
Sep  7 04:57:36 power sudo[2348574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:37 power sudo[2348574]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:37 power sudo[2348582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:57:37 power sudo[2348582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:37 power sudo[2348582]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:37 power sudo[2348602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DomainInfo single_domain_data domain=gocruise.mk return_https_redirect_status=1 --output=json'
Sep  7 04:57:37 power sudo[2348602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:37 power sudo[2348602]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:37 power sudo[2348609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise Mime list_redirects --output=json'
Sep  7 04:57:37 power sudo[2348609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:37 power sudo[2348609]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:41 power sudo[2348720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DirectoryPrivacy is_directory_protected dir=/home/gocruise/public_html --output=json'
Sep  7 04:57:41 power sudo[2348720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:41 power sudo[2348720]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:45 power sudo[2348917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep  7 04:57:45 power sudo[2348917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:45 power sudo[2348917]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:45 power sudo[2348922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gogovan1 --output=json'
Sep  7 04:57:45 power sudo[2348922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:45 power sudo[2348922]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:49 power sudo[2349013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 /bin/sh -c 'cd /home/gogovan1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:57:49 power sudo[2349013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:49 power sudo[2349013]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:49 power sudo[2349019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gogovan1 --user-current --json'
Sep  7 04:57:49 power sudo[2349019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:50 power sudo[2349019]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:50 power sudo[2349029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 LangPHP php_get_vhost_versions --output=json'
Sep  7 04:57:50 power sudo[2349029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:50 power sudo[2349029]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:50 power sudo[2349035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:57:50 power sudo[2349035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:50 power sudo[2349035]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:50 power sudo[2349051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DomainInfo single_domain_data domain=gogovan.mk return_https_redirect_status=1 --output=json'
Sep  7 04:57:50 power sudo[2349051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:50 power sudo[2349051]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:50 power sudo[2349057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 Mime list_redirects --output=json'
Sep  7 04:57:50 power sudo[2349057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:50 power sudo[2349057]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:53 power sudo[2349163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DirectoryPrivacy is_directory_protected dir=/home/gogovan1/public_html --output=json'
Sep  7 04:57:53 power sudo[2349163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:53 power sudo[2349163]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:57 power sudo[2349397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep  7 04:57:57 power sudo[2349397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:57 power sudo[2349397]: pam_unix(sudo:session): session closed for user root
Sep  7 04:57:57 power sudo[2349404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=golakkom --output=json'
Sep  7 04:57:57 power sudo[2349404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:57:57 power sudo[2349404]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:04 power sudo[2349566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:58:04 power sudo[2349566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:04 power sudo[2349566]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:04 power sudo[2349572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user golakkom --user-current --json'
Sep  7 04:58:04 power sudo[2349572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:04 power sudo[2349572]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:04 power sudo[2349582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom LangPHP php_get_vhost_versions --output=json'
Sep  7 04:58:04 power sudo[2349582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:05 power sudo[2349582]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:05 power sudo[2349590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:58:05 power sudo[2349590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:05 power sudo[2349590]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:05 power sudo[2349610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DomainInfo single_domain_data domain=golak-komerc.mk return_https_redirect_status=1 --output=json'
Sep  7 04:58:05 power sudo[2349610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:05 power sudo[2349610]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:05 power sudo[2349616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom Mime list_redirects --output=json'
Sep  7 04:58:05 power sudo[2349616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:05 power sudo[2349616]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:09 power sudo[2349761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DirectoryPrivacy is_directory_protected dir=/home/golakkom/public_html --output=json'
Sep  7 04:58:09 power sudo[2349761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:09 power sudo[2349761]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:10 power sudo[2349814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:58:10 power sudo[2349814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:10 power sudo[2349814]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:10 power sudo[2349819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:58:10 power sudo[2349819]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:58:10 power sudo[2349819]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:58:10 power sudo[2349819]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:58:10 power sudo[2349819]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:58:10 power sudo[2349819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:10 power sudo[2349819]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:10 power sudo[2349824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:58:10 power sudo[2349824]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:58:10 power sudo[2349824]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:58:10 power sudo[2349824]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:58:10 power sudo[2349824]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:58:10 power sudo[2349824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:10 power sudo[2349824]: pam_unix(sudo:session): session closed for user root
Sep  7 04:58:10 power sudo[2349830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:58:10 power sudo[2349830]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:58:10 power sudo[2349830]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:58:10 power sudo[2349830]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:58:10 power sudo[2349830]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:58:10 power sudo[2349830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:58:10 power sudo[2349830]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:08 power sudo[2350699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:59:08 power sudo[2350699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:08 power sudo[2350699]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:08 power sudo[2350705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  7 04:59:08 power sudo[2350705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:09 power sudo[2350705]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:09 power sudo[2350715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:59:09 power sudo[2350715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:09 power sudo[2350715]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:10 power sudo[2350773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=goodnews.mk return_https_redirect_status=1 --output=json'
Sep  7 04:59:10 power sudo[2350773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:10 power sudo[2350773]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:13 power sudo[2350878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/public_html --output=json'
Sep  7 04:59:13 power sudo[2350878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:13 power sudo[2350878]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:18 power sudo[2351132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep  7 04:59:18 power sudo[2351132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:18 power sudo[2351132]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:18 power sudo[2351140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=herbalpl --output=json'
Sep  7 04:59:18 power sudo[2351140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:18 power sudo[2351140]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:24 power sudo[2351253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl /bin/sh -c 'cd /home/herbalpl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:59:24 power sudo[2351253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:24 power sudo[2351253]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:24 power sudo[2351260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user herbalpl --user-current --json'
Sep  7 04:59:24 power sudo[2351260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:25 power sudo[2351260]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:25 power sudo[2351274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl LangPHP php_get_vhost_versions --output=json'
Sep  7 04:59:25 power sudo[2351274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:25 power sudo[2351274]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:25 power sudo[2351280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:59:25 power sudo[2351280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:25 power sudo[2351280]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:26 power sudo[2351295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DomainInfo single_domain_data domain=herbalplus.mk return_https_redirect_status=1 --output=json'
Sep  7 04:59:26 power sudo[2351295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:26 power sudo[2351295]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:26 power sudo[2351304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl Mime list_redirects --output=json'
Sep  7 04:59:26 power sudo[2351304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:26 power sudo[2351304]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:29 power sudo[2351386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DirectoryPrivacy is_directory_protected dir=/home/herbalpl/public_html --output=json'
Sep  7 04:59:29 power sudo[2351386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:29 power sudo[2351386]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:37 power sudo[2351696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/hero.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:59:37 power sudo[2351696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:37 power sudo[2351696]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:37 power sudo[2351702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  7 04:59:37 power sudo[2351702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:38 power sudo[2351702]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:38 power sudo[2351718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:59:38 power sudo[2351718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:38 power sudo[2351718]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:38 power sudo[2351736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=hero.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 04:59:38 power sudo[2351736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:38 power sudo[2351736]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:41 power sudo[2351828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/hero.cetplatform.mk --output=json'
Sep  7 04:59:41 power sudo[2351828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:41 power sudo[2351828]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:48 power sudo[2352097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 04:59:48 power sudo[2352097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:48 power sudo[2352097]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:48 power sudo[2352103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep  7 04:59:48 power sudo[2352103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:48 power sudo[2352103]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:48 power sudo[2352108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 04:59:48 power sudo[2352108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:48 power sudo[2352108]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:49 power sudo[2352141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep  7 04:59:49 power sudo[2352141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:49 power sudo[2352141]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:52 power sudo[2352222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/public_html --output=json'
Sep  7 04:59:52 power sudo[2352222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:52 power sudo[2352222]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:53 power sudo[2352274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:59:53 power sudo[2352274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:53 power sudo[2352274]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:53 power sudo[2352279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:59:53 power sudo[2352279]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:59:53 power sudo[2352279]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:59:53 power sudo[2352279]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:59:53 power sudo[2352279]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:59:53 power sudo[2352279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:53 power sudo[2352279]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:53 power sudo[2352284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:59:53 power sudo[2352284]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:59:53 power sudo[2352284]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:59:53 power sudo[2352284]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:59:53 power sudo[2352284]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:59:53 power sudo[2352284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:53 power sudo[2352284]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:53 power sudo[2352293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:59:53 power sudo[2352293]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:59:53 power sudo[2352293]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:59:53 power sudo[2352293]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:59:53 power sudo[2352293]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:59:53 power sudo[2352293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:53 power sudo[2352293]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:55 power sudo[2352377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:59:55 power sudo[2352377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:55 power sudo[2352377]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:55 power sudo[2352382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 04:59:55 power sudo[2352382]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 04:59:55 power sudo[2352382]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 04:59:55 power sudo[2352382]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 04:59:55 power sudo[2352382]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:59:55 power sudo[2352382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:55 power sudo[2352382]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:55 power sudo[2352387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:59:55 power sudo[2352387]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:59:55 power sudo[2352387]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:59:55 power sudo[2352387]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:59:55 power sudo[2352387]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:59:55 power sudo[2352387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:55 power sudo[2352387]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:55 power sudo[2352397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 04:59:55 power sudo[2352397]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 04:59:55 power sudo[2352397]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 04:59:55 power sudo[2352397]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 04:59:55 power sudo[2352397]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 04:59:55 power sudo[2352397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:55 power sudo[2352397]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:56 power sudo[2352429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep  7 04:59:56 power sudo[2352429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:56 power sudo[2352429]: pam_unix(sudo:session): session closed for user root
Sep  7 04:59:56 power sudo[2352436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vezilkac --output=json'
Sep  7 04:59:56 power sudo[2352436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 04:59:56 power sudo[2352436]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:00 power sudo[2352534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/vezden.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:00:00 power sudo[2352534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:00 power sudo[2352534]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:00 power sudo[2352540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  7 05:00:00 power sudo[2352540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:01 power sudo[2352540]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:01 power sudo[2352547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac LangPHP php_get_vhost_versions --output=json'
Sep  7 05:00:01 power sudo[2352547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:01 power sudo[2352547]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:01 power sudo[2352555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:00:01 power sudo[2352555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:01 power sudo[2352555]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:01 power systemd[2352722]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:00:01 power systemd[2352723]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 05:00:01 power systemd[2352724]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 05:00:01 power systemd[2352726]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 05:00:01 power sudo[2352797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezden.mk return_https_redirect_status=1 --output=json'
Sep  7 05:00:01 power sudo[2352797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:01 power sudo[2352797]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:01 power sudo[2352809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Mime list_redirects --output=json'
Sep  7 05:00:01 power sudo[2352809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:01 power sudo[2352809]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:04 power sudo[2353048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/vezden.mk --output=json'
Sep  7 05:00:04 power sudo[2353048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:04 power sudo[2353048]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:33 power sudo[2353802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/metatet && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:00:33 power sudo[2353802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:34 power sudo[2353802]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:34 power sudo[2353808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  7 05:00:34 power sudo[2353808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:34 power sudo[2353808]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:34 power sudo[2353821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:00:34 power sudo[2353821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:34 power sudo[2353821]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:34 power sudo[2353838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=metatet.com return_https_redirect_status=1 --output=json'
Sep  7 05:00:34 power sudo[2353838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:34 power sudo[2353838]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:42 power sudo[2353992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/metatet --output=json'
Sep  7 05:00:42 power sudo[2353992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:42 power sudo[2353992]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:58 power sudo[2354432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:00:58 power sudo[2354432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:58 power sudo[2354432]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:58 power sudo[2354439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  7 05:00:58 power sudo[2354439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:58 power sudo[2354439]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:58 power sudo[2354444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:00:58 power sudo[2354444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:58 power sudo[2354444]: pam_unix(sudo:session): session closed for user root
Sep  7 05:00:59 power sudo[2354457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezilka.com return_https_redirect_status=1 --output=json'
Sep  7 05:00:59 power sudo[2354457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:00:59 power sudo[2354457]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:05 power sudo[2354621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html --output=json'
Sep  7 05:01:05 power sudo[2354621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:05 power sudo[2354621]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:13 power sudo[2354967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/sorabotnici && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:01:13 power sudo[2354967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:13 power sudo[2354967]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:13 power sudo[2354974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  7 05:01:13 power sudo[2354974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:13 power sudo[2354974]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:13 power sudo[2354979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:01:13 power sudo[2354979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:13 power sudo[2354979]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:14 power sudo[2354994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=sorabotnici.vezilka.com return_https_redirect_status=1 --output=json'
Sep  7 05:01:14 power sudo[2354994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:14 power sudo[2354994]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:16 power sudo[2355066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/sorabotnici --output=json'
Sep  7 05:01:16 power sudo[2355066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:16 power sudo[2355066]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:23 power sudo[2355398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/pp && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:01:23 power sudo[2355398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:23 power sudo[2355398]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:23 power sudo[2355406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  7 05:01:23 power sudo[2355406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:23 power sudo[2355406]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:23 power sudo[2355417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:01:23 power sudo[2355417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:23 power sudo[2355417]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:23 power sudo[2355434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=pp.denicija.mk return_https_redirect_status=1 --output=json'
Sep  7 05:01:23 power sudo[2355434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:23 power sudo[2355434]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:25 power sudo[2355516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/pp --output=json'
Sep  7 05:01:25 power sudo[2355516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:25 power sudo[2355516]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:28 power sudo[2355738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep  7 05:01:29 power sudo[2355738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:29 power sudo[2355738]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:29 power sudo[2355743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=madzomk --output=json'
Sep  7 05:01:29 power sudo[2355743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:29 power sudo[2355743]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:34 power sudo[2355860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk /bin/sh -c 'cd /home/madzomk/hotelcitypark.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:01:34 power sudo[2355860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:34 power sudo[2355860]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:34 power sudo[2355866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user madzomk --user-current --json'
Sep  7 05:01:34 power sudo[2355866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:34 power sudo[2355866]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:34 power sudo[2355871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk LangPHP php_get_vhost_versions --output=json'
Sep  7 05:01:34 power sudo[2355871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:35 power sudo[2355871]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:35 power sudo[2355876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:01:35 power sudo[2355876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:35 power sudo[2355876]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:35 power sudo[2355892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DomainInfo single_domain_data domain=hotelcitypark.mk return_https_redirect_status=1 --output=json'
Sep  7 05:01:35 power sudo[2355892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:35 power sudo[2355892]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:35 power sudo[2355898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk Mime list_redirects --output=json'
Sep  7 05:01:35 power sudo[2355898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:35 power sudo[2355898]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:38 power sudo[2355988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DirectoryPrivacy is_directory_protected dir=/home/madzomk/hotelcitypark.mk --output=json'
Sep  7 05:01:38 power sudo[2355988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:38 power sudo[2355988]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:42 power sudo[2356237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep  7 05:01:42 power sudo[2356237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:42 power sudo[2356237]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:42 power sudo[2356266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=imdskopj --output=json'
Sep  7 05:01:42 power sudo[2356266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:42 power sudo[2356266]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:45 power sudo[2356394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj /bin/sh -c 'cd /home/imdskopj/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:01:45 power sudo[2356394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:45 power sudo[2356394]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:45 power sudo[2356408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user imdskopj --user-current --json'
Sep  7 05:01:45 power sudo[2356408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:45 power sudo[2356408]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:45 power sudo[2356428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj LangPHP php_get_vhost_versions --output=json'
Sep  7 05:01:45 power sudo[2356428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:46 power sudo[2356428]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:46 power sudo[2356433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:01:46 power sudo[2356433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:46 power sudo[2356433]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:46 power sudo[2356449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DomainInfo single_domain_data domain=imdskopje.mk return_https_redirect_status=1 --output=json'
Sep  7 05:01:46 power sudo[2356449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:46 power sudo[2356449]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:46 power sudo[2356459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj Mime list_redirects --output=json'
Sep  7 05:01:46 power sudo[2356459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:46 power sudo[2356459]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:49 power sudo[2356554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DirectoryPrivacy is_directory_protected dir=/home/imdskopj/public_html --output=json'
Sep  7 05:01:49 power sudo[2356554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:49 power sudo[2356554]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:52 power sudo[2356778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep  7 05:01:52 power sudo[2356778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:52 power sudo[2356778]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:52 power sudo[2356786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=infopor1 --output=json'
Sep  7 05:01:52 power sudo[2356786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:52 power sudo[2356786]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:57 power sudo[2356894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:01:57 power sudo[2356894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:57 power sudo[2356894]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:57 power sudo[2356900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user infopor1 --user-current --json'
Sep  7 05:01:57 power sudo[2356900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:57 power sudo[2356900]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:57 power sudo[2356911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 LangPHP php_get_vhost_versions --output=json'
Sep  7 05:01:57 power sudo[2356911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:57 power sudo[2356911]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:57 power sudo[2356917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:01:57 power sudo[2356917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:57 power sudo[2356917]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:58 power sudo[2356938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DomainInfo single_domain_data domain=infoportal.mk return_https_redirect_status=1 --output=json'
Sep  7 05:01:58 power sudo[2356938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:58 power sudo[2356938]: pam_unix(sudo:session): session closed for user root
Sep  7 05:01:58 power sudo[2356947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 Mime list_redirects --output=json'
Sep  7 05:01:58 power sudo[2356947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:01:58 power sudo[2356947]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:01 power sudo[2357035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DirectoryPrivacy is_directory_protected dir=/home/infopor1/public_html --output=json'
Sep  7 05:02:01 power sudo[2357035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:01 power sudo[2357035]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:02 power sudo[2357101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:02 power sudo[2357101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:02 power sudo[2357101]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:02 power sudo[2357106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:02:02 power sudo[2357106]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:02:02 power sudo[2357106]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:02:02 power sudo[2357106]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:02:02 power sudo[2357106]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:02 power sudo[2357106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:02 power sudo[2357106]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:02 power sudo[2357113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:02:02 power sudo[2357113]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:02:02 power sudo[2357113]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:02:02 power sudo[2357113]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:02:02 power sudo[2357113]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:02 power sudo[2357113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:02 power sudo[2357113]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:02 power sudo[2357121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:02:02 power sudo[2357121]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:02:02 power sudo[2357121]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:02:02 power sudo[2357121]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:02:02 power sudo[2357121]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:02 power sudo[2357121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:02 power sudo[2357121]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:04 power sudo[2357229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:04 power sudo[2357229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:04 power sudo[2357229]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:04 power sudo[2357234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:02:04 power sudo[2357234]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:02:04 power sudo[2357234]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:02:04 power sudo[2357234]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:02:04 power sudo[2357234]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:04 power sudo[2357234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:04 power sudo[2357234]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:04 power sudo[2357239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:02:04 power sudo[2357239]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:02:04 power sudo[2357239]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:02:04 power sudo[2357239]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:02:04 power sudo[2357239]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:04 power sudo[2357239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:04 power sudo[2357239]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:04 power sudo[2357248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:02:04 power sudo[2357248]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:02:04 power sudo[2357248]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:02:04 power sudo[2357248]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:02:04 power sudo[2357248]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:04 power sudo[2357248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:04 power sudo[2357248]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:05 power sudo[2357285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep  7 05:02:05 power sudo[2357285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:05 power sudo[2357285]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:05 power sudo[2357294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=intelek1 --output=json'
Sep  7 05:02:05 power sudo[2357294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:05 power sudo[2357294]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:09 power sudo[2357395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:02:09 power sudo[2357395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:09 power sudo[2357395]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:09 power sudo[2357401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user intelek1 --user-current --json'
Sep  7 05:02:09 power sudo[2357401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:10 power sudo[2357401]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:10 power sudo[2357410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 LangPHP php_get_vhost_versions --output=json'
Sep  7 05:02:10 power sudo[2357410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:10 power sudo[2357410]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:10 power sudo[2357416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:02:10 power sudo[2357416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:10 power sudo[2357416]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:10 power sudo[2357432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DomainInfo single_domain_data domain=intelekt-bb.com return_https_redirect_status=1 --output=json'
Sep  7 05:02:10 power sudo[2357432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:10 power sudo[2357432]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:10 power sudo[2357438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 Mime list_redirects --output=json'
Sep  7 05:02:10 power sudo[2357438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:10 power sudo[2357438]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:13 power sudo[2357578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DirectoryPrivacy is_directory_protected dir=/home/intelek1/public_html --output=json'
Sep  7 05:02:13 power sudo[2357578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:13 power sudo[2357578]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:14 power sudo[2357645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:14 power sudo[2357645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:14 power sudo[2357645]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:14 power sudo[2357650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:02:14 power sudo[2357650]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:02:14 power sudo[2357650]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:02:14 power sudo[2357650]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:02:14 power sudo[2357650]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:14 power sudo[2357650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:14 power sudo[2357650]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:14 power sudo[2357655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:02:14 power sudo[2357655]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:02:14 power sudo[2357655]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:02:14 power sudo[2357655]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:02:14 power sudo[2357655]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:14 power sudo[2357655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:14 power sudo[2357655]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:14 power sudo[2357660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:02:14 power sudo[2357660]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:02:14 power sudo[2357660]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:02:14 power sudo[2357660]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:02:14 power sudo[2357660]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:14 power sudo[2357660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:14 power sudo[2357660]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:16 power sudo[2357785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:16 power sudo[2357785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:16 power sudo[2357785]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:16 power sudo[2357792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:02:16 power sudo[2357792]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:02:16 power sudo[2357792]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:02:16 power sudo[2357792]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:02:16 power sudo[2357792]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:16 power sudo[2357792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:16 power sudo[2357792]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:16 power sudo[2357797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:02:16 power sudo[2357797]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:02:16 power sudo[2357797]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:02:16 power sudo[2357797]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:02:16 power sudo[2357797]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:16 power sudo[2357797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:17 power sudo[2357797]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:17 power sudo[2357802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:02:17 power sudo[2357802]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:02:17 power sudo[2357802]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:02:17 power sudo[2357802]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:02:17 power sudo[2357802]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:02:17 power sudo[2357802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:17 power sudo[2357802]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:19 power sudo[2357894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=invoices.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep  7 05:02:19 power sudo[2357894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:19 power sudo[2357894]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:20 power sudo[2357936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/invoices.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:02:20 power sudo[2357936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:20 power sudo[2357936]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:20 power sudo[2357942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep  7 05:02:20 power sudo[2357942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:20 power sudo[2357942]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:20 power sudo[2357948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:02:20 power sudo[2357948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:20 power sudo[2357948]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:22 power sudo[2358031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/invoices.holiyaytravel.com --output=json'
Sep  7 05:02:22 power sudo[2358031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:22 power sudo[2358031]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:26 power sudo[2358255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep  7 05:02:26 power sudo[2358255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:26 power sudo[2358255]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:26 power sudo[2358261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jpparkin --output=json'
Sep  7 05:02:26 power sudo[2358261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:26 power sudo[2358261]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:29 power sudo[2358335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin /bin/sh -c 'cd /home/jpparkin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:02:29 power sudo[2358335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:29 power sudo[2358335]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:29 power sudo[2358344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jpparkin --user-current --json'
Sep  7 05:02:29 power sudo[2358344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:29 power sudo[2358344]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:29 power sudo[2358355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin LangPHP php_get_vhost_versions --output=json'
Sep  7 05:02:29 power sudo[2358355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:29 power sudo[2358355]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:29 power sudo[2358363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:02:29 power sudo[2358363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:29 power sudo[2358363]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:30 power sudo[2358381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DomainInfo single_domain_data domain=jpparkinzinegotino.mk return_https_redirect_status=1 --output=json'
Sep  7 05:02:30 power sudo[2358381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:30 power sudo[2358381]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:30 power sudo[2358388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin Mime list_redirects --output=json'
Sep  7 05:02:30 power sudo[2358388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:30 power sudo[2358388]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:32 power sudo[2358472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DirectoryPrivacy is_directory_protected dir=/home/jpparkin/public_html --output=json'
Sep  7 05:02:32 power sudo[2358472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:32 power sudo[2358472]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:35 power sudo[2358663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep  7 05:02:35 power sudo[2358663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:35 power sudo[2358663]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:35 power sudo[2358669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=karpospo --output=json'
Sep  7 05:02:35 power sudo[2358669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:35 power sudo[2358669]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:39 power sudo[2358776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo /bin/sh -c 'cd /home/karpospo/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:02:39 power sudo[2358776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:39 power sudo[2358776]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:39 power sudo[2358782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user karpospo --user-current --json'
Sep  7 05:02:39 power sudo[2358782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:39 power sudo[2358782]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:39 power sudo[2358792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo LangPHP php_get_vhost_versions --output=json'
Sep  7 05:02:39 power sudo[2358792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:40 power sudo[2358792]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:40 power sudo[2358800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:02:40 power sudo[2358800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:40 power sudo[2358800]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:40 power sudo[2358819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DomainInfo single_domain_data domain=karpospoliklinika.com.mk return_https_redirect_status=1 --output=json'
Sep  7 05:02:40 power sudo[2358819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:40 power sudo[2358819]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:40 power sudo[2358829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo Mime list_redirects --output=json'
Sep  7 05:02:40 power sudo[2358829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:40 power sudo[2358829]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:43 power sudo[2358936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DirectoryPrivacy is_directory_protected dir=/home/karpospo/public_html --output=json'
Sep  7 05:02:43 power sudo[2358936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:43 power sudo[2358936]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:50 power sudo[2359211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:02:50 power sudo[2359211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:50 power sudo[2359211]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:50 power sudo[2359219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  7 05:02:50 power sudo[2359219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:50 power sudo[2359219]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:50 power sudo[2359230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:02:50 power sudo[2359230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:50 power sudo[2359230]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:50 power sudo[2359248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=kaysharov.com return_https_redirect_status=1 --output=json'
Sep  7 05:02:50 power sudo[2359248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:51 power sudo[2359248]: pam_unix(sudo:session): session closed for user root
Sep  7 05:02:53 power sudo[2359322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com --output=json'
Sep  7 05:02:53 power sudo[2359322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:02:53 power sudo[2359322]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:02 power sudo[2359647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:03:02 power sudo[2359647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:02 power sudo[2359647]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:02 power sudo[2359653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  7 05:03:02 power sudo[2359653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:03 power sudo[2359653]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:03 power sudo[2359659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:03:03 power sudo[2359659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:03 power sudo[2359659]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:06 power sudo[2359757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com/test --output=json'
Sep  7 05:03:06 power sudo[2359757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:06 power sudo[2359757]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:10 power sudo[2359969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep  7 05:03:10 power sudo[2359969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:10 power sudo[2359969]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:10 power sudo[2359978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kolened1 --output=json'
Sep  7 05:03:10 power sudo[2359978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:10 power sudo[2359978]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:22 power sudo[2360235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:03:22 power sudo[2360235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:22 power sudo[2360235]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:22 power sudo[2360241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kolened1 --user-current --json'
Sep  7 05:03:22 power sudo[2360241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:23 power sudo[2360241]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:23 power sudo[2360247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 LangPHP php_get_vhost_versions --output=json'
Sep  7 05:03:23 power sudo[2360247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:23 power sudo[2360247]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:23 power sudo[2360253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:03:23 power sudo[2360253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:23 power sudo[2360253]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:23 power sudo[2360270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DomainInfo single_domain_data domain=kolenedelkovski.edu.mk return_https_redirect_status=1 --output=json'
Sep  7 05:03:23 power sudo[2360270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:23 power sudo[2360270]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:23 power sudo[2360276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 Mime list_redirects --output=json'
Sep  7 05:03:23 power sudo[2360276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:23 power sudo[2360276]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:29 power sudo[2360393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DirectoryPrivacy is_directory_protected dir=/home/kolened1/public_html --output=json'
Sep  7 05:03:29 power sudo[2360393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:29 power sudo[2360393]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:30 power sudo[2360453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:03:30 power sudo[2360453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:30 power sudo[2360453]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:30 power sudo[2360458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:03:30 power sudo[2360458]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:03:30 power sudo[2360458]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:03:30 power sudo[2360458]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:03:30 power sudo[2360458]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:03:30 power sudo[2360458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:30 power sudo[2360458]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:30 power sudo[2360463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:03:30 power sudo[2360463]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:03:30 power sudo[2360463]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:03:30 power sudo[2360463]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:03:30 power sudo[2360463]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:03:30 power sudo[2360463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:31 power sudo[2360463]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:33 power sudo[2360579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:03:33 power sudo[2360579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:33 power sudo[2360579]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:33 power sudo[2360584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:03:33 power sudo[2360584]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:03:33 power sudo[2360584]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:03:33 power sudo[2360584]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:03:33 power sudo[2360584]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:03:33 power sudo[2360584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:33 power sudo[2360584]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:33 power sudo[2360589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:03:33 power sudo[2360589]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:03:33 power sudo[2360589]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:03:33 power sudo[2360589]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:03:33 power sudo[2360589]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:03:33 power sudo[2360589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:33 power sudo[2360589]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:34 power sudo[2360634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep  7 05:03:34 power sudo[2360634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:34 power sudo[2360634]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:34 power sudo[2360646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kouzonco --output=json'
Sep  7 05:03:34 power sudo[2360646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:34 power sudo[2360646]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:37 power sudo[2360730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco /bin/sh -c 'cd /home/kouzonco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:03:37 power sudo[2360730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:37 power sudo[2360730]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:37 power sudo[2360736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kouzonco --user-current --json'
Sep  7 05:03:38 power sudo[2360736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:38 power sudo[2360736]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:38 power sudo[2360742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco LangPHP php_get_vhost_versions --output=json'
Sep  7 05:03:38 power sudo[2360742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:38 power sudo[2360742]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:38 power sudo[2360747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:03:38 power sudo[2360747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:38 power sudo[2360747]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:38 power sudo[2360763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DomainInfo single_domain_data domain=kouzon.com.hn return_https_redirect_status=1 --output=json'
Sep  7 05:03:38 power sudo[2360763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:38 power sudo[2360763]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:38 power sudo[2360770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco Mime list_redirects --output=json'
Sep  7 05:03:38 power sudo[2360770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:38 power sudo[2360770]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:41 power sudo[2360846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DirectoryPrivacy is_directory_protected dir=/home/kouzonco/public_html --output=json'
Sep  7 05:03:41 power sudo[2360846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:41 power sudo[2360846]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:44 power sudo[2361047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep  7 05:03:44 power sudo[2361047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:45 power sudo[2361047]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:45 power sudo[2361053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sprintst --output=json'
Sep  7 05:03:45 power sudo[2361053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:45 power sudo[2361053]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:49 power sudo[2361159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst /bin/sh -c 'cd /home/sprintst/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:03:49 power sudo[2361159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:49 power sudo[2361159]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:49 power sudo[2361165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sprintst --user-current --json'
Sep  7 05:03:49 power sudo[2361165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:49 power sudo[2361165]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:50 power sudo[2361175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst LangPHP php_get_vhost_versions --output=json'
Sep  7 05:03:50 power sudo[2361175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:50 power sudo[2361175]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:50 power sudo[2361180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:03:50 power sudo[2361180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:50 power sudo[2361180]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:50 power sudo[2361197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DomainInfo single_domain_data domain=kritiki.mk return_https_redirect_status=1 --output=json'
Sep  7 05:03:50 power sudo[2361197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:50 power sudo[2361197]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:50 power sudo[2361203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst Mime list_redirects --output=json'
Sep  7 05:03:50 power sudo[2361203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:50 power sudo[2361203]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:53 power sudo[2361285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DirectoryPrivacy is_directory_protected dir=/home/sprintst/public_html --output=json'
Sep  7 05:03:53 power sudo[2361285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:53 power sudo[2361285]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:57 power sudo[2361487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep  7 05:03:57 power sudo[2361487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:57 power sudo[2361487]: pam_unix(sudo:session): session closed for user root
Sep  7 05:03:57 power sudo[2361495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kujnamon --output=json'
Sep  7 05:03:57 power sudo[2361495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:03:57 power sudo[2361495]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:02 power sudo[2361622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon /bin/sh -c 'cd /home/kujnamon/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:04:02 power sudo[2361622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:02 power sudo[2361622]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:02 power sudo[2361629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kujnamon --user-current --json'
Sep  7 05:04:02 power sudo[2361629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:02 power sudo[2361629]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:02 power sudo[2361657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon LangPHP php_get_vhost_versions --output=json'
Sep  7 05:04:02 power sudo[2361657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:02 power sudo[2361657]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:02 power sudo[2361662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:04:02 power sudo[2361662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:02 power sudo[2361662]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:02 power sudo[2361676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DomainInfo single_domain_data domain=kujnamoni.mk return_https_redirect_status=1 --output=json'
Sep  7 05:04:02 power sudo[2361676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:03 power sudo[2361676]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:03 power sudo[2361682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon Mime list_redirects --output=json'
Sep  7 05:04:03 power sudo[2361682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:03 power sudo[2361682]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:05 power sudo[2361788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DirectoryPrivacy is_directory_protected dir=/home/kujnamon/public_html --output=json'
Sep  7 05:04:05 power sudo[2361788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:05 power sudo[2361788]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:13 power sudo[2362078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/love.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:04:13 power sudo[2362078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:13 power sudo[2362078]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:13 power sudo[2362089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  7 05:04:13 power sudo[2362089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:13 power sudo[2362089]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:13 power sudo[2362138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:04:13 power sudo[2362138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:13 power sudo[2362138]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:14 power sudo[2362152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=love.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 05:04:14 power sudo[2362152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:14 power sudo[2362152]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:17 power sudo[2362232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/love.cetplatform.mk --output=json'
Sep  7 05:04:17 power sudo[2362232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:17 power sudo[2362232]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:20 power sudo[2362447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep  7 05:04:20 power sudo[2362447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:21 power sudo[2362447]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:21 power sudo[2362453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makdrone --output=json'
Sep  7 05:04:21 power sudo[2362453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:21 power sudo[2362453]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:25 power sudo[2362537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:04:25 power sudo[2362537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:25 power sudo[2362537]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:25 power sudo[2362543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makdrone --user-current --json'
Sep  7 05:04:25 power sudo[2362543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:25 power sudo[2362543]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:25 power sudo[2362553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone LangPHP php_get_vhost_versions --output=json'
Sep  7 05:04:25 power sudo[2362553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:25 power sudo[2362553]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:25 power sudo[2362559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:04:25 power sudo[2362559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:25 power sudo[2362559]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:26 power sudo[2362573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DomainInfo single_domain_data domain=makdrone.mk return_https_redirect_status=1 --output=json'
Sep  7 05:04:26 power sudo[2362573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:26 power sudo[2362573]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:26 power sudo[2362579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone Mime list_redirects --output=json'
Sep  7 05:04:26 power sudo[2362579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:26 power sudo[2362579]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:29 power sudo[2362660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DirectoryPrivacy is_directory_protected dir=/home/makdrone/public_html --output=json'
Sep  7 05:04:29 power sudo[2362660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:29 power sudo[2362660]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:30 power sudo[2362728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:04:30 power sudo[2362728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:30 power sudo[2362728]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:30 power sudo[2362733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:04:30 power sudo[2362733]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:04:30 power sudo[2362733]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:04:30 power sudo[2362733]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:04:30 power sudo[2362733]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:04:30 power sudo[2362733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:30 power sudo[2362733]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:30 power sudo[2362738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:04:30 power sudo[2362738]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:04:30 power sudo[2362738]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:04:30 power sudo[2362738]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:04:30 power sudo[2362738]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:04:30 power sudo[2362738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:30 power sudo[2362738]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:30 power sudo[2362744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:04:30 power sudo[2362744]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:04:30 power sudo[2362744]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:04:30 power sudo[2362744]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:04:30 power sudo[2362744]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:04:30 power sudo[2362744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:30 power sudo[2362744]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:32 power sudo[2362864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:04:32 power sudo[2362864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:32 power sudo[2362864]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:32 power sudo[2362869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:04:32 power sudo[2362869]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:04:32 power sudo[2362869]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:04:32 power sudo[2362869]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:04:32 power sudo[2362869]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:04:32 power sudo[2362869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:32 power sudo[2362869]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:32 power sudo[2362874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:04:32 power sudo[2362874]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:04:32 power sudo[2362874]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:04:32 power sudo[2362874]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:04:32 power sudo[2362874]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:04:32 power sudo[2362874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:32 power sudo[2362874]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:32 power sudo[2362879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:04:32 power sudo[2362879]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:04:32 power sudo[2362879]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:04:32 power sudo[2362879]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:04:32 power sudo[2362879]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:04:32 power sudo[2362879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:32 power sudo[2362879]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:33 power sudo[2362919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep  7 05:04:33 power sudo[2362919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:33 power sudo[2362919]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:33 power sudo[2362932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makoasmk --output=json'
Sep  7 05:04:33 power sudo[2362932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:33 power sudo[2362932]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:38 power sudo[2363007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk /bin/sh -c 'cd /home/makoasmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:04:38 power sudo[2363007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:38 power sudo[2363007]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:38 power sudo[2363014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makoasmk --user-current --json'
Sep  7 05:04:38 power sudo[2363014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:38 power sudo[2363014]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:38 power sudo[2363021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk LangPHP php_get_vhost_versions --output=json'
Sep  7 05:04:38 power sudo[2363021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:38 power sudo[2363021]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:38 power sudo[2363027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:04:38 power sudo[2363027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:38 power sudo[2363027]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:38 power sudo[2363043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DomainInfo single_domain_data domain=makoas.mk return_https_redirect_status=1 --output=json'
Sep  7 05:04:38 power sudo[2363043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:38 power sudo[2363043]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:38 power sudo[2363049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk Mime list_redirects --output=json'
Sep  7 05:04:38 power sudo[2363049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:38 power sudo[2363049]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:43 power sudo[2363170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DirectoryPrivacy is_directory_protected dir=/home/makoasmk/public_html --output=json'
Sep  7 05:04:43 power sudo[2363170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:43 power sudo[2363170]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:51 power sudo[2363532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/mango.ambitioussolutions.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:04:51 power sudo[2363532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:51 power sudo[2363532]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:51 power sudo[2363538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep  7 05:04:51 power sudo[2363538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:51 power sudo[2363538]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:51 power sudo[2363547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:04:51 power sudo[2363547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:51 power sudo[2363547]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:52 power sudo[2363571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=mango.ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep  7 05:04:52 power sudo[2363571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:52 power sudo[2363571]: pam_unix(sudo:session): session closed for user root
Sep  7 05:04:56 power sudo[2363683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/mango.ambitioussolutions.mk --output=json'
Sep  7 05:04:56 power sudo[2363683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:04:56 power sudo[2363683]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:01 power systemd[2364008]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:05:06 power sudo[2364164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/mkvesti.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:05:06 power sudo[2364164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:06 power sudo[2364164]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:06 power sudo[2364175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  7 05:05:06 power sudo[2364175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:06 power sudo[2364175]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:06 power sudo[2364181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:05:06 power sudo[2364181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:06 power sudo[2364181]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:06 power sudo[2364201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=mkvesti.mk return_https_redirect_status=1 --output=json'
Sep  7 05:05:06 power sudo[2364201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:06 power sudo[2364201]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:10 power sudo[2364310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/mkvesti.mk --output=json'
Sep  7 05:05:10 power sudo[2364310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:10 power sudo[2364310]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:16 power sudo[2364652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep  7 05:05:16 power sudo[2364652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:16 power sudo[2364652]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:16 power sudo[2364658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=modernar --output=json'
Sep  7 05:05:16 power sudo[2364658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:16 power sudo[2364658]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:20 power sudo[2364766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:05:20 power sudo[2364766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:20 power sudo[2364766]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:20 power sudo[2364773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user modernar --user-current --json'
Sep  7 05:05:20 power sudo[2364773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:20 power sudo[2364773]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:20 power sudo[2364781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar LangPHP php_get_vhost_versions --output=json'
Sep  7 05:05:20 power sudo[2364781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:20 power sudo[2364781]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:20 power sudo[2364786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:05:20 power sudo[2364786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:20 power sudo[2364786]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:21 power sudo[2364809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DomainInfo single_domain_data domain=modernart.mk return_https_redirect_status=1 --output=json'
Sep  7 05:05:21 power sudo[2364809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:21 power sudo[2364809]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:21 power sudo[2364815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar Mime list_redirects --output=json'
Sep  7 05:05:21 power sudo[2364815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:21 power sudo[2364815]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:24 power sudo[2364927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DirectoryPrivacy is_directory_protected dir=/home/modernar/public_html --output=json'
Sep  7 05:05:24 power sudo[2364927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:24 power sudo[2364927]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:25 power sudo[2364996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:05:25 power sudo[2364996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:25 power sudo[2364996]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:25 power sudo[2365001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:05:25 power sudo[2365001]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:05:25 power sudo[2365001]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:05:25 power sudo[2365001]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:05:25 power sudo[2365001]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:05:25 power sudo[2365001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:25 power sudo[2365001]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:25 power sudo[2365008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:05:25 power sudo[2365008]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:05:25 power sudo[2365008]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:05:25 power sudo[2365008]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:05:25 power sudo[2365008]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:05:25 power sudo[2365008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:25 power sudo[2365008]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:25 power sudo[2365014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:05:25 power sudo[2365014]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:05:25 power sudo[2365014]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:05:25 power sudo[2365014]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:05:25 power sudo[2365014]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:05:25 power sudo[2365014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:25 power sudo[2365014]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:27 power sudo[2365125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:05:27 power sudo[2365125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:27 power sudo[2365125]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:27 power sudo[2365130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:05:27 power sudo[2365130]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:05:27 power sudo[2365130]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:05:27 power sudo[2365130]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:05:27 power sudo[2365130]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:05:27 power sudo[2365130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:27 power sudo[2365130]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:27 power sudo[2365135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:05:27 power sudo[2365135]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:05:27 power sudo[2365135]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:05:27 power sudo[2365135]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:05:27 power sudo[2365135]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:05:27 power sudo[2365135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:27 power sudo[2365135]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:27 power sudo[2365143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:05:27 power sudo[2365143]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:05:27 power sudo[2365143]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:05:27 power sudo[2365143]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:05:27 power sudo[2365143]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:05:27 power sudo[2365143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:27 power sudo[2365143]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:31 power sudo[2365241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:05:31 power sudo[2365241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:32 power sudo[2365241]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:32 power sudo[2365247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep  7 05:05:32 power sudo[2365247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:32 power sudo[2365247]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:32 power sudo[2365263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:05:32 power sudo[2365263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:32 power sudo[2365263]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:32 power sudo[2365277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=momcurls.com return_https_redirect_status=1 --output=json'
Sep  7 05:05:32 power sudo[2365277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:32 power sudo[2365277]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:34 power sudo[2365351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/public_html --output=json'
Sep  7 05:05:34 power sudo[2365351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:34 power sudo[2365351]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:39 power sudo[2365566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep  7 05:05:39 power sudo[2365566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:39 power sudo[2365566]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:39 power sudo[2365572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mpbmk --output=json'
Sep  7 05:05:39 power sudo[2365572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:39 power sudo[2365572]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:41 power sudo[2365630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk /bin/sh -c 'cd /home/mpbmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:05:41 power sudo[2365630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:41 power sudo[2365630]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:41 power sudo[2365637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mpbmk --user-current --json'
Sep  7 05:05:41 power sudo[2365637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:41 power sudo[2365637]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:41 power sudo[2365645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk LangPHP php_get_vhost_versions --output=json'
Sep  7 05:05:41 power sudo[2365645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:41 power sudo[2365645]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:41 power sudo[2365650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:05:41 power sudo[2365650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:41 power sudo[2365650]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:41 power sudo[2365667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DomainInfo single_domain_data domain=mpb.mk return_https_redirect_status=1 --output=json'
Sep  7 05:05:41 power sudo[2365667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:42 power sudo[2365667]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:42 power sudo[2365678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk Mime list_redirects --output=json'
Sep  7 05:05:42 power sudo[2365678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:42 power sudo[2365678]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:43 power sudo[2365760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DirectoryPrivacy is_directory_protected dir=/home/mpbmk/public_html --output=json'
Sep  7 05:05:43 power sudo[2365760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:43 power sudo[2365760]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:46 power sudo[2365957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep  7 05:05:46 power sudo[2365957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:47 power sudo[2365957]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:47 power sudo[2365963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mspmk --output=json'
Sep  7 05:05:47 power sudo[2365963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:47 power sudo[2365963]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:52 power sudo[2366128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk /bin/sh -c 'cd /home/mspmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:05:52 power sudo[2366128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:52 power sudo[2366128]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:52 power sudo[2366134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mspmk --user-current --json'
Sep  7 05:05:52 power sudo[2366134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:53 power sudo[2366134]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:53 power sudo[2366145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk LangPHP php_get_vhost_versions --output=json'
Sep  7 05:05:53 power sudo[2366145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:53 power sudo[2366145]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:53 power sudo[2366149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:05:53 power sudo[2366149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:53 power sudo[2366149]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:53 power sudo[2366170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DomainInfo single_domain_data domain=msp.mk return_https_redirect_status=1 --output=json'
Sep  7 05:05:53 power sudo[2366170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:53 power sudo[2366170]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:53 power sudo[2366176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk Mime list_redirects --output=json'
Sep  7 05:05:54 power sudo[2366176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:54 power sudo[2366176]: pam_unix(sudo:session): session closed for user root
Sep  7 05:05:57 power sudo[2366278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DirectoryPrivacy is_directory_protected dir=/home/mspmk/public_html --output=json'
Sep  7 05:05:57 power sudo[2366278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:05:57 power sudo[2366278]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:01 power sudo[2366485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep  7 05:06:01 power sudo[2366485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:01 power sudo[2366485]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:01 power sudo[2366494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mstmmk --output=json'
Sep  7 05:06:01 power sudo[2366494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:01 power sudo[2366494]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:01 power systemd[2366526]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 05:06:05 power sudo[2366607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk /bin/sh -c 'cd /home/mstmmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:06:05 power sudo[2366607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:05 power sudo[2366607]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:05 power sudo[2366614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mstmmk --user-current --json'
Sep  7 05:06:05 power sudo[2366614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:05 power sudo[2366614]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:05 power sudo[2366624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk LangPHP php_get_vhost_versions --output=json'
Sep  7 05:06:05 power sudo[2366624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:05 power sudo[2366624]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:05 power sudo[2366629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:06:05 power sudo[2366629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:05 power sudo[2366629]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:06 power sudo[2366654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DomainInfo single_domain_data domain=mstm.mk return_https_redirect_status=1 --output=json'
Sep  7 05:06:06 power sudo[2366654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:06 power sudo[2366654]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:06 power sudo[2366660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk Mime list_redirects --output=json'
Sep  7 05:06:06 power sudo[2366660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:06 power sudo[2366660]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:09 power sudo[2366751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DirectoryPrivacy is_directory_protected dir=/home/mstmmk/public_html --output=json'
Sep  7 05:06:09 power sudo[2366751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:09 power sudo[2366751]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:12 power sudo[2366944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep  7 05:06:12 power sudo[2366944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:12 power sudo[2366944]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:12 power sudo[2366950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=naksorgm --output=json'
Sep  7 05:06:12 power sudo[2366950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:12 power sudo[2366950]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:19 power sudo[2367132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm /bin/sh -c 'cd /home/naksorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:06:19 power sudo[2367132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:19 power sudo[2367132]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:19 power sudo[2367138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user naksorgm --user-current --json'
Sep  7 05:06:19 power sudo[2367138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:20 power sudo[2367138]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:20 power sudo[2367144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm LangPHP php_get_vhost_versions --output=json'
Sep  7 05:06:20 power sudo[2367144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:20 power sudo[2367144]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:20 power sudo[2367153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:06:20 power sudo[2367153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:20 power sudo[2367153]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:20 power sudo[2367172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DomainInfo single_domain_data domain=naks.org.mk return_https_redirect_status=1 --output=json'
Sep  7 05:06:20 power sudo[2367172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:20 power sudo[2367172]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:20 power sudo[2367178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm Mime list_redirects --output=json'
Sep  7 05:06:20 power sudo[2367178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:20 power sudo[2367178]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:24 power sudo[2367285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DirectoryPrivacy is_directory_protected dir=/home/naksorgm/public_html --output=json'
Sep  7 05:06:24 power sudo[2367285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:24 power sudo[2367285]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:28 power sudo[2367482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep  7 05:06:28 power sudo[2367482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:28 power sudo[2367482]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:28 power sudo[2367487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nasaidni --output=json'
Sep  7 05:06:28 power sudo[2367487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:28 power sudo[2367487]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:32 power sudo[2367583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html/test.nasaidnina.com.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:06:32 power sudo[2367583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:32 power sudo[2367583]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:32 power sudo[2367589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep  7 05:06:32 power sudo[2367589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:32 power sudo[2367589]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:32 power sudo[2367600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni LangPHP php_get_vhost_versions --output=json'
Sep  7 05:06:32 power sudo[2367600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:32 power sudo[2367600]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:32 power sudo[2367608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:06:32 power sudo[2367608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:32 power sudo[2367608]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:33 power sudo[2367629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=test.nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep  7 05:06:33 power sudo[2367629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:33 power sudo[2367629]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:33 power sudo[2367635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni Mime list_redirects --output=json'
Sep  7 05:06:33 power sudo[2367635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:33 power sudo[2367635]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:36 power sudo[2367731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html/test.nasaidnina.com.mk/wp --output=json'
Sep  7 05:06:36 power sudo[2367731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:36 power sudo[2367731]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:42 power sudo[2368029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:06:42 power sudo[2368029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:42 power sudo[2368029]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:42 power sudo[2368035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep  7 05:06:42 power sudo[2368035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:42 power sudo[2368035]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:42 power sudo[2368042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:06:42 power sudo[2368042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:42 power sudo[2368042]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:42 power sudo[2368057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep  7 05:06:42 power sudo[2368057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:43 power sudo[2368057]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:46 power sudo[2368235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html --output=json'
Sep  7 05:06:46 power sudo[2368235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:46 power sudo[2368235]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:48 power sudo[2368505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep  7 05:06:48 power sudo[2368505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:49 power sudo[2368505]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:49 power sudo[2368517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ismassag --output=json'
Sep  7 05:06:49 power sudo[2368517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:49 power sudo[2368517]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:56 power sudo[2368686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag /bin/sh -c 'cd /home/ismassag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:06:56 power sudo[2368686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:56 power sudo[2368686]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:56 power sudo[2368694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ismassag --user-current --json'
Sep  7 05:06:56 power sudo[2368694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:57 power sudo[2368694]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:57 power sudo[2368704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag LangPHP php_get_vhost_versions --output=json'
Sep  7 05:06:57 power sudo[2368704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:57 power sudo[2368704]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:57 power sudo[2368709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:06:57 power sudo[2368709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:57 power sudo[2368709]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:57 power sudo[2368722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DomainInfo single_domain_data domain=needmassagetherapy.co.uk return_https_redirect_status=1 --output=json'
Sep  7 05:06:57 power sudo[2368722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:57 power sudo[2368722]: pam_unix(sudo:session): session closed for user root
Sep  7 05:06:57 power sudo[2368729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag Mime list_redirects --output=json'
Sep  7 05:06:57 power sudo[2368729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:06:57 power sudo[2368729]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:01 power systemd[2368834]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 05:07:01 power sudo[2368862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DirectoryPrivacy is_directory_protected dir=/home/ismassag/public_html --output=json'
Sep  7 05:07:01 power sudo[2368862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:02 power sudo[2368862]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:09 power sudo[2369141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:07:09 power sudo[2369141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:09 power sudo[2369141]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:09 power sudo[2369147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep  7 05:07:09 power sudo[2369147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:09 power sudo[2369147]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:09 power sudo[2369156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:07:09 power sudo[2369156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:09 power sudo[2369156]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:09 power sudo[2369173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=new.chemhem.com return_https_redirect_status=1 --output=json'
Sep  7 05:07:09 power sudo[2369173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:09 power sudo[2369173]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:12 power sudo[2369265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/new.chemhem.com --output=json'
Sep  7 05:07:12 power sudo[2369265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:12 power sudo[2369265]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:13 power sudo[2369333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:13 power sudo[2369333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:13 power sudo[2369333]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:13 power sudo[2369338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  7 05:07:13 power sudo[2369338]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  7 05:07:13 power sudo[2369338]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  7 05:07:13 power sudo[2369338]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  7 05:07:13 power sudo[2369338]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:13 power sudo[2369338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:13 power sudo[2369338]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:13 power sudo[2369343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  7 05:07:13 power sudo[2369343]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  7 05:07:13 power sudo[2369343]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  7 05:07:13 power sudo[2369343]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  7 05:07:13 power sudo[2369343]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:13 power sudo[2369343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:13 power sudo[2369343]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:13 power sudo[2369348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep  7 05:07:13 power sudo[2369348]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep  7 05:07:13 power sudo[2369348]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep  7 05:07:13 power sudo[2369348]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep  7 05:07:13 power sudo[2369348]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:13 power sudo[2369348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:13 power sudo[2369348]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:15 power sudo[2369451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:15 power sudo[2369451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:15 power sudo[2369451]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:15 power sudo[2369457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  7 05:07:15 power sudo[2369457]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  7 05:07:15 power sudo[2369457]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  7 05:07:15 power sudo[2369457]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  7 05:07:15 power sudo[2369457]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:15 power sudo[2369457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:15 power sudo[2369457]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:15 power sudo[2369462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  7 05:07:15 power sudo[2369462]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  7 05:07:15 power sudo[2369462]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  7 05:07:15 power sudo[2369462]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  7 05:07:15 power sudo[2369462]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:15 power sudo[2369462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:15 power sudo[2369462]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:15 power sudo[2369473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep  7 05:07:15 power sudo[2369473]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep  7 05:07:15 power sudo[2369473]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep  7 05:07:15 power sudo[2369473]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep  7 05:07:15 power sudo[2369473]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:15 power sudo[2369473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:15 power sudo[2369473]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:16 power sudo[2369561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep  7 05:07:16 power sudo[2369561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:16 power sudo[2369561]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:16 power sudo[2369569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikolov1 --output=json'
Sep  7 05:07:16 power sudo[2369569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:16 power sudo[2369569]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:20 power sudo[2369677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:07:21 power sudo[2369677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:21 power sudo[2369677]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:21 power sudo[2369683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikolov1 --user-current --json'
Sep  7 05:07:21 power sudo[2369683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:21 power sudo[2369683]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:21 power sudo[2369691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 LangPHP php_get_vhost_versions --output=json'
Sep  7 05:07:21 power sudo[2369691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:21 power sudo[2369691]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:21 power sudo[2369700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:07:21 power sudo[2369700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:21 power sudo[2369700]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:21 power sudo[2369715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DomainInfo single_domain_data domain=nikolovproduction.com return_https_redirect_status=1 --output=json'
Sep  7 05:07:21 power sudo[2369715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:21 power sudo[2369715]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:21 power sudo[2369722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 Mime list_redirects --output=json'
Sep  7 05:07:21 power sudo[2369722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:21 power sudo[2369722]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:24 power sudo[2369817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DirectoryPrivacy is_directory_protected dir=/home/nikolov1/public_html --output=json'
Sep  7 05:07:24 power sudo[2369817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:24 power sudo[2369817]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:25 power sudo[2369879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:25 power sudo[2369879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:25 power sudo[2369879]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:25 power sudo[2369884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:07:25 power sudo[2369884]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:07:25 power sudo[2369884]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:07:25 power sudo[2369884]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:07:25 power sudo[2369884]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:25 power sudo[2369884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:25 power sudo[2369884]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:25 power sudo[2369890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:07:25 power sudo[2369890]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:07:25 power sudo[2369890]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:07:25 power sudo[2369890]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:07:25 power sudo[2369890]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:25 power sudo[2369890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:25 power sudo[2369890]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:25 power sudo[2369895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:07:25 power sudo[2369895]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:07:25 power sudo[2369895]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:07:25 power sudo[2369895]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:07:25 power sudo[2369895]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:25 power sudo[2369895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:25 power sudo[2369895]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:27 power sudo[2370003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:27 power sudo[2370003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:27 power sudo[2370003]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:27 power sudo[2370008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:07:27 power sudo[2370008]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:07:27 power sudo[2370008]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:07:27 power sudo[2370008]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:07:27 power sudo[2370008]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:27 power sudo[2370008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:27 power sudo[2370008]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:27 power sudo[2370013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:07:27 power sudo[2370013]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:07:27 power sudo[2370013]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:07:27 power sudo[2370013]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:07:27 power sudo[2370013]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:27 power sudo[2370013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:27 power sudo[2370013]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:27 power sudo[2370018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:07:27 power sudo[2370018]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:07:27 power sudo[2370018]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:07:27 power sudo[2370018]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:07:27 power sudo[2370018]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:07:27 power sudo[2370018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:27 power sudo[2370018]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:28 power sudo[2370058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep  7 05:07:28 power sudo[2370058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:28 power sudo[2370058]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:28 power sudo[2370068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nolimits --output=json'
Sep  7 05:07:28 power sudo[2370068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:28 power sudo[2370068]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:33 power sudo[2370173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits /bin/sh -c 'cd /home/nolimits/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:07:33 power sudo[2370173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:33 power sudo[2370173]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:33 power sudo[2370182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nolimits --user-current --json'
Sep  7 05:07:33 power sudo[2370182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:33 power sudo[2370182]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:33 power sudo[2370187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits LangPHP php_get_vhost_versions --output=json'
Sep  7 05:07:33 power sudo[2370187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:33 power sudo[2370187]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:33 power sudo[2370194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:07:33 power sudo[2370194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:33 power sudo[2370194]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:33 power sudo[2370211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DomainInfo single_domain_data domain=nolimits.mk return_https_redirect_status=1 --output=json'
Sep  7 05:07:33 power sudo[2370211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:34 power sudo[2370211]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:34 power sudo[2370217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits Mime list_redirects --output=json'
Sep  7 05:07:34 power sudo[2370217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:34 power sudo[2370217]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:36 power sudo[2370298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DirectoryPrivacy is_directory_protected dir=/home/nolimits/public_html/tru-find --output=json'
Sep  7 05:07:36 power sudo[2370298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:36 power sudo[2370298]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:39 power sudo[2370509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep  7 05:07:39 power sudo[2370509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:39 power sudo[2370509]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:39 power sudo[2370517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=onlinesh --output=json'
Sep  7 05:07:39 power sudo[2370517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:39 power sudo[2370517]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:42 power sudo[2370589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh /bin/sh -c 'cd /home/onlinesh/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:07:42 power sudo[2370589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:43 power sudo[2370589]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:43 power sudo[2370595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user onlinesh --user-current --json'
Sep  7 05:07:43 power sudo[2370595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:43 power sudo[2370595]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:43 power sudo[2370603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh LangPHP php_get_vhost_versions --output=json'
Sep  7 05:07:43 power sudo[2370603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:43 power sudo[2370603]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:43 power sudo[2370610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:07:43 power sudo[2370610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:43 power sudo[2370610]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:43 power sudo[2370624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DomainInfo single_domain_data domain=onlineshop.com.mk return_https_redirect_status=1 --output=json'
Sep  7 05:07:43 power sudo[2370624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:43 power sudo[2370624]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:43 power sudo[2370630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh Mime list_redirects --output=json'
Sep  7 05:07:43 power sudo[2370630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:43 power sudo[2370630]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:45 power sudo[2370716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DirectoryPrivacy is_directory_protected dir=/home/onlinesh/public_html --output=json'
Sep  7 05:07:45 power sudo[2370716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:46 power sudo[2370716]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:49 power sudo[2370939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep  7 05:07:49 power sudo[2370939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:49 power sudo[2370939]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:49 power sudo[2370944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=palenzok --output=json'
Sep  7 05:07:49 power sudo[2370944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:50 power sudo[2370944]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:53 power sudo[2371006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok /bin/sh -c 'cd /home/palenzok/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:07:53 power sudo[2371006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:53 power sudo[2371006]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:53 power sudo[2371012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user palenzok --user-current --json'
Sep  7 05:07:53 power sudo[2371012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:53 power sudo[2371012]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:53 power sudo[2371017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok LangPHP php_get_vhost_versions --output=json'
Sep  7 05:07:53 power sudo[2371017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:53 power sudo[2371017]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:53 power sudo[2371022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:07:53 power sudo[2371022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:53 power sudo[2371022]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:54 power sudo[2371040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DomainInfo single_domain_data domain=palenzokompani.mk return_https_redirect_status=1 --output=json'
Sep  7 05:07:54 power sudo[2371040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:54 power sudo[2371040]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:54 power sudo[2371047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok Mime list_redirects --output=json'
Sep  7 05:07:54 power sudo[2371047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:54 power sudo[2371047]: pam_unix(sudo:session): session closed for user root
Sep  7 05:07:57 power sudo[2371136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DirectoryPrivacy is_directory_protected dir=/home/palenzok/public_html --output=json'
Sep  7 05:07:57 power sudo[2371136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:07:57 power sudo[2371136]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:01 power sudo[2371328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep  7 05:08:01 power sudo[2371328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:01 power sudo[2371328]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:01 power sudo[2371336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pelagoni --output=json'
Sep  7 05:08:01 power sudo[2371336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:01 power sudo[2371336]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:05 power sudo[2371438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni /bin/sh -c 'cd /home/pelagoni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:08:05 power sudo[2371438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:05 power sudo[2371438]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:05 power sudo[2371444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pelagoni --user-current --json'
Sep  7 05:08:05 power sudo[2371444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:06 power sudo[2371444]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:06 power sudo[2371456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni LangPHP php_get_vhost_versions --output=json'
Sep  7 05:08:06 power sudo[2371456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:06 power sudo[2371456]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:06 power sudo[2371464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:08:06 power sudo[2371464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:06 power sudo[2371464]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:07 power sudo[2371485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DomainInfo single_domain_data domain=pelagonijaregion.mk return_https_redirect_status=1 --output=json'
Sep  7 05:08:07 power sudo[2371485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:07 power sudo[2371485]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:07 power sudo[2371491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni Mime list_redirects --output=json'
Sep  7 05:08:07 power sudo[2371491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:07 power sudo[2371491]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:10 power sudo[2371573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DirectoryPrivacy is_directory_protected dir=/home/pelagoni/public_html/p --output=json'
Sep  7 05:08:10 power sudo[2371573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:10 power sudo[2371573]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:14 power sudo[2371790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep  7 05:08:14 power sudo[2371790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:14 power sudo[2371790]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:14 power sudo[2371797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=biplmk --output=json'
Sep  7 05:08:14 power sudo[2371797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:14 power sudo[2371797]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:17 power sudo[2371911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk /bin/sh -c 'cd /home/biplmk/petstop.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:08:17 power sudo[2371911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:17 power sudo[2371911]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:17 power sudo[2371917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user biplmk --user-current --json'
Sep  7 05:08:18 power sudo[2371917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:18 power sudo[2371917]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:18 power sudo[2371926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk LangPHP php_get_vhost_versions --output=json'
Sep  7 05:08:18 power sudo[2371926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:18 power sudo[2371926]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:18 power sudo[2371931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:08:18 power sudo[2371931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:18 power sudo[2371931]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:18 power sudo[2371945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DomainInfo single_domain_data domain=petstop.mk return_https_redirect_status=1 --output=json'
Sep  7 05:08:18 power sudo[2371945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:18 power sudo[2371945]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:18 power sudo[2371952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk Mime list_redirects --output=json'
Sep  7 05:08:18 power sudo[2371952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:18 power sudo[2371952]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:21 power sudo[2372043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DirectoryPrivacy is_directory_protected dir=/home/biplmk/petstop.mk/wp --output=json'
Sep  7 05:08:21 power sudo[2372043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:21 power sudo[2372043]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:24 power sudo[2372232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep  7 05:08:24 power sudo[2372232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:24 power sudo[2372232]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:24 power sudo[2372238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=premiumi --output=json'
Sep  7 05:08:24 power sudo[2372238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:24 power sudo[2372238]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:28 power sudo[2372308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:08:28 power sudo[2372308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:28 power sudo[2372308]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:28 power sudo[2372314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user premiumi --user-current --json'
Sep  7 05:08:28 power sudo[2372314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:28 power sudo[2372314]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:28 power sudo[2372328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi LangPHP php_get_vhost_versions --output=json'
Sep  7 05:08:28 power sudo[2372328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:28 power sudo[2372328]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:28 power sudo[2372334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:08:28 power sudo[2372334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:28 power sudo[2372334]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:29 power sudo[2372356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DomainInfo single_domain_data domain=premiuminsurance.mk return_https_redirect_status=1 --output=json'
Sep  7 05:08:29 power sudo[2372356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:29 power sudo[2372356]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:29 power sudo[2372363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi Mime list_redirects --output=json'
Sep  7 05:08:29 power sudo[2372363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:29 power sudo[2372363]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:31 power sudo[2372450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DirectoryPrivacy is_directory_protected dir=/home/premiumi/public_html --output=json'
Sep  7 05:08:32 power sudo[2372450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:32 power sudo[2372450]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:32 power sudo[2372499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:08:32 power sudo[2372499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:32 power sudo[2372499]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:32 power sudo[2372504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:08:32 power sudo[2372504]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:08:32 power sudo[2372504]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:08:32 power sudo[2372504]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:08:32 power sudo[2372504]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:08:32 power sudo[2372504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:32 power sudo[2372504]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:32 power sudo[2372510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:08:32 power sudo[2372510]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:08:32 power sudo[2372510]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:08:32 power sudo[2372510]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:08:32 power sudo[2372510]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:08:32 power sudo[2372510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:32 power sudo[2372510]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:32 power sudo[2372515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:08:32 power sudo[2372515]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:08:32 power sudo[2372515]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:08:32 power sudo[2372515]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:08:32 power sudo[2372515]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:08:32 power sudo[2372515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:32 power sudo[2372515]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:35 power sudo[2372651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:08:35 power sudo[2372651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:35 power sudo[2372651]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:35 power sudo[2372656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:08:35 power sudo[2372656]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:08:35 power sudo[2372656]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:08:35 power sudo[2372656]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:08:35 power sudo[2372656]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:08:35 power sudo[2372656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:35 power sudo[2372656]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:35 power sudo[2372661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:08:35 power sudo[2372661]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:08:35 power sudo[2372661]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:08:35 power sudo[2372661]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:08:35 power sudo[2372661]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:08:35 power sudo[2372661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:35 power sudo[2372661]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:35 power sudo[2372669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:08:35 power sudo[2372669]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:08:35 power sudo[2372669]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:08:35 power sudo[2372669]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:08:35 power sudo[2372669]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:08:35 power sudo[2372669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:35 power sudo[2372669]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:40 power sudo[2372812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:08:40 power sudo[2372812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:40 power sudo[2372812]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:40 power sudo[2372818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep  7 05:08:40 power sudo[2372818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:41 power sudo[2372818]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:41 power sudo[2372826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:08:41 power sudo[2372826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:41 power sudo[2372826]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:41 power sudo[2372847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep  7 05:08:41 power sudo[2372847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:41 power sudo[2372847]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:44 power sudo[2372935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/public_html --output=json'
Sep  7 05:08:44 power sudo[2372935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:44 power sudo[2372935]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:49 power sudo[2373196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep  7 05:08:49 power sudo[2373196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:49 power sudo[2373196]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:49 power sudo[2373206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=radekrat --output=json'
Sep  7 05:08:49 power sudo[2373206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:49 power sudo[2373206]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:55 power sudo[2373332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:08:55 power sudo[2373332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:55 power sudo[2373332]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:55 power sudo[2373342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user radekrat --user-current --json'
Sep  7 05:08:55 power sudo[2373342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:55 power sudo[2373342]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:55 power sudo[2373352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat LangPHP php_get_vhost_versions --output=json'
Sep  7 05:08:55 power sudo[2373352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:55 power sudo[2373352]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:55 power sudo[2373359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:08:55 power sudo[2373359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:55 power sudo[2373359]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:56 power sudo[2373374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DomainInfo single_domain_data domain=radekratovce.edu.mk return_https_redirect_status=1 --output=json'
Sep  7 05:08:56 power sudo[2373374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:56 power sudo[2373374]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:56 power sudo[2373381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat Mime list_redirects --output=json'
Sep  7 05:08:56 power sudo[2373381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:56 power sudo[2373381]: pam_unix(sudo:session): session closed for user root
Sep  7 05:08:59 power sudo[2373488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DirectoryPrivacy is_directory_protected dir=/home/radekrat/public_html/wp --output=json'
Sep  7 05:08:59 power sudo[2373488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:08:59 power sudo[2373488]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:00 power sudo[2373529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:09:00 power sudo[2373529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:00 power sudo[2373529]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:00 power sudo[2373534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:09:00 power sudo[2373534]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:09:00 power sudo[2373534]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:09:00 power sudo[2373534]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:09:00 power sudo[2373534]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:09:00 power sudo[2373534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:00 power sudo[2373534]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:00 power sudo[2373539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  7 05:09:00 power sudo[2373539]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  7 05:09:00 power sudo[2373539]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  7 05:09:00 power sudo[2373539]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  7 05:09:00 power sudo[2373539]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:09:00 power sudo[2373539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:00 power sudo[2373539]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:00 power sudo[2373544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  7 05:09:00 power sudo[2373544]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  7 05:09:00 power sudo[2373544]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  7 05:09:00 power sudo[2373544]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  7 05:09:00 power sudo[2373544]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:09:00 power sudo[2373544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:00 power sudo[2373544]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:06 power sudo[2373797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep  7 05:09:06 power sudo[2373797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:06 power sudo[2373797]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:06 power sudo[2373808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rasmorgm --output=json'
Sep  7 05:09:06 power sudo[2373808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:06 power sudo[2373808]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:13 power sudo[2373984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm /bin/sh -c 'cd /home/rasmorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:09:13 power sudo[2373984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:13 power sudo[2373984]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:13 power sudo[2373990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rasmorgm --user-current --json'
Sep  7 05:09:13 power sudo[2373990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:13 power sudo[2373990]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:13 power sudo[2374005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm LangPHP php_get_vhost_versions --output=json'
Sep  7 05:09:13 power sudo[2374005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:13 power sudo[2374005]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:13 power sudo[2374010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:09:13 power sudo[2374010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:13 power sudo[2374010]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:14 power sudo[2374027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DomainInfo single_domain_data domain=rasm.org.mk return_https_redirect_status=1 --output=json'
Sep  7 05:09:14 power sudo[2374027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:14 power sudo[2374027]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:14 power sudo[2374036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm Mime list_redirects --output=json'
Sep  7 05:09:14 power sudo[2374036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:14 power sudo[2374036]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:17 power sudo[2374185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DirectoryPrivacy is_directory_protected dir=/home/rasmorgm/public_html --output=json'
Sep  7 05:09:17 power sudo[2374185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:17 power sudo[2374185]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:21 power sudo[2374416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep  7 05:09:21 power sudo[2374416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:21 power sudo[2374416]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:21 power sudo[2374426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=recorgmk --output=json'
Sep  7 05:09:21 power sudo[2374426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:21 power sudo[2374426]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:27 power sudo[2374541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk /bin/sh -c 'cd /home/recorgmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:09:27 power sudo[2374541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:27 power sudo[2374541]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:27 power sudo[2374548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user recorgmk --user-current --json'
Sep  7 05:09:27 power sudo[2374548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:27 power sudo[2374548]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:27 power sudo[2374555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk LangPHP php_get_vhost_versions --output=json'
Sep  7 05:09:27 power sudo[2374555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:28 power sudo[2374555]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:28 power sudo[2374560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:09:28 power sudo[2374560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:28 power sudo[2374560]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:28 power sudo[2374577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DomainInfo single_domain_data domain=rec.org.mk return_https_redirect_status=1 --output=json'
Sep  7 05:09:28 power sudo[2374577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:28 power sudo[2374577]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:28 power sudo[2374584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk Mime list_redirects --output=json'
Sep  7 05:09:28 power sudo[2374584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:28 power sudo[2374584]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:32 power sudo[2374674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DirectoryPrivacy is_directory_protected dir=/home/recorgmk/public_html --output=json'
Sep  7 05:09:32 power sudo[2374674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:32 power sudo[2374674]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:36 power sudo[2374888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep  7 05:09:36 power sudo[2374888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:36 power sudo[2374888]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:36 power sudo[2374896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stravelm --output=json'
Sep  7 05:09:36 power sudo[2374896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:36 power sudo[2374896]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:39 power sudo[2374971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm /bin/sh -c 'cd /home/stravelm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:09:39 power sudo[2374971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:39 power sudo[2374971]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:39 power sudo[2374977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stravelm --user-current --json'
Sep  7 05:09:39 power sudo[2374977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:40 power sudo[2374977]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:40 power sudo[2374983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm LangPHP php_get_vhost_versions --output=json'
Sep  7 05:09:40 power sudo[2374983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:40 power sudo[2374983]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:40 power sudo[2374988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:09:40 power sudo[2374988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:40 power sudo[2374988]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:41 power sudo[2375018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DomainInfo single_domain_data domain=s-travel.mk return_https_redirect_status=1 --output=json'
Sep  7 05:09:41 power sudo[2375018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:41 power sudo[2375018]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:41 power sudo[2375029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm Mime list_redirects --output=json'
Sep  7 05:09:41 power sudo[2375029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:41 power sudo[2375029]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:44 power sudo[2375115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DirectoryPrivacy is_directory_protected dir=/home/stravelm/public_html --output=json'
Sep  7 05:09:44 power sudo[2375115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:44 power sudo[2375115]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:47 power sudo[2375307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep  7 05:09:47 power sudo[2375307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:47 power sudo[2375307]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:47 power sudo[2375312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=simbiome --output=json'
Sep  7 05:09:47 power sudo[2375312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:47 power sudo[2375312]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:52 power sudo[2375423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome /bin/sh -c 'cd /home/simbiome/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:09:52 power sudo[2375423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:53 power sudo[2375423]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:53 power sudo[2375430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user simbiome --user-current --json'
Sep  7 05:09:53 power sudo[2375430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:53 power sudo[2375430]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:53 power sudo[2375437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome LangPHP php_get_vhost_versions --output=json'
Sep  7 05:09:53 power sudo[2375437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:53 power sudo[2375437]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:53 power sudo[2375445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:09:53 power sudo[2375445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:53 power sudo[2375445]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:54 power sudo[2375463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DomainInfo single_domain_data domain=simbiomedic.mk return_https_redirect_status=1 --output=json'
Sep  7 05:09:54 power sudo[2375463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:54 power sudo[2375463]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:54 power sudo[2375469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome Mime list_redirects --output=json'
Sep  7 05:09:54 power sudo[2375469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:54 power sudo[2375469]: pam_unix(sudo:session): session closed for user root
Sep  7 05:09:57 power sudo[2375563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DirectoryPrivacy is_directory_protected dir=/home/simbiome/public_html --output=json'
Sep  7 05:09:57 power sudo[2375563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:09:57 power sudo[2375563]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:01 power systemd[2375870]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:10:06 power sudo[2375988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/sk.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:10:06 power sudo[2375988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:06 power sudo[2375988]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:06 power sudo[2375994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  7 05:10:06 power sudo[2375994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:07 power sudo[2375994]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:07 power sudo[2376000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:10:07 power sudo[2376000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:07 power sudo[2376000]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:07 power sudo[2376018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=sk.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 05:10:07 power sudo[2376018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:07 power sudo[2376018]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:10 power sudo[2376103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/sk.cetplatform.mk --output=json'
Sep  7 05:10:10 power sudo[2376103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:10 power sudo[2376103]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:14 power sudo[2376300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep  7 05:10:14 power sudo[2376300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:14 power sudo[2376300]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:14 power sudo[2376308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=solemor1 --output=json'
Sep  7 05:10:14 power sudo[2376308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:14 power sudo[2376308]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:17 power sudo[2376383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:10:17 power sudo[2376383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:17 power sudo[2376383]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:17 power sudo[2376389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep  7 05:10:17 power sudo[2376389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:17 power sudo[2376389]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:17 power sudo[2376398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 LangPHP php_get_vhost_versions --output=json'
Sep  7 05:10:17 power sudo[2376398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:17 power sudo[2376398]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:17 power sudo[2376405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:10:17 power sudo[2376405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:17 power sudo[2376405]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:18 power sudo[2376469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=solem.org.mk return_https_redirect_status=1 --output=json'
Sep  7 05:10:18 power sudo[2376469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:18 power sudo[2376469]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:18 power sudo[2376475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 Mime list_redirects --output=json'
Sep  7 05:10:18 power sudo[2376475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:18 power sudo[2376475]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:20 power sudo[2376559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html --output=json'
Sep  7 05:10:20 power sudo[2376559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:20 power sudo[2376559]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:21 power sudo[2376620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:10:21 power sudo[2376620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:21 power sudo[2376620]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:21 power sudo[2376625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:10:21 power sudo[2376625]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:10:21 power sudo[2376625]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:10:21 power sudo[2376625]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:10:21 power sudo[2376625]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:10:21 power sudo[2376625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:21 power sudo[2376625]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:21 power sudo[2376630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:10:21 power sudo[2376630]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:10:21 power sudo[2376630]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:10:21 power sudo[2376630]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:10:21 power sudo[2376630]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:10:21 power sudo[2376630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:21 power sudo[2376630]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:21 power sudo[2376635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:10:21 power sudo[2376635]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:10:21 power sudo[2376635]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:10:21 power sudo[2376635]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:10:21 power sudo[2376635]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:10:21 power sudo[2376635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:21 power sudo[2376635]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:23 power sudo[2376777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:10:23 power sudo[2376777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:23 power sudo[2376777]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:23 power sudo[2376782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:10:23 power sudo[2376782]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:10:23 power sudo[2376782]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:10:23 power sudo[2376782]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:10:23 power sudo[2376782]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:10:23 power sudo[2376782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:23 power sudo[2376782]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:23 power sudo[2376787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:10:23 power sudo[2376787]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:10:23 power sudo[2376787]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:10:23 power sudo[2376787]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:10:23 power sudo[2376787]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:10:23 power sudo[2376787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:23 power sudo[2376787]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:23 power sudo[2376794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:10:23 power sudo[2376794]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:10:23 power sudo[2376794]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:10:23 power sudo[2376794]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:10:23 power sudo[2376794]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:10:23 power sudo[2376794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:23 power sudo[2376794]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:29 power sudo[2376931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html/vedi && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:10:29 power sudo[2376931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:29 power sudo[2376931]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:29 power sudo[2376940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep  7 05:10:29 power sudo[2376940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:30 power sudo[2376940]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:30 power sudo[2376949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:10:30 power sudo[2376949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:30 power sudo[2376949]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:30 power sudo[2376963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=vedi.mk return_https_redirect_status=1 --output=json'
Sep  7 05:10:30 power sudo[2376963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:30 power sudo[2376963]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:32 power sudo[2377039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html/vedi --output=json'
Sep  7 05:10:32 power sudo[2377039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:32 power sudo[2377039]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:36 power sudo[2377233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep  7 05:10:36 power sudo[2377233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:36 power sudo[2377233]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:36 power sudo[2377239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sssoluti --output=json'
Sep  7 05:10:36 power sudo[2377239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:36 power sudo[2377239]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:41 power sudo[2377330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti /bin/sh -c 'cd /home/sssoluti/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:10:41 power sudo[2377330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:41 power sudo[2377330]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:41 power sudo[2377341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sssoluti --user-current --json'
Sep  7 05:10:41 power sudo[2377341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:41 power sudo[2377341]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:41 power sudo[2377348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti LangPHP php_get_vhost_versions --output=json'
Sep  7 05:10:41 power sudo[2377348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:41 power sudo[2377348]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:41 power sudo[2377353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:10:41 power sudo[2377353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:41 power sudo[2377353]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:42 power sudo[2377369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DomainInfo single_domain_data domain=sssolutions.mk return_https_redirect_status=1 --output=json'
Sep  7 05:10:42 power sudo[2377369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:42 power sudo[2377369]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:42 power sudo[2377375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti Mime list_redirects --output=json'
Sep  7 05:10:42 power sudo[2377375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:42 power sudo[2377375]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:45 power sudo[2377459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DirectoryPrivacy is_directory_protected dir=/home/sssoluti/public_html --output=json'
Sep  7 05:10:45 power sudo[2377459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:45 power sudo[2377459]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:49 power sudo[2377665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep  7 05:10:49 power sudo[2377665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:49 power sudo[2377665]: pam_unix(sudo:session): session closed for user root
Sep  7 05:10:49 power sudo[2377670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=supremel --output=json'
Sep  7 05:10:49 power sudo[2377670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:10:49 power sudo[2377670]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:17 power sudo[2378004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:11:17 power sudo[2378004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:17 power sudo[2378004]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:17 power sudo[2378010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep  7 05:11:17 power sudo[2378010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:18 power sudo[2378010]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:18 power sudo[2378018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel LangPHP php_get_vhost_versions --output=json'
Sep  7 05:11:18 power sudo[2378018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:18 power sudo[2378018]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:18 power sudo[2378024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:11:18 power sudo[2378024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:18 power sudo[2378024]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:19 power sudo[2378100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=supremeleader.eu return_https_redirect_status=1 --output=json'
Sep  7 05:11:19 power sudo[2378100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:19 power sudo[2378100]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:19 power sudo[2378107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel Mime list_redirects --output=json'
Sep  7 05:11:19 power sudo[2378107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:19 power sudo[2378107]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:23 power sudo[2378227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/public_html --output=json'
Sep  7 05:11:23 power sudo[2378227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:23 power sudo[2378227]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:27 power sudo[2378432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep  7 05:11:27 power sudo[2378432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:27 power sudo[2378432]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:27 power sudo[2378438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=tehnodro --output=json'
Sep  7 05:11:27 power sudo[2378438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:27 power sudo[2378438]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:32 power sudo[2378553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:11:32 power sudo[2378553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:32 power sudo[2378553]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:32 power sudo[2378561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user tehnodro --user-current --json'
Sep  7 05:11:32 power sudo[2378561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:33 power sudo[2378561]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:33 power sudo[2378570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro LangPHP php_get_vhost_versions --output=json'
Sep  7 05:11:33 power sudo[2378570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:33 power sudo[2378570]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:33 power sudo[2378575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:11:33 power sudo[2378575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:33 power sudo[2378575]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:34 power sudo[2378600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DomainInfo single_domain_data domain=tehnodrom.mk return_https_redirect_status=1 --output=json'
Sep  7 05:11:34 power sudo[2378600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:34 power sudo[2378600]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:34 power sudo[2378607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro Mime list_redirects --output=json'
Sep  7 05:11:34 power sudo[2378607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:34 power sudo[2378607]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:37 power sudo[2378692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DirectoryPrivacy is_directory_protected dir=/home/tehnodro/public_html --output=json'
Sep  7 05:11:37 power sudo[2378692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:37 power sudo[2378692]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:38 power sudo[2378756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:11:38 power sudo[2378756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:38 power sudo[2378756]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:38 power sudo[2378762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:11:38 power sudo[2378762]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:11:38 power sudo[2378762]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:11:38 power sudo[2378762]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:11:38 power sudo[2378762]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:11:38 power sudo[2378762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:38 power sudo[2378762]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:38 power sudo[2378767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:11:38 power sudo[2378767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:11:38 power sudo[2378767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:11:38 power sudo[2378767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:11:38 power sudo[2378767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:11:38 power sudo[2378767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:38 power sudo[2378767]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:38 power sudo[2378772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:11:38 power sudo[2378772]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:11:38 power sudo[2378772]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:11:38 power sudo[2378772]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:11:38 power sudo[2378772]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:11:38 power sudo[2378772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:38 power sudo[2378772]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:40 power sudo[2378876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:11:40 power sudo[2378876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:40 power sudo[2378876]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:40 power sudo[2378881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:11:40 power sudo[2378881]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:11:40 power sudo[2378881]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:11:40 power sudo[2378881]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:11:40 power sudo[2378881]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:11:40 power sudo[2378881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:40 power sudo[2378881]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:40 power sudo[2378886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:11:40 power sudo[2378886]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:11:40 power sudo[2378886]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:11:40 power sudo[2378886]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:11:40 power sudo[2378886]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:11:40 power sudo[2378886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:40 power sudo[2378886]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:40 power sudo[2378892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:11:40 power sudo[2378892]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:11:40 power sudo[2378892]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:11:40 power sudo[2378892]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:11:40 power sudo[2378892]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:11:40 power sudo[2378892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:40 power sudo[2378892]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:47 power sudo[2379095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/theuniversalgroup.net && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:11:47 power sudo[2379095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:47 power sudo[2379095]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:47 power sudo[2379101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep  7 05:11:47 power sudo[2379101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:47 power sudo[2379101]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:47 power sudo[2379109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:11:47 power sudo[2379109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:47 power sudo[2379109]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:47 power sudo[2379134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=theuniversalgroup.net return_https_redirect_status=1 --output=json'
Sep  7 05:11:47 power sudo[2379134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:47 power sudo[2379134]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:50 power sudo[2379277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/theuniversalgroup.net --output=json'
Sep  7 05:11:50 power sudo[2379277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:50 power sudo[2379277]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:53 power sudo[2379495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep  7 05:11:53 power sudo[2379495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:54 power sudo[2379495]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:54 power sudo[2379500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=viewinn --output=json'
Sep  7 05:11:54 power sudo[2379500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:54 power sudo[2379500]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:56 power sudo[2379557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn /bin/sh -c 'cd /home/viewinn/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:11:56 power sudo[2379557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:56 power sudo[2379557]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:56 power sudo[2379563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user viewinn --user-current --json'
Sep  7 05:11:56 power sudo[2379563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:56 power sudo[2379563]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:56 power sudo[2379575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn LangPHP php_get_vhost_versions --output=json'
Sep  7 05:11:56 power sudo[2379575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:56 power sudo[2379575]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:56 power sudo[2379582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:11:56 power sudo[2379582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:56 power sudo[2379582]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:57 power sudo[2379595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DomainInfo single_domain_data domain=viewinn.mk return_https_redirect_status=1 --output=json'
Sep  7 05:11:57 power sudo[2379595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:57 power sudo[2379595]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:57 power sudo[2379601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn Mime list_redirects --output=json'
Sep  7 05:11:57 power sudo[2379601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:57 power sudo[2379601]: pam_unix(sudo:session): session closed for user root
Sep  7 05:11:59 power sudo[2379673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DirectoryPrivacy is_directory_protected dir=/home/viewinn/public_html --output=json'
Sep  7 05:11:59 power sudo[2379673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:11:59 power sudo[2379673]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:01 power systemd[2379894]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 05:12:02 power sudo[2379918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep  7 05:12:02 power sudo[2379918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:02 power sudo[2379918]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:02 power sudo[2379930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wikicamp --output=json'
Sep  7 05:12:02 power sudo[2379930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:02 power sudo[2379930]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:11 power sudo[2380069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp /bin/sh -c 'cd /home/wikicamp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:12:11 power sudo[2380069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:11 power sudo[2380069]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:11 power sudo[2380075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wikicamp --user-current --json'
Sep  7 05:12:11 power sudo[2380075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:11 power sudo[2380075]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:11 power sudo[2380083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp LangPHP php_get_vhost_versions --output=json'
Sep  7 05:12:11 power sudo[2380083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:11 power sudo[2380083]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:11 power sudo[2380089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:12:11 power sudo[2380089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:11 power sudo[2380089]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:11 power sudo[2380102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DomainInfo single_domain_data domain=wikicamp.mk return_https_redirect_status=1 --output=json'
Sep  7 05:12:11 power sudo[2380102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:11 power sudo[2380102]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:11 power sudo[2380108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp Mime list_redirects --output=json'
Sep  7 05:12:11 power sudo[2380108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:11 power sudo[2380108]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:15 power sudo[2380209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DirectoryPrivacy is_directory_protected dir=/home/wikicamp/public_html --output=json'
Sep  7 05:12:15 power sudo[2380209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:16 power sudo[2380209]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:19 power sudo[2380441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep  7 05:12:19 power sudo[2380441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:19 power sudo[2380441]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:19 power sudo[2380467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workandt --output=json'
Sep  7 05:12:19 power sudo[2380467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:19 power sudo[2380467]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:24 power sudo[2380590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt /bin/sh -c 'cd /home/workandt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:12:24 power sudo[2380590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:25 power sudo[2380590]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:25 power sudo[2380599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workandt --user-current --json'
Sep  7 05:12:25 power sudo[2380599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:25 power sudo[2380599]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:25 power sudo[2380607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt LangPHP php_get_vhost_versions --output=json'
Sep  7 05:12:25 power sudo[2380607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:25 power sudo[2380607]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:25 power sudo[2380612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:12:25 power sudo[2380612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:25 power sudo[2380612]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:25 power sudo[2380631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DomainInfo single_domain_data domain=workandtravel.mk return_https_redirect_status=1 --output=json'
Sep  7 05:12:25 power sudo[2380631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:26 power sudo[2380631]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:26 power sudo[2380637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt Mime list_redirects --output=json'
Sep  7 05:12:26 power sudo[2380637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:26 power sudo[2380637]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:29 power sudo[2380739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DirectoryPrivacy is_directory_protected dir=/home/workandt/public_html --output=json'
Sep  7 05:12:29 power sudo[2380739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:29 power sudo[2380739]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:37 power sudo[2381021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/yoe.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:12:37 power sudo[2381021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:37 power sudo[2381021]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:37 power sudo[2381027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  7 05:12:37 power sudo[2381027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:37 power sudo[2381027]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:37 power sudo[2381033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:12:37 power sudo[2381033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:37 power sudo[2381033]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:38 power sudo[2381049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=yoe.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  7 05:12:38 power sudo[2381049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:38 power sudo[2381049]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:41 power sudo[2381122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/yoe.cetplatform.mk --output=json'
Sep  7 05:12:41 power sudo[2381122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:41 power sudo[2381122]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:44 power sudo[2381345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep  7 05:12:44 power sudo[2381345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:45 power sudo[2381345]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:45 power sudo[2381353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=youthgua --output=json'
Sep  7 05:12:45 power sudo[2381353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:45 power sudo[2381353]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:49 power sudo[2381452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua /bin/sh -c 'cd /home/youthgua/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:12:49 power sudo[2381452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:49 power sudo[2381452]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:49 power sudo[2381459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user youthgua --user-current --json'
Sep  7 05:12:49 power sudo[2381459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:49 power sudo[2381459]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:49 power sudo[2381469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua LangPHP php_get_vhost_versions --output=json'
Sep  7 05:12:49 power sudo[2381469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:49 power sudo[2381469]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:49 power sudo[2381474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:12:49 power sudo[2381474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:49 power sudo[2381474]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:50 power sudo[2381494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DomainInfo single_domain_data domain=youthguarantee-wb.eu return_https_redirect_status=1 --output=json'
Sep  7 05:12:50 power sudo[2381494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:50 power sudo[2381494]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:50 power sudo[2381500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua Mime list_redirects --output=json'
Sep  7 05:12:50 power sudo[2381500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:50 power sudo[2381500]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:53 power sudo[2381580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DirectoryPrivacy is_directory_protected dir=/home/youthgua/public_html --output=json'
Sep  7 05:12:53 power sudo[2381580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:53 power sudo[2381580]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:56 power sudo[2381790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep  7 05:12:56 power sudo[2381790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:56 power sudo[2381790]: pam_unix(sudo:session): session closed for user root
Sep  7 05:12:56 power sudo[2381799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=zampmk --output=json'
Sep  7 05:12:56 power sudo[2381799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:12:56 power sudo[2381799]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:00 power sudo[2381890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk /bin/sh -c 'cd /home/zampmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:13:00 power sudo[2381890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:00 power sudo[2381890]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:00 power sudo[2381898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user zampmk --user-current --json'
Sep  7 05:13:00 power sudo[2381898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:01 power sudo[2381898]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:01 power sudo[2381911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk LangPHP php_get_vhost_versions --output=json'
Sep  7 05:13:01 power sudo[2381911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:01 power sudo[2381911]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:01 power sudo[2381917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:13:01 power sudo[2381917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:01 power sudo[2381917]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:01 power sudo[2381952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DomainInfo single_domain_data domain=zamp.mk return_https_redirect_status=1 --output=json'
Sep  7 05:13:01 power sudo[2381952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:01 power sudo[2381952]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:01 power sudo[2381957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk Mime list_redirects --output=json'
Sep  7 05:13:01 power sudo[2381957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:01 power sudo[2381957]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:04 power sudo[2382065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DirectoryPrivacy is_directory_protected dir=/home/zampmk/public_html --output=json'
Sep  7 05:13:04 power sudo[2382065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:04 power sudo[2382065]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:08 power sudo[2382266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep  7 05:13:08 power sudo[2382266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:08 power sudo[2382266]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:08 power sudo[2382274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ivanjord --output=json'
Sep  7 05:13:08 power sudo[2382274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:08 power sudo[2382274]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:18 power sudo[2382453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord /bin/sh -c 'cd /home/ivanjord/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:13:18 power sudo[2382453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:18 power sudo[2382453]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:18 power sudo[2382459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ivanjord --user-current --json'
Sep  7 05:13:18 power sudo[2382459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:18 power sudo[2382459]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:18 power sudo[2382467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord LangPHP php_get_vhost_versions --output=json'
Sep  7 05:13:18 power sudo[2382467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:18 power sudo[2382467]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:18 power sudo[2382473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:13:18 power sudo[2382473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:18 power sudo[2382473]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:19 power sudo[2382520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DomainInfo single_domain_data domain=novaidninazastip.mk return_https_redirect_status=1 --output=json'
Sep  7 05:13:19 power sudo[2382520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:19 power sudo[2382520]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:19 power sudo[2382531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord Mime list_redirects --output=json'
Sep  7 05:13:19 power sudo[2382531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:19 power sudo[2382531]: pam_unix(sudo:session): session closed for user root
Sep  7 05:13:24 power sudo[2382683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DirectoryPrivacy is_directory_protected dir=/home/ivanjord/public_html --output=json'
Sep  7 05:13:24 power sudo[2382683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:13:24 power sudo[2382683]: pam_unix(sudo:session): session closed for user root
Sep  7 05:14:50 power sudo[2383882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:14:50 power sudo[2383882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:14:50 power sudo[2383882]: pam_unix(sudo:session): session closed for user root
Sep  7 05:14:50 power sudo[2383889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep  7 05:14:50 power sudo[2383889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:14:50 power sudo[2383889]: pam_unix(sudo:session): session closed for user root
Sep  7 05:14:50 power sudo[2383897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:14:50 power sudo[2383897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:14:50 power sudo[2383897]: pam_unix(sudo:session): session closed for user root
Sep  7 05:14:50 power sudo[2383912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=izzo.mk return_https_redirect_status=1 --output=json'
Sep  7 05:14:50 power sudo[2383912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:14:50 power sudo[2383912]: pam_unix(sudo:session): session closed for user root
Sep  7 05:14:53 power sudo[2384000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/public_html/wp --output=json'
Sep  7 05:14:53 power sudo[2384000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:14:53 power sudo[2384000]: pam_unix(sudo:session): session closed for user root
Sep  7 05:14:56 power sudo[2384212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep  7 05:14:56 power sudo[2384212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:14:57 power sudo[2384212]: pam_unix(sudo:session): session closed for user root
Sep  7 05:14:57 power sudo[2384224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=janiboja --output=json'
Sep  7 05:14:57 power sudo[2384224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:14:57 power sudo[2384224]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:00 power sudo[2384293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:15:00 power sudo[2384293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:00 power sudo[2384293]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:00 power sudo[2384299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user janiboja --user-current --json'
Sep  7 05:15:00 power sudo[2384299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:00 power sudo[2384299]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:00 power sudo[2384305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja LangPHP php_get_vhost_versions --output=json'
Sep  7 05:15:00 power sudo[2384305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:00 power sudo[2384305]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:00 power sudo[2384310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:15:00 power sudo[2384310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:00 power sudo[2384310]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:01 power sudo[2384324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DomainInfo single_domain_data domain=janibojadzi.com return_https_redirect_status=1 --output=json'
Sep  7 05:15:01 power sudo[2384324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:01 power sudo[2384324]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:01 power sudo[2384330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja Mime list_redirects --output=json'
Sep  7 05:15:01 power sudo[2384330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:01 power sudo[2384330]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:01 power systemd[2384440]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:15:03 power sudo[2384524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DirectoryPrivacy is_directory_protected dir=/home/janiboja/public_html --output=json'
Sep  7 05:15:03 power sudo[2384524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:03 power sudo[2384524]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:04 power sudo[2384607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:04 power sudo[2384607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:04 power sudo[2384607]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:04 power sudo[2384613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:15:04 power sudo[2384613]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:15:04 power sudo[2384613]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:15:04 power sudo[2384613]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:15:04 power sudo[2384613]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:04 power sudo[2384613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:04 power sudo[2384613]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:04 power sudo[2384621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:15:04 power sudo[2384621]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:15:04 power sudo[2384621]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:15:04 power sudo[2384621]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:15:04 power sudo[2384621]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:04 power sudo[2384621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:04 power sudo[2384621]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:04 power sudo[2384627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:15:04 power sudo[2384627]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:15:04 power sudo[2384627]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:15:04 power sudo[2384627]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:15:04 power sudo[2384627]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:04 power sudo[2384627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:04 power sudo[2384627]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:06 power sudo[2384741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:06 power sudo[2384741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:06 power sudo[2384741]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:06 power sudo[2384746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:15:06 power sudo[2384746]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:15:06 power sudo[2384746]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:15:06 power sudo[2384746]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:15:06 power sudo[2384746]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:06 power sudo[2384746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:06 power sudo[2384746]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:06 power sudo[2384751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:15:06 power sudo[2384751]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:15:06 power sudo[2384751]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:15:06 power sudo[2384751]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:15:06 power sudo[2384751]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:06 power sudo[2384751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:06 power sudo[2384751]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:06 power sudo[2384758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:15:06 power sudo[2384758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:15:06 power sudo[2384758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:15:06 power sudo[2384758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:15:06 power sudo[2384758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:06 power sudo[2384758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:06 power sudo[2384758]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:07 power sudo[2384794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep  7 05:15:07 power sudo[2384794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:07 power sudo[2384794]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:07 power sudo[2384804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jaramk --output=json'
Sep  7 05:15:07 power sudo[2384804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:07 power sudo[2384804]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:12 power sudo[2384913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:15:12 power sudo[2384913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:12 power sudo[2384913]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:12 power sudo[2384921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jaramk --user-current --json'
Sep  7 05:15:12 power sudo[2384921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:12 power sudo[2384921]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:12 power sudo[2384929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk LangPHP php_get_vhost_versions --output=json'
Sep  7 05:15:12 power sudo[2384929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:13 power sudo[2384929]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:13 power sudo[2384935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:15:13 power sudo[2384935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:13 power sudo[2384935]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:13 power sudo[2384952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DomainInfo single_domain_data domain=jara.mk return_https_redirect_status=1 --output=json'
Sep  7 05:15:13 power sudo[2384952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:13 power sudo[2384952]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:13 power sudo[2384958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk Mime list_redirects --output=json'
Sep  7 05:15:13 power sudo[2384958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:13 power sudo[2384958]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:16 power sudo[2385070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DirectoryPrivacy is_directory_protected dir=/home/jaramk/public_html --output=json'
Sep  7 05:15:16 power sudo[2385070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:16 power sudo[2385070]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:17 power sudo[2385155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:17 power sudo[2385155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:17 power sudo[2385155]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:17 power sudo[2385160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep  7 05:15:17 power sudo[2385160]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep  7 05:15:17 power sudo[2385160]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep  7 05:15:17 power sudo[2385160]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep  7 05:15:17 power sudo[2385160]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:17 power sudo[2385160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:17 power sudo[2385160]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:17 power sudo[2385165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 05:15:17 power sudo[2385165]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 05:15:17 power sudo[2385165]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 05:15:17 power sudo[2385165]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 05:15:17 power sudo[2385165]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:17 power sudo[2385165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:17 power sudo[2385165]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:17 power sudo[2385174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 05:15:17 power sudo[2385174]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 05:15:17 power sudo[2385174]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 05:15:17 power sudo[2385174]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 05:15:17 power sudo[2385174]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:17 power sudo[2385174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:17 power sudo[2385174]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:19 power sudo[2385308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:19 power sudo[2385308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:19 power sudo[2385308]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:19 power sudo[2385313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep  7 05:15:19 power sudo[2385313]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep  7 05:15:19 power sudo[2385313]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep  7 05:15:19 power sudo[2385313]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep  7 05:15:19 power sudo[2385313]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:19 power sudo[2385313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:19 power sudo[2385313]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:19 power sudo[2385318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 05:15:19 power sudo[2385318]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 05:15:19 power sudo[2385318]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 05:15:19 power sudo[2385318]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 05:15:19 power sudo[2385318]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:19 power sudo[2385318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:19 power sudo[2385318]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:19 power sudo[2385324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  7 05:15:19 power sudo[2385324]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  7 05:15:19 power sudo[2385324]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  7 05:15:19 power sudo[2385324]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  7 05:15:19 power sudo[2385324]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:15:19 power sudo[2385324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:19 power sudo[2385324]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:20 power sudo[2385366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep  7 05:15:20 power sudo[2385366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:20 power sudo[2385366]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:20 power sudo[2385377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=innofabl --output=json'
Sep  7 05:15:20 power sudo[2385377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:20 power sudo[2385377]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:35 power sudo[2385659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/kupireciklirano.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:15:35 power sudo[2385659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:35 power sudo[2385659]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:35 power sudo[2385667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep  7 05:15:35 power sudo[2385667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:36 power sudo[2385667]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:36 power sudo[2385677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl LangPHP php_get_vhost_versions --output=json'
Sep  7 05:15:36 power sudo[2385677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:36 power sudo[2385677]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:36 power sudo[2385683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:15:36 power sudo[2385683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:36 power sudo[2385683]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:38 power sudo[2385783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=kupireciklirano.mk return_https_redirect_status=1 --output=json'
Sep  7 05:15:38 power sudo[2385783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:38 power sudo[2385783]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:38 power sudo[2385792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl Mime list_redirects --output=json'
Sep  7 05:15:38 power sudo[2385792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:38 power sudo[2385792]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:48 power sudo[2386022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/kupireciklirano.mk --output=json'
Sep  7 05:15:48 power sudo[2386022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:48 power sudo[2386022]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:52 power sudo[2386231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep  7 05:15:52 power sudo[2386231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:52 power sudo[2386231]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:52 power sudo[2386241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mapaspla --output=json'
Sep  7 05:15:52 power sudo[2386241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:52 power sudo[2386241]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:55 power sudo[2386334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:15:55 power sudo[2386334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:55 power sudo[2386334]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:55 power sudo[2386340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep  7 05:15:55 power sudo[2386340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:56 power sudo[2386340]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:56 power sudo[2386346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla LangPHP php_get_vhost_versions --output=json'
Sep  7 05:15:56 power sudo[2386346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:56 power sudo[2386346]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:56 power sudo[2386359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:15:56 power sudo[2386359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:56 power sudo[2386359]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:57 power sudo[2386386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DomainInfo single_domain_data domain=mapasplastik.com return_https_redirect_status=1 --output=json'
Sep  7 05:15:57 power sudo[2386386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:57 power sudo[2386386]: pam_unix(sudo:session): session closed for user root
Sep  7 05:15:57 power sudo[2386392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla Mime list_redirects --output=json'
Sep  7 05:15:57 power sudo[2386392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:15:57 power sudo[2386392]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:00 power sudo[2386478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html/eng --output=json'
Sep  7 05:16:00 power sudo[2386478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:00 power sudo[2386478]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:16 power sudo[2386967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:16:16 power sudo[2386967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:16 power sudo[2386967]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:16 power sudo[2386973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep  7 05:16:16 power sudo[2386973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:17 power sudo[2386973]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:17 power sudo[2386979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:16:17 power sudo[2386979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:17 power sudo[2386979]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:20 power sudo[2387108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html --output=json'
Sep  7 05:16:20 power sudo[2387108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:20 power sudo[2387108]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:26 power sudo[2387399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep  7 05:16:26 power sudo[2387399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:26 power sudo[2387399]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:26 power sudo[2387405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mediatag --output=json'
Sep  7 05:16:26 power sudo[2387405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:27 power sudo[2387405]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:31 power sudo[2387544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag /bin/sh -c 'cd /home/mediatag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:16:31 power sudo[2387544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:31 power sudo[2387544]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:31 power sudo[2387550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mediatag --user-current --json'
Sep  7 05:16:32 power sudo[2387550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:32 power sudo[2387550]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:32 power sudo[2387557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag LangPHP php_get_vhost_versions --output=json'
Sep  7 05:16:32 power sudo[2387557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:32 power sudo[2387557]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:32 power sudo[2387571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:16:32 power sudo[2387571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:32 power sudo[2387571]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:32 power sudo[2387586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DomainInfo single_domain_data domain=mediatag.mk return_https_redirect_status=1 --output=json'
Sep  7 05:16:32 power sudo[2387586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:32 power sudo[2387586]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:32 power sudo[2387596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag Mime list_redirects --output=json'
Sep  7 05:16:32 power sudo[2387596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:33 power sudo[2387596]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:37 power sudo[2387738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DirectoryPrivacy is_directory_protected dir=/home/mediatag/public_html --output=json'
Sep  7 05:16:37 power sudo[2387738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:37 power sudo[2387738]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:48 power sudo[2388052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/mulprotex.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:16:48 power sudo[2388052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:48 power sudo[2388052]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:48 power sudo[2388058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep  7 05:16:48 power sudo[2388058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:48 power sudo[2388058]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:48 power sudo[2388068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:16:48 power sudo[2388068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:48 power sudo[2388068]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:48 power sudo[2388089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=mulprotex.com return_https_redirect_status=1 --output=json'
Sep  7 05:16:48 power sudo[2388089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:48 power sudo[2388089]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:53 power sudo[2388196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/mulprotex.com --output=json'
Sep  7 05:16:53 power sudo[2388196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:53 power sudo[2388196]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:56 power sudo[2388507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep  7 05:16:56 power sudo[2388507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:57 power sudo[2388507]: pam_unix(sudo:session): session closed for user root
Sep  7 05:16:57 power sudo[2388534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nefrolog --output=json'
Sep  7 05:16:57 power sudo[2388534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:16:57 power sudo[2388534]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:00 power sudo[2388615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog /bin/sh -c 'cd /home/nefrolog/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:17:00 power sudo[2388615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:00 power sudo[2388615]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:00 power sudo[2388621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nefrolog --user-current --json'
Sep  7 05:17:00 power sudo[2388621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:00 power sudo[2388621]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:00 power sudo[2388628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog LangPHP php_get_vhost_versions --output=json'
Sep  7 05:17:00 power sudo[2388628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:00 power sudo[2388628]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:00 power sudo[2388634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:17:00 power sudo[2388634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:00 power sudo[2388634]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:01 power sudo[2388667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DomainInfo single_domain_data domain=nefrologija.mk return_https_redirect_status=1 --output=json'
Sep  7 05:17:01 power sudo[2388667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:01 power sudo[2388667]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:01 power sudo[2388676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog Mime list_redirects --output=json'
Sep  7 05:17:01 power sudo[2388676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:01 power sudo[2388676]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:04 power sudo[2388762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DirectoryPrivacy is_directory_protected dir=/home/nefrolog/public_html --output=json'
Sep  7 05:17:04 power sudo[2388762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:04 power sudo[2388762]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:07 power sudo[2388941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep  7 05:17:07 power sudo[2388941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:07 power sudo[2388941]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:07 power sudo[2388946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikimare --output=json'
Sep  7 05:17:07 power sudo[2388946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:07 power sudo[2388946]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:14 power sudo[2389116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:17:14 power sudo[2389116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:14 power sudo[2389116]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:14 power sudo[2389122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep  7 05:17:14 power sudo[2389122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:15 power sudo[2389122]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:15 power sudo[2389130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare LangPHP php_get_vhost_versions --output=json'
Sep  7 05:17:15 power sudo[2389130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:15 power sudo[2389130]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:15 power sudo[2389139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:17:15 power sudo[2389139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:15 power sudo[2389139]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:15 power sudo[2389157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DomainInfo single_domain_data domain=niki-mare.com return_https_redirect_status=1 --output=json'
Sep  7 05:17:15 power sudo[2389157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:15 power sudo[2389157]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:15 power sudo[2389163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare Mime list_redirects --output=json'
Sep  7 05:17:15 power sudo[2389163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:15 power sudo[2389163]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:19 power sudo[2389291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html/wp --output=json'
Sep  7 05:17:19 power sudo[2389291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:19 power sudo[2389291]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:29 power sudo[2389687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:17:29 power sudo[2389687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:29 power sudo[2389687]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:29 power sudo[2389693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep  7 05:17:29 power sudo[2389693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:30 power sudo[2389693]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:30 power sudo[2389699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:17:30 power sudo[2389699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:30 power sudo[2389699]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:34 power sudo[2389816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html --output=json'
Sep  7 05:17:34 power sudo[2389816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:34 power sudo[2389816]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:38 power sudo[2390017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep  7 05:17:38 power sudo[2390017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:38 power sudo[2390017]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:38 power sudo[2390024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nucktra1 --output=json'
Sep  7 05:17:38 power sudo[2390024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:38 power sudo[2390024]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:42 power sudo[2390106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:17:42 power sudo[2390106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:42 power sudo[2390106]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:42 power sudo[2390113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep  7 05:17:42 power sudo[2390113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:43 power sudo[2390113]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:43 power sudo[2390119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 LangPHP php_get_vhost_versions --output=json'
Sep  7 05:17:43 power sudo[2390119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:43 power sudo[2390119]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:43 power sudo[2390124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php56 --output=json'
Sep  7 05:17:43 power sudo[2390124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:43 power sudo[2390124]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:43 power sudo[2390141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:17:43 power sudo[2390141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:43 power sudo[2390141]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:44 power sudo[2390156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep  7 05:17:44 power sudo[2390156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:44 power sudo[2390156]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:44 power sudo[2390166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 Mime list_redirects --output=json'
Sep  7 05:17:44 power sudo[2390166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:44 power sudo[2390166]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:48 power sudo[2390270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/public_html --output=json'
Sep  7 05:17:48 power sudo[2390270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:48 power sudo[2390270]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:54 power sudo[2390524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep  7 05:17:54 power sudo[2390524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:54 power sudo[2390524]: pam_unix(sudo:session): session closed for user root
Sep  7 05:17:54 power sudo[2390532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pravekom --output=json'
Sep  7 05:17:54 power sudo[2390532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:17:54 power sudo[2390532]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:04 power sudo[2390700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom /bin/sh -c 'cd /home/pravekom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:18:04 power sudo[2390700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:04 power sudo[2390700]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:04 power sudo[2390706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pravekom --user-current --json'
Sep  7 05:18:04 power sudo[2390706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:05 power sudo[2390706]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:05 power sudo[2390714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom LangPHP php_get_vhost_versions --output=json'
Sep  7 05:18:05 power sudo[2390714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:05 power sudo[2390714]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:05 power sudo[2390719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:18:05 power sudo[2390719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:05 power sudo[2390719]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:05 power sudo[2390738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DomainInfo single_domain_data domain=praveko.mk return_https_redirect_status=1 --output=json'
Sep  7 05:18:05 power sudo[2390738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:05 power sudo[2390738]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:05 power sudo[2390744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom Mime list_redirects --output=json'
Sep  7 05:18:05 power sudo[2390744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:05 power sudo[2390744]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:11 power sudo[2390843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DirectoryPrivacy is_directory_protected dir=/home/pravekom/public_html --output=json'
Sep  7 05:18:11 power sudo[2390843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:11 power sudo[2390843]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:15 power sudo[2391047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep  7 05:18:15 power sudo[2391047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:15 power sudo[2391047]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:15 power sudo[2391053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=proverim --output=json'
Sep  7 05:18:15 power sudo[2391053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:15 power sudo[2391053]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:21 power sudo[2391192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:18:21 power sudo[2391192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:21 power sudo[2391192]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:21 power sudo[2391198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user proverim --user-current --json'
Sep  7 05:18:21 power sudo[2391198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:21 power sudo[2391198]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:21 power sudo[2391208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim LangPHP php_get_vhost_versions --output=json'
Sep  7 05:18:21 power sudo[2391208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:21 power sudo[2391208]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:21 power sudo[2391214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:18:21 power sudo[2391214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:21 power sudo[2391214]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:22 power sudo[2391231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DomainInfo single_domain_data domain=proveri.mk return_https_redirect_status=1 --output=json'
Sep  7 05:18:22 power sudo[2391231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:22 power sudo[2391231]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:22 power sudo[2391239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim Mime list_redirects --output=json'
Sep  7 05:18:22 power sudo[2391239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:22 power sudo[2391239]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:24 power sudo[2391370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DirectoryPrivacy is_directory_protected dir=/home/proverim/public_html --output=json'
Sep  7 05:18:24 power sudo[2391370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:25 power sudo[2391370]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:25 power sudo[2391437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:25 power sudo[2391437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:25 power sudo[2391437]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:25 power sudo[2391442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:18:26 power sudo[2391442]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:18:26 power sudo[2391442]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:18:26 power sudo[2391442]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:18:26 power sudo[2391442]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:26 power sudo[2391442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:26 power sudo[2391442]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:26 power sudo[2391447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:18:26 power sudo[2391447]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:18:26 power sudo[2391447]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:18:26 power sudo[2391447]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:18:26 power sudo[2391447]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:26 power sudo[2391447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:26 power sudo[2391447]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:26 power sudo[2391453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:18:26 power sudo[2391453]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:18:26 power sudo[2391453]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:18:26 power sudo[2391453]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:18:26 power sudo[2391453]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:26 power sudo[2391453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:26 power sudo[2391453]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:27 power sudo[2391562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:27 power sudo[2391562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:27 power sudo[2391562]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:27 power sudo[2391567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:18:27 power sudo[2391567]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:18:27 power sudo[2391567]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:18:27 power sudo[2391567]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:18:27 power sudo[2391567]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:27 power sudo[2391567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:27 power sudo[2391567]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:27 power sudo[2391572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:18:27 power sudo[2391572]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:18:27 power sudo[2391572]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:18:27 power sudo[2391572]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:18:27 power sudo[2391572]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:27 power sudo[2391572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:28 power sudo[2391572]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:28 power sudo[2391577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:18:28 power sudo[2391577]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:18:28 power sudo[2391577]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:18:28 power sudo[2391577]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:18:28 power sudo[2391577]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:28 power sudo[2391577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:28 power sudo[2391577]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:28 power sudo[2391633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep  7 05:18:28 power sudo[2391633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:28 power sudo[2391633]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:28 power sudo[2391640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rastiraz --output=json'
Sep  7 05:18:28 power sudo[2391640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:29 power sudo[2391640]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:32 power sudo[2391732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:18:32 power sudo[2391732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:32 power sudo[2391732]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:32 power sudo[2391738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rastiraz --user-current --json'
Sep  7 05:18:32 power sudo[2391738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:32 power sudo[2391738]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:32 power sudo[2391744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz LangPHP php_get_vhost_versions --output=json'
Sep  7 05:18:32 power sudo[2391744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:32 power sudo[2391744]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:32 power sudo[2391758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:18:32 power sudo[2391758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:32 power sudo[2391758]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:32 power sudo[2391772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DomainInfo single_domain_data domain=rastirazvoj.mk return_https_redirect_status=1 --output=json'
Sep  7 05:18:32 power sudo[2391772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:32 power sudo[2391772]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:32 power sudo[2391778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz Mime list_redirects --output=json'
Sep  7 05:18:32 power sudo[2391778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:32 power sudo[2391778]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:34 power sudo[2391879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DirectoryPrivacy is_directory_protected dir=/home/rastiraz/public_html --output=json'
Sep  7 05:18:34 power sudo[2391879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:34 power sudo[2391879]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:35 power sudo[2391961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:35 power sudo[2391961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:35 power sudo[2391961]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:35 power sudo[2391966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:18:35 power sudo[2391966]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:18:35 power sudo[2391966]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:18:35 power sudo[2391966]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:18:35 power sudo[2391966]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:35 power sudo[2391966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:35 power sudo[2391966]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:35 power sudo[2391972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:18:35 power sudo[2391972]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:18:35 power sudo[2391972]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:18:35 power sudo[2391972]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:18:35 power sudo[2391972]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:35 power sudo[2391972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:35 power sudo[2391972]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:35 power sudo[2391978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:18:35 power sudo[2391978]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:18:35 power sudo[2391978]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:18:35 power sudo[2391978]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:18:35 power sudo[2391978]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:35 power sudo[2391978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:36 power sudo[2391978]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:37 power sudo[2392093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:37 power sudo[2392093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:37 power sudo[2392093]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:37 power sudo[2392098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:18:37 power sudo[2392098]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:18:37 power sudo[2392098]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:18:37 power sudo[2392098]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:18:37 power sudo[2392098]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:37 power sudo[2392098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:37 power sudo[2392098]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:37 power sudo[2392103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:18:37 power sudo[2392103]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:18:37 power sudo[2392103]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:18:37 power sudo[2392103]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:18:37 power sudo[2392103]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:37 power sudo[2392103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:37 power sudo[2392103]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:37 power sudo[2392108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:18:37 power sudo[2392108]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:18:37 power sudo[2392108]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:18:37 power sudo[2392108]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:18:37 power sudo[2392108]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:38 power sudo[2392108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:38 power sudo[2392108]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:38 power sudo[2392146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep  7 05:18:38 power sudo[2392146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:38 power sudo[2392146]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:38 power sudo[2392154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=conserva --output=json'
Sep  7 05:18:39 power sudo[2392154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:39 power sudo[2392154]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:42 power sudo[2392240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva /bin/sh -c 'cd /home/conserva/RebornMacedonia.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:18:42 power sudo[2392240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:42 power sudo[2392240]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:42 power sudo[2392246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user conserva --user-current --json'
Sep  7 05:18:42 power sudo[2392246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:43 power sudo[2392246]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:43 power sudo[2392251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva LangPHP php_get_vhost_versions --output=json'
Sep  7 05:18:43 power sudo[2392251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:43 power sudo[2392251]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:43 power sudo[2392261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:18:43 power sudo[2392261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:43 power sudo[2392261]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:43 power sudo[2392275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DomainInfo single_domain_data domain=rebornmacedonia.com return_https_redirect_status=1 --output=json'
Sep  7 05:18:43 power sudo[2392275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:43 power sudo[2392275]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:43 power sudo[2392284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva Mime list_redirects --output=json'
Sep  7 05:18:43 power sudo[2392284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:43 power sudo[2392284]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:46 power sudo[2392382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DirectoryPrivacy is_directory_protected dir=/home/conserva/RebornMacedonia.com --output=json'
Sep  7 05:18:46 power sudo[2392382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:46 power sudo[2392382]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:49 power sudo[2392611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep  7 05:18:49 power sudo[2392611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:49 power sudo[2392611]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:49 power sudo[2392617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=maleshne --output=json'
Sep  7 05:18:49 power sudo[2392617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:50 power sudo[2392617]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:54 power sudo[2392698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:18:54 power sudo[2392698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:54 power sudo[2392698]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:54 power sudo[2392704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user maleshne --user-current --json'
Sep  7 05:18:54 power sudo[2392704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:54 power sudo[2392704]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:54 power sudo[2392713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne LangPHP php_get_vhost_versions --output=json'
Sep  7 05:18:54 power sudo[2392713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:54 power sudo[2392713]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:54 power sudo[2392718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:18:54 power sudo[2392718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:54 power sudo[2392718]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:54 power sudo[2392736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DomainInfo single_domain_data domain=restoranmrs.mk return_https_redirect_status=1 --output=json'
Sep  7 05:18:54 power sudo[2392736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:55 power sudo[2392736]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:55 power sudo[2392747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne Mime list_redirects --output=json'
Sep  7 05:18:55 power sudo[2392747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:55 power sudo[2392747]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:57 power sudo[2392837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DirectoryPrivacy is_directory_protected dir=/home/maleshne/public_html --output=json'
Sep  7 05:18:57 power sudo[2392837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:57 power sudo[2392837]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:58 power sudo[2392901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:58 power sudo[2392901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:58 power sudo[2392901]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:58 power sudo[2392906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:18:58 power sudo[2392906]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:18:58 power sudo[2392906]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:18:58 power sudo[2392906]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:18:58 power sudo[2392906]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:58 power sudo[2392906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:58 power sudo[2392906]: pam_unix(sudo:session): session closed for user root
Sep  7 05:18:58 power sudo[2392911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:18:58 power sudo[2392911]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:18:58 power sudo[2392911]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:18:58 power sudo[2392911]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:18:58 power sudo[2392911]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:18:58 power sudo[2392911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:18:58 power sudo[2392911]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:00 power sudo[2393045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:00 power sudo[2393045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:00 power sudo[2393045]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:00 power sudo[2393050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:19:00 power sudo[2393050]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:19:00 power sudo[2393050]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:19:00 power sudo[2393050]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:19:00 power sudo[2393050]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:00 power sudo[2393050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:00 power sudo[2393050]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:01 power sudo[2393055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:19:01 power sudo[2393055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:19:01 power sudo[2393055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:19:01 power sudo[2393055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:19:01 power sudo[2393055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:01 power sudo[2393055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:01 power sudo[2393055]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:01 power sudo[2393103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep  7 05:19:01 power sudo[2393103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:01 power sudo[2393103]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:01 power sudo[2393108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=samasped --output=json'
Sep  7 05:19:01 power sudo[2393108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:01 power sudo[2393108]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:09 power sudo[2393235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped /bin/sh -c 'cd /home/samasped/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:19:09 power sudo[2393235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:09 power sudo[2393235]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:09 power sudo[2393241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user samasped --user-current --json'
Sep  7 05:19:09 power sudo[2393241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:09 power sudo[2393241]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:09 power sudo[2393252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped LangPHP php_get_vhost_versions --output=json'
Sep  7 05:19:09 power sudo[2393252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:09 power sudo[2393252]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:09 power sudo[2393257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:19:09 power sudo[2393257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:09 power sudo[2393257]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:10 power sudo[2393272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DomainInfo single_domain_data domain=samasped.mk return_https_redirect_status=1 --output=json'
Sep  7 05:19:10 power sudo[2393272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:10 power sudo[2393272]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:10 power sudo[2393279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped Mime list_redirects --output=json'
Sep  7 05:19:10 power sudo[2393279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:10 power sudo[2393279]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:14 power sudo[2393421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DirectoryPrivacy is_directory_protected dir=/home/samasped/public_html --output=json'
Sep  7 05:19:14 power sudo[2393421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:14 power sudo[2393421]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:17 power sudo[2393628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep  7 05:19:17 power sudo[2393628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:17 power sudo[2393628]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:17 power sudo[2393638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=seloviro --output=json'
Sep  7 05:19:17 power sudo[2393638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:17 power sudo[2393638]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:23 power sudo[2393794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:19:23 power sudo[2393794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:23 power sudo[2393794]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:23 power sudo[2393804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user seloviro --user-current --json'
Sep  7 05:19:23 power sudo[2393804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:23 power sudo[2393804]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:23 power sudo[2393811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro LangPHP php_get_vhost_versions --output=json'
Sep  7 05:19:23 power sudo[2393811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:23 power sudo[2393811]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:23 power sudo[2393815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:19:23 power sudo[2393815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:23 power sudo[2393815]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:24 power sudo[2393834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DomainInfo single_domain_data domain=selovirovo.mk return_https_redirect_status=1 --output=json'
Sep  7 05:19:24 power sudo[2393834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:24 power sudo[2393834]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:24 power sudo[2393842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro Mime list_redirects --output=json'
Sep  7 05:19:24 power sudo[2393842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:24 power sudo[2393842]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:27 power sudo[2393981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DirectoryPrivacy is_directory_protected dir=/home/seloviro/public_html --output=json'
Sep  7 05:19:27 power sudo[2393981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:27 power sudo[2393981]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:28 power sudo[2394044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:28 power sudo[2394044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:28 power sudo[2394044]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:28 power sudo[2394049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:19:28 power sudo[2394049]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:19:28 power sudo[2394049]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:19:28 power sudo[2394049]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:19:28 power sudo[2394049]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:28 power sudo[2394049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:28 power sudo[2394049]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:28 power sudo[2394054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:19:28 power sudo[2394054]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:19:28 power sudo[2394054]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:19:28 power sudo[2394054]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:19:28 power sudo[2394054]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:28 power sudo[2394054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:29 power sudo[2394054]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:29 power sudo[2394059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:19:29 power sudo[2394059]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:19:29 power sudo[2394059]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:19:29 power sudo[2394059]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:19:29 power sudo[2394059]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:29 power sudo[2394059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:29 power sudo[2394059]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:30 power sudo[2394181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:30 power sudo[2394181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:30 power sudo[2394181]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:30 power sudo[2394186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:19:30 power sudo[2394186]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:19:30 power sudo[2394186]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:19:30 power sudo[2394186]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:19:30 power sudo[2394186]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:31 power sudo[2394186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:31 power sudo[2394186]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:31 power sudo[2394191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:19:31 power sudo[2394191]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:19:31 power sudo[2394191]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:19:31 power sudo[2394191]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:19:31 power sudo[2394191]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:31 power sudo[2394191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:31 power sudo[2394191]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:31 power sudo[2394196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:19:31 power sudo[2394196]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:19:31 power sudo[2394196]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:19:31 power sudo[2394196]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:19:31 power sudo[2394196]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:19:31 power sudo[2394196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:31 power sudo[2394196]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:31 power sudo[2394238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep  7 05:19:31 power sudo[2394238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:32 power sudo[2394238]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:32 power sudo[2394243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=skyapart --output=json'
Sep  7 05:19:32 power sudo[2394243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:32 power sudo[2394243]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:34 power sudo[2394301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart /bin/sh -c 'cd /home/skyapart/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:19:34 power sudo[2394301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:34 power sudo[2394301]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:34 power sudo[2394307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user skyapart --user-current --json'
Sep  7 05:19:34 power sudo[2394307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:34 power sudo[2394307]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:34 power sudo[2394318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart LangPHP php_get_vhost_versions --output=json'
Sep  7 05:19:34 power sudo[2394318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:34 power sudo[2394318]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:34 power sudo[2394323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:19:34 power sudo[2394323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:34 power sudo[2394323]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:35 power sudo[2394338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DomainInfo single_domain_data domain=skyapartments.mk return_https_redirect_status=1 --output=json'
Sep  7 05:19:35 power sudo[2394338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:35 power sudo[2394338]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:35 power sudo[2394344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart Mime list_redirects --output=json'
Sep  7 05:19:35 power sudo[2394344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:35 power sudo[2394344]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:37 power sudo[2394413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DirectoryPrivacy is_directory_protected dir=/home/skyapart/public_html --output=json'
Sep  7 05:19:37 power sudo[2394413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:37 power sudo[2394413]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:40 power sudo[2394608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep  7 05:19:40 power sudo[2394608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:41 power sudo[2394608]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:41 power sudo[2394613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=socioloz --output=json'
Sep  7 05:19:41 power sudo[2394613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:41 power sudo[2394613]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:52 power sudo[2394798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz /bin/sh -c 'cd /home/socioloz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:19:52 power sudo[2394798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:52 power sudo[2394798]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:52 power sudo[2394804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user socioloz --user-current --json'
Sep  7 05:19:52 power sudo[2394804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:52 power sudo[2394804]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:52 power sudo[2394809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz LangPHP php_get_vhost_versions --output=json'
Sep  7 05:19:52 power sudo[2394809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:52 power sudo[2394809]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:52 power sudo[2394816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:19:52 power sudo[2394816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:52 power sudo[2394816]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:53 power sudo[2394833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DomainInfo single_domain_data domain=sociolozi.org.mk return_https_redirect_status=1 --output=json'
Sep  7 05:19:53 power sudo[2394833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:53 power sudo[2394833]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:53 power sudo[2394840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz Mime list_redirects --output=json'
Sep  7 05:19:53 power sudo[2394840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:53 power sudo[2394840]: pam_unix(sudo:session): session closed for user root
Sep  7 05:19:58 power sudo[2394948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DirectoryPrivacy is_directory_protected dir=/home/socioloz/public_html --output=json'
Sep  7 05:19:58 power sudo[2394948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:19:58 power sudo[2394948]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:01 power systemd[2395201]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:20:03 power sudo[2395287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep  7 05:20:03 power sudo[2395287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:03 power sudo[2395287]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:03 power sudo[2395295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stojnevi --output=json'
Sep  7 05:20:03 power sudo[2395295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:03 power sudo[2395295]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:07 power sudo[2395375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi /bin/sh -c 'cd /home/stojnevi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:20:07 power sudo[2395375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:07 power sudo[2395375]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:07 power sudo[2395381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stojnevi --user-current --json'
Sep  7 05:20:07 power sudo[2395381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:07 power sudo[2395381]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:07 power sudo[2395392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi LangPHP php_get_vhost_versions --output=json'
Sep  7 05:20:07 power sudo[2395392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:07 power sudo[2395392]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:07 power sudo[2395397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:20:07 power sudo[2395397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:07 power sudo[2395397]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:07 power sudo[2395413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DomainInfo single_domain_data domain=stojnevi.mk return_https_redirect_status=1 --output=json'
Sep  7 05:20:07 power sudo[2395413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:08 power sudo[2395413]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:08 power sudo[2395424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi Mime list_redirects --output=json'
Sep  7 05:20:08 power sudo[2395424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:08 power sudo[2395424]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:11 power sudo[2395505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DirectoryPrivacy is_directory_protected dir=/home/stojnevi/public_html --output=json'
Sep  7 05:20:11 power sudo[2395505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:11 power sudo[2395505]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:21 power sudo[2395861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/teatar.nucktrajkoprokopiev.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:20:21 power sudo[2395861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:21 power sudo[2395861]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:21 power sudo[2395867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep  7 05:20:21 power sudo[2395867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:21 power sudo[2395867]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:21 power sudo[2395877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:20:21 power sudo[2395877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:21 power sudo[2395877]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:21 power sudo[2395895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=teatar.nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep  7 05:20:21 power sudo[2395895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:22 power sudo[2395895]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:25 power sudo[2396071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/teatar.nucktrajkoprokopiev.mk/mk --output=json'
Sep  7 05:20:25 power sudo[2396071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:25 power sudo[2396071]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:29 power sudo[2396274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep  7 05:20:29 power sudo[2396274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:29 power sudo[2396274]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:29 power sudo[2396279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=trudovop --output=json'
Sep  7 05:20:29 power sudo[2396279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:29 power sudo[2396279]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:36 power sudo[2396413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop /bin/sh -c 'cd /home/trudovop/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:20:37 power sudo[2396413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:37 power sudo[2396413]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:37 power sudo[2396419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user trudovop --user-current --json'
Sep  7 05:20:37 power sudo[2396419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:37 power sudo[2396419]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:37 power sudo[2396429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop LangPHP php_get_vhost_versions --output=json'
Sep  7 05:20:37 power sudo[2396429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:37 power sudo[2396429]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:37 power sudo[2396436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:20:37 power sudo[2396436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:37 power sudo[2396436]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:38 power sudo[2396454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DomainInfo single_domain_data domain=trudovopravo.mk return_https_redirect_status=1 --output=json'
Sep  7 05:20:38 power sudo[2396454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:38 power sudo[2396454]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:38 power sudo[2396462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop Mime list_redirects --output=json'
Sep  7 05:20:38 power sudo[2396462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:38 power sudo[2396462]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:42 power sudo[2396556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DirectoryPrivacy is_directory_protected dir=/home/trudovop/public_html --output=json'
Sep  7 05:20:42 power sudo[2396556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:42 power sudo[2396556]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:45 power sudo[2396756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep  7 05:20:45 power sudo[2396756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:46 power sudo[2396756]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:46 power sudo[2396765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=urbanexp --output=json'
Sep  7 05:20:46 power sudo[2396765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:46 power sudo[2396765]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:52 power sudo[2396892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp /bin/sh -c 'cd /home/urbanexp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:20:52 power sudo[2396892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:52 power sudo[2396892]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:52 power sudo[2396898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user urbanexp --user-current --json'
Sep  7 05:20:52 power sudo[2396898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:53 power sudo[2396898]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:53 power sudo[2396908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp LangPHP php_get_vhost_versions --output=json'
Sep  7 05:20:53 power sudo[2396908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:53 power sudo[2396908]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:53 power sudo[2396920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:20:53 power sudo[2396920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:53 power sudo[2396920]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:53 power sudo[2396933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DomainInfo single_domain_data domain=urbanexpert.mk return_https_redirect_status=1 --output=json'
Sep  7 05:20:53 power sudo[2396933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:53 power sudo[2396933]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:53 power sudo[2396940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp Mime list_redirects --output=json'
Sep  7 05:20:53 power sudo[2396940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:53 power sudo[2396940]: pam_unix(sudo:session): session closed for user root
Sep  7 05:20:56 power sudo[2397027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DirectoryPrivacy is_directory_protected dir=/home/urbanexp/public_html --output=json'
Sep  7 05:20:56 power sudo[2397027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:20:56 power sudo[2397027]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:00 power sudo[2397218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep  7 05:21:00 power sudo[2397218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:00 power sudo[2397218]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:00 power sudo[2397226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vfxnestc --output=json'
Sep  7 05:21:00 power sudo[2397226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:00 power sudo[2397226]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:06 power sudo[2397386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc /bin/sh -c 'cd /home/vfxnestc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:21:06 power sudo[2397386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:06 power sudo[2397386]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:06 power sudo[2397394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vfxnestc --user-current --json'
Sep  7 05:21:06 power sudo[2397394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:06 power sudo[2397394]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:07 power sudo[2397401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc LangPHP php_get_vhost_versions --output=json'
Sep  7 05:21:07 power sudo[2397401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:07 power sudo[2397401]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:07 power sudo[2397413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:21:07 power sudo[2397413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:07 power sudo[2397413]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:07 power sudo[2397428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DomainInfo single_domain_data domain=vfxnest.com return_https_redirect_status=1 --output=json'
Sep  7 05:21:07 power sudo[2397428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:07 power sudo[2397428]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:07 power sudo[2397434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc Mime list_redirects --output=json'
Sep  7 05:21:07 power sudo[2397434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:07 power sudo[2397434]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:10 power sudo[2397525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DirectoryPrivacy is_directory_protected dir=/home/vfxnestc/public_html --output=json'
Sep  7 05:21:10 power sudo[2397525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:11 power sudo[2397525]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:16 power sudo[2397751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep  7 05:21:16 power sudo[2397751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:16 power sudo[2397751]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:16 power sudo[2397757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=volkanco --output=json'
Sep  7 05:21:16 power sudo[2397757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:16 power sudo[2397757]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:20 power sudo[2397833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:21:20 power sudo[2397833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:20 power sudo[2397833]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:20 power sudo[2397839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep  7 05:21:20 power sudo[2397839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:20 power sudo[2397839]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:20 power sudo[2397844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco LangPHP php_get_vhost_versions --output=json'
Sep  7 05:21:21 power sudo[2397844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:21 power sudo[2397844]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:21 power sudo[2397849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:21:21 power sudo[2397849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:21 power sudo[2397849]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:21 power sudo[2397871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DomainInfo single_domain_data domain=volkan.com.mk return_https_redirect_status=1 --output=json'
Sep  7 05:21:21 power sudo[2397871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:21 power sudo[2397871]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:21 power sudo[2397877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mime list_redirects --output=json'
Sep  7 05:21:21 power sudo[2397877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:21 power sudo[2397877]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:24 power sudo[2397962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DirectoryPrivacy is_directory_protected dir=/home/volkanco/public_html --output=json'
Sep  7 05:21:24 power sudo[2397962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:24 power sudo[2397962]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:25 power sudo[2398020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:21:25 power sudo[2398020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:25 power sudo[2398020]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:25 power sudo[2398025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:21:25 power sudo[2398025]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:21:25 power sudo[2398025]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:21:25 power sudo[2398025]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:21:25 power sudo[2398025]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:21:25 power sudo[2398025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:25 power sudo[2398025]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:25 power sudo[2398030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:21:25 power sudo[2398030]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:21:25 power sudo[2398030]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:21:25 power sudo[2398030]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:21:25 power sudo[2398030]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:21:25 power sudo[2398030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:25 power sudo[2398030]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:25 power sudo[2398036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:21:25 power sudo[2398036]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:21:25 power sudo[2398036]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:21:25 power sudo[2398036]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:21:25 power sudo[2398036]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:21:25 power sudo[2398036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:25 power sudo[2398036]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:27 power sudo[2398183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:21:27 power sudo[2398183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:27 power sudo[2398183]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:27 power sudo[2398188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  7 05:21:27 power sudo[2398188]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  7 05:21:27 power sudo[2398188]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  7 05:21:27 power sudo[2398188]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  7 05:21:27 power sudo[2398188]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:21:27 power sudo[2398188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:27 power sudo[2398188]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:27 power sudo[2398193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:21:27 power sudo[2398193]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:21:27 power sudo[2398193]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:21:27 power sudo[2398193]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:21:27 power sudo[2398193]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:21:27 power sudo[2398193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:27 power sudo[2398193]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:27 power sudo[2398199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  7 05:21:27 power sudo[2398199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  7 05:21:27 power sudo[2398199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  7 05:21:27 power sudo[2398199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  7 05:21:27 power sudo[2398199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  7 05:21:27 power sudo[2398199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:27 power sudo[2398199]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:28 power sudo[2398236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep  7 05:21:28 power sudo[2398236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:28 power sudo[2398236]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:28 power sudo[2398243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=glammace --output=json'
Sep  7 05:21:28 power sudo[2398243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:28 power sudo[2398243]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:38 power sudo[2398433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace /bin/sh -c 'cd /home/glammace/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:21:38 power sudo[2398433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:38 power sudo[2398433]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:38 power sudo[2398441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user glammace --user-current --json'
Sep  7 05:21:38 power sudo[2398441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:39 power sudo[2398441]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:39 power sudo[2398449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace LangPHP php_get_vhost_versions --output=json'
Sep  7 05:21:39 power sudo[2398449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:39 power sudo[2398449]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:39 power sudo[2398458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:21:39 power sudo[2398458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:39 power sudo[2398458]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:39 power sudo[2398476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DomainInfo single_domain_data domain=wikimedia.mk return_https_redirect_status=1 --output=json'
Sep  7 05:21:39 power sudo[2398476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:39 power sudo[2398476]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:39 power sudo[2398483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace Mime list_redirects --output=json'
Sep  7 05:21:39 power sudo[2398483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:39 power sudo[2398483]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:45 power sudo[2398611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DirectoryPrivacy is_directory_protected dir=/home/glammace/public_html --output=json'
Sep  7 05:21:45 power sudo[2398611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:45 power sudo[2398611]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:55 power sudo[2398990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:21:55 power sudo[2398990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:55 power sudo[2398990]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:55 power sudo[2399004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep  7 05:21:55 power sudo[2399004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:56 power sudo[2399004]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:56 power sudo[2399040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:21:56 power sudo[2399040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:56 power sudo[2399040]: pam_unix(sudo:session): session closed for user root
Sep  7 05:21:56 power sudo[2399094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=wineberry.mk return_https_redirect_status=1 --output=json'
Sep  7 05:21:56 power sudo[2399094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:21:56 power sudo[2399094]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:01 power sudo[2399242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/public_html --output=json'
Sep  7 05:22:01 power sudo[2399242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:01 power sudo[2399242]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:04 power sudo[2399468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep  7 05:22:04 power sudo[2399468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:04 power sudo[2399468]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:04 power sudo[2399475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workbenc --output=json'
Sep  7 05:22:04 power sudo[2399475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:04 power sudo[2399475]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:07 power sudo[2399544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc /bin/sh -c 'cd /home/workbenc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  7 05:22:07 power sudo[2399544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:07 power sudo[2399544]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:07 power sudo[2399550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workbenc --user-current --json'
Sep  7 05:22:07 power sudo[2399550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:07 power sudo[2399550]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:07 power sudo[2399556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc LangPHP php_get_vhost_versions --output=json'
Sep  7 05:22:07 power sudo[2399556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:07 power sudo[2399556]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:07 power sudo[2399563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  7 05:22:07 power sudo[2399563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:07 power sudo[2399563]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:08 power sudo[2399587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DomainInfo single_domain_data domain=workbench-ent.com return_https_redirect_status=1 --output=json'
Sep  7 05:22:08 power sudo[2399587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:08 power sudo[2399587]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:08 power sudo[2399593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc Mime list_redirects --output=json'
Sep  7 05:22:08 power sudo[2399593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:08 power sudo[2399593]: pam_unix(sudo:session): session closed for user root
Sep  7 05:22:10 power sudo[2399677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DirectoryPrivacy is_directory_protected dir=/home/workbenc/public_html --output=json'
Sep  7 05:22:10 power sudo[2399677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:22:10 power sudo[2399677]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/hooks
Sep  7 05:23:17 power sudo[2403716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403716]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep  7 05:23:17 power sudo[2403720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403720]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403724]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403729]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403733]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403737]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403741]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403745]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403749]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403753]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403757]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403761]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403765]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403772]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403776]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403780]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403784]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403788]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403793]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403797]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403801]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403805]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/animatem/animate.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403809]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/animatem/animate.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403813]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403817]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403821]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:17 power sudo[2403825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  7 05:23:17 power sudo[2403825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:17 power sudo[2403825]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403829]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403833]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403837]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403841]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403845]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403849]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403853]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403857]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403861]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403865]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403869]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403873]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403877]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403881]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403885]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403889]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403893]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403900]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403904]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403908]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403912]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403916]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403921]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403925]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403929]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403933]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403937]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403941]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403945]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403949]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403953]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403957]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403961]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403966]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403970]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403974]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403978]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403982]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403987]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403992]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2403998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2403998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2403998]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404003]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404007]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404013]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404017]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404021]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404025]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404029]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404033]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404039]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404043]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404047]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404052]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404056]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404060]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404064]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404069]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404079]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404083]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404088]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404094]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404103]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404107]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404111]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404115]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404119]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404124]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep  7 05:23:18 power sudo[2404128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:18 power sudo[2404128]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:18 power sudo[2404132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404132]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404136]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404140]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404145]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404149]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404153]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404157]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404161]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404165]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404169]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404174]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404178]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404182]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404186]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404190]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404194]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404198]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404202]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404209]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404213]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404217]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404221]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404225]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404229]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404233]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404237]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404241]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404245]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404249]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404253]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404257]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404261]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404265]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404269]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404273]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404277]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404281]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404285]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404289]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404293]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404297]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404301]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404305]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404309]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404313]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404317]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404321]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404325]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404329]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404333]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404338]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404342]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404346]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404350]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404355]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404359]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404363]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404367]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404372]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404376]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404380]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404384]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404388]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404393]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404397]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404401]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404405]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:19 power sudo[2404409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  7 05:23:19 power sudo[2404409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:19 power sudo[2404409]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404413]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404417]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404421]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404426]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404430]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404435]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404439]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404443]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404447]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404453]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404457]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404461]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404465]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404470]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404474]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404478]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404486]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404490]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404497]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404501]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404505]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404509]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404513]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404517]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404521]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404525]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404529]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404533]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404537]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404541]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404545]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404550]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404554]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404558]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404562]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404566]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404571]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404575]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404579]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404583]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404587]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404591]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404595]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404599]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404603]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404607]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404611]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404615]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404619]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404623]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404627]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404631]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404635]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404639]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404643]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404647]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404651]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404655]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404659]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404663]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404667]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404671]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404675]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:20 power sudo[2404679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  7 05:23:20 power sudo[2404679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:20 power sudo[2404679]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404683]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404687]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404692]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404696]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404700]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404704]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404709]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404713]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404717]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404721]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404725]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404729]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404733]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404737]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404741]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404745]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404749]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404756]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404760]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404764]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404768]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404772]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404776]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404780]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404784]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404788]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404792]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404796]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404800]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404804]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404808]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404812]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404817]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404821]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404825]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404829]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404833]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404837]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404841]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404845]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404849]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404853]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404857]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404861]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404865]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404869]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404873]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404877]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404881]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404885]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404889]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404893]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404897]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404901]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404905]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404909]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404913]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404917]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404921]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404925]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404929]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404933]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404937]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404941]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404945]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404949]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404953]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404957]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404962]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404966]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:21 power sudo[2404970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep  7 05:23:21 power sudo[2404970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:21 power sudo[2404970]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2404975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2404975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2404975]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2404980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2404980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2404980]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2404984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2404984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2404984]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2404988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2404988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2404988]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2404992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2404992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2404992]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2404996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2404996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2404996]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405000]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405004]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405008]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405012]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405016]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405020]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405024]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405028]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405032]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405036]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405040]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405047]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405051]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405056]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405060]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405064]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405068]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405072]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405076]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405080]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405084]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405088]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405092]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405096]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405101]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405105]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405109]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405113]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405118]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405122]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405126]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405130]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405135]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405140]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405144]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405148]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405154]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405158]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405163]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405167]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405171]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405175]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405179]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405183]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405187]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405191]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405196]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405201]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405205]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405209]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405213]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405217]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405221]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405226]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405230]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405234]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  7 05:23:22 power sudo[2405238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:22 power sudo[2405238]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:22 power sudo[2405242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405242]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405246]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405250]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405254]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405260]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405264]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405268]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405272]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405276]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405280]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405284]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405288]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405292]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405296]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405300]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405308]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405312]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405316]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405320]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405324]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405328]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405333]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405337]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405341]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405345]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405349]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405353]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405357]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405361]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405365]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405369]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405373]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405377]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405381]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405385]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405389]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405393]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405398]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405402]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405406]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405410]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405414]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405418]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405422]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405426]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405430]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405434]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405438]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405443]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep  7 05:23:23 power sudo[2405448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405448]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405454]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:23 power sudo[2405458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  7 05:23:23 power sudo[2405458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:23 power sudo[2405458]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405462]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405466]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405470]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405474]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405479]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405483]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405487]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405491]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405495]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405499]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405503]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405507]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405511]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405515]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405519]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405523]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405530]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405535]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405539]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405543]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405547]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405551]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405555]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405559]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405563]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405567]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405571]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405575]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405579]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405584]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405588]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405592]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405596]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405600]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405604]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405608]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405612]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405616]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405621]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405625]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405630]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405634]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405638]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405642]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405646]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405650]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405654]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405658]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405662]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405666]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405670]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405674]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405678]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405682]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405690]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405694]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405699]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405703]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405707]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405711]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405715]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405719]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405723]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405727]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405731]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405735]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  7 05:23:24 power sudo[2405739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:24 power sudo[2405739]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:24 power sudo[2405743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405743]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405748]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405752]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405756]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405760]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405764]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405768]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405773]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405778]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405782]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405786]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405791]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405795]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405799]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405803]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405807]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405814]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405818]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405822]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405826]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405830]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405834]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405838]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405842]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405846]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405850]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405854]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405858]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405862]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405866]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405870]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405874]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405878]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405882]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405886]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405890]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405894]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405898]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405903]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405907]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405911]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405915]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405919]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405923]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405929]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405933]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405937]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405941]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405945]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405949]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405953]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405957]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405961]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405965]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405970]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405974]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405978]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405982]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405986]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405990]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405994]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2405998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2405998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2405998]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2406002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2406002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2406002]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2406006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2406006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2406006]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2406010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2406010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2406010]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2406014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2406014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:25 power sudo[2406014]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:25 power sudo[2406018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  7 05:23:25 power sudo[2406018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406018]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406022]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406026]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406030]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406034]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406038]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406042]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406046]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406050]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406054]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406058]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406062]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406066]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406070]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406074]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406081]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406086]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406090]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406094]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406098]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406102]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406106]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406110]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406114]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406118]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406122]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406126]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406130]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406134]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406139]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406143]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406147]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406151]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406155]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406159]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406163]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406167]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406171]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406175]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406179]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406183]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406187]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406191]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406195]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406199]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406203]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406207]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406211]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406215]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406219]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406223]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406227]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406231]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406235]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406239]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406243]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406247]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406251]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406255]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406259]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406263]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406267]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406271]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406275]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406279]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406283]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406287]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:26 power sudo[2406291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  7 05:23:26 power sudo[2406291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:26 power sudo[2406291]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406295]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406299]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406303]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406307]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406311]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406315]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406319]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406323]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406327]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406331]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406335]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406339]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406344]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406348]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406352]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406356]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406360]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406367]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406371]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406375]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406379]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406383]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406387]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406391]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406395]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406399]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406403]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406407]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406411]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406415]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406419]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406423]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406430]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406436]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406442]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406446]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406450]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406454]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406458]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406462]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406472]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406476]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406482]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406487]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406491]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406495]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406501]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406509]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406513]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406521]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406527]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406531]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406535]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406540]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406544]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406564]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406569]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406573]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406577]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406581]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406585]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:27 power sudo[2406589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep  7 05:23:27 power sudo[2406589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:27 power sudo[2406589]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406593]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406597]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406601]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406605]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406609]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406613]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406617]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406621]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406625]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406629]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406633]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406638]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406642]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406647]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406655]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406659]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406663]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406667]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406671]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406675]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406679]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406683]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406687]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406692]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406696]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406700]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406704]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406708]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406712]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406716]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406720]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406724]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406729]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406733]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406738]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406742]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406746]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406750]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406754]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406758]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406762]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406766]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406770]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406774]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406778]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406782]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406786]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406790]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406795]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406799]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406803]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406808]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406812]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406816]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406820]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406824]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406828]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406832]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:28 power sudo[2406836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep  7 05:23:28 power sudo[2406836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:28 power sudo[2406836]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406840]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406844]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406848]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406852]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406856]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406860]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406864]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406868]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406872]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406876]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406880]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406884]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406888]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406892]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406897]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406901]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406905]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406909]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406916]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406920]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406924]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406928]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406932]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406936]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406940]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406944]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406948]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406952]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406956]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406960]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406964]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406968]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406972]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406977]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406981]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406986]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406990]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406994]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2406998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2406998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2406998]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407002]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407006]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407010]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407014]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407018]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407022]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407027]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407031]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407035]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407039]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407043]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407047]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407051]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407055]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407059]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407063]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407067]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407072]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407076]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407080]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407084]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407088]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407092]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407096]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:29 power sudo[2407100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep  7 05:23:29 power sudo[2407100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:29 power sudo[2407100]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:30 power sudo[2407104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep  7 05:23:30 power sudo[2407104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:30 power sudo[2407104]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:30 power sudo[2407108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep  7 05:23:30 power sudo[2407108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:30 power sudo[2407108]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:30 power sudo[2407112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep  7 05:23:30 power sudo[2407112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:30 power sudo[2407112]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:30 power sudo[2407117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep  7 05:23:30 power sudo[2407117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:30 power sudo[2407117]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:30 power sudo[2407121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  7 05:23:30 power sudo[2407121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:30 power sudo[2407121]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:30 power sudo[2407125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  7 05:23:30 power sudo[2407125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:30 power sudo[2407125]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:30 power sudo[2407129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  7 05:23:30 power sudo[2407129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:30 power sudo[2407129]: pam_unix(sudo:session): session closed for user root
Sep  7 05:23:30 power sudo[2407133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  7 05:23:30 power sudo[2407133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:23:30 power sudo[2407133]: pam_unix(sudo:session): session closed for user root
Sep  7 05:25:01 power systemd[2408524]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:30:01 power systemd[2412873]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:30:01 power systemd[2412874]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 05:30:01 power systemd[2412877]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 05:30:01 power systemd[2412875]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 05:32:31 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 05:35:01 power systemd[2417753]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:35:05 power systemd[2417870]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep  7 05:35:05 power su[2417866]: pam_unix(su:session): session opened for user spdcompu(uid=1023) by (uid=0)
Sep  7 05:35:05 power su[2417866]: pam_unix(su:session): session closed for user spdcompu
Sep  7 05:36:01 power systemd[2418703]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 05:37:01 power systemd[2419580]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 05:40:01 power systemd[2422156]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:42:01 power sudo[2423923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 05:42:01 power sudo[2423923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423923]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 05:42:01 power sudo[2423928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423928]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 05:42:01 power sudo[2423932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423932]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=2oQv4yJpyz'
Sep  7 05:42:01 power sudo[2423936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423936]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 05:42:01 power sudo[2423942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423942]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 05:42:01 power sudo[2423949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423949]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 05:42:01 power sudo[2423953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423953]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 05:42:01 power sudo[2423957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power systemd[2423974]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 05:42:01 power sudo[2423957]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 05:42:01 power sudo[2423981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423981]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 05:42:01 power sudo[2423989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423989]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 05:42:01 power sudo[2423993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423993]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2423998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 05:42:01 power sudo[2423998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2423998]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2424002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 05:42:01 power sudo[2424002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:01 power sudo[2424002]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:01 power sudo[2424007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 05:42:01 power sudo[2424007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:02 power sudo[2424007]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:04 power sudo[2424053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 05:42:04 power sudo[2424053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:04 power sudo[2424053]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:04 power sudo[2424060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 05:42:04 power sudo[2424060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:04 power sudo[2424060]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:04 power sudo[2424067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=inkigaic user-2=modernar user-3=taneccom user-4=vacuacti user-5=innofabl user-6=premiumi user-7=darkogor user-8=fnjorgmk user-9=prizmapl user-10=dslmk user-11=bozinovm user-12=supremel user-13=v5srybi9dcdx user-14=aquatech user-15=gorsajmk user-16=zdmgpsor user-17=tcieuroc user-18=mapaspla user-19=solemor1 user-20=nationa2 user-21=onlinesh user-22=versusmk user-23=fiziosmk user-24=ambitiou user-25=starluxm user-26=radekrat user-27=fffhpcwr user-28=nikolov1 user-29=hausmark user-30=forzares user-31=nikimare user-32=aptekazd user-33=lblawcom user-34=nucktra1 user-35=mediatag user-36=intelek1 user-37=matratze user-38=euronic2 user-39=kardiome user-40=apgrupmk user-41=carrent1 user-42=bogdanos user-43=mediasol user-44=nutrivim user-45=samasped user-46=chemhemc user-47=zapovim1 user-48=elektrot user-49=cosmatob
Sep  7 05:42:04 power sudo[2424067]: wp-toolkit : (command continued) user-50=euromaki user-51=pravekom user-52=vtranseu user-53=infopor1 user-54=albuname user-55=glammace user-56=imdskopj user-57=bbbustou user-58=biplmk user-59=kaoilmk user-60=pelagini user-61=solointe user-62=jaramk user-63=recorgmk user-64=taktcomm user-65=cleanerm user-66=animatem user-67=progress user-68=atspedco user-69=sssoluti user-70=electrol user-71=naksorgm user-72=eliksirz user-73=trigemat user-74=golakkom user-75=solarinv user-76=eurofarm user-77=viplastc user-78=wineberr user-79=mbmehani user-80=ismassag user-81=workbenc user-82=evberasm user-83=bonitavi user-84=conserva user-85=cupidpro user-86=vegemk1 user-87=euronic3 user-88=bauerin2 user-89=folklore user-90=fxxcom user-91=peshkai1 user-92=dimpalne user-93=eaptekam user-94=gradbai1 user-95=madzomk user-96=aptekafa user-97=evacommk user-98=jpkomuna user-99=izzomk user-100=makdrone user-101=tehnodro user-102=trudovop user-103=viewinn user-104=vmro
Sep  7 05:42:04 power sudo[2424067]: wp-toolkit : (command continued) user-105=enaspotc user-106=bauerbg user-107=uhostmk5 user-108=oouslave user-109=raremk user-110=stojnevi user-111=anitermc user-112=youthgua user-113=hotammk user-114=cajsproc user-115=oncolog1 user-116=ekostoc1 user-117=levantmk user-118=nefrolog user-119=caramk user-120=hidrommk user-121=frizered user-122=evolvepl user-123=pelagoni user-124=socioloz user-125=avtogumi user-126=nolimits user-127=kolened1 user-128=nlpmkorg user-129=centarba user-130=seloviro user-131=enochmk user-132=herbalpl user-133=sprintst user-134=dikimk12 user-135=berbermk user-136=edomcomm user-137=rastiraz user-138=holiyayt user-139=stravelm user-140=robustco user-141=wondersp user-142=pecakome user-143=dnevnoin user-144=tradeyou user-145=gjorgeiv user-146=gocruise user-147=mstmmk user-148=goodnews user-149=proverim user-150=dadarmk user-151=tealmk user-152=cabinetm user-153=vezilkac user-154=itradeco user-155=janiboja user-156=bovincom
Sep  7 05:42:04 power sudo[2424067]: wp-toolkit : (command continued) user-157=stojano1 user-158=klimimk user-159=stokovna user-160=sparkupm user-161=custome1 user-162=busymard user-163=zampmk user-164=zvskopje user-165=palenzok user-166=dalmacom user-167=cetplatf user-168=premiuma user-169=kouzonco user-170=butelmk user-171=daris user-172=premiums user-173=screenme user-174=arturaco user-175=nasaidni user-176=karpospo user-177=ideaplus user-178=drleomk user-179=inotekso user-180=jpparkin user-181=rasmorgm user-182=skyapart user-183=bianasho user-184=makoasmk user-185=mfashion user-186=dhamachi user-187=volkanco user-188=goartsym user-189=workandt user-190=barececo user-191=delcevca user-192=getaldus user-193=simbiome user-194=mpbmk user-195=agrosind user-196=univerz1 user-197=kujnamon user-198=gogovan1 user-199=velmk user-200=datalink user-201=polyeste user-202=vfxnestc user-203=ivanjord user-204=groskome user-205=sedcmk user-206=maleshne user-207=datelcom user-208=bizporta
Sep  7 05:42:04 power sudo[2424067]: wp-toolkit : (command continued) user-209=mspmk user-210=infobadi user-211=detskagr user-212=spdcompu user-213=urbanexp user-214=wikicamp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 05:42:04 power sudo[2424067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:05 power sudo[2424067]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:05 power sudo[2424087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 05:42:05 power sudo[2424087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:05 power sudo[2424087]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:05 power sudo[2424091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mBhdPQV6cg51xyhd.~
Sep  7 05:42:05 power sudo[2424091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:05 power sudo[2424091]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:05 power sudo[2424095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mBhdPQV6cg51xyhd.~\''
Sep  7 05:42:05 power sudo[2424095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:05 power sudo[2424095]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:05 power sudo[2424100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mBhdPQV6cg51xyhd.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 05:42:05 power sudo[2424100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:05 power sudo[2424100]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:05 power sudo[2424104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 05:42:05 power sudo[2424104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:05 power sudo[2424104]: pam_unix(sudo:session): session closed for user root
Sep  7 05:42:05 power sudo[2424286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 05:42:05 power sudo[2424286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 05:42:05 power sudo[2424286]: pam_unix(sudo:session): session closed for user root
Sep  7 05:45:01 power systemd[2427674]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:50:01 power systemd[2432836]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 05:50:19 power sshd[2433164]: Connection closed by 89.248.168.227 port 45968 [preauth]
Sep  7 05:55:01 power systemd[2438014]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:00:01 power systemd[2443166]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:00:01 power systemd[2443174]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 06:00:01 power systemd[2443175]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 06:00:01 power systemd[2443178]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 06:04:36 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 06:05:01 power systemd[2448126]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:06:01 power systemd[2449261]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 06:07:01 power systemd[2450304]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 06:10:01 power systemd[2453645]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:12:01 power systemd[2455343]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 06:15:01 power systemd[2458383]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:20:02 power systemd[2463216]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:25:01 power systemd[2468867]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:30:01 power systemd[2473196]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:30:01 power systemd[2473198]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 06:30:01 power systemd[2473199]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 06:30:01 power systemd[2473201]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 06:35:01 power systemd[2477843]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:36:01 power systemd[2479026]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 06:37:01 power systemd[2480053]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 06:40:01 power systemd[2483221]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:42:01 power systemd[2485358]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 06:42:01 power sudo[2485369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 06:42:01 power sudo[2485369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485369]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 06:42:01 power sudo[2485376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485376]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 06:42:01 power sudo[2485380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485380]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=R9GAbZlwGh'
Sep  7 06:42:01 power sudo[2485384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485384]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 06:42:01 power sudo[2485394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485394]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 06:42:01 power sudo[2485399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485399]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 06:42:01 power sudo[2485404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485404]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 06:42:01 power sudo[2485408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485408]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 06:42:01 power sudo[2485415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485415]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 06:42:01 power sudo[2485419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485419]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 06:42:01 power sudo[2485423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485423]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 06:42:01 power sudo[2485427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485427]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 06:42:01 power sudo[2485432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:01 power sudo[2485432]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:01 power sudo[2485437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 06:42:01 power sudo[2485437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:02 power sudo[2485437]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:03 power sudo[2485476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 06:42:03 power sudo[2485476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:03 power sudo[2485476]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:04 power sudo[2485482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 06:42:04 power sudo[2485482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:04 power sudo[2485482]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:04 power sudo[2485489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=maleshne user-2=datelcom user-3=bizporta user-4=polyeste user-5=vfxnestc user-6=groskome user-7=ivanjord user-8=sedcmk user-9=urbanexp user-10=wikicamp user-11=infobadi user-12=mspmk user-13=detskagr user-14=spdcompu user-15=mfashion user-16=dhamachi user-17=volkanco user-18=goartsym user-19=workandt user-20=barececo user-21=delcevca user-22=simbiome user-23=getaldus user-24=rasmorgm user-25=skyapart user-26=makoasmk user-27=bianasho user-28=kujnamon user-29=univerz1 user-30=velmk user-31=gogovan1 user-32=datalink user-33=mpbmk user-34=agrosind user-35=dalmacom user-36=cetplatf user-37=premiuma user-38=kouzonco user-39=drleomk user-40=inotekso user-41=jpparkin user-42=butelmk user-43=daris user-44=premiums user-45=screenme user-46=arturaco user-47=karpospo user-48=nasaidni user-49=ideaplus user-50=bovincom
Sep  7 06:42:04 power sudo[2485489]: wp-toolkit : (command continued) user-51=stojano1 user-52=cabinetm user-53=vezilkac user-54=itradeco user-55=janiboja user-56=custome1 user-57=zampmk user-58=busymard user-59=zvskopje user-60=palenzok user-61=klimimk user-62=stokovna user-63=sparkupm user-64=dnevnoin user-65=gjorgeiv user-66=tradeyou user-67=rastiraz user-68=holiyayt user-69=stravelm user-70=robustco user-71=wondersp user-72=pecakome user-73=proverim user-74=dadarmk user-75=tealmk user-76=gocruise user-77=mstmmk user-78=goodnews user-79=seloviro user-80=nolimits user-81=kolened1 user-82=centarba user-83=nlpmkorg user-84=berbermk user-85=edomcomm user-86=herbalpl user-87=enochmk user-88=sprintst user-89=dikimk12 user-90=caramk user-91=hidrommk user-92=frizered user-93=levantmk user-94=ekostoc1 user-95=oncolog1 user-96=nefrolog user-97=pelagoni user-98=socioloz user-99=avtogumi user-100=evolvepl user-101=bauerbg user-102=uhostmk5 user-103=oouslave user-104=raremk user-105=stojnevi
Sep  7 06:42:04 power sudo[2485489]: wp-toolkit : (command continued) user-106=trudovop user-107=viewinn user-108=vmro user-109=enaspotc user-110=hotammk user-111=cajsproc user-112=anitermc user-113=youthgua user-114=gradbai1 user-115=madzomk user-116=aptekafa user-117=evacommk user-118=fxxcom user-119=peshkai1 user-120=dimpalne user-121=eaptekam user-122=makdrone user-123=tehnodro user-124=jpkomuna user-125=izzomk user-126=conserva user-127=cupidpro user-128=vegemk1 user-129=euronic3 user-130=evberasm user-131=bonitavi user-132=bauerin2 user-133=folklore user-134=solarinv user-135=eurofarm user-136=electrol user-137=eliksirz user-138=naksorgm user-139=trigemat user-140=golakkom user-141=mbmehani user-142=ismassag user-143=workbenc user-144=viplastc user-145=wineberr user-146=pelagini user-147=bbbustou user-148=biplmk user-149=kaoilmk user-150=cleanerm user-151=animatem user-152=progress user-153=atspedco user-154=sssoluti user-155=solointe user-156=jaramk user-157=taktcomm
Sep  7 06:42:04 power sudo[2485489]: wp-toolkit : (command continued) user-158=recorgmk user-159=zapovim1 user-160=elektrot user-161=cosmatob user-162=euromaki user-163=nutrivim user-164=samasped user-165=chemhemc user-166=albuname user-167=glammace user-168=imdskopj user-169=vtranseu user-170=pravekom user-171=infopor1 user-172=lblawcom user-173=nucktra1 user-174=mediatag user-175=intelek1 user-176=hausmark user-177=nikolov1 user-178=forzares user-179=nikimare user-180=aptekazd user-181=kardiome user-182=apgrupmk user-183=carrent1 user-184=bogdanos user-185=mediasol user-186=matratze user-187=euronic2 user-188=mapaspla user-189=solemor1 user-190=nationa2 user-191=onlinesh user-192=tcieuroc user-193=starluxm user-194=radekrat user-195=fffhpcwr user-196=versusmk user-197=fiziosmk user-198=ambitiou user-199=taneccom user-200=vacuacti user-201=premiumi user-202=innofabl user-203=dslmk user-204=darkogor user-205=prizmapl user-206=fnjorgmk user-207=bozinovm user-208=inkigaic
Sep  7 06:42:04 power sudo[2485489]: wp-toolkit : (command continued) user-209=modernar user-210=zdmgpsor user-211=supremel user-212=v5srybi9dcdx user-213=aquatech user-214=gorsajmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 06:42:04 power sudo[2485489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:04 power sudo[2485489]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:04 power sudo[2485501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 06:42:04 power sudo[2485501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:04 power sudo[2485501]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:04 power sudo[2485505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uaL2h3CfUzGmkSGb.~
Sep  7 06:42:04 power sudo[2485505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:04 power sudo[2485505]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:04 power sudo[2485509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uaL2h3CfUzGmkSGb.~\''
Sep  7 06:42:04 power sudo[2485509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:04 power sudo[2485509]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:04 power sudo[2485514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uaL2h3CfUzGmkSGb.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 06:42:04 power sudo[2485514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:04 power sudo[2485514]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:04 power sudo[2485518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 06:42:04 power sudo[2485518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:04 power sudo[2485518]: pam_unix(sudo:session): session closed for user root
Sep  7 06:42:04 power sudo[2485692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 06:42:04 power sudo[2485692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 06:42:05 power sudo[2485692]: pam_unix(sudo:session): session closed for user root
Sep  7 06:43:59 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 06:45:01 power systemd[2490005]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:50:01 power systemd[2495021]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:55:01 power systemd[2501483]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 06:59:22 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 07:00:01 power systemd[2506640]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:00:01 power systemd[2506642]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 07:00:01 power systemd[2506645]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 07:00:01 power systemd[2506643]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 07:05:02 power systemd[2512117]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:05:59 power sshd[2513312]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
Sep  7 07:05:59 power sshd[2513312]: banner exchange: Connection from 192.155.90.118 port 43066: invalid format
Sep  7 07:05:59 power sshd[2513320]: error: kex_exchange_identification: banner line contains invalid characters
Sep  7 07:05:59 power sshd[2513320]: banner exchange: Connection from 192.155.90.118 port 43070: invalid format
Sep  7 07:06:01 power systemd[2513372]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 07:07:01 power systemd[2514237]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 07:10:01 power systemd[2517351]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:12:01 power systemd[2518973]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 07:15:01 power systemd[2521995]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:20:02 power systemd[2527148]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:21:38 power sudo[2528659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 07:21:38 power sudo[2528659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:21:38 power sudo[2528659]: pam_unix(sudo:session): session closed for user root
Sep  7 07:21:38 power sudo[2528664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep  7 07:21:38 power sudo[2528664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:21:39 power sudo[2528664]: pam_unix(sudo:session): session closed for user root
Sep  7 07:21:39 power sudo[2528682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt Mime list_redirects --output=json'
Sep  7 07:21:39 power sudo[2528682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:21:39 power sudo[2528682]: pam_unix(sudo:session): session closed for user root
Sep  7 07:25:01 power systemd[2533148]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:30:01 power systemd[2539265]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:30:01 power systemd[2539269]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 07:30:01 power systemd[2539268]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 07:30:01 power systemd[2539271]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 07:35:01 power systemd[2545668]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:36:01 power systemd[2546928]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 07:37:01 power systemd[2548152]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 07:40:01 power systemd[2551559]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:42:01 power sudo[2553797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 07:42:01 power sudo[2553797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553797]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 07:42:01 power sudo[2553802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553802]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 07:42:01 power sudo[2553807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553807]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=TTiLIveUJF'
Sep  7 07:42:01 power sudo[2553811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553811]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 07:42:01 power sudo[2553818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553818]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 07:42:01 power sudo[2553824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553824]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 07:42:01 power sudo[2553828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553828]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 07:42:01 power sudo[2553832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553832]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 07:42:01 power sudo[2553841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553841]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 07:42:01 power sudo[2553845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553845]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 07:42:01 power sudo[2553849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553849]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 07:42:01 power sudo[2553854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553854]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 07:42:01 power sudo[2553858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power sudo[2553858]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:01 power sudo[2553862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 07:42:01 power sudo[2553862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:01 power systemd[2553879]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 07:42:02 power sudo[2553862]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:05 power sudo[2553941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 07:42:05 power sudo[2553941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:06 power sudo[2553941]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:06 power sudo[2553947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 07:42:06 power sudo[2553947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:06 power sudo[2553947]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:06 power sudo[2553954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=ismassag user-2=workbenc user-3=mbmehani user-4=viplastc user-5=wineberr user-6=eurofarm user-7=solarinv user-8=golakkom user-9=electrol user-10=eliksirz user-11=naksorgm user-12=trigemat user-13=atspedco user-14=sssoluti user-15=cleanerm user-16=animatem user-17=progress user-18=recorgmk user-19=taktcomm user-20=solointe user-21=jaramk user-22=pelagini user-23=bbbustou user-24=kaoilmk user-25=biplmk user-26=tehnodro user-27=makdrone user-28=jpkomuna user-29=izzomk user-30=madzomk user-31=aptekafa user-32=evacommk user-33=gradbai1 user-34=dimpalne user-35=eaptekam user-36=fxxcom user-37=peshkai1 user-38=folklore user-39=bauerin2 user-40=cupidpro user-41=vegemk1 user-42=euronic3 user-43=conserva user-44=evberasm user-45=bonitavi user-46=fffhpcwr user-47=starluxm user-48=radekrat user-49=fiziosmk
Sep  7 07:42:06 power sudo[2553954]: wp-toolkit : (command continued) user-50=ambitiou user-51=versusmk user-52=nationa2 user-53=onlinesh user-54=mapaspla user-55=solemor1 user-56=tcieuroc user-57=zdmgpsor user-58=aquatech user-59=gorsajmk user-60=supremel user-61=v5srybi9dcdx user-62=vacuacti user-63=innofabl user-64=premiumi user-65=darkogor user-66=fnjorgmk user-67=prizmapl user-68=dslmk user-69=bozinovm user-70=taneccom user-71=modernar user-72=inkigaic user-73=imdskopj user-74=albuname user-75=glammace user-76=infopor1 user-77=vtranseu user-78=pravekom user-79=cosmatob user-80=euromaki user-81=zapovim1 user-82=elektrot user-83=samasped user-84=chemhemc user-85=nutrivim user-86=apgrupmk user-87=carrent1 user-88=bogdanos user-89=mediasol user-90=kardiome user-91=matratze user-92=euronic2 user-93=mediatag user-94=intelek1 user-95=lblawcom user-96=nucktra1 user-97=forzares user-98=nikimare user-99=aptekazd user-100=nikolov1 user-101=hausmark user-102=drleomk user-103=inotekso
Sep  7 07:42:06 power sudo[2553954]: wp-toolkit : (command continued) user-104=jpparkin user-105=screenme user-106=arturaco user-107=nasaidni user-108=karpospo user-109=ideaplus user-110=butelmk user-111=daris user-112=premiums user-113=premiuma user-114=kouzonco user-115=dalmacom user-116=cetplatf user-117=zampmk user-118=zvskopje user-119=busymard user-120=palenzok user-121=custome1 user-122=stokovna user-123=sparkupm user-124=klimimk user-125=stojano1 user-126=bovincom user-127=itradeco user-128=janiboja user-129=cabinetm user-130=vezilkac user-131=urbanexp user-132=wikicamp user-133=detskagr user-134=spdcompu user-135=infobadi user-136=mspmk user-137=bizporta user-138=maleshne user-139=datelcom user-140=ivanjord user-141=groskome user-142=sedcmk user-143=polyeste user-144=vfxnestc user-145=datalink user-146=kujnamon user-147=univerz1 user-148=velmk user-149=gogovan1 user-150=mpbmk user-151=agrosind user-152=workandt user-153=barececo user-154=simbiome user-155=delcevca
Sep  7 07:42:06 power sudo[2553954]: wp-toolkit : (command continued) user-156=getaldus user-157=mfashion user-158=dhamachi user-159=goartsym user-160=volkanco user-161=skyapart user-162=bianasho user-163=makoasmk user-164=rasmorgm user-165=socioloz user-166=avtogumi user-167=pelagoni user-168=evolvepl user-169=hidrommk user-170=frizered user-171=caramk user-172=oncolog1 user-173=ekostoc1 user-174=levantmk user-175=nefrolog user-176=hotammk user-177=cajsproc user-178=anitermc user-179=youthgua user-180=stojnevi user-181=bauerbg user-182=uhostmk5 user-183=oouslave user-184=raremk user-185=viewinn user-186=trudovop user-187=vmro user-188=enaspotc user-189=tealmk user-190=proverim user-191=dadarmk user-192=mstmmk user-193=goodnews user-194=gocruise user-195=tradeyou user-196=gjorgeiv user-197=dnevnoin user-198=robustco user-199=stravelm user-200=wondersp user-201=pecakome user-202=rastiraz user-203=holiyayt user-204=berbermk user-205=edomcomm user-206=enochmk user-207=herbalpl
Sep  7 07:42:06 power sudo[2553954]: wp-toolkit : (command continued) user-208=sprintst user-209=dikimk12 user-210=seloviro user-211=kolened1 user-212=nlpmkorg user-213=centarba user-214=nolimits feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 07:42:06 power sudo[2553954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:06 power sudo[2553954]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:06 power sudo[2553968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 07:42:06 power sudo[2553968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:06 power sudo[2553968]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:06 power sudo[2553972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6VfH9mZCmzSglmBf.~
Sep  7 07:42:06 power sudo[2553972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:06 power sudo[2553972]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:06 power sudo[2553976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6VfH9mZCmzSglmBf.~\''
Sep  7 07:42:06 power sudo[2553976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:06 power sudo[2553976]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:06 power sudo[2553981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6VfH9mZCmzSglmBf.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 07:42:06 power sudo[2553981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:06 power sudo[2553981]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:06 power sudo[2553986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 07:42:06 power sudo[2553986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:06 power sudo[2553986]: pam_unix(sudo:session): session closed for user root
Sep  7 07:42:07 power sudo[2554567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 07:42:07 power sudo[2554567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 07:42:07 power sudo[2554567]: pam_unix(sudo:session): session closed for user root
Sep  7 07:45:01 power systemd[2558229]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:50:02 power systemd[2564299]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 07:55:01 power systemd[2569993]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:00:01 power systemd[2575341]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:00:01 power systemd[2575345]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 08:00:01 power systemd[2575347]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 08:00:01 power systemd[2575350]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 08:00:01 power systemd[2575351]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  7 08:05:01 power systemd[2582226]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:06:01 power systemd[2583416]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 08:07:01 power systemd[2584582]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 08:10:01 power systemd[2588235]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:12:01 power systemd[2590506]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 08:15:01 power systemd[2594013]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:20:01 power systemd[2600138]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:25:01 power systemd[2606486]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:30:01 power systemd[2612297]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:30:01 power systemd[2612298]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 08:30:01 power systemd[2612299]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 08:30:01 power systemd[2612301]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 08:35:01 power systemd[2618309]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:36:01 power systemd[2619438]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 08:37:01 power systemd[2620501]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 08:40:01 power systemd[2624350]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:42:01 power sudo[2626563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 08:42:01 power sudo[2626563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626563]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 08:42:01 power sudo[2626567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626567]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 08:42:01 power sudo[2626571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626571]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=JjjmiNwuiU'
Sep  7 08:42:01 power sudo[2626575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626575]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 08:42:01 power sudo[2626581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626581]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 08:42:01 power sudo[2626585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626585]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 08:42:01 power sudo[2626589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626589]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 08:42:01 power sudo[2626593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626593]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 08:42:01 power sudo[2626599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626599]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 08:42:01 power sudo[2626603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626603]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 08:42:01 power sudo[2626607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626607]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 08:42:01 power sudo[2626611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626611]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 08:42:01 power sudo[2626615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:01 power sudo[2626615]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:01 power sudo[2626619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 08:42:01 power sudo[2626619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:02 power systemd[2626639]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 08:42:02 power sudo[2626619]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:04 power sudo[2626687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 08:42:04 power sudo[2626687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:04 power sudo[2626687]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:04 power sudo[2626692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 08:42:04 power sudo[2626692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:04 power sudo[2626692]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:04 power sudo[2626697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=workbenc user-2=ismassag user-3=mbmehani user-4=wineberr user-5=viplastc user-6=eurofarm user-7=solarinv user-8=golakkom user-9=naksorgm user-10=eliksirz user-11=trigemat user-12=electrol user-13=sssoluti user-14=atspedco user-15=progress user-16=cleanerm user-17=animatem user-18=recorgmk user-19=taktcomm user-20=jaramk user-21=solointe user-22=pelagini user-23=biplmk user-24=kaoilmk user-25=bbbustou user-26=tehnodro user-27=makdrone user-28=izzomk user-29=jpkomuna user-30=madzomk user-31=aptekafa user-32=evacommk user-33=gradbai1 user-34=eaptekam user-35=dimpalne user-36=fxxcom user-37=peshkai1 user-38=folklore user-39=bauerin2 user-40=euronic3 user-41=cupidpro user-42=vegemk1 user-43=conserva user-44=evberasm user-45=bonitavi user-46=fffhpcwr user-47=starluxm user-48=radekrat user-49=ambitiou
Sep  7 08:42:04 power sudo[2626697]: wp-toolkit : (command continued) user-50=fiziosmk user-51=versusmk user-52=onlinesh user-53=nationa2 user-54=solemor1 user-55=mapaspla user-56=tcieuroc user-57=zdmgpsor user-58=aquatech user-59=gorsajmk user-60=v5srybi9dcdx user-61=supremel user-62=dslmk user-63=darkogor user-64=fnjorgmk user-65=prizmapl user-66=bozinovm user-67=vacuacti user-68=innofabl user-69=premiumi user-70=taneccom user-71=modernar user-72=inkigaic user-73=imdskopj user-74=albuname user-75=glammace user-76=infopor1 user-77=vtranseu user-78=pravekom user-79=euromaki user-80=cosmatob user-81=elektrot user-82=zapovim1 user-83=samasped user-84=chemhemc user-85=nutrivim user-86=carrent1 user-87=bogdanos user-88=mediasol user-89=apgrupmk user-90=kardiome user-91=matratze user-92=euronic2 user-93=mediatag user-94=intelek1 user-95=nucktra1 user-96=lblawcom user-97=nikimare user-98=aptekazd user-99=forzares user-100=nikolov1 user-101=hausmark user-102=inotekso user-103=jpparkin
Sep  7 08:42:04 power sudo[2626697]: wp-toolkit : (command continued) user-104=drleomk user-105=karpospo user-106=nasaidni user-107=ideaplus user-108=screenme user-109=arturaco user-110=butelmk user-111=daris user-112=premiums user-113=kouzonco user-114=premiuma user-115=cetplatf user-116=dalmacom user-117=palenzok user-118=zampmk user-119=busymard user-120=zvskopje user-121=custome1 user-122=stokovna user-123=sparkupm user-124=klimimk user-125=stojano1 user-126=bovincom user-127=janiboja user-128=itradeco user-129=vezilkac user-130=cabinetm user-131=wikicamp user-132=urbanexp user-133=spdcompu user-134=detskagr user-135=infobadi user-136=mspmk user-137=bizporta user-138=maleshne user-139=datelcom user-140=sedcmk user-141=groskome user-142=ivanjord user-143=polyeste user-144=vfxnestc user-145=datalink user-146=univerz1 user-147=kujnamon user-148=velmk user-149=gogovan1 user-150=mpbmk user-151=agrosind user-152=barececo user-153=delcevca user-154=getaldus user-155=simbiome
Sep  7 08:42:04 power sudo[2626697]: wp-toolkit : (command continued) user-156=workandt user-157=dhamachi user-158=volkanco user-159=goartsym user-160=mfashion user-161=skyapart user-162=bianasho user-163=makoasmk user-164=rasmorgm user-165=socioloz user-166=avtogumi user-167=pelagoni user-168=evolvepl user-169=hidrommk user-170=frizered user-171=caramk user-172=ekostoc1 user-173=oncolog1 user-174=levantmk user-175=nefrolog user-176=cajsproc user-177=hotammk user-178=anitermc user-179=youthgua user-180=stojnevi user-181=oouslave user-182=raremk user-183=bauerbg user-184=uhostmk5 user-185=enaspotc user-186=trudovop user-187=viewinn user-188=vmro user-189=tealmk user-190=dadarmk user-191=proverim user-192=goodnews user-193=mstmmk user-194=gocruise user-195=gjorgeiv user-196=tradeyou user-197=dnevnoin user-198=pecakome user-199=robustco user-200=stravelm user-201=wondersp user-202=holiyayt user-203=rastiraz user-204=edomcomm user-205=berbermk user-206=dikimk12 user-207=enochmk
Sep  7 08:42:04 power sudo[2626697]: wp-toolkit : (command continued) user-208=herbalpl user-209=sprintst user-210=seloviro user-211=kolened1 user-212=nlpmkorg user-213=centarba user-214=nolimits feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 08:42:04 power sudo[2626697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:05 power sudo[2626697]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:05 power sudo[2626776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 08:42:05 power sudo[2626776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:05 power sudo[2626776]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:05 power sudo[2626780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MQhKcQKcgqCOiHpQ.~
Sep  7 08:42:05 power sudo[2626780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:05 power sudo[2626780]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:05 power sudo[2626784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MQhKcQKcgqCOiHpQ.~\''
Sep  7 08:42:05 power sudo[2626784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:05 power sudo[2626784]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:05 power sudo[2626789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MQhKcQKcgqCOiHpQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 08:42:05 power sudo[2626789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:05 power sudo[2626789]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:05 power sudo[2626794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 08:42:05 power sudo[2626794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:05 power sudo[2626794]: pam_unix(sudo:session): session closed for user root
Sep  7 08:42:05 power sudo[2627248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 08:42:05 power sudo[2627248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 08:42:05 power sudo[2627248]: pam_unix(sudo:session): session closed for user root
Sep  7 08:45:01 power systemd[2631190]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:50:01 power systemd[2636989]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 08:53:01 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 08:53:57 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 08:55:01 power systemd[2642906]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:00:01 power systemd[2648348]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:00:01 power systemd[2648357]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 09:00:01 power systemd[2648358]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 09:00:01 power systemd[2648360]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 09:00:01 power systemd[2648361]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  7 09:05:01 power systemd[2654243]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:06:01 power systemd[2655537]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 09:07:01 power systemd[2656714]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 09:10:01 power systemd[2660309]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:12:01 power systemd[2662563]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 09:15:01 power systemd[2665727]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:20:01 power systemd[2670884]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:25:01 power systemd[2675501]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:30:01 power systemd[2680746]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:30:01 power systemd[2680747]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 09:30:01 power systemd[2680748]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 09:30:01 power systemd[2680750]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 09:35:01 power systemd[2685833]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:36:01 power systemd[2686906]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 09:37:01 power systemd[2687890]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 09:40:01 power systemd[2690989]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:42:01 power systemd[2692893]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 09:42:01 power sudo[2692920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 09:42:01 power sudo[2692920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692920]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 09:42:01 power sudo[2692925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692925]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 09:42:01 power sudo[2692929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692929]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=0lvbpUPabq'
Sep  7 09:42:01 power sudo[2692933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692933]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 09:42:01 power sudo[2692940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692940]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 09:42:01 power sudo[2692944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692944]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 09:42:01 power sudo[2692948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692948]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 09:42:01 power sudo[2692952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692952]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 09:42:01 power sudo[2692964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692964]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 09:42:01 power sudo[2692969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692969]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 09:42:01 power sudo[2692973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692973]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 09:42:01 power sudo[2692978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692978]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 09:42:01 power sudo[2692982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:01 power sudo[2692982]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:01 power sudo[2692986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 09:42:01 power sudo[2692986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:02 power sudo[2692986]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:04 power sudo[2693029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 09:42:04 power sudo[2693029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:04 power sudo[2693029]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:04 power sudo[2693034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 09:42:04 power sudo[2693034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:04 power sudo[2693034]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:04 power sudo[2693040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=ekostoc1 user-2=levantmk user-3=oncolog1 user-4=nefrolog user-5=hidrommk user-6=frizered user-7=caramk user-8=evolvepl user-9=socioloz user-10=avtogumi user-11=pelagoni user-12=trudovop user-13=viewinn user-14=vmro user-15=enaspotc user-16=stojnevi user-17=bauerbg user-18=uhostmk5 user-19=oouslave user-20=raremk user-21=anitermc user-22=youthgua user-23=hotammk user-24=cajsproc user-25=stravelm user-26=robustco user-27=wondersp user-28=pecakome user-29=rastiraz user-30=holiyayt user-31=gjorgeiv user-32=tradeyou user-33=dnevnoin user-34=mstmmk user-35=goodnews user-36=gocruise user-37=tealmk user-38=proverim user-39=dadarmk user-40=kolened1 user-41=nlpmkorg user-42=centarba user-43=nolimits user-44=seloviro user-45=enochmk user-46=herbalpl user-47=sprintst user-48=dikimk12 user-49=berbermk user-50=edomcomm
Sep  7 09:42:04 power sudo[2693040]: wp-toolkit : (command continued) user-51=premiuma user-52=kouzonco user-53=dalmacom user-54=cetplatf user-55=screenme user-56=arturaco user-57=nasaidni user-58=karpospo user-59=ideaplus user-60=butelmk user-61=daris user-62=premiums user-63=drleomk user-64=inotekso user-65=jpparkin user-66=itradeco user-67=janiboja user-68=cabinetm user-69=vezilkac user-70=stojano1 user-71=bovincom user-72=stokovna user-73=sparkupm user-74=klimimk user-75=zampmk user-76=zvskopje user-77=busymard user-78=palenzok user-79=custome1 user-80=ivanjord user-81=groskome user-82=sedcmk user-83=polyeste user-84=vfxnestc user-85=bizporta user-86=maleshne user-87=datelcom user-88=detskagr user-89=spdcompu user-90=mspmk user-91=infobadi user-92=urbanexp user-93=wikicamp user-94=skyapart user-95=bianasho user-96=makoasmk user-97=rasmorgm user-98=workandt user-99=barececo user-100=delcevca user-101=simbiome user-102=getaldus user-103=mfashion user-104=dhamachi
Sep  7 09:42:04 power sudo[2693040]: wp-toolkit : (command continued) user-105=volkanco user-106=goartsym user-107=mpbmk user-108=agrosind user-109=datalink user-110=univerz1 user-111=kujnamon user-112=velmk user-113=gogovan1 user-114=tcieuroc user-115=nationa2 user-116=onlinesh user-117=mapaspla user-118=solemor1 user-119=fiziosmk user-120=ambitiou user-121=versusmk user-122=fffhpcwr user-123=starluxm user-124=radekrat user-125=modernar user-126=inkigaic user-127=vacuacti user-128=innofabl user-129=premiumi user-130=prizmapl user-131=darkogor user-132=fnjorgmk user-133=dslmk user-134=bozinovm user-135=taneccom user-136=aquatech user-137=gorsajmk user-138=supremel user-139=v5srybi9dcdx user-140=zdmgpsor user-141=chemhemc user-142=samasped user-143=nutrivim user-144=cosmatob user-145=euromaki user-146=zapovim1 user-147=elektrot user-148=infopor1 user-149=vtranseu user-150=pravekom user-151=imdskopj user-152=albuname user-153=glammace user-154=forzares user-155=nikimare
Sep  7 09:42:04 power sudo[2693040]: wp-toolkit : (command continued) user-156=aptekazd user-157=nikolov1 user-158=hausmark user-159=mediatag user-160=intelek1 user-161=lblawcom user-162=nucktra1 user-163=matratze user-164=euronic2 user-165=apgrupmk user-166=carrent1 user-167=bogdanos user-168=mediasol user-169=kardiome user-170=golakkom user-171=electrol user-172=eliksirz user-173=naksorgm user-174=trigemat user-175=eurofarm user-176=solarinv user-177=viplastc user-178=wineberr user-179=ismassag user-180=workbenc user-181=mbmehani user-182=bbbustou user-183=kaoilmk user-184=biplmk user-185=pelagini user-186=recorgmk user-187=taktcomm user-188=solointe user-189=jaramk user-190=sssoluti user-191=atspedco user-192=cleanerm user-193=animatem user-194=progress user-195=dimpalne user-196=eaptekam user-197=fxxcom user-198=peshkai1 user-199=madzomk user-200=aptekafa user-201=evacommk user-202=gradbai1 user-203=jpkomuna user-204=izzomk user-205=tehnodro user-206=makdrone user-207=evberasm
Sep  7 09:42:04 power sudo[2693040]: wp-toolkit : (command continued) user-208=bonitavi user-209=cupidpro user-210=vegemk1 user-211=euronic3 user-212=conserva user-213=folklore user-214=bauerin2 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 09:42:04 power sudo[2693040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:05 power sudo[2693040]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:05 power sudo[2693047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 09:42:05 power sudo[2693047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:05 power sudo[2693047]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:05 power sudo[2693051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nzmU7VeGFWQpEXyK.~
Sep  7 09:42:05 power sudo[2693051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:05 power sudo[2693051]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:05 power sudo[2693055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nzmU7VeGFWQpEXyK.~\''
Sep  7 09:42:05 power sudo[2693055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:05 power sudo[2693055]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:05 power sudo[2693060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nzmU7VeGFWQpEXyK.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 09:42:05 power sudo[2693060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:05 power sudo[2693060]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:05 power sudo[2693064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 09:42:05 power sudo[2693064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:05 power sudo[2693064]: pam_unix(sudo:session): session closed for user root
Sep  7 09:42:06 power sudo[2693893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 09:42:06 power sudo[2693893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 09:42:06 power sudo[2693893]: pam_unix(sudo:session): session closed for user root
Sep  7 09:45:01 power systemd[2696690]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:50:01 power systemd[2701648]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 09:55:01 power systemd[2705859]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:00:01 power systemd[2710199]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:00:01 power systemd[2710203]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 10:00:01 power systemd[2710200]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 10:00:01 power systemd[2710204]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 10:05:01 power systemd[2715162]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:06:01 power systemd[2716189]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 10:07:01 power systemd[2717284]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 10:10:01 power systemd[2720699]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:12:01 power systemd[2722592]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 10:15:01 power systemd[2725601]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:20:01 power systemd[2731445]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:21:18 power sudo[2732825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 10:21:18 power sudo[2732825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:21:18 power sudo[2732825]: pam_unix(sudo:session): session closed for user root
Sep  7 10:21:18 power sudo[2732839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bogdanos'
Sep  7 10:21:18 power sudo[2732839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:21:19 power sudo[2732839]: pam_unix(sudo:session): session closed for user root
Sep  7 10:25:01 power systemd[2736336]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:30:01 power systemd[2740720]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:30:01 power systemd[2740722]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 10:30:01 power systemd[2740723]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 10:30:01 power systemd[2740725]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 10:35:01 power systemd[2749302]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:36:01 power systemd[2751683]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 10:37:01 power systemd[2753030]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 10:40:02 power systemd[2755843]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:42:01 power systemd[2757421]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 10:42:01 power sudo[2757437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 10:42:01 power sudo[2757437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757437]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 10:42:01 power sudo[2757443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757443]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 10:42:01 power sudo[2757450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757450]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=VJaydn3tnb'
Sep  7 10:42:01 power sudo[2757454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757454]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 10:42:01 power sudo[2757459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757459]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 10:42:01 power sudo[2757463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757463]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 10:42:01 power sudo[2757467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757467]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 10:42:01 power sudo[2757473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757473]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 10:42:01 power sudo[2757486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757486]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 10:42:01 power sudo[2757491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757491]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 10:42:01 power sudo[2757498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757498]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 10:42:01 power sudo[2757502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757502]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 10:42:01 power sudo[2757506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:01 power sudo[2757506]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:01 power sudo[2757511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 10:42:01 power sudo[2757511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:02 power sudo[2757511]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:04 power sudo[2757546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 10:42:04 power sudo[2757546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:04 power sudo[2757546]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:04 power sudo[2757552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 10:42:04 power sudo[2757552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:04 power sudo[2757552]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:04 power sudo[2757559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=folklore user-2=bauerin2 user-3=evberasm user-4=bonitavi user-5=euronic3 user-6=cupidpro user-7=vegemk1 user-8=conserva user-9=izzomk user-10=jpkomuna user-11=tehnodro user-12=makdrone user-13=eaptekam user-14=dimpalne user-15=fxxcom user-16=peshkai1 user-17=aptekafa user-18=madzomk user-19=evacommk user-20=gradbai1 user-21=recorgmk user-22=taktcomm user-23=jaramk user-24=solointe user-25=atspedco user-26=sssoluti user-27=progress user-28=cleanerm user-29=animatem user-30=kaoilmk user-31=biplmk user-32=bbbustou user-33=pelagini user-34=wineberr user-35=viplastc user-36=workbenc user-37=ismassag user-38=mbmehani user-39=golakkom user-40=eliksirz user-41=naksorgm user-42=trigemat user-43=electrol user-44=eurofarm user-45=solarinv user-46=matratze user-47=euronic2 user-48=bogdanos user-49=carrent1
Sep  7 10:42:04 power sudo[2757559]: wp-toolkit : (command continued) user-50=mediasol user-51=apgrupmk user-52=kardiome user-53=nikimare user-54=aptekazd user-55=forzares user-56=hausmark user-57=nikolov1 user-58=mediatag user-59=intelek1 user-60=nucktra1 user-61=lblawcom user-62=infopor1 user-63=vtranseu user-64=pravekom user-65=imdskopj user-66=albuname user-67=glammace user-68=chemhemc user-69=samasped user-70=nutrivim user-71=cosmatob user-72=euromaki user-73=zapovim1 user-74=elektrot user-75=aquatech user-76=gorsajmk user-77=v5srybi9dcdx user-78=supremel user-79=zdmgpsor user-80=modernar user-81=inkigaic user-82=prizmapl user-83=fnjorgmk user-84=darkogor user-85=dslmk user-86=bozinovm user-87=vacuacti user-88=premiumi user-89=innofabl user-90=taneccom user-91=ambitiou user-92=fiziosmk user-93=versusmk user-94=fffhpcwr user-95=starluxm user-96=radekrat user-97=tcieuroc user-98=onlinesh user-99=nationa2 user-100=solemor1 user-101=mapaspla user-102=mpbmk user-103=agrosind
Sep  7 10:42:04 power sudo[2757559]: wp-toolkit : (command continued) user-104=datalink user-105=univerz1 user-106=kujnamon user-107=velmk user-108=gogovan1 user-109=skyapart user-110=bianasho user-111=makoasmk user-112=rasmorgm user-113=barececo user-114=delcevca user-115=simbiome user-116=getaldus user-117=workandt user-118=dhamachi user-119=volkanco user-120=goartsym user-121=mfashion user-122=spdcompu user-123=detskagr user-124=infobadi user-125=mspmk user-126=wikicamp user-127=urbanexp user-128=sedcmk user-129=groskome user-130=ivanjord user-131=polyeste user-132=vfxnestc user-133=bizporta user-134=maleshne user-135=datelcom user-136=stokovna user-137=sparkupm user-138=klimimk user-139=palenzok user-140=zampmk user-141=zvskopje user-142=busymard user-143=custome1 user-144=janiboja user-145=itradeco user-146=vezilkac user-147=cabinetm user-148=stojano1 user-149=bovincom user-150=karpospo user-151=nasaidni user-152=ideaplus user-153=arturaco user-154=screenme user-155=daris
Sep  7 10:42:04 power sudo[2757559]: wp-toolkit : (command continued) user-156=butelmk user-157=premiums user-158=inotekso user-159=jpparkin user-160=drleomk user-161=kouzonco user-162=premiuma user-163=cetplatf user-164=dalmacom user-165=dikimk12 user-166=enochmk user-167=herbalpl user-168=sprintst user-169=edomcomm user-170=berbermk user-171=kolened1 user-172=centarba user-173=nlpmkorg user-174=nolimits user-175=seloviro user-176=goodnews user-177=mstmmk user-178=gocruise user-179=tealmk user-180=dadarmk user-181=proverim user-182=pecakome user-183=stravelm user-184=robustco user-185=wondersp user-186=holiyayt user-187=rastiraz user-188=gjorgeiv user-189=tradeyou user-190=dnevnoin user-191=anitermc user-192=youthgua user-193=cajsproc user-194=hotammk user-195=enaspotc user-196=viewinn user-197=trudovop user-198=vmro user-199=stojnevi user-200=oouslave user-201=raremk user-202=bauerbg user-203=uhostmk5 user-204=evolvepl user-205=socioloz user-206=avtogumi user-207=pelagoni
Sep  7 10:42:04 power sudo[2757559]: wp-toolkit : (command continued) user-208=ekostoc1 user-209=oncolog1 user-210=levantmk user-211=nefrolog user-212=hidrommk user-213=frizered user-214=caramk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 10:42:04 power sudo[2757559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:05 power sudo[2757559]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:05 power sudo[2757569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 10:42:05 power sudo[2757569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:05 power sudo[2757569]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:05 power sudo[2757573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V70wm7TvdKK5cBJo.~
Sep  7 10:42:05 power sudo[2757573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:05 power sudo[2757573]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:05 power sudo[2757577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V70wm7TvdKK5cBJo.~\''
Sep  7 10:42:05 power sudo[2757577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:05 power sudo[2757577]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:05 power sudo[2757582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V70wm7TvdKK5cBJo.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 10:42:05 power sudo[2757582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:05 power sudo[2757582]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:05 power sudo[2757587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 10:42:05 power sudo[2757587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:05 power sudo[2757587]: pam_unix(sudo:session): session closed for user root
Sep  7 10:42:06 power sudo[2758513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 10:42:06 power sudo[2758513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 10:42:06 power sudo[2758513]: pam_unix(sudo:session): session closed for user root
Sep  7 10:45:01 power systemd[2761307]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:50:01 power systemd[2765617]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 10:55:01 power systemd[2769916]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:00:01 power systemd[2775206]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 11:00:01 power systemd[2775202]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:00:01 power systemd[2775207]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 11:00:01 power systemd[2775209]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 11:05:01 power systemd[2780628]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:06:01 power systemd[2781711]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 11:07:01 power systemd[2782634]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 11:10:02 power systemd[2785652]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:12:01 power systemd[2787527]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 11:15:01 power systemd[2790103]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:20:01 power systemd[2794581]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:25:01 power systemd[2798590]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:30:01 power systemd[2802695]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:30:01 power systemd[2802697]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 11:30:01 power systemd[2802700]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 11:30:01 power systemd[2802698]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 11:35:01 power systemd[2807316]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:36:01 power systemd[2808128]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 11:37:01 power systemd[2808959]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 11:37:37 power sshd[2809275]: Connection closed by 206.168.34.64 port 58350 [preauth]
Sep  7 11:40:01 power systemd[2811748]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:42:01 power systemd[2813708]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 11:42:01 power sudo[2813732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 11:42:01 power sudo[2813732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813732]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 11:42:01 power sudo[2813736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813736]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 11:42:01 power sudo[2813740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813740]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=7jWx38EWFI'
Sep  7 11:42:01 power sudo[2813744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813744]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 11:42:01 power sudo[2813749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813749]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 11:42:01 power sudo[2813753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813753]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 11:42:01 power sudo[2813757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813757]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 11:42:01 power sudo[2813761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813761]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 11:42:01 power sudo[2813772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813772]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 11:42:01 power sudo[2813776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813776]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 11:42:01 power sudo[2813780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813780]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 11:42:01 power sudo[2813784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813784]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 11:42:01 power sudo[2813788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:01 power sudo[2813788]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:01 power sudo[2813793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 11:42:01 power sudo[2813793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:02 power sudo[2813793]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:04 power sudo[2813833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 11:42:04 power sudo[2813833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:05 power sudo[2813833]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:05 power sudo[2813840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 11:42:05 power sudo[2813840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:05 power sudo[2813840]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:05 power sudo[2813850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=caramk user-2=frizered user-3=hidrommk user-4=nefrolog user-5=ekostoc1 user-6=levantmk user-7=oncolog1 user-8=pelagoni user-9=socioloz user-10=avtogumi user-11=evolvepl user-12=raremk user-13=oouslave user-14=uhostmk5 user-15=bauerbg user-16=stojnevi user-17=enaspotc user-18=vmro user-19=trudovop user-20=viewinn user-21=cajsproc user-22=hotammk user-23=youthgua user-24=anitermc user-25=dnevnoin user-26=gjorgeiv user-27=tradeyou user-28=holiyayt user-29=rastiraz user-30=pecakome user-31=wondersp user-32=robustco user-33=stravelm user-34=dadarmk user-35=proverim user-36=tealmk user-37=gocruise user-38=goodnews user-39=mstmmk user-40=seloviro user-41=nolimits user-42=nlpmkorg user-43=centarba user-44=kolened1 user-45=edomcomm user-46=berbermk user-47=dikimk12 user-48=sprintst user-49=herbalpl user-50=enochmk
Sep  7 11:42:05 power sudo[2813850]: wp-toolkit : (command continued) user-51=cetplatf user-52=dalmacom user-53=kouzonco user-54=premiuma user-55=jpparkin user-56=inotekso user-57=drleomk user-58=premiums user-59=butelmk user-60=daris user-61=ideaplus user-62=karpospo user-63=nasaidni user-64=screenme user-65=arturaco user-66=bovincom user-67=stojano1 user-68=vezilkac user-69=cabinetm user-70=janiboja user-71=itradeco user-72=custome1 user-73=palenzok user-74=busymard user-75=zampmk user-76=zvskopje user-77=klimimk user-78=sparkupm user-79=stokovna user-80=datelcom user-81=maleshne user-82=bizporta user-83=vfxnestc user-84=polyeste user-85=sedcmk user-86=groskome user-87=ivanjord user-88=wikicamp user-89=urbanexp user-90=mspmk user-91=infobadi user-92=spdcompu user-93=detskagr user-94=volkanco user-95=goartsym user-96=dhamachi user-97=mfashion user-98=delcevca user-99=simbiome user-100=getaldus user-101=barececo user-102=workandt user-103=rasmorgm user-104=bianasho
Sep  7 11:42:05 power sudo[2813850]: wp-toolkit : (command continued) user-105=makoasmk user-106=skyapart user-107=gogovan1 user-108=velmk user-109=kujnamon user-110=univerz1 user-111=datalink user-112=agrosind user-113=mpbmk user-114=solemor1 user-115=mapaspla user-116=onlinesh user-117=nationa2 user-118=tcieuroc user-119=radekrat user-120=starluxm user-121=fffhpcwr user-122=versusmk user-123=ambitiou user-124=fiziosmk user-125=taneccom user-126=bozinovm user-127=dslmk user-128=fnjorgmk user-129=darkogor user-130=prizmapl user-131=innofabl user-132=premiumi user-133=vacuacti user-134=inkigaic user-135=modernar user-136=zdmgpsor user-137=v5srybi9dcdx user-138=supremel user-139=gorsajmk user-140=aquatech user-141=zapovim1 user-142=elektrot user-143=cosmatob user-144=euromaki user-145=nutrivim user-146=chemhemc user-147=samasped user-148=glammace user-149=albuname user-150=imdskopj user-151=pravekom user-152=vtranseu user-153=infopor1 user-154=nucktra1 user-155=lblawcom
Sep  7 11:42:05 power sudo[2813850]: wp-toolkit : (command continued) user-156=intelek1 user-157=mediatag user-158=hausmark user-159=nikolov1 user-160=aptekazd user-161=nikimare user-162=forzares user-163=kardiome user-164=mediasol user-165=carrent1 user-166=bogdanos user-167=apgrupmk user-168=euronic2 user-169=matratze user-170=solarinv user-171=eurofarm user-172=trigemat user-173=eliksirz user-174=naksorgm user-175=electrol user-176=golakkom user-177=mbmehani user-178=workbenc user-179=ismassag user-180=wineberr user-181=viplastc user-182=pelagini user-183=kaoilmk user-184=biplmk user-185=bbbustou user-186=progress user-187=animatem user-188=cleanerm user-189=atspedco user-190=sssoluti user-191=jaramk user-192=solointe user-193=taktcomm user-194=recorgmk user-195=gradbai1 user-196=evacommk user-197=madzomk user-198=aptekafa user-199=peshkai1 user-200=fxxcom user-201=eaptekam user-202=dimpalne user-203=makdrone user-204=tehnodro user-205=izzomk user-206=jpkomuna user-207=conserva
Sep  7 11:42:05 power sudo[2813850]: wp-toolkit : (command continued) user-208=euronic3 user-209=vegemk1 user-210=cupidpro user-211=bonitavi user-212=evberasm user-213=bauerin2 user-214=folklore feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 11:42:05 power sudo[2813850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:05 power sudo[2813850]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:05 power sudo[2813861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 11:42:05 power sudo[2813861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:05 power sudo[2813861]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:05 power sudo[2813865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gY2YZ8leKoPfnEa3.~
Sep  7 11:42:05 power sudo[2813865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:05 power sudo[2813865]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:05 power sudo[2813869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gY2YZ8leKoPfnEa3.~\''
Sep  7 11:42:05 power sudo[2813869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:05 power sudo[2813869]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:05 power sudo[2813874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gY2YZ8leKoPfnEa3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 11:42:05 power sudo[2813874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:05 power sudo[2813874]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:05 power sudo[2813878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 11:42:05 power sudo[2813878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:05 power sudo[2813878]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:06 power sudo[2814791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 11:42:06 power sudo[2814791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 11:42:06 power sudo[2814791]: pam_unix(sudo:session): session closed for user root
Sep  7 11:42:37 power sshd[2815249]: error: kex_exchange_identification: read: Connection reset by peer
Sep  7 11:42:37 power sshd[2815249]: Connection reset by 199.45.154.118 port 37324
Sep  7 11:42:59 power sshd[2815456]: Connection closed by 199.45.154.118 port 57594 [preauth]
Sep  7 11:45:01 power systemd[2817642]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:49:52 power sshd[2821455]: Connection closed by 167.94.138.37 port 35188 [preauth]
Sep  7 11:50:01 power systemd[2821865]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 11:55:01 power systemd[2826034]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:00:01 power systemd[2831120]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 12:00:01 power systemd[2831113]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:00:01 power systemd[2831121]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 12:00:01 power systemd[2831122]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 12:00:01 power systemd[2831126]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  7 12:05:01 power systemd[2837451]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:06:01 power systemd[2838584]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 12:07:01 power systemd[2839780]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 12:10:01 power systemd[2842872]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:12:02 power systemd[2845183]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 12:15:01 power systemd[2848991]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:20:01 power systemd[2854382]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:25:01 power systemd[2859393]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:30:01 power systemd[2864019]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:30:01 power systemd[2864021]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 12:30:01 power systemd[2864020]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 12:30:01 power systemd[2864023]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 12:35:01 power systemd[2869303]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:36:02 power systemd[2870145]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 12:37:01 power systemd[2871021]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 12:39:52 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 12:40:01 power systemd[2873620]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:42:01 power systemd[2875172]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 12:42:01 power sudo[2875197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 12:42:01 power sudo[2875197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875197]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 12:42:01 power sudo[2875201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875201]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 12:42:01 power sudo[2875205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875205]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=bHBBDBf7MU'
Sep  7 12:42:01 power sudo[2875209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875209]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 12:42:01 power sudo[2875214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875214]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 12:42:01 power sudo[2875219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875219]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 12:42:01 power sudo[2875224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875224]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 12:42:01 power sudo[2875228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875228]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 12:42:01 power sudo[2875234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875234]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 12:42:01 power sudo[2875239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875239]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 12:42:01 power sudo[2875243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875243]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 12:42:01 power sudo[2875247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875247]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 12:42:01 power sudo[2875251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:01 power sudo[2875251]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:01 power sudo[2875255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 12:42:01 power sudo[2875255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:02 power sudo[2875255]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:04 power sudo[2875297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 12:42:04 power sudo[2875297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:04 power sudo[2875297]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:04 power sudo[2875303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 12:42:04 power sudo[2875303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:04 power sudo[2875303]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:04 power sudo[2875308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=dadarmk user-2=proverim user-3=tealmk user-4=gocruise user-5=goodnews user-6=mstmmk user-7=dnevnoin user-8=gjorgeiv user-9=tradeyou user-10=holiyayt user-11=rastiraz user-12=pecakome user-13=wondersp user-14=robustco user-15=stravelm user-16=edomcomm user-17=berbermk user-18=dikimk12 user-19=sprintst user-20=herbalpl user-21=enochmk user-22=seloviro user-23=nolimits user-24=nlpmkorg user-25=centarba user-26=kolened1 user-27=pelagoni user-28=avtogumi user-29=socioloz user-30=evolvepl user-31=caramk user-32=frizered user-33=hidrommk user-34=nefrolog user-35=levantmk user-36=ekostoc1 user-37=oncolog1 user-38=cajsproc user-39=hotammk user-40=youthgua user-41=anitermc user-42=raremk user-43=oouslave user-44=uhostmk5 user-45=bauerbg user-46=stojnevi user-47=enaspotc user-48=vmro user-49=trudovop user-50=viewinn
Sep  7 12:42:04 power sudo[2875308]: wp-toolkit : (command continued) user-51=wikicamp user-52=urbanexp user-53=mspmk user-54=infobadi user-55=spdcompu user-56=detskagr user-57=datelcom user-58=maleshne user-59=bizporta user-60=vfxnestc user-61=polyeste user-62=sedcmk user-63=ivanjord user-64=groskome user-65=velmk user-66=gogovan1 user-67=kujnamon user-68=univerz1 user-69=datalink user-70=agrosind user-71=mpbmk user-72=volkanco user-73=goartsym user-74=dhamachi user-75=mfashion user-76=getaldus user-77=delcevca user-78=simbiome user-79=barececo user-80=workandt user-81=rasmorgm user-82=bianasho user-83=makoasmk user-84=skyapart user-85=jpparkin user-86=inotekso user-87=drleomk user-88=premiums user-89=daris user-90=butelmk user-91=ideaplus user-92=karpospo user-93=nasaidni user-94=arturaco user-95=screenme user-96=cetplatf user-97=dalmacom user-98=kouzonco user-99=premiuma user-100=custome1 user-101=palenzok user-102=zampmk user-103=zvskopje user-104=busymard user-105=klimimk
Sep  7 12:42:04 power sudo[2875308]: wp-toolkit : (command continued) user-106=sparkupm user-107=stokovna user-108=bovincom user-109=stojano1 user-110=vezilkac user-111=cabinetm user-112=janiboja user-113=itradeco user-114=glammace user-115=albuname user-116=imdskopj user-117=vtranseu user-118=pravekom user-119=infopor1 user-120=elektrot user-121=zapovim1 user-122=euromaki user-123=cosmatob user-124=nutrivim user-125=samasped user-126=chemhemc user-127=kardiome user-128=mediasol user-129=carrent1 user-130=bogdanos user-131=apgrupmk user-132=euronic2 user-133=matratze user-134=nucktra1 user-135=lblawcom user-136=intelek1 user-137=mediatag user-138=hausmark user-139=nikolov1 user-140=aptekazd user-141=nikimare user-142=forzares user-143=radekrat user-144=starluxm user-145=fffhpcwr user-146=versusmk user-147=ambitiou user-148=fiziosmk user-149=solemor1 user-150=mapaspla user-151=onlinesh user-152=nationa2 user-153=tcieuroc user-154=zdmgpsor user-155=v5srybi9dcdx user-156=supremel
Sep  7 12:42:04 power sudo[2875308]: wp-toolkit : (command continued) user-157=gorsajmk user-158=aquatech user-159=taneccom user-160=bozinovm user-161=prizmapl user-162=darkogor user-163=dslmk user-164=fnjorgmk user-165=innofabl user-166=premiumi user-167=vacuacti user-168=inkigaic user-169=modernar user-170=makdrone user-171=tehnodro user-172=izzomk user-173=jpkomuna user-174=gradbai1 user-175=evacommk user-176=madzomk user-177=aptekafa user-178=peshkai1 user-179=fxxcom user-180=eaptekam user-181=dimpalne user-182=bauerin2 user-183=folklore user-184=conserva user-185=euronic3 user-186=vegemk1 user-187=cupidpro user-188=bonitavi user-189=evberasm user-190=mbmehani user-191=workbenc user-192=ismassag user-193=wineberr user-194=viplastc user-195=solarinv user-196=eurofarm user-197=trigemat user-198=naksorgm user-199=eliksirz user-200=electrol user-201=golakkom user-202=progress user-203=animatem user-204=cleanerm user-205=sssoluti user-206=atspedco user-207=jaramk user-208=solointe
Sep  7 12:42:04 power sudo[2875308]: wp-toolkit : (command continued) user-209=taktcomm user-210=recorgmk user-211=pelagini user-212=biplmk user-213=kaoilmk user-214=bbbustou feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 12:42:04 power sudo[2875308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:05 power sudo[2875308]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:05 power sudo[2875318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 12:42:05 power sudo[2875318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:05 power sudo[2875318]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:05 power sudo[2875322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wyFaUoCfvUy0Qo4o.~
Sep  7 12:42:05 power sudo[2875322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:05 power sudo[2875322]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:05 power sudo[2875326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wyFaUoCfvUy0Qo4o.~\''
Sep  7 12:42:05 power sudo[2875326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:05 power sudo[2875326]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:05 power sudo[2875332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wyFaUoCfvUy0Qo4o.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 12:42:05 power sudo[2875332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:05 power sudo[2875332]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:05 power sudo[2875336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 12:42:05 power sudo[2875336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:05 power sudo[2875336]: pam_unix(sudo:session): session closed for user root
Sep  7 12:42:06 power sudo[2876220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 12:42:06 power sudo[2876220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 12:42:06 power sudo[2876220]: pam_unix(sudo:session): session closed for user root
Sep  7 12:45:01 power systemd[2878615]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:50:01 power systemd[2883302]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 12:55:01 power systemd[2888935]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:00:01 power systemd[2893448]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:00:01 power systemd[2893451]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 13:00:01 power systemd[2893452]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 13:00:01 power systemd[2893454]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 13:05:01 power systemd[2898949]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:06:01 power systemd[2899848]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 13:07:01 power systemd[2900959]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 13:10:01 power systemd[2903686]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:12:01 power systemd[2905456]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 13:15:01 power systemd[2908055]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:20:02 power systemd[2912379]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:22:17 power sshd[2914321]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 13:22:17 power sshd[2914321]: Connection closed by 185.247.137.184 port 41617
Sep  7 13:22:17 power sshd[2914342]: Connection closed by 185.247.137.184 port 34183 [preauth]
Sep  7 13:25:01 power systemd[2916524]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:30:01 power systemd[2920968]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:30:01 power systemd[2920972]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 13:30:01 power systemd[2920971]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 13:30:01 power systemd[2920974]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 13:34:29 power sshd[2925085]: error: kex_exchange_identification: read: Connection reset by peer
Sep  7 13:34:29 power sshd[2925085]: Connection reset by 199.45.155.72 port 34860
Sep  7 13:34:53 power sshd[2925249]: Connection closed by 199.45.155.72 port 42466 [preauth]
Sep  7 13:35:01 power systemd[2925628]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:35:01 power systemd[2925629]: pam_unix(systemd-user:session): session opened for user madzomk(uid=1125) by madzomk(uid=0)
Sep  7 13:36:01 power systemd[2926695]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 13:37:01 power systemd[2927683]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 13:40:01 power systemd[2930757]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:42:01 power systemd[2932661]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 13:42:01 power sudo[2932683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 13:42:01 power sudo[2932683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932683]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 13:42:01 power sudo[2932687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932687]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 13:42:01 power sudo[2932691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932691]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=s2TF7AUAX0'
Sep  7 13:42:01 power sudo[2932696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932696]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 13:42:01 power sudo[2932701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932701]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 13:42:01 power sudo[2932705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932705]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 13:42:01 power sudo[2932709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932709]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 13:42:01 power sudo[2932713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932713]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 13:42:01 power sudo[2932722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932722]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 13:42:01 power sudo[2932728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932728]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 13:42:01 power sudo[2932732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932732]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 13:42:01 power sudo[2932736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932736]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 13:42:01 power sudo[2932740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:01 power sudo[2932740]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:01 power sudo[2932744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 13:42:01 power sudo[2932744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:02 power sudo[2932744]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:04 power sudo[2932774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 13:42:04 power sudo[2932774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:04 power sudo[2932774]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:04 power sudo[2932779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 13:42:04 power sudo[2932779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:04 power sudo[2932779]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:04 power sudo[2932785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=polyeste user-2=vfxnestc user-3=groskome user-4=ivanjord user-5=sedcmk user-6=maleshne user-7=datelcom user-8=bizporta user-9=infobadi user-10=mspmk user-11=detskagr user-12=spdcompu user-13=urbanexp user-14=wikicamp user-15=rasmorgm user-16=skyapart user-17=bianasho user-18=makoasmk user-19=mfashion user-20=dhamachi user-21=volkanco user-22=goartsym user-23=workandt user-24=barececo user-25=getaldus user-26=delcevca user-27=simbiome user-28=mpbmk user-29=agrosind user-30=kujnamon user-31=univerz1 user-32=velmk user-33=gogovan1 user-34=datalink user-35=dalmacom user-36=cetplatf user-37=premiuma user-38=kouzonco user-39=daris user-40=butelmk user-41=premiums user-42=arturaco user-43=screenme user-44=karpospo user-45=nasaidni user-46=ideaplus user-47=drleomk user-48=inotekso user-49=jpparkin user-50=cabinetm
Sep  7 13:42:04 power sudo[2932785]: wp-toolkit : (command continued) user-51=vezilkac user-52=itradeco user-53=janiboja user-54=bovincom user-55=stojano1 user-56=klimimk user-57=stokovna user-58=sparkupm user-59=custome1 user-60=busymard user-61=zampmk user-62=zvskopje user-63=palenzok user-64=rastiraz user-65=holiyayt user-66=robustco user-67=stravelm user-68=wondersp user-69=pecakome user-70=dnevnoin user-71=tradeyou user-72=gjorgeiv user-73=gocruise user-74=mstmmk user-75=goodnews user-76=proverim user-77=dadarmk user-78=tealmk user-79=nolimits user-80=kolened1 user-81=nlpmkorg user-82=centarba user-83=seloviro user-84=herbalpl user-85=enochmk user-86=sprintst user-87=dikimk12 user-88=berbermk user-89=edomcomm user-90=levantmk user-91=ekostoc1 user-92=oncolog1 user-93=nefrolog user-94=caramk user-95=hidrommk user-96=frizered user-97=evolvepl user-98=pelagoni user-99=avtogumi user-100=socioloz user-101=trudovop user-102=viewinn user-103=vmro user-104=enaspotc user-105=bauerbg
Sep  7 13:42:04 power sudo[2932785]: wp-toolkit : (command continued) user-106=uhostmk5 user-107=oouslave user-108=raremk user-109=stojnevi user-110=anitermc user-111=youthgua user-112=hotammk user-113=cajsproc user-114=fxxcom user-115=peshkai1 user-116=dimpalne user-117=eaptekam user-118=gradbai1 user-119=madzomk user-120=aptekafa user-121=evacommk user-122=jpkomuna user-123=izzomk user-124=makdrone user-125=tehnodro user-126=evberasm user-127=bonitavi user-128=conserva user-129=cupidpro user-130=vegemk1 user-131=euronic3 user-132=bauerin2 user-133=folklore user-134=electrol user-135=naksorgm user-136=eliksirz user-137=trigemat user-138=golakkom user-139=solarinv user-140=eurofarm user-141=viplastc user-142=wineberr user-143=mbmehani user-144=ismassag user-145=workbenc user-146=bbbustou user-147=kaoilmk user-148=biplmk user-149=pelagini user-150=solointe user-151=jaramk user-152=recorgmk user-153=taktcomm user-154=cleanerm user-155=animatem user-156=progress user-157=atspedco
Sep  7 13:42:04 power sudo[2932785]: wp-toolkit : (command continued) user-158=sssoluti user-159=nutrivim user-160=chemhemc user-161=samasped user-162=zapovim1 user-163=elektrot user-164=euromaki user-165=cosmatob user-166=pravekom user-167=vtranseu user-168=infopor1 user-169=albuname user-170=glammace user-171=imdskopj user-172=hausmark user-173=nikolov1 user-174=forzares user-175=nikimare user-176=aptekazd user-177=lblawcom user-178=nucktra1 user-179=mediatag user-180=intelek1 user-181=matratze user-182=euronic2 user-183=kardiome user-184=apgrupmk user-185=carrent1 user-186=bogdanos user-187=mediasol user-188=tcieuroc user-189=mapaspla user-190=solemor1 user-191=nationa2 user-192=onlinesh user-193=versusmk user-194=fiziosmk user-195=ambitiou user-196=starluxm user-197=radekrat user-198=fffhpcwr user-199=inkigaic user-200=modernar user-201=taneccom user-202=vacuacti user-203=innofabl user-204=premiumi user-205=prizmapl user-206=dslmk user-207=darkogor user-208=fnjorgmk
Sep  7 13:42:04 power sudo[2932785]: wp-toolkit : (command continued) user-209=bozinovm user-210=supremel user-211=v5srybi9dcdx user-212=aquatech user-213=gorsajmk user-214=zdmgpsor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 13:42:04 power sudo[2932785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:05 power sudo[2932785]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:05 power sudo[2932793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 13:42:05 power sudo[2932793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:05 power sudo[2932793]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:05 power sudo[2932797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tGVOw6UrBEEZlP5S.~
Sep  7 13:42:05 power sudo[2932797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:05 power sudo[2932797]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:05 power sudo[2932801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tGVOw6UrBEEZlP5S.~\''
Sep  7 13:42:05 power sudo[2932801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:05 power sudo[2932801]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:05 power sudo[2932809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tGVOw6UrBEEZlP5S.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 13:42:05 power sudo[2932809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:05 power sudo[2932809]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:05 power sudo[2932813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 13:42:05 power sudo[2932813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:05 power sudo[2932813]: pam_unix(sudo:session): session closed for user root
Sep  7 13:42:05 power sudo[2932920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 13:42:05 power sudo[2932920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 13:42:05 power sudo[2932920]: pam_unix(sudo:session): session closed for user root
Sep  7 13:45:01 power systemd[2936567]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:50:01 power systemd[2941973]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 13:55:01 power systemd[2947118]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:00:01 power systemd[2951964]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 14:00:01 power systemd[2951963]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:00:01 power systemd[2951967]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 14:00:01 power systemd[2951968]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 14:05:01 power systemd[2957734]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:06:01 power systemd[2958977]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 14:07:01 power systemd[2959779]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 14:09:40 power sshd[2962108]: error: kex_exchange_identification: read: Connection reset by peer
Sep  7 14:09:40 power sshd[2962108]: Connection reset by 199.45.155.103 port 48730
Sep  7 14:10:01 power systemd[2962524]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:10:04 power sshd[2962297]: Connection closed by 199.45.155.103 port 38564 [preauth]
Sep  7 14:12:01 power systemd[2964213]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 14:15:01 power systemd[2969041]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:15:40 power sshd[2969944]: error: kex_exchange_identification: read: Connection reset by peer
Sep  7 14:15:40 power sshd[2969944]: Connection reset by 206.168.34.67 port 45096
Sep  7 14:15:59 power sshd[2970026]: Connection closed by 206.168.34.67 port 49058 [preauth]
Sep  7 14:20:02 power systemd[2973755]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:25:01 power systemd[2978347]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:28:33 power sshd[2981612]: Connection closed by 206.168.34.217 port 45372 [preauth]
Sep  7 14:30:02 power systemd[2983260]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:30:02 power systemd[2983261]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 14:30:02 power systemd[2983262]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 14:30:02 power systemd[2983264]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 14:35:01 power systemd[2988197]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:36:01 power systemd[2989370]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 14:37:01 power systemd[2990285]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 14:38:37 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 14:40:01 power systemd[2993093]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:42:01 power sudo[2996027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 14:42:01 power sudo[2996027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power systemd[2996030]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 14:42:01 power sudo[2996027]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 14:42:01 power sudo[2996035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996035]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 14:42:01 power sudo[2996042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996042]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=WZZ9fXc0MO'
Sep  7 14:42:01 power sudo[2996048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996048]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 14:42:01 power sudo[2996055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996055]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 14:42:01 power sudo[2996059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996059]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 14:42:01 power sudo[2996063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996063]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 14:42:01 power sudo[2996067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996067]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 14:42:01 power sudo[2996079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996079]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 14:42:01 power sudo[2996083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996083]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 14:42:01 power sudo[2996087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996087]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 14:42:01 power sudo[2996092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996092]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 14:42:01 power sudo[2996096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:01 power sudo[2996096]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:01 power sudo[2996100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 14:42:01 power sudo[2996100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:02 power sudo[2996100]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:05 power sudo[2996163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 14:42:05 power sudo[2996163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:05 power sudo[2996163]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:05 power sudo[2996173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 14:42:05 power sudo[2996173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:05 power sudo[2996173]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:05 power sudo[2996179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bauerbg user-2=uhostmk5 user-3=oouslave user-4=raremk user-5=stojnevi user-6=viewinn user-7=trudovop user-8=vmro user-9=enaspotc user-10=hotammk user-11=cajsproc user-12=anitermc user-13=youthgua user-14=caramk user-15=hidrommk user-16=frizered user-17=ekostoc1 user-18=levantmk user-19=oncolog1 user-20=nefrolog user-21=pelagoni user-22=avtogumi user-23=socioloz user-24=evolvepl user-25=seloviro user-26=nolimits user-27=kolened1 user-28=nlpmkorg user-29=centarba user-30=berbermk user-31=edomcomm user-32=herbalpl user-33=enochmk user-34=sprintst user-35=dikimk12 user-36=dnevnoin user-37=gjorgeiv user-38=tradeyou user-39=rastiraz user-40=holiyayt user-41=stravelm user-42=robustco user-43=wondersp user-44=pecakome user-45=proverim user-46=dadarmk user-47=tealmk user-48=gocruise user-49=mstmmk user-50=goodnews
Sep  7 14:42:05 power sudo[2996179]: wp-toolkit : (command continued) user-51=bovincom user-52=stojano1 user-53=cabinetm user-54=vezilkac user-55=itradeco user-56=janiboja user-57=custome1 user-58=zampmk user-59=busymard user-60=zvskopje user-61=palenzok user-62=klimimk user-63=stokovna user-64=sparkupm user-65=dalmacom user-66=cetplatf user-67=premiuma user-68=kouzonco user-69=drleomk user-70=inotekso user-71=jpparkin user-72=daris user-73=butelmk user-74=premiums user-75=arturaco user-76=screenme user-77=karpospo user-78=nasaidni user-79=ideaplus user-80=mfashion user-81=dhamachi user-82=volkanco user-83=goartsym user-84=workandt user-85=barececo user-86=delcevca user-87=simbiome user-88=getaldus user-89=rasmorgm user-90=skyapart user-91=bianasho user-92=makoasmk user-93=kujnamon user-94=univerz1 user-95=velmk user-96=gogovan1 user-97=datalink user-98=mpbmk user-99=agrosind user-100=maleshne user-101=datelcom user-102=bizporta user-103=polyeste user-104=vfxnestc user-105=groskome
Sep  7 14:42:05 power sudo[2996179]: wp-toolkit : (command continued) user-106=ivanjord user-107=sedcmk user-108=urbanexp user-109=wikicamp user-110=infobadi user-111=mspmk user-112=detskagr user-113=spdcompu user-114=taneccom user-115=vacuacti user-116=premiumi user-117=innofabl user-118=prizmapl user-119=fnjorgmk user-120=dslmk user-121=darkogor user-122=bozinovm user-123=inkigaic user-124=modernar user-125=zdmgpsor user-126=supremel user-127=v5srybi9dcdx user-128=aquatech user-129=gorsajmk user-130=mapaspla user-131=solemor1 user-132=nationa2 user-133=onlinesh user-134=tcieuroc user-135=starluxm user-136=radekrat user-137=fffhpcwr user-138=versusmk user-139=fiziosmk user-140=ambitiou user-141=lblawcom user-142=nucktra1 user-143=mediatag user-144=intelek1 user-145=nikolov1 user-146=hausmark user-147=forzares user-148=nikimare user-149=aptekazd user-150=kardiome user-151=apgrupmk user-152=carrent1 user-153=bogdanos user-154=mediasol user-155=matratze user-156=euronic2
Sep  7 14:42:05 power sudo[2996179]: wp-toolkit : (command continued) user-157=elektrot user-158=zapovim1 user-159=cosmatob user-160=euromaki user-161=nutrivim user-162=samasped user-163=chemhemc user-164=albuname user-165=glammace user-166=imdskopj user-167=pravekom user-168=vtranseu user-169=infopor1 user-170=pelagini user-171=bbbustou user-172=biplmk user-173=kaoilmk user-174=cleanerm user-175=animatem user-176=progress user-177=sssoluti user-178=atspedco user-179=solointe user-180=jaramk user-181=taktcomm user-182=recorgmk user-183=solarinv user-184=eurofarm user-185=electrol user-186=naksorgm user-187=eliksirz user-188=trigemat user-189=golakkom user-190=mbmehani user-191=ismassag user-192=workbenc user-193=viplastc user-194=wineberr user-195=conserva user-196=cupidpro user-197=vegemk1 user-198=euronic3 user-199=evberasm user-200=bonitavi user-201=bauerin2 user-202=folklore user-203=gradbai1 user-204=aptekafa user-205=madzomk user-206=evacommk user-207=fxxcom user-208=peshkai1
Sep  7 14:42:05 power sudo[2996179]: wp-toolkit : (command continued) user-209=dimpalne user-210=eaptekam user-211=makdrone user-212=tehnodro user-213=jpkomuna user-214=izzomk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 14:42:05 power sudo[2996179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:05 power sudo[2996179]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:05 power sudo[2996192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep  7 14:42:05 power sudo[2996192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:06 power sudo[2996192]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:06 power sudo[2996201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro test -e /home/vmro/wordpress-backups
Sep  7 14:42:06 power sudo[2996201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:06 power sudo[2996201]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:06 power sudo[2996213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep  7 14:42:06 power sudo[2996213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:06 power sudo[2996213]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:06 power sudo[2996222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep  7 14:42:06 power sudo[2996222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:06 power sudo[2996222]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:06 power sudo[2996233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep  7 14:42:06 power sudo[2996233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:06 power sudo[2996233]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:06 power sudo[2996242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind test -e /home/agrosind/wordpress-backups
Sep  7 14:42:06 power sudo[2996242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:06 power sudo[2996242]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:06 power sudo[2996253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep  7 14:42:06 power sudo[2996253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:06 power sudo[2996253]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:06 power sudo[2996271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep  7 14:42:06 power sudo[2996271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:06 power sudo[2996271]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:06 power sudo[2996287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep  7 14:42:06 power sudo[2996287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:07 power sudo[2996287]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:07 power sudo[2996323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep  7 14:42:07 power sudo[2996323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:07 power sudo[2996323]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:07 power sudo[2996340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep  7 14:42:07 power sudo[2996340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:07 power sudo[2996340]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:07 power sudo[2996349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem test -e /home/animatem/wordpress-backups
Sep  7 14:42:07 power sudo[2996349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:07 power sudo[2996349]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:07 power sudo[2996360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep  7 14:42:07 power sudo[2996360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:07 power sudo[2996360]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:07 power sudo[2996369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc test -e /home/anitermc/wordpress-backups
Sep  7 14:42:07 power sudo[2996369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:07 power sudo[2996369]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:07 power sudo[2996380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep  7 14:42:07 power sudo[2996380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:07 power sudo[2996380]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:07 power sudo[2996389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep  7 14:42:07 power sudo[2996389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:07 power sudo[2996389]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:07 power sudo[2996400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep  7 14:42:07 power sudo[2996400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:08 power sudo[2996400]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:08 power sudo[2996409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd test -e /home/aptekazd/wordpress-backups
Sep  7 14:42:08 power sudo[2996409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:08 power sudo[2996409]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:08 power sudo[2996421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep  7 14:42:08 power sudo[2996421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:08 power sudo[2996421]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:08 power sudo[2996436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress test -e /home/progress/wordpress-backups
Sep  7 14:42:08 power sudo[2996436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:08 power sudo[2996436]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:08 power sudo[2996447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep  7 14:42:08 power sudo[2996447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:08 power sudo[2996447]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:08 power sudo[2996452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep  7 14:42:08 power sudo[2996452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:08 power sudo[2996452]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:08 power sudo[2996465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep  7 14:42:08 power sudo[2996465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:08 power sudo[2996465]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:08 power sudo[2996471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 test -e /home/nationa2/wordpress-backups
Sep  7 14:42:08 power sudo[2996471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:08 power sudo[2996471]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:08 power sudo[2996486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep  7 14:42:08 power sudo[2996486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:09 power sudo[2996486]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:09 power sudo[2996495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  7 14:42:09 power sudo[2996495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:09 power sudo[2996495]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:09 power sudo[2996506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep  7 14:42:09 power sudo[2996506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:09 power sudo[2996506]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:09 power sudo[2996515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho test -e /home/bianasho/wordpress-backups
Sep  7 14:42:09 power sudo[2996515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:09 power sudo[2996515]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:09 power sudo[2996526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep  7 14:42:09 power sudo[2996526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:09 power sudo[2996526]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:09 power sudo[2996534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk test -e /home/velmk/wordpress-backups
Sep  7 14:42:09 power sudo[2996534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:09 power sudo[2996534]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:09 power sudo[2996545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep  7 14:42:09 power sudo[2996545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:09 power sudo[2996545]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:09 power sudo[2996551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep  7 14:42:09 power sudo[2996551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:09 power sudo[2996551]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:09 power sudo[2996563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep  7 14:42:09 power sudo[2996563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996563]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:10 power sudo[2996572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi test -e /home/bonitavi/wordpress-backups
Sep  7 14:42:10 power sudo[2996572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996572]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:10 power sudo[2996583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep  7 14:42:10 power sudo[2996583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996583]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:10 power sudo[2996592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom test -e /home/bovincom/wordpress-backups
Sep  7 14:42:10 power sudo[2996592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996592]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:10 power sudo[2996603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep  7 14:42:10 power sudo[2996603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996603]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:10 power sudo[2996609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk test -e /home/butelmk/wordpress-backups
Sep  7 14:42:10 power sudo[2996609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996609]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:10 power sudo[2996625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep  7 14:42:10 power sudo[2996625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996625]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:10 power sudo[2996632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep  7 14:42:10 power sudo[2996632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996632]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:10 power sudo[2996643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  7 14:42:10 power sudo[2996643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996643]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:10 power sudo[2996654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  7 14:42:10 power sudo[2996654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:10 power sudo[2996654]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:11 power sudo[2996665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep  7 14:42:11 power sudo[2996665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:11 power sudo[2996665]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:11 power sudo[2996685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep  7 14:42:11 power sudo[2996685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:11 power sudo[2996685]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:11 power sudo[2996696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep  7 14:42:11 power sudo[2996696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:11 power sudo[2996696]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:11 power sudo[2996703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob test -e /home/cosmatob/wordpress-backups
Sep  7 14:42:11 power sudo[2996703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:11 power sudo[2996703]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:11 power sudo[2996715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep  7 14:42:11 power sudo[2996715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:11 power sudo[2996715]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:11 power sudo[2996728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep  7 14:42:11 power sudo[2996728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:11 power sudo[2996728]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:11 power sudo[2996736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca test -e /home/delcevca/wordpress-backups
Sep  7 14:42:11 power sudo[2996736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:11 power sudo[2996736]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:11 power sudo[2996747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep  7 14:42:11 power sudo[2996747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996747]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  7 14:42:12 power sudo[2996753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996753]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  7 14:42:12 power sudo[2996764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996764]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  7 14:42:12 power sudo[2996775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996775]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep  7 14:42:12 power sudo[2996788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996788]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr test -e /home/detskagr/wordpress-backups
Sep  7 14:42:12 power sudo[2996797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996797]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep  7 14:42:12 power sudo[2996808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996808]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam test -e /home/eaptekam/wordpress-backups
Sep  7 14:42:12 power sudo[2996815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996815]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep  7 14:42:12 power sudo[2996827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996827]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne test -e /home/dimpalne/wordpress-backups
Sep  7 14:42:12 power sudo[2996836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:12 power sudo[2996836]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:12 power sudo[2996848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep  7 14:42:12 power sudo[2996848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:13 power sudo[2996848]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:13 power sudo[2996857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin test -e /home/dnevnoin/wordpress-backups
Sep  7 14:42:13 power sudo[2996857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:13 power sudo[2996857]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:13 power sudo[2996869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep  7 14:42:13 power sudo[2996869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:13 power sudo[2996869]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:13 power sudo[2996882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep  7 14:42:13 power sudo[2996882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:13 power sudo[2996882]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:13 power sudo[2996892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk test -e /home/drleomk/wordpress-backups
Sep  7 14:42:13 power sudo[2996892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:13 power sudo[2996892]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:13 power sudo[2996903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep  7 14:42:13 power sudo[2996903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:13 power sudo[2996903]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:13 power sudo[2996915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  7 14:42:13 power sudo[2996915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:13 power sudo[2996915]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:13 power sudo[2996927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep  7 14:42:13 power sudo[2996927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:13 power sudo[2996927]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:13 power sudo[2996934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol test -e /home/electrol/wordpress-backups
Sep  7 14:42:13 power sudo[2996934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:13 power sudo[2996934]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:13 power sudo[2996945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep  7 14:42:13 power sudo[2996945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2996945]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:14 power sudo[2996957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot test -e /home/elektrot/wordpress-backups
Sep  7 14:42:14 power sudo[2996957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2996957]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:14 power sudo[2996968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep  7 14:42:14 power sudo[2996968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2996968]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:14 power sudo[2996979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep  7 14:42:14 power sudo[2996979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2996979]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:14 power sudo[2996993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk test -e /home/enochmk/wordpress-backups
Sep  7 14:42:14 power sudo[2996993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2996993]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:14 power sudo[2997004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  7 14:42:14 power sudo[2997004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2997004]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:14 power sudo[2997015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep  7 14:42:14 power sudo[2997015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2997015]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:14 power sudo[2997022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm test -e /home/eurofarm/wordpress-backups
Sep  7 14:42:14 power sudo[2997022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2997022]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:14 power sudo[2997034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep  7 14:42:14 power sudo[2997034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2997034]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:14 power sudo[2997039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki test -e /home/euromaki/wordpress-backups
Sep  7 14:42:14 power sudo[2997039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:14 power sudo[2997039]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:15 power sudo[2997051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep  7 14:42:15 power sudo[2997051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:15 power sudo[2997051]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:15 power sudo[2997057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm test -e /home/evberasm/wordpress-backups
Sep  7 14:42:15 power sudo[2997057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:15 power sudo[2997057]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:15 power sudo[2997072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep  7 14:42:15 power sudo[2997072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:15 power sudo[2997072]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:15 power sudo[2997080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl test -e /home/evolvepl/wordpress-backups
Sep  7 14:42:15 power sudo[2997080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:15 power sudo[2997080]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:15 power sudo[2997091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  7 14:42:15 power sudo[2997091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:15 power sudo[2997091]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:15 power sudo[2997102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep  7 14:42:15 power sudo[2997102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:15 power sudo[2997102]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:15 power sudo[2997109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep  7 14:42:15 power sudo[2997109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:15 power sudo[2997109]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:15 power sudo[2997120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep  7 14:42:15 power sudo[2997120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:16 power sudo[2997120]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:16 power sudo[2997125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep  7 14:42:16 power sudo[2997125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:16 power sudo[2997125]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:16 power sudo[2997136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep  7 14:42:16 power sudo[2997136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:16 power sudo[2997136]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:16 power sudo[2997144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore test -e /home/folklore/wordpress-backups
Sep  7 14:42:16 power sudo[2997144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:16 power sudo[2997144]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:16 power sudo[2997155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep  7 14:42:16 power sudo[2997155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:16 power sudo[2997155]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:16 power sudo[2997160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares test -e /home/forzares/wordpress-backups
Sep  7 14:42:16 power sudo[2997160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:16 power sudo[2997160]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:16 power sudo[2997172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep  7 14:42:16 power sudo[2997172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:16 power sudo[2997172]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:16 power sudo[2997177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus test -e /home/getaldus/wordpress-backups
Sep  7 14:42:16 power sudo[2997177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:16 power sudo[2997177]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:16 power sudo[2997188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep  7 14:42:16 power sudo[2997188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997188]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise test -e /home/gocruise/wordpress-backups
Sep  7 14:42:17 power sudo[2997194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997194]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep  7 14:42:17 power sudo[2997206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997206]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 test -e /home/gogovan1/wordpress-backups
Sep  7 14:42:17 power sudo[2997216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997216]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep  7 14:42:17 power sudo[2997228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997228]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom test -e /home/golakkom/wordpress-backups
Sep  7 14:42:17 power sudo[2997236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997236]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  7 14:42:17 power sudo[2997247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997247]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep  7 14:42:17 power sudo[2997258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997258]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl test -e /home/herbalpl/wordpress-backups
Sep  7 14:42:17 power sudo[2997267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997267]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  7 14:42:17 power sudo[2997278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997278]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep  7 14:42:17 power sudo[2997289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:17 power sudo[2997289]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:17 power sudo[2997301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep  7 14:42:17 power sudo[2997301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997301]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  7 14:42:18 power sudo[2997307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997307]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  7 14:42:18 power sudo[2997318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997318]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  7 14:42:18 power sudo[2997329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997329]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  7 14:42:18 power sudo[2997340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997340]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  7 14:42:18 power sudo[2997351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997351]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep  7 14:42:18 power sudo[2997364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997364]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk test -e /home/madzomk/wordpress-backups
Sep  7 14:42:18 power sudo[2997372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997372]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep  7 14:42:18 power sudo[2997384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997384]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj test -e /home/imdskopj/wordpress-backups
Sep  7 14:42:18 power sudo[2997389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997389]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep  7 14:42:18 power sudo[2997404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997404]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 test -e /home/infopor1/wordpress-backups
Sep  7 14:42:18 power sudo[2997424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:18 power sudo[2997424]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:18 power sudo[2997437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep  7 14:42:18 power sudo[2997437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:19 power sudo[2997437]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:19 power sudo[2997448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user inkigaic test -e /home/inkigaic/wordpress-backups
Sep  7 14:42:19 power sudo[2997448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:19 power sudo[2997448]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:19 power sudo[2997463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep  7 14:42:19 power sudo[2997463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:19 power sudo[2997463]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:19 power sudo[2997471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 test -e /home/intelek1/wordpress-backups
Sep  7 14:42:19 power sudo[2997471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:19 power sudo[2997471]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:19 power sudo[2997482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep  7 14:42:19 power sudo[2997482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:19 power sudo[2997482]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:19 power sudo[2997493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep  7 14:42:19 power sudo[2997493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:19 power sudo[2997493]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:19 power sudo[2997500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin test -e /home/jpparkin/wordpress-backups
Sep  7 14:42:19 power sudo[2997500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:19 power sudo[2997500]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:19 power sudo[2997512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep  7 14:42:19 power sudo[2997512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997512]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo test -e /home/karpospo/wordpress-backups
Sep  7 14:42:20 power sudo[2997524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997524]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  7 14:42:20 power sudo[2997536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997536]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  7 14:42:20 power sudo[2997547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997547]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep  7 14:42:20 power sudo[2997559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997559]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 test -e /home/kolened1/wordpress-backups
Sep  7 14:42:20 power sudo[2997575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997575]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep  7 14:42:20 power sudo[2997587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997587]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco test -e /home/kouzonco/wordpress-backups
Sep  7 14:42:20 power sudo[2997598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997598]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep  7 14:42:20 power sudo[2997610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997610]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst test -e /home/sprintst/wordpress-backups
Sep  7 14:42:20 power sudo[2997621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:20 power sudo[2997621]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:20 power sudo[2997633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep  7 14:42:20 power sudo[2997633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997633]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon test -e /home/kujnamon/wordpress-backups
Sep  7 14:42:21 power sudo[2997639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997639]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  7 14:42:21 power sudo[2997650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997650]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep  7 14:42:21 power sudo[2997662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997662]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone test -e /home/makdrone/wordpress-backups
Sep  7 14:42:21 power sudo[2997671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997671]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep  7 14:42:21 power sudo[2997682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997682]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk test -e /home/makoasmk/wordpress-backups
Sep  7 14:42:21 power sudo[2997688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997688]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep  7 14:42:21 power sudo[2997699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997699]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  7 14:42:21 power sudo[2997710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997710]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep  7 14:42:21 power sudo[2997721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997721]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:21 power sudo[2997728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar test -e /home/modernar/wordpress-backups
Sep  7 14:42:21 power sudo[2997728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:21 power sudo[2997728]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:22 power sudo[2997739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep  7 14:42:22 power sudo[2997739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:22 power sudo[2997739]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:22 power sudo[2997750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep  7 14:42:22 power sudo[2997750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:22 power sudo[2997750]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:22 power sudo[2997760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk test -e /home/mpbmk/wordpress-backups
Sep  7 14:42:22 power sudo[2997760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:22 power sudo[2997760]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:22 power sudo[2997771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep  7 14:42:22 power sudo[2997771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:22 power sudo[2997771]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:22 power sudo[2997777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk test -e /home/mspmk/wordpress-backups
Sep  7 14:42:22 power sudo[2997777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:22 power sudo[2997777]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:25 power sudo[2997838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep  7 14:42:25 power sudo[2997838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:25 power sudo[2997838]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:25 power sudo[2997849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk test -e /home/mstmmk/wordpress-backups
Sep  7 14:42:25 power sudo[2997849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:25 power sudo[2997849]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:25 power sudo[2997860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep  7 14:42:25 power sudo[2997860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:25 power sudo[2997860]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:25 power sudo[2997867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm test -e /home/naksorgm/wordpress-backups
Sep  7 14:42:25 power sudo[2997867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:25 power sudo[2997867]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:25 power sudo[2997878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep  7 14:42:25 power sudo[2997878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:25 power sudo[2997878]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:25 power sudo[2997889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep  7 14:42:25 power sudo[2997889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:25 power sudo[2997889]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:25 power sudo[2997901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep  7 14:42:25 power sudo[2997901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:25 power sudo[2997901]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:25 power sudo[2997912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep  7 14:42:25 power sudo[2997912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:26 power sudo[2997912]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:26 power sudo[2997921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag test -e /home/ismassag/wordpress-backups
Sep  7 14:42:26 power sudo[2997921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:26 power sudo[2997921]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:26 power sudo[2997933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep  7 14:42:26 power sudo[2997933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:26 power sudo[2997933]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:26 power sudo[2997948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep  7 14:42:26 power sudo[2997948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:26 power sudo[2997948]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:26 power sudo[2997955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 test -e /home/nikolov1/wordpress-backups
Sep  7 14:42:26 power sudo[2997955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:26 power sudo[2997955]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:26 power sudo[2997968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep  7 14:42:26 power sudo[2997968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:26 power sudo[2997968]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:26 power sudo[2997974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits test -e /home/nolimits/wordpress-backups
Sep  7 14:42:26 power sudo[2997974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:26 power sudo[2997974]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:26 power sudo[2997986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep  7 14:42:26 power sudo[2997986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:26 power sudo[2997986]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:26 power sudo[2997994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh test -e /home/onlinesh/wordpress-backups
Sep  7 14:42:26 power sudo[2997994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:26 power sudo[2997994]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:26 power sudo[2998005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep  7 14:42:26 power sudo[2998005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:27 power sudo[2998005]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:27 power sudo[2998011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok test -e /home/palenzok/wordpress-backups
Sep  7 14:42:27 power sudo[2998011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:27 power sudo[2998011]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:27 power sudo[2998023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep  7 14:42:27 power sudo[2998023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:27 power sudo[2998023]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:27 power sudo[2998034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni test -e /home/pelagoni/wordpress-backups
Sep  7 14:42:27 power sudo[2998034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:27 power sudo[2998034]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:27 power sudo[2998046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep  7 14:42:27 power sudo[2998046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:27 power sudo[2998046]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:27 power sudo[2998056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk test -e /home/biplmk/wordpress-backups
Sep  7 14:42:27 power sudo[2998056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:27 power sudo[2998056]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:27 power sudo[2998067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep  7 14:42:27 power sudo[2998067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:27 power sudo[2998067]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:28 power sudo[2998074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi test -e /home/premiumi/wordpress-backups
Sep  7 14:42:28 power sudo[2998074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:28 power sudo[2998074]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:28 power sudo[2998085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep  7 14:42:28 power sudo[2998085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:28 power sudo[2998085]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:28 power sudo[2998096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep  7 14:42:28 power sudo[2998096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:28 power sudo[2998096]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:28 power sudo[2998106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat test -e /home/radekrat/wordpress-backups
Sep  7 14:42:28 power sudo[2998106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:28 power sudo[2998106]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:28 power sudo[2998117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep  7 14:42:28 power sudo[2998117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:28 power sudo[2998117]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:28 power sudo[2998125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm test -e /home/rasmorgm/wordpress-backups
Sep  7 14:42:28 power sudo[2998125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:28 power sudo[2998125]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:28 power sudo[2998137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep  7 14:42:28 power sudo[2998137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:28 power sudo[2998137]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:28 power sudo[2998143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk test -e /home/recorgmk/wordpress-backups
Sep  7 14:42:28 power sudo[2998143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:28 power sudo[2998143]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:28 power sudo[2998154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep  7 14:42:28 power sudo[2998154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998154]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm test -e /home/stravelm/wordpress-backups
Sep  7 14:42:29 power sudo[2998160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998160]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep  7 14:42:29 power sudo[2998172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998172]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome test -e /home/simbiome/wordpress-backups
Sep  7 14:42:29 power sudo[2998180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998180]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  7 14:42:29 power sudo[2998191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998191]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep  7 14:42:29 power sudo[2998202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998202]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep  7 14:42:29 power sudo[2998207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998207]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep  7 14:42:29 power sudo[2998218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998218]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep  7 14:42:29 power sudo[2998229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998229]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti test -e /home/sssoluti/wordpress-backups
Sep  7 14:42:29 power sudo[2998235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:29 power sudo[2998235]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:29 power sudo[2998246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep  7 14:42:29 power sudo[2998246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:30 power sudo[2998246]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:30 power sudo[2998251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep  7 14:42:30 power sudo[2998251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:30 power sudo[2998251]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:30 power sudo[2998262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep  7 14:42:30 power sudo[2998262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:30 power sudo[2998262]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:30 power sudo[2998271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro test -e /home/tehnodro/wordpress-backups
Sep  7 14:42:30 power sudo[2998271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:30 power sudo[2998271]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:30 power sudo[2998284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep  7 14:42:30 power sudo[2998284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:30 power sudo[2998284]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:30 power sudo[2998295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep  7 14:42:30 power sudo[2998295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:30 power sudo[2998295]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:30 power sudo[2998301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn test -e /home/viewinn/wordpress-backups
Sep  7 14:42:30 power sudo[2998301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:30 power sudo[2998301]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:30 power sudo[2998312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep  7 14:42:30 power sudo[2998312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:30 power sudo[2998312]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:30 power sudo[2998317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp test -e /home/wikicamp/wordpress-backups
Sep  7 14:42:30 power sudo[2998317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:30 power sudo[2998317]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:30 power sudo[2998328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep  7 14:42:30 power sudo[2998328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998328]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt test -e /home/workandt/wordpress-backups
Sep  7 14:42:31 power sudo[2998334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998334]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  7 14:42:31 power sudo[2998346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998346]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep  7 14:42:31 power sudo[2998357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998357]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua test -e /home/youthgua/wordpress-backups
Sep  7 14:42:31 power sudo[2998367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998367]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep  7 14:42:31 power sudo[2998378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998378]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk test -e /home/zampmk/wordpress-backups
Sep  7 14:42:31 power sudo[2998384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998384]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep  7 14:42:31 power sudo[2998396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998396]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord test -e /home/ivanjord/wordpress-backups
Sep  7 14:42:31 power sudo[2998403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998403]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep  7 14:42:31 power sudo[2998416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:31 power sudo[2998416]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:31 power sudo[2998427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep  7 14:42:31 power sudo[2998427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:32 power sudo[2998427]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:32 power sudo[2998438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja test -e /home/janiboja/wordpress-backups
Sep  7 14:42:32 power sudo[2998438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:32 power sudo[2998438]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:32 power sudo[2998449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep  7 14:42:32 power sudo[2998449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:32 power sudo[2998449]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:32 power sudo[2998459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk test -e /home/jaramk/wordpress-backups
Sep  7 14:42:32 power sudo[2998459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:32 power sudo[2998459]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:32 power sudo[2998470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep  7 14:42:32 power sudo[2998470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:32 power sudo[2998470]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:32 power sudo[2998477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep  7 14:42:32 power sudo[2998477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:32 power sudo[2998477]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:32 power sudo[2998488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep  7 14:42:32 power sudo[2998488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:32 power sudo[2998488]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:32 power sudo[2998498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep  7 14:42:32 power sudo[2998498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:32 power sudo[2998498]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:32 power sudo[2998509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep  7 14:42:32 power sudo[2998509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:32 power sudo[2998509]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:33 power sudo[2998520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep  7 14:42:33 power sudo[2998520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:33 power sudo[2998520]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:33 power sudo[2998527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag test -e /home/mediatag/wordpress-backups
Sep  7 14:42:33 power sudo[2998527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:33 power sudo[2998527]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:33 power sudo[2998546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep  7 14:42:33 power sudo[2998546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:33 power sudo[2998546]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:33 power sudo[2998557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep  7 14:42:33 power sudo[2998557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:33 power sudo[2998557]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:33 power sudo[2998563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog test -e /home/nefrolog/wordpress-backups
Sep  7 14:42:33 power sudo[2998563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:33 power sudo[2998563]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:33 power sudo[2998574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep  7 14:42:33 power sudo[2998574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:33 power sudo[2998574]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:33 power sudo[2998582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep  7 14:42:33 power sudo[2998582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:33 power sudo[2998582]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:33 power sudo[2998593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep  7 14:42:33 power sudo[2998593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:33 power sudo[2998593]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:33 power sudo[2998604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep  7 14:42:33 power sudo[2998604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:34 power sudo[2998604]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:34 power sudo[2998611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep  7 14:42:34 power sudo[2998611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:34 power sudo[2998611]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:34 power sudo[2998622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep  7 14:42:34 power sudo[2998622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:34 power sudo[2998622]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:34 power sudo[2998635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom test -e /home/pravekom/wordpress-backups
Sep  7 14:42:34 power sudo[2998635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:34 power sudo[2998635]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:34 power sudo[2998646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep  7 14:42:34 power sudo[2998646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:34 power sudo[2998646]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:34 power sudo[2998651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim test -e /home/proverim/wordpress-backups
Sep  7 14:42:34 power sudo[2998651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:34 power sudo[2998651]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:34 power sudo[2998663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep  7 14:42:34 power sudo[2998663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:34 power sudo[2998663]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:34 power sudo[2998670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz test -e /home/rastiraz/wordpress-backups
Sep  7 14:42:34 power sudo[2998670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:34 power sudo[2998670]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:34 power sudo[2998682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep  7 14:42:34 power sudo[2998682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:35 power sudo[2998682]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:35 power sudo[2998688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva test -e /home/conserva/wordpress-backups
Sep  7 14:42:35 power sudo[2998688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:35 power sudo[2998688]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:35 power sudo[2998700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep  7 14:42:35 power sudo[2998700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:35 power sudo[2998700]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:35 power sudo[2998711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne test -e /home/maleshne/wordpress-backups
Sep  7 14:42:35 power sudo[2998711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:35 power sudo[2998711]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:35 power sudo[2998722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep  7 14:42:35 power sudo[2998722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:35 power sudo[2998722]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:35 power sudo[2998729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped test -e /home/samasped/wordpress-backups
Sep  7 14:42:35 power sudo[2998729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:35 power sudo[2998729]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:35 power sudo[2998740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep  7 14:42:35 power sudo[2998740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:35 power sudo[2998740]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:35 power sudo[2998749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro test -e /home/seloviro/wordpress-backups
Sep  7 14:42:35 power sudo[2998749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:35 power sudo[2998749]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:35 power sudo[2998761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep  7 14:42:35 power sudo[2998761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:36 power sudo[2998761]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:36 power sudo[2998767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart test -e /home/skyapart/wordpress-backups
Sep  7 14:42:36 power sudo[2998767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:36 power sudo[2998767]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:36 power sudo[2998778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep  7 14:42:36 power sudo[2998778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:36 power sudo[2998778]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:36 power sudo[2998787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz test -e /home/socioloz/wordpress-backups
Sep  7 14:42:36 power sudo[2998787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:36 power sudo[2998787]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:36 power sudo[2998798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep  7 14:42:36 power sudo[2998798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:36 power sudo[2998798]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:36 power sudo[2998806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi test -e /home/stojnevi/wordpress-backups
Sep  7 14:42:36 power sudo[2998806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:36 power sudo[2998806]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:36 power sudo[2998817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep  7 14:42:36 power sudo[2998817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:36 power sudo[2998817]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:36 power sudo[2998828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep  7 14:42:36 power sudo[2998828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:36 power sudo[2998828]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:36 power sudo[2998833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop test -e /home/trudovop/wordpress-backups
Sep  7 14:42:36 power sudo[2998833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:36 power sudo[2998833]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:36 power sudo[2998846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep  7 14:42:36 power sudo[2998846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:37 power sudo[2998846]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:37 power sudo[2998851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp test -e /home/urbanexp/wordpress-backups
Sep  7 14:42:37 power sudo[2998851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:37 power sudo[2998851]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:37 power sudo[2998863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep  7 14:42:37 power sudo[2998863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:37 power sudo[2998863]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:37 power sudo[2998871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc test -e /home/vfxnestc/wordpress-backups
Sep  7 14:42:37 power sudo[2998871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:37 power sudo[2998871]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:37 power sudo[2998882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep  7 14:42:37 power sudo[2998882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:37 power sudo[2998882]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:37 power sudo[2998891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/wordpress-backups
Sep  7 14:42:37 power sudo[2998891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:37 power sudo[2998891]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:37 power sudo[2998902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep  7 14:42:37 power sudo[2998902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:37 power sudo[2998902]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:37 power sudo[2998908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace test -e /home/glammace/wordpress-backups
Sep  7 14:42:37 power sudo[2998908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:37 power sudo[2998908]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:37 power sudo[2998920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep  7 14:42:37 power sudo[2998920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:37 power sudo[2998920]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:37 power sudo[2998931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep  7 14:42:37 power sudo[2998931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:38 power sudo[2998931]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:38 power sudo[2998938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc test -e /home/workbenc/wordpress-backups
Sep  7 14:42:38 power sudo[2998938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:38 power sudo[2998938]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:38 power sudo[2998949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep  7 14:42:38 power sudo[2998949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:38 power sudo[2998949]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:39 power sudo[3000283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json'
Sep  7 14:42:39 power sudo[3000283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:39 power sudo[3000283]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:39 power sudo[3000288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=5.9.96.240 --output=json'
Sep  7 14:42:39 power sudo[3000288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:39 power sudo[3000288]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:41 power sudo[3000316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 14:42:41 power sudo[3000316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:41 power sudo[3000316]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:41 power sudo[3000321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bvpokphSt8qiZFSX.~
Sep  7 14:42:41 power sudo[3000321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:41 power sudo[3000321]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:41 power sudo[3000325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bvpokphSt8qiZFSX.~\''
Sep  7 14:42:41 power sudo[3000325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:41 power sudo[3000325]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:41 power sudo[3000330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bvpokphSt8qiZFSX.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 14:42:41 power sudo[3000330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:41 power sudo[3000330]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:41 power sudo[3000334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 14:42:41 power sudo[3000334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:41 power sudo[3000334]: pam_unix(sudo:session): session closed for user root
Sep  7 14:42:41 power sudo[3000964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 14:42:41 power sudo[3000964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 14:42:41 power sudo[3000964]: pam_unix(sudo:session): session closed for user root
Sep  7 14:45:01 power systemd[3003354]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:50:01 power systemd[3008780]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 14:55:01 power systemd[3012989]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:00:01 power systemd[3017268]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:00:01 power systemd[3017271]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 15:00:01 power systemd[3017272]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 15:00:01 power systemd[3017274]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 15:05:02 power systemd[3022329]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:06:01 power systemd[3023313]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 15:07:01 power systemd[3024056]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 15:10:01 power systemd[3026555]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:12:01 power systemd[3028114]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 15:15:01 power systemd[3030332]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:20:01 power systemd[3034379]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:23:40 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 165.232.99.227 has been locked due to Imunify RBL
Sep  7 15:25:01 power systemd[3038828]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:30:02 power systemd[3043393]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:30:02 power systemd[3043394]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 15:30:02 power systemd[3043396]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 15:30:02 power systemd[3043395]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 15:35:01 power systemd[3048988]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:36:01 power systemd[3050230]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 15:37:01 power systemd[3051018]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 15:40:01 power systemd[3053794]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:42:01 power systemd[3055619]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 15:42:01 power sudo[3055629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 15:42:01 power sudo[3055629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055629]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 15:42:01 power sudo[3055633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055633]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 15:42:01 power sudo[3055637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055637]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=7ieOSSDq8p'
Sep  7 15:42:01 power sudo[3055641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055641]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 15:42:01 power sudo[3055653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055653]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 15:42:01 power sudo[3055658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055658]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 15:42:01 power sudo[3055662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055662]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 15:42:01 power sudo[3055666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055666]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 15:42:01 power sudo[3055676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055676]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 15:42:01 power sudo[3055680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:01 power sudo[3055680]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:01 power sudo[3055685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 15:42:02 power sudo[3055685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:02 power sudo[3055685]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:02 power sudo[3055690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 15:42:02 power sudo[3055690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:02 power sudo[3055690]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:02 power sudo[3055694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 15:42:02 power sudo[3055694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:02 power sudo[3055694]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:02 power sudo[3055698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 15:42:02 power sudo[3055698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:02 power sudo[3055698]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:05 power sudo[3055740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 15:42:05 power sudo[3055740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:05 power sudo[3055740]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:05 power sudo[3055746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 15:42:05 power sudo[3055746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:05 power sudo[3055746]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:05 power sudo[3055752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=viplastc user-2=wineberr user-3=mbmehani user-4=ismassag user-5=workbenc user-6=electrol user-7=naksorgm user-8=eliksirz user-9=trigemat user-10=golakkom user-11=solarinv user-12=eurofarm user-13=solointe user-14=jaramk user-15=recorgmk user-16=taktcomm user-17=cleanerm user-18=animatem user-19=progress user-20=atspedco user-21=sssoluti user-22=bbbustou user-23=biplmk user-24=kaoilmk user-25=pelagini user-26=jpkomuna user-27=izzomk user-28=makdrone user-29=tehnodro user-30=fxxcom user-31=peshkai1 user-32=dimpalne user-33=eaptekam user-34=gradbai1 user-35=madzomk user-36=aptekafa user-37=evacommk user-38=bauerin2 user-39=folklore user-40=evberasm user-41=bonitavi user-42=conserva user-43=cupidpro user-44=vegemk1 user-45=euronic3 user-46=versusmk user-47=fiziosmk user-48=ambitiou user-49=starluxm
Sep  7 15:42:05 power sudo[3055752]: wp-toolkit : (command continued) user-50=radekrat user-51=fffhpcwr user-52=tcieuroc user-53=mapaspla user-54=solemor1 user-55=nationa2 user-56=onlinesh user-57=supremel user-58=v5srybi9dcdx user-59=aquatech user-60=gorsajmk user-61=zdmgpsor user-62=inkigaic user-63=modernar user-64=taneccom user-65=vacuacti user-66=innofabl user-67=premiumi user-68=prizmapl user-69=dslmk user-70=darkogor user-71=fnjorgmk user-72=bozinovm user-73=pravekom user-74=vtranseu user-75=infopor1 user-76=albuname user-77=glammace user-78=imdskopj user-79=nutrivim user-80=samasped user-81=chemhemc user-82=zapovim1 user-83=elektrot user-84=euromaki user-85=cosmatob user-86=matratze user-87=euronic2 user-88=kardiome user-89=apgrupmk user-90=carrent1 user-91=bogdanos user-92=mediasol user-93=nikolov1 user-94=hausmark user-95=forzares user-96=nikimare user-97=aptekazd user-98=lblawcom user-99=nucktra1 user-100=mediatag user-101=intelek1 user-102=butelmk user-103=daris
Sep  7 15:42:05 power sudo[3055752]: wp-toolkit : (command continued) user-104=premiums user-105=screenme user-106=arturaco user-107=nasaidni user-108=karpospo user-109=ideaplus user-110=drleomk user-111=inotekso user-112=jpparkin user-113=dalmacom user-114=cetplatf user-115=premiuma user-116=kouzonco user-117=klimimk user-118=stokovna user-119=sparkupm user-120=custome1 user-121=zampmk user-122=zvskopje user-123=busymard user-124=palenzok user-125=cabinetm user-126=vezilkac user-127=itradeco user-128=janiboja user-129=bovincom user-130=stojano1 user-131=infobadi user-132=mspmk user-133=detskagr user-134=spdcompu user-135=urbanexp user-136=wikicamp user-137=polyeste user-138=vfxnestc user-139=groskome user-140=ivanjord user-141=sedcmk user-142=maleshne user-143=datelcom user-144=bizporta user-145=mpbmk user-146=agrosind user-147=kujnamon user-148=univerz1 user-149=gogovan1 user-150=velmk user-151=datalink user-152=rasmorgm user-153=skyapart user-154=bianasho user-155=makoasmk
Sep  7 15:42:05 power sudo[3055752]: wp-toolkit : (command continued) user-156=mfashion user-157=dhamachi user-158=goartsym user-159=volkanco user-160=workandt user-161=barececo user-162=delcevca user-163=getaldus user-164=simbiome user-165=evolvepl user-166=pelagoni user-167=avtogumi user-168=socioloz user-169=ekostoc1 user-170=levantmk user-171=oncolog1 user-172=nefrolog user-173=caramk user-174=hidrommk user-175=frizered user-176=anitermc user-177=youthgua user-178=hotammk user-179=cajsproc user-180=viewinn user-181=trudovop user-182=vmro user-183=enaspotc user-184=bauerbg user-185=uhostmk5 user-186=oouslave user-187=raremk user-188=stojnevi user-189=gocruise user-190=mstmmk user-191=goodnews user-192=proverim user-193=dadarmk user-194=tealmk user-195=rastiraz user-196=holiyayt user-197=robustco user-198=stravelm user-199=wondersp user-200=pecakome user-201=dnevnoin user-202=gjorgeiv user-203=tradeyou user-204=herbalpl user-205=enochmk user-206=sprintst user-207=dikimk12
Sep  7 15:42:05 power sudo[3055752]: wp-toolkit : (command continued) user-208=berbermk user-209=edomcomm user-210=nolimits user-211=kolened1 user-212=nlpmkorg user-213=centarba user-214=seloviro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 15:42:05 power sudo[3055752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:05 power sudo[3055752]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:05 power sudo[3055765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 15:42:05 power sudo[3055765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:05 power sudo[3055765]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:05 power sudo[3055769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JqyEfJJcSFyO779Q.~
Sep  7 15:42:05 power sudo[3055769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:05 power sudo[3055769]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:06 power sudo[3055773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JqyEfJJcSFyO779Q.~\''
Sep  7 15:42:06 power sudo[3055773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:06 power sudo[3055773]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:06 power sudo[3055778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JqyEfJJcSFyO779Q.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 15:42:06 power sudo[3055778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:06 power sudo[3055778]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:06 power sudo[3055782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 15:42:06 power sudo[3055782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:06 power sudo[3055782]: pam_unix(sudo:session): session closed for user root
Sep  7 15:42:07 power sudo[3056703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 15:42:07 power sudo[3056703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 15:42:07 power sudo[3056703]: pam_unix(sudo:session): session closed for user root
Sep  7 15:45:01 power systemd[3059090]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:50:01 power systemd[3064498]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 15:55:01 power systemd[3070566]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:00:01 power systemd[3075939]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:00:01 power systemd[3075941]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 16:00:01 power systemd[3075942]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 16:00:01 power systemd[3075944]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 16:05:01 power systemd[3081258]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:06:01 power systemd[3082140]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 16:07:01 power systemd[3083007]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 16:10:02 power systemd[3085662]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:12:01 power systemd[3087299]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 16:12:59 power sshd[3088049]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 16:12:59 power sshd[3088049]: Connection closed by 136.144.42.114 port 8461
Sep  7 16:15:01 power systemd[3089650]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:20:01 power systemd[3094226]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:25:01 power systemd[3098754]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:30:01 power systemd[3103490]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:30:01 power systemd[3103492]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 16:30:01 power systemd[3103495]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 16:30:01 power systemd[3103493]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 16:35:01 power systemd[3108099]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:36:01 power systemd[3109086]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 16:37:01 power systemd[3110017]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 16:40:01 power systemd[3112593]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:42:01 power sudo[3114375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 16:42:01 power sudo[3114375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:01 power sudo[3114375]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:01 power sudo[3114379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 16:42:01 power sudo[3114379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:01 power sudo[3114379]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:01 power sudo[3114383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 16:42:01 power sudo[3114383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:01 power sudo[3114383]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:01 power sudo[3114387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=J1HCOtVUsU'
Sep  7 16:42:01 power sudo[3114387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:01 power sudo[3114387]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:01 power sudo[3114393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 16:42:01 power sudo[3114393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:01 power sudo[3114393]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:01 power sudo[3114397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 16:42:01 power sudo[3114397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:01 power sudo[3114397]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:01 power sudo[3114402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 16:42:01 power sudo[3114402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:01 power sudo[3114402]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:01 power sudo[3114411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 16:42:01 power sudo[3114411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:01 power systemd[3114422]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 16:42:01 power sudo[3114411]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:01 power sudo[3114442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 16:42:02 power sudo[3114442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:02 power sudo[3114442]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:02 power sudo[3114448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 16:42:02 power sudo[3114448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:02 power sudo[3114448]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:02 power sudo[3114452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 16:42:02 power sudo[3114452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:02 power sudo[3114452]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:02 power sudo[3114456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 16:42:02 power sudo[3114456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:02 power sudo[3114456]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:02 power sudo[3114461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 16:42:02 power sudo[3114461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:02 power sudo[3114461]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:02 power sudo[3114465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 16:42:02 power sudo[3114465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:02 power sudo[3114465]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:04 power sudo[3114510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 16:42:04 power sudo[3114510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:04 power sudo[3114510]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:04 power sudo[3114517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 16:42:04 power sudo[3114517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:04 power sudo[3114517]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:04 power sudo[3114523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=euronic3 user-2=cupidpro user-3=vegemk1 user-4=conserva user-5=evberasm user-6=bonitavi user-7=folklore user-8=bauerin2 user-9=aptekafa user-10=madzomk user-11=evacommk user-12=gradbai1 user-13=eaptekam user-14=dimpalne user-15=fxxcom user-16=peshkai1 user-17=tehnodro user-18=makdrone user-19=izzomk user-20=jpkomuna user-21=pelagini user-22=kaoilmk user-23=biplmk user-24=bbbustou user-25=atspedco user-26=sssoluti user-27=progress user-28=cleanerm user-29=animatem user-30=recorgmk user-31=taktcomm user-32=jaramk user-33=solointe user-34=eurofarm user-35=solarinv user-36=golakkom user-37=eliksirz user-38=naksorgm user-39=trigemat user-40=electrol user-41=workbenc user-42=ismassag user-43=mbmehani user-44=wineberr user-45=viplastc user-46=mediatag user-47=intelek1 user-48=nucktra1 user-49=lblawcom
Sep  7 16:42:04 power sudo[3114523]: wp-toolkit : (command continued) user-50=nikimare user-51=aptekazd user-52=forzares user-53=nikolov1 user-54=hausmark user-55=bogdanos user-56=carrent1 user-57=mediasol user-58=apgrupmk user-59=kardiome user-60=matratze user-61=euronic2 user-62=cosmatob user-63=euromaki user-64=zapovim1 user-65=elektrot user-66=chemhemc user-67=samasped user-68=nutrivim user-69=imdskopj user-70=albuname user-71=glammace user-72=infopor1 user-73=pravekom user-74=vtranseu user-75=fnjorgmk user-76=prizmapl user-77=darkogor user-78=dslmk user-79=bozinovm user-80=vacuacti user-81=premiumi user-82=innofabl user-83=taneccom user-84=modernar user-85=inkigaic user-86=zdmgpsor user-87=aquatech user-88=gorsajmk user-89=v5srybi9dcdx user-90=supremel user-91=onlinesh user-92=nationa2 user-93=solemor1 user-94=mapaspla user-95=tcieuroc user-96=fffhpcwr user-97=starluxm user-98=radekrat user-99=ambitiou user-100=fiziosmk user-101=versusmk user-102=barececo user-103=delcevca
Sep  7 16:42:04 power sudo[3114523]: wp-toolkit : (command continued) user-104=getaldus user-105=simbiome user-106=workandt user-107=dhamachi user-108=goartsym user-109=volkanco user-110=mfashion user-111=skyapart user-112=bianasho user-113=makoasmk user-114=rasmorgm user-115=datalink user-116=univerz1 user-117=kujnamon user-118=velmk user-119=gogovan1 user-120=mpbmk user-121=agrosind user-122=bizporta user-123=maleshne user-124=datelcom user-125=sedcmk user-126=ivanjord user-127=groskome user-128=polyeste user-129=vfxnestc user-130=wikicamp user-131=urbanexp user-132=spdcompu user-133=detskagr user-134=mspmk user-135=infobadi user-136=stojano1 user-137=bovincom user-138=janiboja user-139=itradeco user-140=vezilkac user-141=cabinetm user-142=palenzok user-143=zampmk user-144=busymard user-145=zvskopje user-146=custome1 user-147=stokovna user-148=sparkupm user-149=klimimk user-150=kouzonco user-151=premiuma user-152=cetplatf user-153=dalmacom user-154=inotekso user-155=jpparkin
Sep  7 16:42:04 power sudo[3114523]: wp-toolkit : (command continued) user-156=drleomk user-157=nasaidni user-158=karpospo user-159=ideaplus user-160=screenme user-161=arturaco user-162=butelmk user-163=daris user-164=premiums user-165=seloviro user-166=kolened1 user-167=centarba user-168=nlpmkorg user-169=nolimits user-170=edomcomm user-171=berbermk user-172=dikimk12 user-173=herbalpl user-174=enochmk user-175=sprintst user-176=gjorgeiv user-177=tradeyou user-178=dnevnoin user-179=pecakome user-180=robustco user-181=stravelm user-182=wondersp user-183=holiyayt user-184=rastiraz user-185=tealmk user-186=dadarmk user-187=proverim user-188=goodnews user-189=mstmmk user-190=gocruise user-191=stojnevi user-192=oouslave user-193=raremk user-194=bauerbg user-195=uhostmk5 user-196=enaspotc user-197=trudovop user-198=viewinn user-199=vmro user-200=cajsproc user-201=hotammk user-202=anitermc user-203=youthgua user-204=hidrommk user-205=frizered user-206=caramk user-207=levantmk
Sep  7 16:42:04 power sudo[3114523]: wp-toolkit : (command continued) user-208=ekostoc1 user-209=oncolog1 user-210=nefrolog user-211=socioloz user-212=avtogumi user-213=pelagoni user-214=evolvepl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 16:42:05 power sudo[3114523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:05 power sudo[3114523]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:05 power sudo[3114533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 16:42:05 power sudo[3114533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:05 power sudo[3114533]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:05 power sudo[3114538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ixTNxiN8G7bhpucW.~
Sep  7 16:42:05 power sudo[3114538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:05 power sudo[3114538]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:05 power sudo[3114543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ixTNxiN8G7bhpucW.~\''
Sep  7 16:42:05 power sudo[3114543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:05 power sudo[3114543]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:05 power sudo[3114549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ixTNxiN8G7bhpucW.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 16:42:05 power sudo[3114549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:05 power sudo[3114549]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:05 power sudo[3114555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 16:42:05 power sudo[3114555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:05 power sudo[3114555]: pam_unix(sudo:session): session closed for user root
Sep  7 16:42:06 power sudo[3115479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 16:42:06 power sudo[3115479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 16:42:06 power sudo[3115479]: pam_unix(sudo:session): session closed for user root
Sep  7 16:45:01 power systemd[3117782]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:50:01 power systemd[3122650]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 16:55:01 power systemd[3127585]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:00:01 power systemd[3132086]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 17:00:01 power systemd[3132085]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:00:01 power systemd[3132087]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 17:00:01 power systemd[3132089]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 17:05:01 power systemd[3137623]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:06:01 power systemd[3138475]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 17:07:01 power systemd[3139542]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 17:10:01 power systemd[3142062]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:12:01 power systemd[3143846]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 17:15:01 power systemd[3146100]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:20:01 power systemd[3150053]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:24:02 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 17:25:01 power systemd[3154531]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:30:01 power systemd[3159384]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:30:01 power systemd[3159385]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 17:30:01 power systemd[3159386]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 17:30:01 power systemd[3159387]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 17:35:01 power systemd[3164432]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:36:01 power systemd[3165676]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 17:37:01 power systemd[3166627]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 17:40:01 power systemd[3169065]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:42:01 power sudo[3170680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 17:42:01 power sudo[3170680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170680]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 17:42:01 power sudo[3170684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170684]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 17:42:01 power sudo[3170688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170688]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=fG5r4gDT0A'
Sep  7 17:42:01 power sudo[3170692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170692]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 17:42:01 power sudo[3170698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170698]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 17:42:01 power sudo[3170702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170702]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 17:42:01 power sudo[3170706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170706]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 17:42:01 power sudo[3170711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power systemd[3170728]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 17:42:01 power sudo[3170711]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 17:42:01 power sudo[3170735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170735]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 17:42:01 power sudo[3170741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170741]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 17:42:01 power sudo[3170745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170745]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:01 power sudo[3170751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 17:42:01 power sudo[3170751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:01 power sudo[3170751]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:02 power sudo[3170755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 17:42:02 power sudo[3170755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:02 power sudo[3170755]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:02 power sudo[3170760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 17:42:02 power sudo[3170760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:02 power sudo[3170760]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:04 power sudo[3170807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 17:42:04 power sudo[3170807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:04 power sudo[3170807]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:04 power sudo[3170812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 17:42:04 power sudo[3170812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:04 power sudo[3170812]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:04 power sudo[3170817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=conserva user-2=euronic3 user-3=vegemk1 user-4=cupidpro user-5=bonitavi user-6=evberasm user-7=bauerin2 user-8=folklore user-9=gradbai1 user-10=evacommk user-11=aptekafa user-12=madzomk user-13=peshkai1 user-14=fxxcom user-15=eaptekam user-16=dimpalne user-17=makdrone user-18=tehnodro user-19=izzomk user-20=jpkomuna user-21=pelagini user-22=biplmk user-23=kaoilmk user-24=bbbustou user-25=progress user-26=animatem user-27=cleanerm user-28=atspedco user-29=sssoluti user-30=jaramk user-31=solointe user-32=taktcomm user-33=recorgmk user-34=solarinv user-35=eurofarm user-36=trigemat user-37=naksorgm user-38=eliksirz user-39=electrol user-40=golakkom user-41=mbmehani user-42=workbenc user-43=ismassag user-44=wineberr user-45=viplastc user-46=nucktra1 user-47=lblawcom user-48=intelek1 user-49=mediatag
Sep  7 17:42:04 power sudo[3170817]: wp-toolkit : (command continued) user-50=hausmark user-51=nikolov1 user-52=aptekazd user-53=nikimare user-54=forzares user-55=kardiome user-56=mediasol user-57=carrent1 user-58=bogdanos user-59=apgrupmk user-60=euronic2 user-61=matratze user-62=zapovim1 user-63=elektrot user-64=cosmatob user-65=euromaki user-66=nutrivim user-67=chemhemc user-68=samasped user-69=glammace user-70=albuname user-71=imdskopj user-72=pravekom user-73=vtranseu user-74=infopor1 user-75=taneccom user-76=bozinovm user-77=darkogor user-78=fnjorgmk user-79=prizmapl user-80=dslmk user-81=premiumi user-82=innofabl user-83=vacuacti user-84=inkigaic user-85=modernar user-86=zdmgpsor user-87=v5srybi9dcdx user-88=supremel user-89=gorsajmk user-90=aquatech user-91=solemor1 user-92=mapaspla user-93=onlinesh user-94=nationa2 user-95=tcieuroc user-96=radekrat user-97=starluxm user-98=fffhpcwr user-99=versusmk user-100=ambitiou user-101=fiziosmk user-102=volkanco user-103=goartsym
Sep  7 17:42:04 power sudo[3170817]: wp-toolkit : (command continued) user-104=dhamachi user-105=mfashion user-106=delcevca user-107=simbiome user-108=getaldus user-109=barececo user-110=workandt user-111=rasmorgm user-112=makoasmk user-113=bianasho user-114=skyapart user-115=velmk user-116=gogovan1 user-117=univerz1 user-118=kujnamon user-119=datalink user-120=agrosind user-121=mpbmk user-122=datelcom user-123=maleshne user-124=bizporta user-125=vfxnestc user-126=polyeste user-127=sedcmk user-128=ivanjord user-129=groskome user-130=wikicamp user-131=urbanexp user-132=infobadi user-133=mspmk user-134=spdcompu user-135=detskagr user-136=bovincom user-137=stojano1 user-138=vezilkac user-139=cabinetm user-140=janiboja user-141=itradeco user-142=custome1 user-143=palenzok user-144=zvskopje user-145=zampmk user-146=busymard user-147=klimimk user-148=sparkupm user-149=stokovna user-150=cetplatf user-151=dalmacom user-152=kouzonco user-153=premiuma user-154=jpparkin user-155=inotekso
Sep  7 17:42:04 power sudo[3170817]: wp-toolkit : (command continued) user-156=drleomk user-157=premiums user-158=butelmk user-159=daris user-160=ideaplus user-161=karpospo user-162=nasaidni user-163=arturaco user-164=screenme user-165=seloviro user-166=nolimits user-167=centarba user-168=nlpmkorg user-169=kolened1 user-170=edomcomm user-171=berbermk user-172=dikimk12 user-173=sprintst user-174=herbalpl user-175=enochmk user-176=dnevnoin user-177=tradeyou user-178=gjorgeiv user-179=holiyayt user-180=rastiraz user-181=pecakome user-182=wondersp user-183=stravelm user-184=robustco user-185=dadarmk user-186=proverim user-187=tealmk user-188=gocruise user-189=goodnews user-190=mstmmk user-191=raremk user-192=oouslave user-193=uhostmk5 user-194=bauerbg user-195=stojnevi user-196=enaspotc user-197=vmro user-198=viewinn user-199=trudovop user-200=cajsproc user-201=hotammk user-202=youthgua user-203=anitermc user-204=caramk user-205=frizered user-206=hidrommk user-207=nefrolog
Sep  7 17:42:04 power sudo[3170817]: wp-toolkit : (command continued) user-208=ekostoc1 user-209=oncolog1 user-210=levantmk user-211=pelagoni user-212=socioloz user-213=avtogumi user-214=evolvepl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 17:42:04 power sudo[3170817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:05 power sudo[3170817]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:05 power sudo[3170832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 17:42:05 power sudo[3170832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:05 power sudo[3170832]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:05 power sudo[3170837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sLaFSG50NzTVDXfG.~
Sep  7 17:42:05 power sudo[3170837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:05 power sudo[3170837]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:05 power sudo[3170842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sLaFSG50NzTVDXfG.~\''
Sep  7 17:42:05 power sudo[3170842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:05 power sudo[3170842]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:05 power sudo[3170848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sLaFSG50NzTVDXfG.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 17:42:05 power sudo[3170848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:05 power sudo[3170848]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:05 power sudo[3170853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 17:42:05 power sudo[3170853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:05 power sudo[3170853]: pam_unix(sudo:session): session closed for user root
Sep  7 17:42:05 power sudo[3171361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 17:42:05 power sudo[3171361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 17:42:05 power sudo[3171361]: pam_unix(sudo:session): session closed for user root
Sep  7 17:43:46 power sshd[3173167]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 17:43:46 power sshd[3173167]: Connection closed by 71.6.147.254 port 53304
Sep  7 17:43:47 power sshd[3173175]: Connection closed by 71.6.147.254 port 53684 [preauth]
Sep  7 17:43:47 power sshd[3173194]: Connection closed by 71.6.147.254 port 53970 [preauth]
Sep  7 17:45:01 power systemd[3174172]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:47:53 power sshd[3177187]: Connection closed by 104.152.52.240 port 57611 [preauth]
Sep  7 17:47:53 power sshd[3177206]: Connection closed by 104.152.52.222 port 38083 [preauth]
Sep  7 17:50:01 power systemd[3179092]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:50:53 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 17:55:01 power systemd[3182953]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 17:58:20 power sshd[3186028]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 17:58:20 power sshd[3186028]: Connection closed by 87.236.176.87 port 52805
Sep  7 17:58:20 power sshd[3186068]: Connection closed by 87.236.176.87 port 55019 [preauth]
Sep  7 18:00:02 power systemd[3187494]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 18:00:02 power systemd[3187511]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:00:02 power systemd[3187514]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 18:00:02 power systemd[3187515]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 18:05:01 power systemd[3192828]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:06:01 power systemd[3193616]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 18:07:01 power systemd[3194600]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 18:09:57 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 18:10:01 power systemd[3197367]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:12:01 power systemd[3198994]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 18:15:01 power systemd[3201361]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:20:01 power systemd[3205526]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:22:06 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 18:25:01 power systemd[3209693]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:30:01 power systemd[3213647]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:30:01 power systemd[3213648]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 18:30:01 power systemd[3213649]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 18:30:01 power systemd[3213651]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 18:35:01 power systemd[3218266]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:36:01 power systemd[3219273]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 18:37:01 power systemd[3220166]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 18:40:01 power systemd[3222712]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:42:01 power sudo[3224906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 18:42:01 power sudo[3224906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:01 power sudo[3224906]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:01 power systemd[3224910]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 18:42:01 power sudo[3224915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 18:42:01 power sudo[3224915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:01 power sudo[3224915]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:01 power sudo[3224922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 18:42:01 power sudo[3224922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:01 power sudo[3224922]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:01 power sudo[3224928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=seXPpIYbYF'
Sep  7 18:42:01 power sudo[3224928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:01 power sudo[3224928]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:01 power sudo[3224935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 18:42:01 power sudo[3224935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:01 power sudo[3224935]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:01 power sudo[3224939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 18:42:01 power sudo[3224939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:01 power sudo[3224939]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:01 power sudo[3224943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 18:42:01 power sudo[3224943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:01 power sudo[3224943]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:01 power sudo[3224947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 18:42:01 power sudo[3224947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:01 power sudo[3224947]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:01 power sudo[3224959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 18:42:01 power sudo[3224959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:01 power sudo[3224959]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:01 power sudo[3224964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 18:42:02 power sudo[3224964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:02 power sudo[3224964]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:02 power sudo[3224969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 18:42:02 power sudo[3224969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:02 power sudo[3224969]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:02 power sudo[3224973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 18:42:02 power sudo[3224973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:02 power sudo[3224973]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:02 power sudo[3224977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 18:42:02 power sudo[3224977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:02 power sudo[3224977]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:02 power sudo[3224982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 18:42:02 power sudo[3224982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:02 power sudo[3224982]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:05 power sudo[3225090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 18:42:05 power sudo[3225090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:05 power sudo[3225090]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:05 power sudo[3225095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 18:42:05 power sudo[3225095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:05 power sudo[3225095]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:05 power sudo[3225101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tcieuroc user-2=mapaspla user-3=solemor1 user-4=nationa2 user-5=onlinesh user-6=versusmk user-7=fiziosmk user-8=ambitiou user-9=radekrat user-10=starluxm user-11=fffhpcwr user-12=inkigaic user-13=modernar user-14=taneccom user-15=premiumi user-16=innofabl user-17=vacuacti user-18=bozinovm user-19=fnjorgmk user-20=prizmapl user-21=darkogor user-22=dslmk user-23=supremel user-24=v5srybi9dcdx user-25=gorsajmk user-26=aquatech user-27=zdmgpsor user-28=nutrivim user-29=chemhemc user-30=samasped user-31=zapovim1 user-32=elektrot user-33=euromaki user-34=cosmatob user-35=pravekom user-36=vtranseu user-37=infopor1 user-38=glammace user-39=albuname user-40=imdskopj user-41=nikolov1 user-42=hausmark user-43=forzares user-44=aptekazd user-45=nikimare user-46=lblawcom user-47=nucktra1 user-48=intelek1 user-49=mediatag
Sep  7 18:42:05 power sudo[3225101]: wp-toolkit : (command continued) user-50=euronic2 user-51=matratze user-52=kardiome user-53=apgrupmk user-54=mediasol user-55=carrent1 user-56=bogdanos user-57=electrol user-58=trigemat user-59=naksorgm user-60=eliksirz user-61=golakkom user-62=solarinv user-63=eurofarm user-64=viplastc user-65=wineberr user-66=mbmehani user-67=ismassag user-68=workbenc user-69=bbbustou user-70=kaoilmk user-71=biplmk user-72=pelagini user-73=solointe user-74=jaramk user-75=recorgmk user-76=taktcomm user-77=animatem user-78=cleanerm user-79=progress user-80=sssoluti user-81=atspedco user-82=peshkai1 user-83=fxxcom user-84=dimpalne user-85=eaptekam user-86=gradbai1 user-87=evacommk user-88=madzomk user-89=aptekafa user-90=jpkomuna user-91=izzomk user-92=makdrone user-93=tehnodro user-94=bonitavi user-95=evberasm user-96=conserva user-97=vegemk1 user-98=cupidpro user-99=euronic3 user-100=bauerin2 user-101=folklore user-102=nefrolog user-103=ekostoc1
Sep  7 18:42:05 power sudo[3225101]: wp-toolkit : (command continued) user-104=oncolog1 user-105=levantmk user-106=caramk user-107=frizered user-108=hidrommk user-109=evolvepl user-110=pelagoni user-111=socioloz user-112=avtogumi user-113=vmro user-114=trudovop user-115=viewinn user-116=enaspotc user-117=uhostmk5 user-118=bauerbg user-119=raremk user-120=oouslave user-121=stojnevi user-122=youthgua user-123=anitermc user-124=hotammk user-125=cajsproc user-126=rastiraz user-127=holiyayt user-128=wondersp user-129=stravelm user-130=robustco user-131=pecakome user-132=dnevnoin user-133=gjorgeiv user-134=tradeyou user-135=gocruise user-136=mstmmk user-137=goodnews user-138=proverim user-139=dadarmk user-140=tealmk user-141=nolimits user-142=nlpmkorg user-143=centarba user-144=kolened1 user-145=seloviro user-146=sprintst user-147=herbalpl user-148=enochmk user-149=dikimk12 user-150=berbermk user-151=edomcomm user-152=dalmacom user-153=cetplatf user-154=premiuma user-155=kouzonco
Sep  7 18:42:05 power sudo[3225101]: wp-toolkit : (command continued) user-156=premiums user-157=daris user-158=butelmk user-159=arturaco user-160=screenme user-161=ideaplus user-162=karpospo user-163=nasaidni user-164=drleomk user-165=jpparkin user-166=inotekso user-167=cabinetm user-168=vezilkac user-169=itradeco user-170=janiboja user-171=bovincom user-172=stojano1 user-173=klimimk user-174=sparkupm user-175=stokovna user-176=custome1 user-177=zampmk user-178=busymard user-179=zvskopje user-180=palenzok user-181=vfxnestc user-182=polyeste user-183=ivanjord user-184=groskome user-185=sedcmk user-186=datelcom user-187=maleshne user-188=bizporta user-189=infobadi user-190=mspmk user-191=detskagr user-192=spdcompu user-193=urbanexp user-194=wikicamp user-195=rasmorgm user-196=bianasho user-197=makoasmk user-198=skyapart user-199=mfashion user-200=volkanco user-201=goartsym user-202=dhamachi user-203=workandt user-204=simbiome user-205=delcevca user-206=getaldus user-207=barececo
Sep  7 18:42:05 power sudo[3225101]: wp-toolkit : (command continued) user-208=agrosind user-209=mpbmk user-210=velmk user-211=gogovan1 user-212=univerz1 user-213=kujnamon user-214=datalink feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 18:42:05 power sudo[3225101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:05 power sudo[3225101]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:05 power sudo[3225114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 18:42:05 power sudo[3225114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:05 power sudo[3225114]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:05 power sudo[3225118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UxqJhBTT4UXEps8d.~
Sep  7 18:42:05 power sudo[3225118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:05 power sudo[3225118]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:05 power sudo[3225122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UxqJhBTT4UXEps8d.~\''
Sep  7 18:42:05 power sudo[3225122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:05 power sudo[3225122]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:05 power sudo[3225127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UxqJhBTT4UXEps8d.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 18:42:05 power sudo[3225127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:05 power sudo[3225127]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:05 power sudo[3225131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 18:42:05 power sudo[3225131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:05 power sudo[3225131]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:05 power sudo[3225135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_licenses --output=json'
Sep  7 18:42:05 power sudo[3225135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:06 power sudo[3225135]: pam_unix(sudo:session): session closed for user root
Sep  7 18:42:07 power sudo[3225999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 18:42:07 power sudo[3225999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 18:42:07 power sudo[3225999]: pam_unix(sudo:session): session closed for user root
Sep  7 18:45:01 power systemd[3228847]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:45:54 power sshd[3229539]: Connection closed by 206.168.34.218 port 47904 [preauth]
Sep  7 18:50:01 power systemd[3233551]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 18:53:20 power unix_chkpwd[3236497]: password check failed for user (root)
Sep  7 18:53:20 power sshd[3236481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.144.42.114  user=root
Sep  7 18:53:22 power sshd[3236481]: Failed password for root from 136.144.42.114 port 47961 ssh2
Sep  7 18:53:24 power sshd[3236481]: Connection closed by authenticating user root 136.144.42.114 port 47961 [preauth]
Sep  7 18:55:01 power systemd[3237777]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:00:01 power systemd[3241838]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:00:01 power systemd[3241840]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 19:00:01 power systemd[3241842]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 19:00:01 power systemd[3241843]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 19:05:01 power systemd[3246915]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:06:01 power systemd[3247786]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 19:07:01 power systemd[3248658]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 19:10:01 power systemd[3251285]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:12:01 power systemd[3252850]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 19:15:01 power systemd[3255467]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:20:01 power systemd[3259891]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:23:32 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 19:25:01 power systemd[3263912]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:30:01 power systemd[3268455]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:30:01 power systemd[3268457]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 19:30:01 power systemd[3268458]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 19:30:01 power systemd[3268460]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 19:35:01 power systemd[3273213]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:36:01 power systemd[3274279]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 19:37:01 power systemd[3275006]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 19:40:01 power systemd[3277639]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:42:01 power systemd[3279361]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 19:42:01 power sudo[3279396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 19:42:01 power sudo[3279396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:01 power sudo[3279396]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:01 power sudo[3279400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 19:42:01 power sudo[3279400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:01 power sudo[3279400]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:01 power sudo[3279404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 19:42:01 power sudo[3279404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:01 power sudo[3279404]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:01 power sudo[3279408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=99owyjlsf9'
Sep  7 19:42:01 power sudo[3279408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:01 power sudo[3279408]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:01 power sudo[3279413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 19:42:01 power sudo[3279413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:01 power sudo[3279413]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:01 power sudo[3279417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 19:42:01 power sudo[3279417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:01 power sudo[3279417]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:01 power sudo[3279422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 19:42:01 power sudo[3279422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:01 power sudo[3279422]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:01 power sudo[3279426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 19:42:01 power sudo[3279426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:02 power sudo[3279426]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:02 power sudo[3279437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 19:42:02 power sudo[3279437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:02 power sudo[3279437]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:02 power sudo[3279441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 19:42:02 power sudo[3279441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:02 power sudo[3279441]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:02 power sudo[3279445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 19:42:02 power sudo[3279445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:02 power sudo[3279445]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:02 power sudo[3279449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 19:42:02 power sudo[3279449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:02 power sudo[3279449]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:02 power sudo[3279453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 19:42:02 power sudo[3279453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:02 power sudo[3279453]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:02 power sudo[3279457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 19:42:02 power sudo[3279457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:02 power sudo[3279457]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:05 power sudo[3279528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 19:42:05 power sudo[3279528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:05 power sudo[3279528]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:05 power sudo[3279534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 19:42:05 power sudo[3279534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:05 power sudo[3279534]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:05 power sudo[3279542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=caramk user-2=hidrommk user-3=frizered user-4=ekostoc1 user-5=oncolog1 user-6=levantmk user-7=nefrolog user-8=pelagoni user-9=socioloz user-10=avtogumi user-11=evolvepl user-12=oouslave user-13=raremk user-14=bauerbg user-15=uhostmk5 user-16=stojnevi user-17=enaspotc user-18=viewinn user-19=trudovop user-20=vmro user-21=cajsproc user-22=hotammk user-23=anitermc user-24=youthgua user-25=dnevnoin user-26=gjorgeiv user-27=tradeyou user-28=holiyayt user-29=rastiraz user-30=pecakome user-31=robustco user-32=stravelm user-33=wondersp user-34=dadarmk user-35=proverim user-36=tealmk user-37=gocruise user-38=goodnews user-39=mstmmk user-40=seloviro user-41=nolimits user-42=kolened1 user-43=nlpmkorg user-44=centarba user-45=edomcomm user-46=berbermk user-47=dikimk12 user-48=herbalpl user-49=enochmk user-50=sprintst
Sep  7 19:42:05 power sudo[3279542]: wp-toolkit : (command continued) user-51=cetplatf user-52=dalmacom user-53=kouzonco user-54=premiuma user-55=inotekso user-56=jpparkin user-57=drleomk user-58=daris user-59=butelmk user-60=premiums user-61=nasaidni user-62=karpospo user-63=ideaplus user-64=arturaco user-65=screenme user-66=bovincom user-67=stojano1 user-68=vezilkac user-69=cabinetm user-70=janiboja user-71=itradeco user-72=custome1 user-73=palenzok user-74=zvskopje user-75=zampmk user-76=busymard user-77=klimimk user-78=stokovna user-79=sparkupm user-80=maleshne user-81=datelcom user-82=bizporta user-83=polyeste user-84=vfxnestc user-85=sedcmk user-86=groskome user-87=ivanjord user-88=wikicamp user-89=urbanexp user-90=infobadi user-91=mspmk user-92=spdcompu user-93=detskagr user-94=dhamachi user-95=goartsym user-96=volkanco user-97=mfashion user-98=barececo user-99=getaldus user-100=delcevca user-101=simbiome user-102=workandt user-103=rasmorgm user-104=skyapart
Sep  7 19:42:05 power sudo[3279542]: wp-toolkit : (command continued) user-105=bianasho user-106=makoasmk user-107=univerz1 user-108=kujnamon user-109=gogovan1 user-110=velmk user-111=datalink user-112=mpbmk user-113=agrosind user-114=solemor1 user-115=mapaspla user-116=onlinesh user-117=nationa2 user-118=tcieuroc user-119=starluxm user-120=radekrat user-121=fffhpcwr user-122=versusmk user-123=ambitiou user-124=fiziosmk user-125=taneccom user-126=dslmk user-127=prizmapl user-128=darkogor user-129=fnjorgmk user-130=bozinovm user-131=vacuacti user-132=premiumi user-133=innofabl user-134=inkigaic user-135=modernar user-136=zdmgpsor user-137=v5srybi9dcdx user-138=supremel user-139=aquatech user-140=gorsajmk user-141=zapovim1 user-142=elektrot user-143=euromaki user-144=cosmatob user-145=nutrivim user-146=chemhemc user-147=samasped user-148=albuname user-149=glammace user-150=imdskopj user-151=vtranseu user-152=pravekom user-153=infopor1 user-154=nucktra1 user-155=lblawcom
Sep  7 19:42:05 power sudo[3279542]: wp-toolkit : (command continued) user-156=mediatag user-157=intelek1 user-158=nikolov1 user-159=hausmark user-160=nikimare user-161=aptekazd user-162=forzares user-163=kardiome user-164=bogdanos user-165=carrent1 user-166=mediasol user-167=apgrupmk user-168=matratze user-169=euronic2 user-170=solarinv user-171=eurofarm user-172=naksorgm user-173=eliksirz user-174=trigemat user-175=electrol user-176=golakkom user-177=mbmehani user-178=workbenc user-179=ismassag user-180=wineberr user-181=viplastc user-182=pelagini user-183=biplmk user-184=kaoilmk user-185=bbbustou user-186=progress user-187=cleanerm user-188=animatem user-189=atspedco user-190=sssoluti user-191=jaramk user-192=solointe user-193=taktcomm user-194=recorgmk user-195=gradbai1 user-196=aptekafa user-197=madzomk user-198=evacommk user-199=fxxcom user-200=peshkai1 user-201=eaptekam user-202=dimpalne user-203=makdrone user-204=tehnodro user-205=izzomk user-206=jpkomuna user-207=conserva
Sep  7 19:42:05 power sudo[3279542]: wp-toolkit : (command continued) user-208=euronic3 user-209=cupidpro user-210=vegemk1 user-211=evberasm user-212=bonitavi user-213=bauerin2 user-214=folklore feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 19:42:05 power sudo[3279542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:05 power sudo[3279542]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:05 power sudo[3279553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 19:42:05 power sudo[3279553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:05 power sudo[3279553]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:05 power sudo[3279557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iMTfL4xq02yrTEIb.~
Sep  7 19:42:05 power sudo[3279557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:05 power sudo[3279557]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:05 power sudo[3279562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iMTfL4xq02yrTEIb.~\''
Sep  7 19:42:05 power sudo[3279562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:05 power sudo[3279562]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:05 power sudo[3279567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iMTfL4xq02yrTEIb.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 19:42:05 power sudo[3279567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:05 power sudo[3279567]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:05 power sudo[3279571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 19:42:05 power sudo[3279571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:05 power sudo[3279571]: pam_unix(sudo:session): session closed for user root
Sep  7 19:42:06 power sudo[3280377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 19:42:06 power sudo[3280377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 19:42:06 power sudo[3280377]: pam_unix(sudo:session): session closed for user root
Sep  7 19:45:01 power systemd[3282929]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:50:01 power systemd[3287298]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 19:55:01 power systemd[3291553]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:00:01 power systemd[3295645]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:00:01 power systemd[3295651]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 20:00:01 power systemd[3295653]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 20:00:01 power systemd[3295655]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 20:05:01 power systemd[3300405]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:06:01 power systemd[3301219]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 20:07:02 power systemd[3302240]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 20:10:01 power systemd[3305055]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:12:01 power systemd[3306553]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 20:15:01 power systemd[3309008]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:20:01 power systemd[3313603]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:25:01 power systemd[3317956]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:30:01 power systemd[3322179]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:30:01 power systemd[3322182]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 20:30:01 power systemd[3322183]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 20:30:01 power systemd[3322185]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 20:35:01 power systemd[3326883]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:36:01 power systemd[3327764]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 20:37:01 power systemd[3328543]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 20:40:01 power systemd[3331327]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:42:01 power systemd[3332821]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 20:42:01 power sudo[3332848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 20:42:01 power sudo[3332848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:01 power sudo[3332848]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:01 power sudo[3332852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 20:42:01 power sudo[3332852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:01 power sudo[3332852]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:01 power sudo[3332856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 20:42:01 power sudo[3332856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:01 power sudo[3332856]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:01 power sudo[3332860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=tm1VVkYhtY'
Sep  7 20:42:01 power sudo[3332860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:01 power sudo[3332860]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:01 power sudo[3332865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 20:42:01 power sudo[3332865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:01 power sudo[3332865]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:01 power sudo[3332869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 20:42:01 power sudo[3332869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:01 power sudo[3332869]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:01 power sudo[3332873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 20:42:01 power sudo[3332873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:01 power sudo[3332873]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:01 power sudo[3332878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 20:42:01 power sudo[3332878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:02 power sudo[3332878]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:02 power sudo[3332886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 20:42:02 power sudo[3332886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:02 power sudo[3332886]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:02 power sudo[3332890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 20:42:02 power sudo[3332890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:02 power sudo[3332890]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:02 power sudo[3332894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 20:42:02 power sudo[3332894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:02 power sudo[3332894]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:02 power sudo[3332898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 20:42:02 power sudo[3332898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:02 power sudo[3332898]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:02 power sudo[3332902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 20:42:02 power sudo[3332902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:02 power sudo[3332902]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:02 power sudo[3332906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 20:42:02 power sudo[3332906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:02 power sudo[3332906]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:04 power sudo[3332953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 20:42:04 power sudo[3332953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:04 power sudo[3332953]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:04 power sudo[3332958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 20:42:04 power sudo[3332958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:04 power sudo[3332958]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:04 power sudo[3332965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=solarinv user-2=eurofarm user-3=naksorgm user-4=eliksirz user-5=trigemat user-6=electrol user-7=golakkom user-8=mbmehani user-9=workbenc user-10=ismassag user-11=wineberr user-12=viplastc user-13=pelagini user-14=kaoilmk user-15=biplmk user-16=bbbustou user-17=progress user-18=cleanerm user-19=animatem user-20=atspedco user-21=sssoluti user-22=jaramk user-23=solointe user-24=taktcomm user-25=recorgmk user-26=gradbai1 user-27=madzomk user-28=aptekafa user-29=evacommk user-30=fxxcom user-31=peshkai1 user-32=eaptekam user-33=dimpalne user-34=makdrone user-35=tehnodro user-36=izzomk user-37=jpkomuna user-38=conserva user-39=euronic3 user-40=cupidpro user-41=vegemk1 user-42=evberasm user-43=bonitavi user-44=bauerin2 user-45=folklore user-46=solemor1 user-47=mapaspla user-48=onlinesh user-49=nationa2
Sep  7 20:42:04 power sudo[3332965]: wp-toolkit : (command continued) user-50=tcieuroc user-51=starluxm user-52=radekrat user-53=fffhpcwr user-54=versusmk user-55=ambitiou user-56=fiziosmk user-57=taneccom user-58=prizmapl user-59=dslmk user-60=fnjorgmk user-61=darkogor user-62=bozinovm user-63=vacuacti user-64=premiumi user-65=innofabl user-66=inkigaic user-67=modernar user-68=zdmgpsor user-69=v5srybi9dcdx user-70=supremel user-71=aquatech user-72=gorsajmk user-73=elektrot user-74=zapovim1 user-75=euromaki user-76=cosmatob user-77=nutrivim user-78=chemhemc user-79=samasped user-80=albuname user-81=glammace user-82=imdskopj user-83=pravekom user-84=vtranseu user-85=infopor1 user-86=nucktra1 user-87=lblawcom user-88=mediatag user-89=intelek1 user-90=hausmark user-91=nikolov1 user-92=nikimare user-93=aptekazd user-94=forzares user-95=kardiome user-96=bogdanos user-97=carrent1 user-98=mediasol user-99=apgrupmk user-100=matratze user-101=euronic2 user-102=cetplatf user-103=dalmacom
Sep  7 20:42:04 power sudo[3332965]: wp-toolkit : (command continued) user-104=kouzonco user-105=premiuma user-106=inotekso user-107=jpparkin user-108=drleomk user-109=daris user-110=butelmk user-111=premiums user-112=karpospo user-113=nasaidni user-114=ideaplus user-115=screenme user-116=arturaco user-117=bovincom user-118=stojano1 user-119=vezilkac user-120=cabinetm user-121=janiboja user-122=itradeco user-123=custome1 user-124=palenzok user-125=zvskopje user-126=zampmk user-127=busymard user-128=klimimk user-129=stokovna user-130=sparkupm user-131=maleshne user-132=datelcom user-133=bizporta user-134=polyeste user-135=vfxnestc user-136=sedcmk user-137=groskome user-138=ivanjord user-139=wikicamp user-140=urbanexp user-141=infobadi user-142=mspmk user-143=spdcompu user-144=detskagr user-145=dhamachi user-146=goartsym user-147=volkanco user-148=mfashion user-149=barececo user-150=delcevca user-151=getaldus user-152=simbiome user-153=workandt user-154=rasmorgm user-155=skyapart
Sep  7 20:42:04 power sudo[3332965]: wp-toolkit : (command continued) user-156=bianasho user-157=makoasmk user-158=kujnamon user-159=univerz1 user-160=gogovan1 user-161=velmk user-162=datalink user-163=mpbmk user-164=agrosind user-165=caramk user-166=hidrommk user-167=frizered user-168=ekostoc1 user-169=oncolog1 user-170=levantmk user-171=nefrolog user-172=pelagoni user-173=socioloz user-174=avtogumi user-175=evolvepl user-176=oouslave user-177=raremk user-178=bauerbg user-179=uhostmk5 user-180=stojnevi user-181=enaspotc user-182=trudovop user-183=viewinn user-184=vmro user-185=cajsproc user-186=hotammk user-187=anitermc user-188=youthgua user-189=dnevnoin user-190=tradeyou user-191=gjorgeiv user-192=holiyayt user-193=rastiraz user-194=pecakome user-195=robustco user-196=stravelm user-197=wondersp user-198=dadarmk user-199=proverim user-200=tealmk user-201=gocruise user-202=goodnews user-203=mstmmk user-204=seloviro user-205=nolimits user-206=kolened1 user-207=nlpmkorg
Sep  7 20:42:04 power sudo[3332965]: wp-toolkit : (command continued) user-208=centarba user-209=edomcomm user-210=berbermk user-211=dikimk12 user-212=enochmk user-213=herbalpl user-214=sprintst feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 20:42:04 power sudo[3332965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:05 power sudo[3332965]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:05 power sudo[3332972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 20:42:05 power sudo[3332972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:05 power sudo[3332972]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:05 power sudo[3332981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xsj95aviiBuRvvrp.~
Sep  7 20:42:05 power sudo[3332981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:05 power sudo[3332981]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:05 power sudo[3332985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xsj95aviiBuRvvrp.~\''
Sep  7 20:42:05 power sudo[3332985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:05 power sudo[3332985]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:05 power sudo[3332990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xsj95aviiBuRvvrp.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 20:42:05 power sudo[3332990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:05 power sudo[3332990]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:05 power sudo[3332994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 20:42:05 power sudo[3332994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:05 power sudo[3332994]: pam_unix(sudo:session): session closed for user root
Sep  7 20:42:05 power sudo[3333413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 20:42:05 power sudo[3333413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 20:42:05 power sudo[3333413]: pam_unix(sudo:session): session closed for user root
Sep  7 20:45:01 power systemd[3336678]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:50:01 power systemd[3340925]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 20:52:12 power sshd[3342638]: Connection closed by 192.155.90.118 port 3558 [preauth]
Sep  7 20:52:13 power sshd[3342660]: Connection closed by 192.155.90.118 port 3566 [preauth]
Sep  7 20:52:13 power sshd[3342672]: Connection closed by 192.155.90.118 port 3578 [preauth]
Sep  7 20:55:01 power systemd[3344981]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:00:01 power systemd[3349447]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:00:01 power systemd[3349448]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 21:00:01 power systemd[3349450]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 21:00:01 power systemd[3349452]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 21:05:01 power systemd[3354349]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:06:01 power systemd[3355168]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 21:07:01 power systemd[3355934]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 21:10:01 power systemd[3358435]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:12:01 power systemd[3360241]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 21:15:01 power systemd[3363315]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:15:01 power systemd[3363316]: pam_unix(systemd-user:session): session opened for user polyeste(uid=1217) by polyeste(uid=0)
Sep  7 21:20:01 power systemd[3367666]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:25:01 power systemd[3372398]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:30:01 power systemd[3377013]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:30:01 power systemd[3377014]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 21:30:01 power systemd[3377015]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 21:30:01 power systemd[3377017]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 21:35:01 power systemd[3381905]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:36:01 power systemd[3382885]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 21:37:01 power systemd[3383731]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 21:40:02 power systemd[3386572]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:42:01 power systemd[3388120]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 21:42:01 power sudo[3388143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 21:42:01 power sudo[3388143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:01 power sudo[3388143]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:01 power sudo[3388147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 21:42:01 power sudo[3388147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:01 power sudo[3388147]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:01 power sudo[3388151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 21:42:01 power sudo[3388151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:01 power sudo[3388151]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:01 power sudo[3388155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=74T5odwYF3'
Sep  7 21:42:01 power sudo[3388155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:01 power sudo[3388155]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:01 power sudo[3388160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 21:42:01 power sudo[3388160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:01 power sudo[3388160]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:01 power sudo[3388164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 21:42:01 power sudo[3388164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:01 power sudo[3388164]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:01 power sudo[3388169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 21:42:01 power sudo[3388169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:01 power sudo[3388169]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:01 power sudo[3388173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 21:42:01 power sudo[3388173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:02 power sudo[3388173]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:02 power sudo[3388183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 21:42:02 power sudo[3388183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:02 power sudo[3388183]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:02 power sudo[3388188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 21:42:02 power sudo[3388188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:02 power sudo[3388188]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:02 power sudo[3388192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 21:42:02 power sudo[3388192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:02 power sudo[3388192]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:02 power sudo[3388196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 21:42:02 power sudo[3388196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:02 power sudo[3388196]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:02 power sudo[3388200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 21:42:02 power sudo[3388200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:02 power sudo[3388200]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:02 power sudo[3388204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 21:42:02 power sudo[3388204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:02 power sudo[3388204]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:04 power sudo[3388266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 21:42:04 power sudo[3388266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:04 power sudo[3388266]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:04 power sudo[3388287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 21:42:04 power sudo[3388287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:04 power sudo[3388287]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:04 power sudo[3388293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bonitavi user-2=evberasm user-3=conserva user-4=euronic3 user-5=vegemk1 user-6=cupidpro user-7=bauerin2 user-8=folklore user-9=peshkai1 user-10=fxxcom user-11=eaptekam user-12=dimpalne user-13=gradbai1 user-14=evacommk user-15=madzomk user-16=aptekafa user-17=izzomk user-18=jpkomuna user-19=makdrone user-20=tehnodro user-21=kaoilmk user-22=biplmk user-23=bbbustou user-24=pelagini user-25=jaramk user-26=solointe user-27=taktcomm user-28=recorgmk user-29=progress user-30=animatem user-31=cleanerm user-32=sssoluti user-33=atspedco user-34=trigemat user-35=eliksirz user-36=naksorgm user-37=electrol user-38=golakkom user-39=solarinv user-40=eurofarm user-41=wineberr user-42=viplastc user-43=mbmehani user-44=workbenc user-45=ismassag user-46=hausmark user-47=nikolov1 user-48=aptekazd user-49=nikimare
Sep  7 21:42:04 power sudo[3388293]: wp-toolkit : (command continued) user-50=forzares user-51=nucktra1 user-52=lblawcom user-53=intelek1 user-54=mediatag user-55=euronic2 user-56=matratze user-57=kardiome user-58=mediasol user-59=carrent1 user-60=bogdanos user-61=apgrupmk user-62=nutrivim user-63=chemhemc user-64=samasped user-65=zapovim1 user-66=elektrot user-67=cosmatob user-68=euromaki user-69=pravekom user-70=vtranseu user-71=infopor1 user-72=glammace user-73=albuname user-74=imdskopj user-75=inkigaic user-76=modernar user-77=taneccom user-78=bozinovm user-79=darkogor user-80=prizmapl user-81=dslmk user-82=fnjorgmk user-83=innofabl user-84=premiumi user-85=vacuacti user-86=v5srybi9dcdx user-87=supremel user-88=gorsajmk user-89=aquatech user-90=zdmgpsor user-91=tcieuroc user-92=solemor1 user-93=mapaspla user-94=onlinesh user-95=nationa2 user-96=versusmk user-97=ambitiou user-98=fiziosmk user-99=radekrat user-100=starluxm user-101=fffhpcwr user-102=rasmorgm user-103=bianasho
Sep  7 21:42:04 power sudo[3388293]: wp-toolkit : (command continued) user-104=makoasmk user-105=skyapart user-106=volkanco user-107=goartsym user-108=dhamachi user-109=mfashion user-110=getaldus user-111=delcevca user-112=simbiome user-113=barececo user-114=workandt user-115=agrosind user-116=mpbmk user-117=velmk user-118=gogovan1 user-119=kujnamon user-120=univerz1 user-121=datalink user-122=vfxnestc user-123=polyeste user-124=sedcmk user-125=groskome user-126=ivanjord user-127=datelcom user-128=maleshne user-129=bizporta user-130=mspmk user-131=infobadi user-132=spdcompu user-133=detskagr user-134=wikicamp user-135=urbanexp user-136=vezilkac user-137=cabinetm user-138=janiboja user-139=itradeco user-140=bovincom user-141=stojano1 user-142=klimimk user-143=sparkupm user-144=stokovna user-145=custome1 user-146=palenzok user-147=busymard user-148=zampmk user-149=zvskopje user-150=cetplatf user-151=dalmacom user-152=kouzonco user-153=premiuma user-154=premiums user-155=butelmk
Sep  7 21:42:04 power sudo[3388293]: wp-toolkit : (command continued) user-156=daris user-157=ideaplus user-158=nasaidni user-159=karpospo user-160=screenme user-161=arturaco user-162=jpparkin user-163=inotekso user-164=drleomk user-165=nolimits user-166=nlpmkorg user-167=centarba user-168=kolened1 user-169=seloviro user-170=dikimk12 user-171=sprintst user-172=enochmk user-173=herbalpl user-174=edomcomm user-175=berbermk user-176=holiyayt user-177=rastiraz user-178=pecakome user-179=wondersp user-180=stravelm user-181=robustco user-182=dnevnoin user-183=tradeyou user-184=gjorgeiv user-185=gocruise user-186=goodnews user-187=mstmmk user-188=dadarmk user-189=proverim user-190=tealmk user-191=enaspotc user-192=vmro user-193=trudovop user-194=viewinn user-195=raremk user-196=oouslave user-197=uhostmk5 user-198=bauerbg user-199=stojnevi user-200=youthgua user-201=anitermc user-202=cajsproc user-203=hotammk user-204=nefrolog user-205=levantmk user-206=ekostoc1 user-207=oncolog1
Sep  7 21:42:04 power sudo[3388293]: wp-toolkit : (command continued) user-208=caramk user-209=frizered user-210=hidrommk user-211=evolvepl user-212=pelagoni user-213=socioloz user-214=avtogumi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 21:42:04 power sudo[3388293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:05 power sudo[3388293]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:05 power sudo[3388304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 21:42:05 power sudo[3388304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:05 power sudo[3388304]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:05 power sudo[3388308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GVAfwjfZcDt7JkA1.~
Sep  7 21:42:05 power sudo[3388308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:05 power sudo[3388308]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:05 power sudo[3388312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GVAfwjfZcDt7JkA1.~\''
Sep  7 21:42:05 power sudo[3388312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:05 power sudo[3388312]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:05 power sudo[3388317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GVAfwjfZcDt7JkA1.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 21:42:05 power sudo[3388317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:05 power sudo[3388317]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:05 power sudo[3388321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 21:42:05 power sudo[3388321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:05 power sudo[3388321]: pam_unix(sudo:session): session closed for user root
Sep  7 21:42:06 power sudo[3389244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 21:42:06 power sudo[3389244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 21:42:06 power sudo[3389244]: pam_unix(sudo:session): session closed for user root
Sep  7 21:45:01 power systemd[3391655]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:50:01 power systemd[3396458]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 21:51:38 power sshd[3398077]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
Sep  7 21:51:38 power sshd[3398077]: banner exchange: Connection from 172.104.11.34 port 61330: invalid format
Sep  7 21:51:38 power sshd[3398083]: error: kex_exchange_identification: banner line contains invalid characters
Sep  7 21:51:38 power sshd[3398083]: banner exchange: Connection from 172.104.11.34 port 61336: invalid format
Sep  7 21:55:01 power systemd[3401167]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:00:01 power systemd[3405727]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:00:01 power systemd[3405731]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 22:00:01 power systemd[3405733]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 22:00:01 power systemd[3405734]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 22:02:58 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 22:05:01 power systemd[3411703]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:06:01 power systemd[3412521]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 22:07:01 power systemd[3413582]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 22:09:01 power systemd[3415344]: pam_unix(systemd-user:session): session opened for user chemhemc(uid=1006) by chemhemc(uid=0)
Sep  7 22:10:01 power systemd[3416209]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:12:01 power systemd[3417836]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 22:15:01 power systemd[3420474]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:20:01 power systemd[3425241]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:25:01 power systemd[3429579]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:30:01 power systemd[3434168]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:30:01 power systemd[3434171]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 22:30:01 power systemd[3434172]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 22:30:01 power systemd[3434173]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 22:35:01 power systemd[3438705]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:35:01 power systemd[3438704]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep  7 22:36:01 power systemd[3439823]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 22:37:01 power systemd[3441017]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 22:40:01 power systemd[3443956]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:42:01 power systemd[3445740]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 22:42:01 power sudo[3445780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 22:42:01 power sudo[3445780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:01 power sudo[3445780]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:01 power sudo[3445784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 22:42:01 power sudo[3445784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:01 power sudo[3445784]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:01 power sudo[3445788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 22:42:01 power sudo[3445788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:01 power sudo[3445788]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:01 power sudo[3445793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=N2s5T9zTVm'
Sep  7 22:42:01 power sudo[3445793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:01 power sudo[3445793]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:01 power sudo[3445800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 22:42:01 power sudo[3445800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:01 power sudo[3445800]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:01 power sudo[3445804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 22:42:01 power sudo[3445804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:01 power sudo[3445804]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:01 power sudo[3445808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 22:42:01 power sudo[3445808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:01 power sudo[3445808]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:01 power sudo[3445813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 22:42:01 power sudo[3445813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:02 power sudo[3445813]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:02 power sudo[3445819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 22:42:02 power sudo[3445819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:02 power sudo[3445819]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:02 power sudo[3445824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 22:42:02 power sudo[3445824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:02 power sudo[3445824]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:02 power sudo[3445828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 22:42:02 power sudo[3445828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:02 power sudo[3445828]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:02 power sudo[3445832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 22:42:02 power sudo[3445832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:02 power sudo[3445832]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:02 power sudo[3445837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 22:42:02 power sudo[3445837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:02 power sudo[3445837]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:02 power sudo[3445842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 22:42:02 power sudo[3445842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:02 power sudo[3445842]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:04 power sudo[3445875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 22:42:05 power sudo[3445875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:05 power sudo[3445875]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:05 power sudo[3445880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 22:42:05 power sudo[3445880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:05 power sudo[3445880]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:05 power sudo[3445886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=zdmgpsor user-2=supremel user-3=v5srybi9dcdx user-4=gorsajmk user-5=aquatech user-6=taneccom user-7=innofabl user-8=premiumi user-9=vacuacti user-10=bozinovm user-11=prizmapl user-12=darkogor user-13=dslmk user-14=fnjorgmk user-15=inkigaic user-16=modernar user-17=radekrat user-18=starluxm user-19=fffhpcwr user-20=versusmk user-21=fiziosmk user-22=ambitiou user-23=mapaspla user-24=solemor1 user-25=nationa2 user-26=onlinesh user-27=tcieuroc user-28=kardiome user-29=apgrupmk user-30=mediasol user-31=bogdanos user-32=carrent1 user-33=euronic2 user-34=matratze user-35=lblawcom user-36=nucktra1 user-37=intelek1 user-38=mediatag user-39=nikolov1 user-40=hausmark user-41=forzares user-42=aptekazd user-43=nikimare user-44=glammace user-45=albuname user-46=imdskopj user-47=pravekom user-48=vtranseu user-49=infopor1
Sep  7 22:42:05 power sudo[3445886]: wp-toolkit : (command continued) user-50=elektrot user-51=zapovim1 user-52=cosmatob user-53=euromaki user-54=nutrivim user-55=samasped user-56=chemhemc user-57=animatem user-58=cleanerm user-59=progress user-60=sssoluti user-61=atspedco user-62=solointe user-63=jaramk user-64=recorgmk user-65=taktcomm user-66=pelagini user-67=bbbustou user-68=biplmk user-69=kaoilmk user-70=mbmehani user-71=ismassag user-72=workbenc user-73=viplastc user-74=wineberr user-75=solarinv user-76=eurofarm user-77=electrol user-78=trigemat user-79=naksorgm user-80=eliksirz user-81=golakkom user-82=bauerin2 user-83=folklore user-84=conserva user-85=vegemk1 user-86=cupidpro user-87=euronic3 user-88=bonitavi user-89=evberasm user-90=makdrone user-91=tehnodro user-92=jpkomuna user-93=izzomk user-94=gradbai1 user-95=evacommk user-96=madzomk user-97=aptekafa user-98=peshkai1 user-99=fxxcom user-100=dimpalne user-101=eaptekam user-102=hotammk user-103=cajsproc
Sep  7 22:42:05 power sudo[3445886]: wp-toolkit : (command continued) user-104=youthgua user-105=anitermc user-106=uhostmk5 user-107=bauerbg user-108=raremk user-109=oouslave user-110=stojnevi user-111=vmro user-112=viewinn user-113=trudovop user-114=enaspotc user-115=pelagoni user-116=socioloz user-117=avtogumi user-118=evolvepl user-119=caramk user-120=frizered user-121=hidrommk user-122=nefrolog user-123=oncolog1 user-124=ekostoc1 user-125=levantmk user-126=berbermk user-127=edomcomm user-128=sprintst user-129=enochmk user-130=herbalpl user-131=dikimk12 user-132=seloviro user-133=nolimits user-134=nlpmkorg user-135=centarba user-136=kolened1 user-137=proverim user-138=dadarmk user-139=tealmk user-140=gocruise user-141=mstmmk user-142=goodnews user-143=dnevnoin user-144=gjorgeiv user-145=tradeyou user-146=rastiraz user-147=holiyayt user-148=wondersp user-149=robustco user-150=stravelm user-151=pecakome user-152=custome1 user-153=zampmk user-154=zvskopje user-155=busymard
Sep  7 22:42:05 power sudo[3445886]: wp-toolkit : (command continued) user-156=palenzok user-157=klimimk user-158=sparkupm user-159=stokovna user-160=bovincom user-161=stojano1 user-162=cabinetm user-163=vezilkac user-164=itradeco user-165=janiboja user-166=drleomk user-167=jpparkin user-168=inotekso user-169=premiums user-170=butelmk user-171=daris user-172=arturaco user-173=screenme user-174=ideaplus user-175=nasaidni user-176=karpospo user-177=dalmacom user-178=cetplatf user-179=premiuma user-180=kouzonco user-181=velmk user-182=gogovan1 user-183=univerz1 user-184=kujnamon user-185=datalink user-186=agrosind user-187=mpbmk user-188=mfashion user-189=volkanco user-190=goartsym user-191=dhamachi user-192=workandt user-193=delcevca user-194=simbiome user-195=getaldus user-196=barececo user-197=rasmorgm user-198=bianasho user-199=makoasmk user-200=skyapart user-201=urbanexp user-202=wikicamp user-203=infobadi user-204=mspmk user-205=detskagr user-206=spdcompu user-207=datelcom
Sep  7 22:42:05 power sudo[3445886]: wp-toolkit : (command continued) user-208=maleshne user-209=bizporta user-210=vfxnestc user-211=polyeste user-212=groskome user-213=ivanjord user-214=sedcmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 22:42:05 power sudo[3445886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:05 power sudo[3445886]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:05 power sudo[3445902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 22:42:05 power sudo[3445902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:05 power sudo[3445902]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:05 power sudo[3445906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-W1C1qLGdG9506ZYt.~
Sep  7 22:42:05 power sudo[3445906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:05 power sudo[3445906]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:05 power sudo[3445910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-W1C1qLGdG9506ZYt.~\''
Sep  7 22:42:05 power sudo[3445910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:05 power sudo[3445910]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:05 power sudo[3445915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-W1C1qLGdG9506ZYt.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 22:42:05 power sudo[3445915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:05 power sudo[3445915]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:05 power sudo[3445919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 22:42:05 power sudo[3445919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:05 power sudo[3445919]: pam_unix(sudo:session): session closed for user root
Sep  7 22:42:06 power sudo[3446837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 22:42:06 power sudo[3446837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 22:42:06 power sudo[3446837]: pam_unix(sudo:session): session closed for user root
Sep  7 22:45:01 power systemd[3449685]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:50:02 power systemd[3454880]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:53:03 power sshd[3457679]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 22:53:03 power sshd[3457679]: Connection closed by 125.130.161.116 port 50914
Sep  7 22:53:03 power sshd[3457681]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 22:53:03 power sshd[3457681]: Connection closed by 125.130.161.116 port 50916
Sep  7 22:53:03 power sshd[3457680]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 22:53:03 power sshd[3457680]: Connection closed by 125.130.161.116 port 50912
Sep  7 22:53:03 power sshd[3457682]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 22:53:03 power sshd[3457682]: Connection closed by 125.130.161.116 port 50911
Sep  7 22:53:03 power sshd[3457684]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 22:53:03 power sshd[3457683]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 22:53:03 power sshd[3457684]: Connection closed by 125.130.161.116 port 50915
Sep  7 22:53:03 power sshd[3457683]: Connection closed by 125.130.161.116 port 50913
Sep  7 22:55:01 power systemd[3460028]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 22:58:02 power pam_imunify[2037323]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  7 23:00:02 power systemd[3465283]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:00:02 power systemd[3465285]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 23:00:02 power systemd[3465287]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 23:00:02 power systemd[3465288]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 23:05:02 power systemd[3470627]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:06:01 power systemd[3471661]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 23:07:01 power systemd[3472539]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 23:10:01 power systemd[3475485]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep  7 23:10:01 power systemd[3475487]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:12:01 power systemd[3477532]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 23:15:01 power systemd[3479978]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:20:01 power systemd[3484730]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:25:01 power systemd[3489672]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:30:01 power systemd[3494180]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:30:01 power systemd[3494183]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  7 23:30:01 power systemd[3494184]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  7 23:30:01 power systemd[3494186]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  7 23:35:01 power systemd[3500440]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:36:01 power systemd[3501341]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  7 23:37:01 power systemd[3502135]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 23:40:01 power systemd[3505056]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:42:01 power sudo[3506853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  7 23:42:01 power sudo[3506853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:01 power sudo[3506853]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:01 power sudo[3506857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  7 23:42:01 power sudo[3506857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:01 power sudo[3506857]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:01 power sudo[3506861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  7 23:42:01 power sudo[3506861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:01 power sudo[3506861]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:01 power sudo[3506866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=5CdNIDnQIe'
Sep  7 23:42:01 power sudo[3506866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:01 power sudo[3506866]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:01 power sudo[3506871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  7 23:42:01 power sudo[3506871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:01 power sudo[3506871]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:01 power sudo[3506875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  7 23:42:01 power sudo[3506875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:01 power sudo[3506875]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:01 power sudo[3506881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  7 23:42:01 power sudo[3506881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:01 power sudo[3506881]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:01 power sudo[3506886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  7 23:42:01 power sudo[3506886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:02 power systemd[3506903]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  7 23:42:02 power sudo[3506886]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:02 power sudo[3506915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  7 23:42:02 power sudo[3506915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:02 power sudo[3506915]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:02 power sudo[3506920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  7 23:42:02 power sudo[3506920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:02 power sudo[3506920]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:02 power sudo[3506924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  7 23:42:02 power sudo[3506924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:02 power sudo[3506924]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:02 power sudo[3506928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 23:42:02 power sudo[3506928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:02 power sudo[3506928]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:02 power sudo[3506932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  7 23:42:02 power sudo[3506932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:02 power sudo[3506932]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:02 power sudo[3506939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  7 23:42:02 power sudo[3506939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:02 power sudo[3506939]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:04 power sudo[3506983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  7 23:42:04 power sudo[3506983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:04 power sudo[3506983]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:04 power sudo[3506992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  7 23:42:04 power sudo[3506992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:04 power sudo[3506992]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:04 power sudo[3506999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=kaoilmk user-2=biplmk user-3=bbbustou user-4=pelagini user-5=jaramk user-6=solointe user-7=taktcomm user-8=recorgmk user-9=progress user-10=cleanerm user-11=animatem user-12=atspedco user-13=sssoluti user-14=naksorgm user-15=eliksirz user-16=trigemat user-17=electrol user-18=golakkom user-19=solarinv user-20=eurofarm user-21=wineberr user-22=viplastc user-23=mbmehani user-24=workbenc user-25=ismassag user-26=evberasm user-27=bonitavi user-28=conserva user-29=euronic3 user-30=cupidpro user-31=vegemk1 user-32=bauerin2 user-33=folklore user-34=fxxcom user-35=peshkai1 user-36=eaptekam user-37=dimpalne user-38=gradbai1 user-39=madzomk user-40=aptekafa user-41=evacommk user-42=izzomk user-43=jpkomuna user-44=makdrone user-45=tehnodro user-46=inkigaic user-47=modernar user-48=taneccom user-49=prizmapl
Sep  7 23:42:04 power sudo[3506999]: wp-toolkit : (command continued) user-50=fnjorgmk user-51=darkogor user-52=dslmk user-53=bozinovm user-54=vacuacti user-55=premiumi user-56=innofabl user-57=v5srybi9dcdx user-58=supremel user-59=aquatech user-60=gorsajmk user-61=zdmgpsor user-62=tcieuroc user-63=solemor1 user-64=mapaspla user-65=onlinesh user-66=nationa2 user-67=versusmk user-68=ambitiou user-69=fiziosmk user-70=starluxm user-71=radekrat user-72=fffhpcwr user-73=hausmark user-74=nikolov1 user-75=nikimare user-76=aptekazd user-77=forzares user-78=nucktra1 user-79=lblawcom user-80=mediatag user-81=intelek1 user-82=matratze user-83=euronic2 user-84=kardiome user-85=carrent1 user-86=bogdanos user-87=mediasol user-88=apgrupmk user-89=nutrivim user-90=chemhemc user-91=samasped user-92=zapovim1 user-93=elektrot user-94=cosmatob user-95=euromaki user-96=vtranseu user-97=pravekom user-98=infopor1 user-99=albuname user-100=glammace user-101=imdskopj user-102=vezilkac user-103=cabinetm
Sep  7 23:42:04 power sudo[3506999]: wp-toolkit : (command continued) user-104=janiboja user-105=itradeco user-106=bovincom user-107=stojano1 user-108=klimimk user-109=stokovna user-110=sparkupm user-111=custome1 user-112=palenzok user-113=zampmk user-114=zvskopje user-115=busymard user-116=cetplatf user-117=dalmacom user-118=kouzonco user-119=premiuma user-120=butelmk user-121=daris user-122=premiums user-123=nasaidni user-124=karpospo user-125=ideaplus user-126=arturaco user-127=screenme user-128=inotekso user-129=jpparkin user-130=drleomk user-131=rasmorgm user-132=skyapart user-133=bianasho user-134=makoasmk user-135=dhamachi user-136=volkanco user-137=goartsym user-138=mfashion user-139=barececo user-140=getaldus user-141=delcevca user-142=simbiome user-143=workandt user-144=mpbmk user-145=agrosind user-146=univerz1 user-147=kujnamon user-148=gogovan1 user-149=velmk user-150=datalink user-151=polyeste user-152=vfxnestc user-153=sedcmk user-154=ivanjord user-155=groskome
Sep  7 23:42:04 power sudo[3506999]: wp-toolkit : (command continued) user-156=maleshne user-157=datelcom user-158=bizporta user-159=mspmk user-160=infobadi user-161=spdcompu user-162=detskagr user-163=wikicamp user-164=urbanexp user-165=enaspotc user-166=viewinn user-167=trudovop user-168=vmro user-169=oouslave user-170=raremk user-171=bauerbg user-172=uhostmk5 user-173=stojnevi user-174=anitermc user-175=youthgua user-176=cajsproc user-177=hotammk user-178=oncolog1 user-179=ekostoc1 user-180=levantmk user-181=nefrolog user-182=caramk user-183=hidrommk user-184=frizered user-185=evolvepl user-186=pelagoni user-187=socioloz user-188=avtogumi user-189=nolimits user-190=kolened1 user-191=nlpmkorg user-192=centarba user-193=seloviro user-194=dikimk12 user-195=enochmk user-196=herbalpl user-197=sprintst user-198=edomcomm user-199=berbermk user-200=holiyayt user-201=rastiraz user-202=pecakome user-203=robustco user-204=stravelm user-205=wondersp user-206=dnevnoin user-207=gjorgeiv
Sep  7 23:42:04 power sudo[3506999]: wp-toolkit : (command continued) user-208=tradeyou user-209=gocruise user-210=goodnews user-211=mstmmk user-212=dadarmk user-213=proverim user-214=tealmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  7 23:42:04 power sudo[3506999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:04 power sudo[3506999]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:04 power sudo[3507006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 23:42:04 power sudo[3507006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:05 power sudo[3507006]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:05 power sudo[3507010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bODKHUgtZKHbCHPB.~
Sep  7 23:42:05 power sudo[3507010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:05 power sudo[3507010]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:05 power sudo[3507014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bODKHUgtZKHbCHPB.~\''
Sep  7 23:42:05 power sudo[3507014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:05 power sudo[3507014]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:05 power sudo[3507019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bODKHUgtZKHbCHPB.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  7 23:42:05 power sudo[3507019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:05 power sudo[3507019]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:05 power sudo[3507023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  7 23:42:05 power sudo[3507023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:05 power sudo[3507023]: pam_unix(sudo:session): session closed for user root
Sep  7 23:42:08 power sudo[3507453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  7 23:42:08 power sudo[3507453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  7 23:42:08 power sudo[3507453]: pam_unix(sudo:session): session closed for user root
Sep  7 23:45:01 power systemd[3511357]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:50:02 power systemd[3516364]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  7 23:55:01 power systemd[3521217]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:05:01 power systemd[3533340]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:06:01 power systemd[3534412]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 00:07:01 power systemd[3535397]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 00:10:01 power systemd[3538121]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:12:01 power systemd[3539680]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 00:15:01 power systemd[3542036]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:20:01 power systemd[3547052]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:25:01 power systemd[3551448]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:30:01 power systemd[3559864]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 00:30:01 power systemd[3559863]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:30:01 power systemd[3559865]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 00:30:01 power systemd[3559867]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 00:35:01 power systemd[3564376]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:36:01 power systemd[3565196]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 00:37:01 power systemd[3566042]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 00:40:01 power systemd[3568876]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:42:01 power systemd[3570508]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 00:42:01 power sudo[3570533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 00:42:01 power sudo[3570533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570533]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 00:42:01 power sudo[3570538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570538]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 00:42:01 power sudo[3570542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570542]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=m39QdTdR8L'
Sep  8 00:42:01 power sudo[3570547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570547]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 00:42:01 power sudo[3570557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570557]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 00:42:01 power sudo[3570562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570562]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 00:42:01 power sudo[3570566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570566]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 00:42:01 power sudo[3570570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570570]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 00:42:01 power sudo[3570579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570579]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 00:42:01 power sudo[3570583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570583]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 00:42:01 power sudo[3570588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570588]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 00:42:01 power sudo[3570592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570592]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 00:42:01 power sudo[3570596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:01 power sudo[3570596]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:01 power sudo[3570602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 00:42:01 power sudo[3570602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:02 power sudo[3570602]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:04 power sudo[3570651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 00:42:04 power sudo[3570651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:04 power sudo[3570651]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:04 power sudo[3570656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 00:42:04 power sudo[3570656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:05 power sudo[3570656]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:05 power sudo[3570662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=holiyayt user-2=rastiraz user-3=pecakome user-4=stravelm user-5=robustco user-6=wondersp user-7=dnevnoin user-8=tradeyou user-9=gjorgeiv user-10=gocruise user-11=goodnews user-12=mstmmk user-13=dadarmk user-14=proverim user-15=tealmk user-16=nolimits user-17=kolened1 user-18=nlpmkorg user-19=centarba user-20=seloviro user-21=dikimk12 user-22=herbalpl user-23=enochmk user-24=sprintst user-25=edomcomm user-26=berbermk user-27=levantmk user-28=oncolog1 user-29=ekostoc1 user-30=nefrolog user-31=caramk user-32=hidrommk user-33=frizered user-34=evolvepl user-35=pelagoni user-36=avtogumi user-37=socioloz user-38=enaspotc user-39=viewinn user-40=trudovop user-41=vmro user-42=oouslave user-43=raremk user-44=bauerbg user-45=uhostmk5 user-46=stojnevi user-47=anitermc user-48=youthgua user-49=cajsproc user-50=hotammk
Sep  8 00:42:05 power sudo[3570662]: wp-toolkit : (command continued) user-51=polyeste user-52=vfxnestc user-53=sedcmk user-54=ivanjord user-55=groskome user-56=maleshne user-57=datelcom user-58=bizporta user-59=infobadi user-60=mspmk user-61=spdcompu user-62=detskagr user-63=wikicamp user-64=urbanexp user-65=rasmorgm user-66=skyapart user-67=bianasho user-68=makoasmk user-69=dhamachi user-70=goartsym user-71=volkanco user-72=mfashion user-73=barececo user-74=getaldus user-75=delcevca user-76=simbiome user-77=workandt user-78=mpbmk user-79=agrosind user-80=univerz1 user-81=kujnamon user-82=velmk user-83=gogovan1 user-84=datalink user-85=cetplatf user-86=dalmacom user-87=kouzonco user-88=premiuma user-89=daris user-90=butelmk user-91=premiums user-92=karpospo user-93=nasaidni user-94=ideaplus user-95=screenme user-96=arturaco user-97=inotekso user-98=jpparkin user-99=drleomk user-100=vezilkac user-101=cabinetm user-102=janiboja user-103=itradeco user-104=bovincom user-105=stojano1
Sep  8 00:42:05 power sudo[3570662]: wp-toolkit : (command continued) user-106=klimimk user-107=stokovna user-108=sparkupm user-109=custome1 user-110=palenzok user-111=busymard user-112=zampmk user-113=zvskopje user-114=nutrivim user-115=samasped user-116=chemhemc user-117=elektrot user-118=zapovim1 user-119=euromaki user-120=cosmatob user-121=pravekom user-122=vtranseu user-123=infopor1 user-124=albuname user-125=glammace user-126=imdskopj user-127=nikolov1 user-128=hausmark user-129=nikimare user-130=aptekazd user-131=forzares user-132=nucktra1 user-133=lblawcom user-134=mediatag user-135=intelek1 user-136=matratze user-137=euronic2 user-138=kardiome user-139=carrent1 user-140=bogdanos user-141=mediasol user-142=apgrupmk user-143=tcieuroc user-144=solemor1 user-145=mapaspla user-146=onlinesh user-147=nationa2 user-148=versusmk user-149=ambitiou user-150=fiziosmk user-151=starluxm user-152=radekrat user-153=fffhpcwr user-154=inkigaic user-155=modernar user-156=taneccom
Sep  8 00:42:05 power sudo[3570662]: wp-toolkit : (command continued) user-157=darkogor user-158=dslmk user-159=prizmapl user-160=fnjorgmk user-161=bozinovm user-162=vacuacti user-163=premiumi user-164=innofabl user-165=v5srybi9dcdx user-166=supremel user-167=aquatech user-168=gorsajmk user-169=zdmgpsor user-170=fxxcom user-171=peshkai1 user-172=eaptekam user-173=dimpalne user-174=gradbai1 user-175=madzomk user-176=aptekafa user-177=evacommk user-178=izzomk user-179=jpkomuna user-180=makdrone user-181=tehnodro user-182=evberasm user-183=bonitavi user-184=conserva user-185=euronic3 user-186=cupidpro user-187=vegemk1 user-188=bauerin2 user-189=folklore user-190=naksorgm user-191=eliksirz user-192=trigemat user-193=electrol user-194=golakkom user-195=solarinv user-196=eurofarm user-197=wineberr user-198=viplastc user-199=mbmehani user-200=workbenc user-201=ismassag user-202=kaoilmk user-203=biplmk user-204=bbbustou user-205=pelagini user-206=jaramk user-207=solointe user-208=recorgmk
Sep  8 00:42:05 power sudo[3570662]: wp-toolkit : (command continued) user-209=taktcomm user-210=progress user-211=cleanerm user-212=animatem user-213=sssoluti user-214=atspedco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 00:42:05 power sudo[3570662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:05 power sudo[3570662]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:05 power sudo[3570674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 00:42:05 power sudo[3570674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:05 power sudo[3570674]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:05 power sudo[3570678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Y6qAyaKrZm1EeegR.~
Sep  8 00:42:05 power sudo[3570678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:05 power sudo[3570678]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:05 power sudo[3570682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Y6qAyaKrZm1EeegR.~\''
Sep  8 00:42:05 power sudo[3570682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:05 power sudo[3570682]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:05 power sudo[3570687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Y6qAyaKrZm1EeegR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 00:42:05 power sudo[3570687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:05 power sudo[3570687]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:05 power sudo[3570692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 00:42:05 power sudo[3570692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:05 power sudo[3570692]: pam_unix(sudo:session): session closed for user root
Sep  8 00:42:06 power sudo[3571624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 00:42:06 power sudo[3571624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 00:42:06 power sudo[3571624]: pam_unix(sudo:session): session closed for user root
Sep  8 00:45:01 power systemd[3574563]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:50:01 power systemd[3579415]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 00:55:01 power systemd[3583882]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:00:02 power systemd[3587987]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:00:02 power systemd[3587989]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 01:00:02 power systemd[3587991]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 01:00:02 power systemd[3587992]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 01:05:01 power systemd[3592814]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:06:01 power systemd[3593632]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 01:06:14 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 01:07:01 power systemd[3594328]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 01:10:01 power systemd[3597383]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:12:01 power systemd[3599238]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 01:15:01 power systemd[3601853]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:20:01 power systemd[3606054]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:22:11 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 01:25:01 power systemd[3610103]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:30:01 power systemd[3614392]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 01:30:01 power systemd[3614390]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:30:01 power systemd[3614393]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 01:30:01 power systemd[3614395]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 01:35:01 power systemd[3619658]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:36:01 power systemd[3620943]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 01:37:01 power systemd[3621753]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 01:40:01 power systemd[3624779]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:42:01 power sudo[3626699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 01:42:01 power sudo[3626699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626699]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 01:42:01 power sudo[3626703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626703]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 01:42:01 power sudo[3626707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626707]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=sP4ev7eTGp'
Sep  8 01:42:01 power sudo[3626711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626711]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 01:42:01 power sudo[3626718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626718]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 01:42:01 power sudo[3626722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626722]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 01:42:01 power sudo[3626726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626726]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 01:42:01 power sudo[3626730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626730]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 01:42:01 power sudo[3626735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626735]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 01:42:01 power sudo[3626739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626739]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 01:42:01 power sudo[3626743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626743]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 01:42:01 power sudo[3626747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626747]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 01:42:01 power sudo[3626752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power sudo[3626752]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:01 power sudo[3626756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 01:42:01 power sudo[3626756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:01 power systemd[3626775]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 01:42:02 power sudo[3626756]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:04 power sudo[3626822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 01:42:04 power sudo[3626822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:04 power sudo[3626822]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:04 power sudo[3626827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 01:42:04 power sudo[3626827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:04 power sudo[3626827]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:04 power sudo[3626834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=solointe user-2=jaramk user-3=recorgmk user-4=taktcomm user-5=cleanerm user-6=animatem user-7=progress user-8=sssoluti user-9=atspedco user-10=bbbustou user-11=kaoilmk user-12=biplmk user-13=pelagini user-14=viplastc user-15=wineberr user-16=mbmehani user-17=ismassag user-18=workbenc user-19=electrol user-20=naksorgm user-21=eliksirz user-22=trigemat user-23=golakkom user-24=solarinv user-25=eurofarm user-26=bauerin2 user-27=folklore user-28=evberasm user-29=bonitavi user-30=conserva user-31=cupidpro user-32=vegemk1 user-33=euronic3 user-34=jpkomuna user-35=izzomk user-36=makdrone user-37=tehnodro user-38=fxxcom user-39=peshkai1 user-40=dimpalne user-41=eaptekam user-42=gradbai1 user-43=aptekafa user-44=madzomk user-45=evacommk user-46=supremel user-47=v5srybi9dcdx user-48=aquatech user-49=gorsajmk
Sep  8 01:42:04 power sudo[3626834]: wp-toolkit : (command continued) user-50=zdmgpsor user-51=inkigaic user-52=modernar user-53=taneccom user-54=vacuacti user-55=premiumi user-56=innofabl user-57=prizmapl user-58=darkogor user-59=dslmk user-60=fnjorgmk user-61=bozinovm user-62=versusmk user-63=fiziosmk user-64=ambitiou user-65=starluxm user-66=radekrat user-67=fffhpcwr user-68=tcieuroc user-69=mapaspla user-70=solemor1 user-71=nationa2 user-72=onlinesh user-73=matratze user-74=euronic2 user-75=kardiome user-76=apgrupmk user-77=bogdanos user-78=carrent1 user-79=mediasol user-80=nikolov1 user-81=hausmark user-82=forzares user-83=nikimare user-84=aptekazd user-85=lblawcom user-86=nucktra1 user-87=mediatag user-88=intelek1 user-89=pravekom user-90=vtranseu user-91=infopor1 user-92=albuname user-93=glammace user-94=imdskopj user-95=nutrivim user-96=samasped user-97=chemhemc user-98=zapovim1 user-99=elektrot user-100=cosmatob user-101=euromaki user-102=klimimk user-103=stokovna
Sep  8 01:42:04 power sudo[3626834]: wp-toolkit : (command continued) user-104=sparkupm user-105=custome1 user-106=zvskopje user-107=zampmk user-108=busymard user-109=palenzok user-110=cabinetm user-111=vezilkac user-112=itradeco user-113=janiboja user-114=bovincom user-115=stojano1 user-116=daris user-117=butelmk user-118=premiums user-119=screenme user-120=arturaco user-121=karpospo user-122=nasaidni user-123=ideaplus user-124=drleomk user-125=inotekso user-126=jpparkin user-127=dalmacom user-128=cetplatf user-129=premiuma user-130=kouzonco user-131=mpbmk user-132=agrosind user-133=univerz1 user-134=kujnamon user-135=gogovan1 user-136=velmk user-137=datalink user-138=rasmorgm user-139=skyapart user-140=makoasmk user-141=bianasho user-142=mfashion user-143=dhamachi user-144=volkanco user-145=goartsym user-146=workandt user-147=barececo user-148=simbiome user-149=getaldus user-150=delcevca user-151=mspmk user-152=infobadi user-153=detskagr user-154=spdcompu user-155=urbanexp
Sep  8 01:42:04 power sudo[3626834]: wp-toolkit : (command continued) user-156=wikicamp user-157=polyeste user-158=vfxnestc user-159=ivanjord user-160=groskome user-161=sedcmk user-162=maleshne user-163=datelcom user-164=bizporta user-165=anitermc user-166=youthgua user-167=hotammk user-168=cajsproc user-169=viewinn user-170=trudovop user-171=vmro user-172=enaspotc user-173=bauerbg user-174=uhostmk5 user-175=oouslave user-176=raremk user-177=stojnevi user-178=evolvepl user-179=pelagoni user-180=avtogumi user-181=socioloz user-182=ekostoc1 user-183=levantmk user-184=oncolog1 user-185=nefrolog user-186=caramk user-187=hidrommk user-188=frizered user-189=enochmk user-190=herbalpl user-191=sprintst user-192=dikimk12 user-193=berbermk user-194=edomcomm user-195=nolimits user-196=kolened1 user-197=nlpmkorg user-198=centarba user-199=seloviro user-200=gocruise user-201=mstmmk user-202=goodnews user-203=proverim user-204=dadarmk user-205=tealmk user-206=rastiraz user-207=holiyayt
Sep  8 01:42:04 power sudo[3626834]: wp-toolkit : (command continued) user-208=robustco user-209=stravelm user-210=wondersp user-211=pecakome user-212=dnevnoin user-213=tradeyou user-214=gjorgeiv feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 01:42:04 power sudo[3626834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:04 power sudo[3626834]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:05 power sudo[3626849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 01:42:05 power sudo[3626849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:05 power sudo[3626849]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:05 power sudo[3626854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vBPb7NZeaK1bbINW.~
Sep  8 01:42:05 power sudo[3626854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:05 power sudo[3626854]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:05 power sudo[3626859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vBPb7NZeaK1bbINW.~\''
Sep  8 01:42:05 power sudo[3626859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:05 power sudo[3626859]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:05 power sudo[3626864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vBPb7NZeaK1bbINW.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 01:42:05 power sudo[3626864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:05 power sudo[3626864]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:05 power sudo[3626868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 01:42:05 power sudo[3626868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:05 power sudo[3626868]: pam_unix(sudo:session): session closed for user root
Sep  8 01:42:06 power sudo[3627790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 01:42:06 power sudo[3627790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 01:42:06 power sudo[3627790]: pam_unix(sudo:session): session closed for user root
Sep  8 01:45:01 power systemd[3630191]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:50:01 power systemd[3634764]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 01:55:01 power systemd[3639058]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:00:01 power systemd[3643061]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:00:01 power systemd[3643073]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 02:00:01 power systemd[3643075]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 02:00:01 power systemd[3643077]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 02:05:01 power systemd[3648329]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:06:02 power systemd[3649309]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 02:07:01 power systemd[3650103]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 02:10:01 power systemd[3652689]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:12:01 power systemd[3654482]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 02:15:01 power systemd[3657037]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:20:01 power systemd[3661613]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:25:01 power systemd[3665829]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:25:27 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 180.149.231.12 has been locked due to Imunify RBL
Sep  8 02:30:01 power systemd[3669890]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 02:30:01 power systemd[3669889]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:30:01 power systemd[3669891]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 02:30:01 power systemd[3669892]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 02:35:01 power systemd[3674163]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:36:01 power systemd[3675091]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 02:37:01 power systemd[3675850]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 02:40:01 power systemd[3677816]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:42:01 power systemd[3679394]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 02:42:01 power sudo[3679405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 02:42:01 power sudo[3679405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679405]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 02:42:01 power sudo[3679409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679409]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 02:42:01 power sudo[3679414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679414]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=QjdcDPU0a6'
Sep  8 02:42:01 power sudo[3679418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679418]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 02:42:01 power sudo[3679423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679423]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 02:42:01 power sudo[3679432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679432]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 02:42:01 power sudo[3679436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679436]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 02:42:01 power sudo[3679440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679440]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 02:42:01 power sudo[3679448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679448]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 02:42:01 power sudo[3679452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679452]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 02:42:01 power sudo[3679456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679456]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 02:42:01 power sudo[3679460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679460]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 02:42:01 power sudo[3679464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:01 power sudo[3679464]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:01 power sudo[3679468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 02:42:01 power sudo[3679468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:02 power sudo[3679468]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:03 power sudo[3679524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 02:42:03 power sudo[3679524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:04 power sudo[3679524]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:04 power sudo[3679535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 02:42:04 power sudo[3679535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:04 power sudo[3679535]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:04 power sudo[3679541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=berbermk user-2=edomcomm user-3=herbalpl user-4=enochmk user-5=sprintst user-6=dikimk12 user-7=seloviro user-8=nolimits user-9=kolened1 user-10=nlpmkorg user-11=centarba user-12=proverim user-13=dadarmk user-14=tealmk user-15=gocruise user-16=mstmmk user-17=goodnews user-18=dnevnoin user-19=gjorgeiv user-20=tradeyou user-21=rastiraz user-22=holiyayt user-23=robustco user-24=stravelm user-25=wondersp user-26=pecakome user-27=hotammk user-28=cajsproc user-29=anitermc user-30=youthgua user-31=bauerbg user-32=uhostmk5 user-33=oouslave user-34=raremk user-35=stojnevi user-36=trudovop user-37=viewinn user-38=vmro user-39=enaspotc user-40=pelagoni user-41=avtogumi user-42=socioloz user-43=evolvepl user-44=caramk user-45=hidrommk user-46=frizered user-47=ekostoc1 user-48=levantmk user-49=oncolog1 user-50=nefrolog
Sep  8 02:42:04 power sudo[3679541]: wp-toolkit : (command continued) user-51=kujnamon user-52=univerz1 user-53=gogovan1 user-54=velmk user-55=datalink user-56=mpbmk user-57=agrosind user-58=mfashion user-59=dhamachi user-60=volkanco user-61=goartsym user-62=workandt user-63=barececo user-64=getaldus user-65=delcevca user-66=simbiome user-67=rasmorgm user-68=skyapart user-69=makoasmk user-70=bianasho user-71=urbanexp user-72=wikicamp user-73=infobadi user-74=mspmk user-75=detskagr user-76=spdcompu user-77=maleshne user-78=datelcom user-79=bizporta user-80=polyeste user-81=vfxnestc user-82=groskome user-83=ivanjord user-84=sedcmk user-85=custome1 user-86=busymard user-87=zampmk user-88=zvskopje user-89=palenzok user-90=klimimk user-91=stokovna user-92=sparkupm user-93=bovincom user-94=stojano1 user-95=cabinetm user-96=vezilkac user-97=itradeco user-98=janiboja user-99=drleomk user-100=inotekso user-101=jpparkin user-102=daris user-103=butelmk user-104=premiums user-105=arturaco
Sep  8 02:42:04 power sudo[3679541]: wp-toolkit : (command continued) user-106=screenme user-107=nasaidni user-108=karpospo user-109=ideaplus user-110=dalmacom user-111=cetplatf user-112=premiuma user-113=kouzonco user-114=kardiome user-115=apgrupmk user-116=bogdanos user-117=carrent1 user-118=mediasol user-119=matratze user-120=euronic2 user-121=lblawcom user-122=nucktra1 user-123=mediatag user-124=intelek1 user-125=nikolov1 user-126=hausmark user-127=forzares user-128=nikimare user-129=aptekazd user-130=albuname user-131=glammace user-132=imdskopj user-133=pravekom user-134=vtranseu user-135=infopor1 user-136=zapovim1 user-137=elektrot user-138=cosmatob user-139=euromaki user-140=nutrivim user-141=chemhemc user-142=samasped user-143=zdmgpsor user-144=supremel user-145=v5srybi9dcdx user-146=aquatech user-147=gorsajmk user-148=taneccom user-149=vacuacti user-150=premiumi user-151=innofabl user-152=fnjorgmk user-153=dslmk user-154=darkogor user-155=prizmapl user-156=bozinovm
Sep  8 02:42:04 power sudo[3679541]: wp-toolkit : (command continued) user-157=inkigaic user-158=modernar user-159=starluxm user-160=radekrat user-161=fffhpcwr user-162=versusmk user-163=fiziosmk user-164=ambitiou user-165=mapaspla user-166=solemor1 user-167=nationa2 user-168=onlinesh user-169=tcieuroc user-170=bauerin2 user-171=folklore user-172=conserva user-173=cupidpro user-174=vegemk1 user-175=euronic3 user-176=evberasm user-177=bonitavi user-178=makdrone user-179=tehnodro user-180=jpkomuna user-181=izzomk user-182=gradbai1 user-183=aptekafa user-184=madzomk user-185=evacommk user-186=fxxcom user-187=peshkai1 user-188=dimpalne user-189=eaptekam user-190=cleanerm user-191=animatem user-192=progress user-193=sssoluti user-194=atspedco user-195=solointe user-196=jaramk user-197=recorgmk user-198=taktcomm user-199=pelagini user-200=bbbustou user-201=biplmk user-202=kaoilmk user-203=mbmehani user-204=ismassag user-205=workbenc user-206=viplastc user-207=wineberr user-208=solarinv
Sep  8 02:42:04 power sudo[3679541]: wp-toolkit : (command continued) user-209=eurofarm user-210=electrol user-211=eliksirz user-212=naksorgm user-213=trigemat user-214=golakkom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 02:42:04 power sudo[3679541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:04 power sudo[3679541]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:04 power sudo[3679555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 02:42:04 power sudo[3679555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:04 power sudo[3679555]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:04 power sudo[3679559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-q46NQRDAxzJiWGU7.~
Sep  8 02:42:04 power sudo[3679559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:04 power sudo[3679559]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:04 power sudo[3679563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-q46NQRDAxzJiWGU7.~\''
Sep  8 02:42:04 power sudo[3679563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:04 power sudo[3679563]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:04 power sudo[3679568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-q46NQRDAxzJiWGU7.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 02:42:04 power sudo[3679568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:04 power sudo[3679568]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:04 power sudo[3679572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 02:42:04 power sudo[3679572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:04 power sudo[3679572]: pam_unix(sudo:session): session closed for user root
Sep  8 02:42:05 power sudo[3680403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 02:42:05 power sudo[3680403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 02:42:05 power sudo[3680403]: pam_unix(sudo:session): session closed for user root
Sep  8 02:44:11 power sshd[3682036]: Connection closed by 89.248.168.227 port 57310 [preauth]
Sep  8 02:45:01 power systemd[3682726]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:50:02 power systemd[3687001]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 02:55:01 power systemd[3690766]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:00:02 power systemd[3694464]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 03:00:02 power systemd[3694461]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:00:02 power systemd[3694465]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 03:00:02 power systemd[3694467]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 03:05:02 power systemd[3699257]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:06:01 power systemd[3700170]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 03:07:01 power systemd[3700990]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 03:10:01 power systemd[3703315]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:12:01 power systemd[3704831]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 03:15:01 power systemd[3707294]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:20:01 power systemd[3711269]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:25:01 power systemd[3715313]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:27:01 power systemd[3716849]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  8 03:30:01 power systemd[3719065]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:30:01 power systemd[3719066]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 03:30:01 power systemd[3719068]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 03:30:01 power systemd[3719069]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 03:35:01 power systemd[3723020]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:36:01 power systemd[3723919]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 03:37:01 power systemd[3724556]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 03:40:01 power systemd[3727437]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:42:01 power sudo[3729042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 03:42:01 power sudo[3729042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729042]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 03:42:01 power sudo[3729046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729046]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 03:42:01 power sudo[3729050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729050]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=rsQRyU9DfM'
Sep  8 03:42:01 power sudo[3729054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729054]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 03:42:01 power sudo[3729059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729059]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 03:42:01 power sudo[3729063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729063]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 03:42:01 power sudo[3729067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729067]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 03:42:01 power sudo[3729071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729071]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 03:42:01 power sudo[3729079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729079]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 03:42:01 power sudo[3729086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729086]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 03:42:01 power sudo[3729090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729090]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 03:42:01 power sudo[3729094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729094]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 03:42:01 power sudo[3729099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power sudo[3729099]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:01 power sudo[3729103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 03:42:01 power sudo[3729103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:01 power systemd[3729121]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 03:42:02 power sudo[3729103]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:03 power sudo[3729161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 03:42:03 power sudo[3729161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:03 power sudo[3729161]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:03 power sudo[3729166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 03:42:03 power sudo[3729166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:04 power sudo[3729166]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:04 power sudo[3729172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=modernar user-2=inkigaic user-3=bozinovm user-4=dslmk user-5=darkogor user-6=prizmapl user-7=fnjorgmk user-8=premiumi user-9=innofabl user-10=vacuacti user-11=taneccom user-12=gorsajmk user-13=aquatech user-14=v5srybi9dcdx user-15=supremel user-16=zdmgpsor user-17=tcieuroc user-18=onlinesh user-19=nationa2 user-20=solemor1 user-21=mapaspla user-22=ambitiou user-23=fiziosmk user-24=versusmk user-25=fffhpcwr user-26=radekrat user-27=starluxm user-28=aptekazd user-29=nikimare user-30=forzares user-31=hausmark user-32=nikolov1 user-33=intelek1 user-34=mediatag user-35=nucktra1 user-36=lblawcom user-37=euronic2 user-38=matratze user-39=mediasol user-40=carrent1 user-41=bogdanos user-42=apgrupmk user-43=kardiome user-44=samasped user-45=chemhemc user-46=nutrivim user-47=euromaki user-48=cosmatob user-49=elektrot
Sep  8 03:42:04 power sudo[3729172]: wp-toolkit : (command continued) user-50=zapovim1 user-51=infopor1 user-52=pravekom user-53=vtranseu user-54=imdskopj user-55=glammace user-56=albuname user-57=kaoilmk user-58=biplmk user-59=bbbustou user-60=pelagini user-61=recorgmk user-62=taktcomm user-63=jaramk user-64=solointe user-65=sssoluti user-66=atspedco user-67=progress user-68=animatem user-69=cleanerm user-70=golakkom user-71=trigemat user-72=naksorgm user-73=eliksirz user-74=electrol user-75=eurofarm user-76=solarinv user-77=wineberr user-78=viplastc user-79=workbenc user-80=ismassag user-81=mbmehani user-82=bonitavi user-83=evberasm user-84=euronic3 user-85=vegemk1 user-86=cupidpro user-87=conserva user-88=folklore user-89=bauerin2 user-90=eaptekam user-91=dimpalne user-92=peshkai1 user-93=fxxcom user-94=evacommk user-95=aptekafa user-96=madzomk user-97=gradbai1 user-98=izzomk user-99=jpkomuna user-100=tehnodro user-101=makdrone user-102=enaspotc user-103=vmro user-104=viewinn
Sep  8 03:42:04 power sudo[3729172]: wp-toolkit : (command continued) user-105=trudovop user-106=stojnevi user-107=raremk user-108=oouslave user-109=uhostmk5 user-110=bauerbg user-111=youthgua user-112=anitermc user-113=cajsproc user-114=hotammk user-115=nefrolog user-116=levantmk user-117=ekostoc1 user-118=oncolog1 user-119=frizered user-120=hidrommk user-121=caramk user-122=evolvepl user-123=socioloz user-124=avtogumi user-125=pelagoni user-126=nlpmkorg user-127=centarba user-128=kolened1 user-129=nolimits user-130=seloviro user-131=dikimk12 user-132=sprintst user-133=enochmk user-134=herbalpl user-135=edomcomm user-136=berbermk user-137=pecakome user-138=wondersp user-139=stravelm user-140=robustco user-141=holiyayt user-142=rastiraz user-143=tradeyou user-144=gjorgeiv user-145=dnevnoin user-146=goodnews user-147=mstmmk user-148=gocruise user-149=tealmk user-150=dadarmk user-151=proverim user-152=janiboja user-153=itradeco user-154=vezilkac user-155=cabinetm user-156=stojano1
Sep  8 03:42:04 power sudo[3729172]: wp-toolkit : (command continued) user-157=bovincom user-158=sparkupm user-159=stokovna user-160=klimimk user-161=palenzok user-162=busymard user-163=zampmk user-164=zvskopje user-165=custome1 user-166=kouzonco user-167=premiuma user-168=cetplatf user-169=dalmacom user-170=ideaplus user-171=nasaidni user-172=karpospo user-173=screenme user-174=arturaco user-175=premiums user-176=butelmk user-177=daris user-178=jpparkin user-179=inotekso user-180=drleomk user-181=makoasmk user-182=bianasho user-183=skyapart user-184=rasmorgm user-185=simbiome user-186=getaldus user-187=delcevca user-188=barececo user-189=workandt user-190=volkanco user-191=goartsym user-192=dhamachi user-193=mfashion user-194=agrosind user-195=mpbmk user-196=datalink user-197=gogovan1 user-198=velmk user-199=kujnamon user-200=univerz1 user-201=sedcmk user-202=groskome user-203=ivanjord user-204=vfxnestc user-205=polyeste user-206=bizporta user-207=datelcom user-208=maleshne
Sep  8 03:42:04 power sudo[3729172]: wp-toolkit : (command continued) user-209=spdcompu user-210=detskagr user-211=mspmk user-212=infobadi user-213=wikicamp user-214=urbanexp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 03:42:04 power sudo[3729172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:04 power sudo[3729172]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:04 power sudo[3729191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 03:42:04 power sudo[3729191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:04 power sudo[3729191]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:04 power sudo[3729195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KrXiykqj3XYqvfBn.~
Sep  8 03:42:04 power sudo[3729195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:04 power sudo[3729195]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:04 power sudo[3729199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KrXiykqj3XYqvfBn.~\''
Sep  8 03:42:04 power sudo[3729199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:04 power sudo[3729199]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:04 power sudo[3729204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KrXiykqj3XYqvfBn.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 03:42:04 power sudo[3729204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:04 power sudo[3729204]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:04 power sudo[3729209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 03:42:04 power sudo[3729209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:04 power sudo[3729209]: pam_unix(sudo:session): session closed for user root
Sep  8 03:42:05 power sudo[3730128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 03:42:05 power sudo[3730128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 03:42:05 power sudo[3730128]: pam_unix(sudo:session): session closed for user root
Sep  8 03:45:01 power systemd[3732401]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:50:01 power systemd[3736702]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 03:55:01 power systemd[3740646]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:00:01 power systemd[3744451]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:00:01 power systemd[3744452]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 04:00:01 power systemd[3744454]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 04:00:01 power systemd[3744456]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 04:04:04 power sshd[3748093]: Connection closed by 181.199.24.92 port 23504 [preauth]
Sep  8 04:04:04 power sshd[3748097]: Connection closed by 181.199.24.92 port 22797 [preauth]
Sep  8 04:04:04 power sshd[3748096]: Connection closed by 181.199.24.92 port 50813 [preauth]
Sep  8 04:04:04 power sshd[3748098]: Connection closed by 181.199.24.92 port 42874 [preauth]
Sep  8 04:04:04 power sshd[3748099]: Connection closed by 181.199.24.92 port 32851 [preauth]
Sep  8 04:04:04 power sshd[3748095]: Connection closed by 181.199.24.92 port 11930 [preauth]
Sep  8 04:05:01 power systemd[3748814]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:06:01 power systemd[3749776]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 04:07:01 power systemd[3750490]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 04:07:10 power sshd[3750608]: Connection closed by 181.199.24.92 port 60319 [preauth]
Sep  8 04:07:10 power sshd[3750609]: Connection closed by 181.199.24.92 port 49452 [preauth]
Sep  8 04:07:10 power sshd[3750610]: Connection closed by 181.199.24.92 port 61026 [preauth]
Sep  8 04:07:10 power sshd[3750611]: Connection closed by 181.199.24.92 port 16419 [preauth]
Sep  8 04:07:10 power sshd[3750612]: Connection closed by 181.199.24.92 port 24358 [preauth]
Sep  8 04:07:10 power sshd[3750613]: Connection closed by 181.199.24.92 port 6395 [preauth]
Sep  8 04:10:01 power systemd[3752731]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:10:09 power sshd[3752839]: Connection closed by 181.199.24.92 port 22992 [preauth]
Sep  8 04:10:09 power sshd[3752840]: Connection closed by 181.199.24.92 port 33859 [preauth]
Sep  8 04:10:09 power sshd[3752844]: Connection closed by 181.199.24.92 port 43912 [preauth]
Sep  8 04:10:09 power sshd[3752841]: Connection closed by 181.199.24.92 port 53936 [preauth]
Sep  8 04:10:09 power sshd[3752843]: Connection closed by 181.199.24.92 port 61875 [preauth]
Sep  8 04:10:09 power sshd[3752842]: Connection closed by 181.199.24.92 port 34566 [preauth]
Sep  8 04:12:01 power systemd[3754579]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 04:15:01 power systemd[3756765]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:17:15 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 04:20:01 power systemd[3761513]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:25:01 power systemd[3765109]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:30:01 power systemd[3769003]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:30:01 power systemd[3769004]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 04:30:01 power systemd[3769006]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 04:30:01 power systemd[3769007]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 04:30:01 power systemd[3769009]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  8 04:35:01 power systemd[3773728]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:36:01 power systemd[3774553]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 04:37:01 power systemd[3775602]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 04:40:01 power systemd[3778019]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:42:01 power sudo[3779687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 04:42:01 power sudo[3779687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779687]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 04:42:01 power sudo[3779691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779691]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 04:42:01 power sudo[3779695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779695]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=G89NSkWJEi'
Sep  8 04:42:01 power sudo[3779699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779699]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 04:42:01 power sudo[3779704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779704]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 04:42:01 power sudo[3779709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779709]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 04:42:01 power sudo[3779713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779713]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 04:42:01 power systemd[3779731]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 04:42:01 power sudo[3779729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779729]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 04:42:01 power sudo[3779754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779754]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 04:42:01 power sudo[3779759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779759]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 04:42:01 power sudo[3779763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779763]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 04:42:01 power sudo[3779767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779767]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 04:42:01 power sudo[3779771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:01 power sudo[3779771]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:01 power sudo[3779776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 04:42:01 power sudo[3779776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:02 power sudo[3779776]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:04 power sudo[3779813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 04:42:04 power sudo[3779813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:04 power sudo[3779813]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:04 power sudo[3779818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 04:42:04 power sudo[3779818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:04 power sudo[3779818]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:04 power sudo[3779824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=izzomk user-2=jpkomuna user-3=makdrone user-4=tehnodro user-5=peshkai1 user-6=fxxcom user-7=eaptekam user-8=dimpalne user-9=gradbai1 user-10=evacommk user-11=madzomk user-12=aptekafa user-13=bauerin2 user-14=folklore user-15=bonitavi user-16=evberasm user-17=conserva user-18=euronic3 user-19=vegemk1 user-20=cupidpro user-21=wineberr user-22=viplastc user-23=mbmehani user-24=workbenc user-25=ismassag user-26=trigemat user-27=naksorgm user-28=eliksirz user-29=electrol user-30=golakkom user-31=solarinv user-32=eurofarm user-33=jaramk user-34=solointe user-35=taktcomm user-36=recorgmk user-37=progress user-38=animatem user-39=cleanerm user-40=sssoluti user-41=atspedco user-42=kaoilmk user-43=biplmk user-44=bbbustou user-45=pelagini user-46=pravekom user-47=vtranseu user-48=infopor1 user-49=glammace
Sep  8 04:42:04 power sudo[3779824]: wp-toolkit : (command continued) user-50=albuname user-51=imdskopj user-52=nutrivim user-53=samasped user-54=chemhemc user-55=zapovim1 user-56=elektrot user-57=euromaki user-58=cosmatob user-59=euronic2 user-60=matratze user-61=kardiome user-62=mediasol user-63=carrent1 user-64=bogdanos user-65=apgrupmk user-66=hausmark user-67=nikolov1 user-68=aptekazd user-69=nikimare user-70=forzares user-71=nucktra1 user-72=lblawcom user-73=intelek1 user-74=mediatag user-75=versusmk user-76=ambitiou user-77=fiziosmk user-78=radekrat user-79=starluxm user-80=fffhpcwr user-81=tcieuroc user-82=solemor1 user-83=mapaspla user-84=onlinesh user-85=nationa2 user-86=v5srybi9dcdx user-87=supremel user-88=gorsajmk user-89=aquatech user-90=zdmgpsor user-91=inkigaic user-92=modernar user-93=taneccom user-94=bozinovm user-95=darkogor user-96=prizmapl user-97=dslmk user-98=fnjorgmk user-99=premiumi user-100=innofabl user-101=vacuacti user-102=infobadi user-103=mspmk
Sep  8 04:42:04 power sudo[3779824]: wp-toolkit : (command continued) user-104=spdcompu user-105=detskagr user-106=wikicamp user-107=urbanexp user-108=vfxnestc user-109=polyeste user-110=sedcmk user-111=ivanjord user-112=groskome user-113=datelcom user-114=maleshne user-115=bizporta user-116=agrosind user-117=mpbmk user-118=velmk user-119=gogovan1 user-120=kujnamon user-121=univerz1 user-122=datalink user-123=rasmorgm user-124=bianasho user-125=makoasmk user-126=skyapart user-127=goartsym user-128=volkanco user-129=dhamachi user-130=mfashion user-131=delcevca user-132=getaldus user-133=simbiome user-134=barececo user-135=workandt user-136=premiums user-137=butelmk user-138=daris user-139=ideaplus user-140=nasaidni user-141=karpospo user-142=arturaco user-143=screenme user-144=jpparkin user-145=inotekso user-146=drleomk user-147=cetplatf user-148=dalmacom user-149=kouzonco user-150=premiuma user-151=klimimk user-152=sparkupm user-153=stokovna user-154=custome1 user-155=palenzok
Sep  8 04:42:04 power sudo[3779824]: wp-toolkit : (command continued) user-156=zampmk user-157=busymard user-158=zvskopje user-159=vezilkac user-160=cabinetm user-161=janiboja user-162=itradeco user-163=bovincom user-164=stojano1 user-165=gocruise user-166=goodnews user-167=mstmmk user-168=dadarmk user-169=proverim user-170=tealmk user-171=holiyayt user-172=rastiraz user-173=pecakome user-174=wondersp user-175=stravelm user-176=robustco user-177=dnevnoin user-178=gjorgeiv user-179=tradeyou user-180=dikimk12 user-181=sprintst user-182=enochmk user-183=herbalpl user-184=edomcomm user-185=berbermk user-186=nolimits user-187=nlpmkorg user-188=centarba user-189=kolened1 user-190=seloviro user-191=evolvepl user-192=pelagoni user-193=socioloz user-194=avtogumi user-195=nefrolog user-196=levantmk user-197=oncolog1 user-198=ekostoc1 user-199=caramk user-200=frizered user-201=hidrommk user-202=youthgua user-203=anitermc user-204=cajsproc user-205=hotammk user-206=enaspotc user-207=vmro
Sep  8 04:42:04 power sudo[3779824]: wp-toolkit : (command continued) user-208=trudovop user-209=viewinn user-210=raremk user-211=oouslave user-212=uhostmk5 user-213=bauerbg user-214=stojnevi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 04:42:04 power sudo[3779824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:05 power sudo[3779824]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:05 power sudo[3779834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 04:42:05 power sudo[3779834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:05 power sudo[3779834]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:05 power sudo[3779838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lPkhaqHCJz0yzImi.~
Sep  8 04:42:05 power sudo[3779838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:05 power sudo[3779838]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:05 power sudo[3779842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lPkhaqHCJz0yzImi.~\''
Sep  8 04:42:05 power sudo[3779842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:05 power sudo[3779842]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:05 power sudo[3779847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lPkhaqHCJz0yzImi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 04:42:05 power sudo[3779847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:05 power sudo[3779847]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:05 power sudo[3779851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 04:42:05 power sudo[3779851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:05 power sudo[3779851]: pam_unix(sudo:session): session closed for user root
Sep  8 04:42:06 power sudo[3780769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 04:42:06 power sudo[3780769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:42:06 power sudo[3780769]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:01 power sudo[3782407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 04:44:01 power sudo[3782407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:01 power sudo[3782407]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:01 power sudo[3782412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 04:44:01 power sudo[3782412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:01 power sudo[3782412]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:01 power sudo[3782420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 04:44:01 power sudo[3782420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:01 power sudo[3782420]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:01 power sudo[3782428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=centarba user-2=nlpmkorg user-3=kolened1 user-4=nolimits user-5=seloviro user-6=sprintst user-7=herbalpl user-8=enochmk user-9=dikimk12 user-10=berbermk user-11=edomcomm user-12=wondersp user-13=stravelm user-14=robustco user-15=pecakome user-16=rastiraz user-17=holiyayt user-18=gjorgeiv user-19=tradeyou user-20=dnevnoin user-21=mstmmk user-22=goodnews user-23=gocruise user-24=tealmk user-25=proverim user-26=dadarmk user-27=vmro user-28=trudovop user-29=viewinn user-30=enaspotc user-31=stojnevi user-32=uhostmk5 user-33=bauerbg user-34=raremk user-35=oouslave user-36=youthgua user-37=anitermc user-38=hotammk user-39=cajsproc user-40=nefrolog user-41=levantmk user-42=ekostoc1 user-43=oncolog1 user-44=frizered user-45=hidrommk user-46=caramk user-47=evolvepl user-48=socioloz user-49=avtogumi user-50=pelagoni
Sep  8 04:44:01 power sudo[3782428]: wp-toolkit : (command continued) user-51=bianasho user-52=makoasmk user-53=skyapart user-54=rasmorgm user-55=workandt user-56=getaldus user-57=delcevca user-58=simbiome user-59=barececo user-60=mfashion user-61=goartsym user-62=volkanco user-63=dhamachi user-64=agrosind user-65=mpbmk user-66=datalink user-67=velmk user-68=gogovan1 user-69=kujnamon user-70=univerz1 user-71=ivanjord user-72=groskome user-73=sedcmk user-74=vfxnestc user-75=polyeste user-76=bizporta user-77=datelcom user-78=maleshne user-79=detskagr user-80=spdcompu user-81=mspmk user-82=infobadi user-83=urbanexp user-84=wikicamp user-85=itradeco user-86=janiboja user-87=cabinetm user-88=vezilkac user-89=stojano1 user-90=bovincom user-91=sparkupm user-92=stokovna user-93=klimimk user-94=busymard user-95=zampmk user-96=zvskopje user-97=palenzok user-98=custome1 user-99=premiuma user-100=kouzonco user-101=dalmacom user-102=cetplatf user-103=screenme user-104=arturaco user-105=ideaplus
Sep  8 04:44:01 power sudo[3782428]: wp-toolkit : (command continued) user-106=nasaidni user-107=karpospo user-108=premiums user-109=daris user-110=butelmk user-111=drleomk user-112=jpparkin user-113=inotekso user-114=forzares user-115=aptekazd user-116=nikimare user-117=nikolov1 user-118=hausmark user-119=intelek1 user-120=mediatag user-121=lblawcom user-122=nucktra1 user-123=euronic2 user-124=matratze user-125=apgrupmk user-126=mediasol user-127=carrent1 user-128=bogdanos user-129=kardiome user-130=samasped user-131=chemhemc user-132=nutrivim user-133=euromaki user-134=cosmatob user-135=elektrot user-136=zapovim1 user-137=infopor1 user-138=pravekom user-139=vtranseu user-140=imdskopj user-141=glammace user-142=albuname user-143=modernar user-144=inkigaic user-145=innofabl user-146=premiumi user-147=vacuacti user-148=bozinovm user-149=dslmk user-150=prizmapl user-151=darkogor user-152=fnjorgmk user-153=taneccom user-154=gorsajmk user-155=aquatech user-156=supremel
Sep  8 04:44:01 power sudo[3782428]: wp-toolkit : (command continued) user-157=v5srybi9dcdx user-158=zdmgpsor user-159=tcieuroc user-160=nationa2 user-161=onlinesh user-162=mapaspla user-163=solemor1 user-164=fiziosmk user-165=ambitiou user-166=versusmk user-167=fffhpcwr user-168=radekrat user-169=starluxm user-170=bonitavi user-171=evberasm user-172=vegemk1 user-173=cupidpro user-174=euronic3 user-175=conserva user-176=folklore user-177=bauerin2 user-178=dimpalne user-179=eaptekam user-180=peshkai1 user-181=fxxcom user-182=evacommk user-183=aptekafa user-184=madzomk user-185=gradbai1 user-186=jpkomuna user-187=izzomk user-188=tehnodro user-189=makdrone user-190=bbbustou user-191=kaoilmk user-192=biplmk user-193=pelagini user-194=recorgmk user-195=taktcomm user-196=solointe user-197=jaramk user-198=atspedco user-199=sssoluti user-200=animatem user-201=cleanerm user-202=progress user-203=golakkom user-204=electrol user-205=trigemat user-206=eliksirz user-207=naksorgm
Sep  8 04:44:01 power sudo[3782428]: wp-toolkit : (command continued) user-208=eurofarm user-209=solarinv user-210=viplastc user-211=wineberr user-212=ismassag user-213=workbenc user-214=mbmehani feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 04:44:01 power sudo[3782428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:02 power sudo[3782428]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:02 power sudo[3782444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep  8 04:44:02 power sudo[3782444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:02 power sudo[3782444]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:02 power sudo[3782449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vmro --output=json'
Sep  8 04:44:02 power sudo[3782449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:02 power sudo[3782449]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:05 power sudo[3782509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro /bin/sh -c 'cd /home/vmro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:44:05 power sudo[3782509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:05 power sudo[3782509]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:05 power sudo[3782515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vmro --user-current --json'
Sep  8 04:44:05 power sudo[3782515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:05 power sudo[3782515]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:05 power sudo[3782521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro LangPHP php_get_vhost_versions --output=json'
Sep  8 04:44:05 power sudo[3782521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:05 power sudo[3782521]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:05 power sudo[3782526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php83 --output=json'
Sep  8 04:44:05 power sudo[3782526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:06 power sudo[3782526]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:06 power sudo[3782537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:44:06 power sudo[3782537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:06 power sudo[3782537]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:06 power sudo[3782552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DomainInfo single_domain_data domain=vmro-dpmne.org.mk return_https_redirect_status=1 --output=json'
Sep  8 04:44:06 power sudo[3782552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:06 power sudo[3782552]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:06 power sudo[3782564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_vhost_ssl_components --output=json'
Sep  8 04:44:06 power sudo[3782564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:07 power sudo[3782564]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:07 power sudo[3782570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_ssl_vhosts --output=json'
Sep  8 04:44:07 power sudo[3782570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:07 power sudo[3782570]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:07 power sudo[3782579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro Mime list_redirects --output=json'
Sep  8 04:44:07 power sudo[3782579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:07 power sudo[3782579]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:09 power sudo[3782648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DirectoryPrivacy is_directory_protected dir=/home/vmro/public_html --output=json'
Sep  8 04:44:09 power sudo[3782648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:09 power sudo[3782648]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:12 power sudo[3782892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep  8 04:44:12 power sudo[3782892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:13 power sudo[3782892]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:13 power sudo[3782907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dadarmk --output=json'
Sep  8 04:44:13 power sudo[3782907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:13 power sudo[3782907]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:17 power sudo[3783000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/academy.dadar.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:44:17 power sudo[3783000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:17 power sudo[3783000]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:17 power sudo[3783006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep  8 04:44:17 power sudo[3783006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:17 power sudo[3783006]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:17 power sudo[3783013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk LangPHP php_get_vhost_versions --output=json'
Sep  8 04:44:17 power sudo[3783013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:18 power sudo[3783013]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:18 power sudo[3783018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:44:18 power sudo[3783018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:18 power sudo[3783018]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:18 power sudo[3783050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=academy.dadar.mk return_https_redirect_status=1 --output=json'
Sep  8 04:44:18 power sudo[3783050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:18 power sudo[3783050]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:18 power sudo[3783057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk Mime list_redirects --output=json'
Sep  8 04:44:18 power sudo[3783057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:18 power sudo[3783057]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:21 power sudo[3783137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/academy.dadar.mk --output=json'
Sep  8 04:44:21 power sudo[3783137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:21 power sudo[3783137]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:24 power sudo[3783393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep  8 04:44:24 power sudo[3783393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:25 power sudo[3783393]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:25 power sudo[3783405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=agrosind --output=json'
Sep  8 04:44:25 power sudo[3783405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:25 power sudo[3783405]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:31 power sudo[3783755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:44:32 power sudo[3783755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:32 power sudo[3783755]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:32 power sudo[3783761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user agrosind --user-current --json'
Sep  8 04:44:32 power sudo[3783761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:32 power sudo[3783761]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:32 power sudo[3783772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind LangPHP php_get_vhost_versions --output=json'
Sep  8 04:44:32 power sudo[3783772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:32 power sudo[3783772]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:32 power sudo[3783777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php81 --output=json'
Sep  8 04:44:32 power sudo[3783777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:33 power sudo[3783777]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:33 power sudo[3783819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:44:33 power sudo[3783819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:33 power sudo[3783819]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:33 power sudo[3783846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DomainInfo single_domain_data domain=agrosindikat.mk return_https_redirect_status=1 --output=json'
Sep  8 04:44:33 power sudo[3783846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:33 power sudo[3783846]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:33 power sudo[3783879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind Mime list_redirects --output=json'
Sep  8 04:44:33 power sudo[3783879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:33 power sudo[3783879]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:37 power sudo[3784014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DirectoryPrivacy is_directory_protected dir=/home/agrosind/public_html --output=json'
Sep  8 04:44:37 power sudo[3784014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:38 power sudo[3784014]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:39 power sudo[3784074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:44:39 power sudo[3784074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:39 power sudo[3784074]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:39 power sudo[3784079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:44:39 power sudo[3784079]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:44:39 power sudo[3784079]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:44:39 power sudo[3784079]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:44:39 power sudo[3784079]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:44:39 power sudo[3784079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:39 power sudo[3784079]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:39 power sudo[3784084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:44:39 power sudo[3784084]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:44:39 power sudo[3784084]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:44:39 power sudo[3784084]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:44:39 power sudo[3784084]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:44:39 power sudo[3784084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:39 power sudo[3784084]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:41 power sudo[3784189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:44:41 power sudo[3784189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:41 power sudo[3784189]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:41 power sudo[3784194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:44:41 power sudo[3784194]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:44:41 power sudo[3784194]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:44:41 power sudo[3784194]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:44:41 power sudo[3784194]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:44:41 power sudo[3784194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:41 power sudo[3784194]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:41 power sudo[3784202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:44:41 power sudo[3784202]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:44:41 power sudo[3784202]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:44:41 power sudo[3784202]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:44:41 power sudo[3784202]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:44:41 power sudo[3784202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:41 power sudo[3784202]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:41 power sudo[3784235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep  8 04:44:41 power sudo[3784235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:42 power sudo[3784235]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:42 power sudo[3784240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=fffhpcwr --output=json'
Sep  8 04:44:42 power sudo[3784240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:42 power sudo[3784240]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:47 power sudo[3784336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/al.rsbsp.org.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:44:47 power sudo[3784336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:47 power sudo[3784336]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:47 power sudo[3784345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep  8 04:44:47 power sudo[3784345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:47 power sudo[3784345]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:47 power sudo[3784351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr LangPHP php_get_vhost_versions --output=json'
Sep  8 04:44:47 power sudo[3784351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:47 power sudo[3784351]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:47 power sudo[3784359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:44:47 power sudo[3784359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:47 power sudo[3784359]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:48 power sudo[3784376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=al.rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep  8 04:44:48 power sudo[3784376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:48 power sudo[3784376]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:48 power sudo[3784391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr Mime list_redirects --output=json'
Sep  8 04:44:48 power sudo[3784391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:48 power sudo[3784391]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:51 power sudo[3784488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/al.rsbsp.org.mk --output=json'
Sep  8 04:44:51 power sudo[3784488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:51 power sudo[3784488]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:55 power sudo[3784741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep  8 04:44:55 power sudo[3784741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:56 power sudo[3784741]: pam_unix(sudo:session): session closed for user root
Sep  8 04:44:56 power sudo[3784753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ambitiou --output=json'
Sep  8 04:44:56 power sudo[3784753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:44:56 power sudo[3784753]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:00 power sudo[3784880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/public_html/site && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:45:00 power sudo[3784880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:00 power sudo[3784880]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:00 power sudo[3784886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep  8 04:45:00 power sudo[3784886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:00 power sudo[3784886]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:00 power sudo[3784891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou LangPHP php_get_vhost_versions --output=json'
Sep  8 04:45:00 power sudo[3784891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:01 power sudo[3784891]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:01 power sudo[3784896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep  8 04:45:01 power sudo[3784896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:01 power systemd[3784989]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:45:01 power sudo[3784896]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:01 power sudo[3785032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:45:01 power sudo[3785032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:01 power sudo[3785032]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:02 power sudo[3785053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep  8 04:45:02 power sudo[3785053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:02 power sudo[3785053]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:02 power sudo[3785059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou Mime list_redirects --output=json'
Sep  8 04:45:02 power sudo[3785059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:02 power sudo[3785059]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:05 power sudo[3785197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/public_html/site --output=json'
Sep  8 04:45:05 power sudo[3785197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:05 power sudo[3785197]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:09 power sudo[3785397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep  8 04:45:09 power sudo[3785397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:09 power sudo[3785397]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:09 power sudo[3785402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=animatem --output=json'
Sep  8 04:45:09 power sudo[3785402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:09 power sudo[3785402]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:15 power sudo[3785569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem /bin/sh -c 'cd /home/animatem/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:45:15 power sudo[3785569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:15 power sudo[3785569]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:15 power sudo[3785576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user animatem --user-current --json'
Sep  8 04:45:15 power sudo[3785576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:15 power sudo[3785576]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:15 power sudo[3785583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem LangPHP php_get_vhost_versions --output=json'
Sep  8 04:45:15 power sudo[3785583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:15 power sudo[3785583]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:15 power sudo[3785588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php73 --output=json'
Sep  8 04:45:15 power sudo[3785588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:16 power sudo[3785588]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:16 power sudo[3785605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:45:16 power sudo[3785605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:16 power sudo[3785605]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:16 power sudo[3785619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DomainInfo single_domain_data domain=animate.mk return_https_redirect_status=1 --output=json'
Sep  8 04:45:16 power sudo[3785619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:16 power sudo[3785619]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:16 power sudo[3785626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem Mime list_redirects --output=json'
Sep  8 04:45:16 power sudo[3785626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:16 power sudo[3785626]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:21 power sudo[3785759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DirectoryPrivacy is_directory_protected dir=/home/animatem/public_html --output=json'
Sep  8 04:45:21 power sudo[3785759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:21 power sudo[3785759]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:24 power sudo[3785971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep  8 04:45:24 power sudo[3785971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:25 power sudo[3785971]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:25 power sudo[3785981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=anitermc --output=json'
Sep  8 04:45:25 power sudo[3785981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:25 power sudo[3785981]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:36 power sudo[3786180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc /bin/sh -c 'cd /home/anitermc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:45:36 power sudo[3786180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:36 power sudo[3786180]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:36 power sudo[3786188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user anitermc --user-current --json'
Sep  8 04:45:36 power sudo[3786188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:37 power sudo[3786188]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:37 power sudo[3786195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc LangPHP php_get_vhost_versions --output=json'
Sep  8 04:45:37 power sudo[3786195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:37 power sudo[3786195]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:37 power sudo[3786207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:45:37 power sudo[3786207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:37 power sudo[3786207]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:37 power sudo[3786227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DomainInfo single_domain_data domain=aniterm.com.mk return_https_redirect_status=1 --output=json'
Sep  8 04:45:37 power sudo[3786227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:38 power sudo[3786227]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:38 power sudo[3786234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc Mime list_redirects --output=json'
Sep  8 04:45:38 power sudo[3786234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:38 power sudo[3786234]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:45 power sudo[3786354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DirectoryPrivacy is_directory_protected dir=/home/anitermc/public_html --output=json'
Sep  8 04:45:45 power sudo[3786354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:45 power sudo[3786354]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:49 power sudo[3786583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep  8 04:45:49 power sudo[3786583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:49 power sudo[3786583]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:49 power sudo[3786592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wineberr --output=json'
Sep  8 04:45:49 power sudo[3786592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:49 power sudo[3786592]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:55 power sudo[3786744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/app.wineberry.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:45:55 power sudo[3786744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:55 power sudo[3786744]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:55 power sudo[3786750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep  8 04:45:55 power sudo[3786750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:56 power sudo[3786750]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:56 power sudo[3786760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr LangPHP php_get_vhost_versions --output=json'
Sep  8 04:45:56 power sudo[3786760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:56 power sudo[3786760]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:56 power sudo[3786771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:45:56 power sudo[3786771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:56 power sudo[3786771]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:56 power sudo[3786797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=app.wineberry.mk return_https_redirect_status=1 --output=json'
Sep  8 04:45:56 power sudo[3786797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:57 power sudo[3786797]: pam_unix(sudo:session): session closed for user root
Sep  8 04:45:57 power sudo[3786810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr Mime list_redirects --output=json'
Sep  8 04:45:57 power sudo[3786810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:45:57 power sudo[3786810]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:00 power sudo[3786937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/app.wineberry.mk/bck --output=json'
Sep  8 04:46:00 power sudo[3786937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:00 power sudo[3786937]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:04 power sudo[3787144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep  8 04:46:04 power sudo[3787144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:04 power sudo[3787144]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:04 power sudo[3787151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=aptekazd --output=json'
Sep  8 04:46:04 power sudo[3787151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:04 power sudo[3787151]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:09 power sudo[3787236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:46:09 power sudo[3787236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:09 power sudo[3787236]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:09 power sudo[3787242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user aptekazd --user-current --json'
Sep  8 04:46:09 power sudo[3787242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:10 power sudo[3787242]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:10 power sudo[3787248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd LangPHP php_get_vhost_versions --output=json'
Sep  8 04:46:10 power sudo[3787248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:10 power sudo[3787248]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:10 power sudo[3787256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:46:10 power sudo[3787256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:10 power sudo[3787256]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:10 power sudo[3787274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DomainInfo single_domain_data domain=aptekazdravje.mk return_https_redirect_status=1 --output=json'
Sep  8 04:46:10 power sudo[3787274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:10 power sudo[3787274]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:10 power sudo[3787284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd Mime list_redirects --output=json'
Sep  8 04:46:11 power sudo[3787284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:11 power sudo[3787284]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:14 power sudo[3787403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DirectoryPrivacy is_directory_protected dir=/home/aptekazd/public_html --output=json'
Sep  8 04:46:14 power sudo[3787403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:14 power sudo[3787403]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:15 power sudo[3787466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:46:15 power sudo[3787466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:15 power sudo[3787466]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:15 power sudo[3787471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:46:15 power sudo[3787471]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:46:15 power sudo[3787471]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:46:15 power sudo[3787471]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:46:15 power sudo[3787471]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:46:15 power sudo[3787471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:15 power sudo[3787471]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:15 power sudo[3787476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:46:15 power sudo[3787476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:46:15 power sudo[3787476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:46:15 power sudo[3787476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:46:15 power sudo[3787476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:46:15 power sudo[3787476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:15 power sudo[3787476]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:17 power sudo[3787590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:46:17 power sudo[3787590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:17 power sudo[3787590]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:17 power sudo[3787595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:46:17 power sudo[3787595]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:46:17 power sudo[3787595]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:46:17 power sudo[3787595]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:46:17 power sudo[3787595]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:46:17 power sudo[3787595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:17 power sudo[3787595]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:17 power sudo[3787600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:46:17 power sudo[3787600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:46:17 power sudo[3787600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:46:17 power sudo[3787600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:46:17 power sudo[3787600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:46:17 power sudo[3787600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:17 power sudo[3787600]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:18 power sudo[3787637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep  8 04:46:18 power sudo[3787637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:18 power sudo[3787637]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:18 power sudo[3787659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=progress --output=json'
Sep  8 04:46:18 power sudo[3787659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:18 power sudo[3787659]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:23 power sudo[3787884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress /bin/sh -c 'cd /home/progress/artivo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:46:23 power sudo[3787884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:23 power sudo[3787884]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:23 power sudo[3787890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user progress --user-current --json'
Sep  8 04:46:23 power sudo[3787890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:23 power sudo[3787890]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:23 power sudo[3787898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress LangPHP php_get_vhost_versions --output=json'
Sep  8 04:46:23 power sudo[3787898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:23 power sudo[3787898]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:23 power sudo[3787904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:46:23 power sudo[3787904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:23 power sudo[3787904]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:24 power sudo[3787919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DomainInfo single_domain_data domain=artivo.mk return_https_redirect_status=1 --output=json'
Sep  8 04:46:24 power sudo[3787919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:24 power sudo[3787919]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:24 power sudo[3787928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress Mime list_redirects --output=json'
Sep  8 04:46:24 power sudo[3787928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:24 power sudo[3787928]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:27 power sudo[3788015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DirectoryPrivacy is_directory_protected dir=/home/progress/artivo.mk --output=json'
Sep  8 04:46:27 power sudo[3788015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:27 power sudo[3788015]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:31 power sudo[3788204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep  8 04:46:31 power sudo[3788204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:31 power sudo[3788204]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:31 power sudo[3788210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bbbustou --output=json'
Sep  8 04:46:31 power sudo[3788210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:31 power sudo[3788210]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:37 power sudo[3788320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:46:37 power sudo[3788320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:38 power sudo[3788320]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:38 power sudo[3788326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep  8 04:46:38 power sudo[3788326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:38 power sudo[3788326]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:38 power sudo[3788340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou LangPHP php_get_vhost_versions --output=json'
Sep  8 04:46:38 power sudo[3788340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:38 power sudo[3788340]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:38 power sudo[3788347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php84 --output=json'
Sep  8 04:46:38 power sudo[3788347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:39 power sudo[3788347]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:39 power sudo[3788356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:46:39 power sudo[3788356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:39 power sudo[3788356]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:39 power sudo[3788375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=bbbustours.mk return_https_redirect_status=1 --output=json'
Sep  8 04:46:39 power sudo[3788375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:39 power sudo[3788375]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:39 power sudo[3788381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou Mime list_redirects --output=json'
Sep  8 04:46:39 power sudo[3788381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:39 power sudo[3788381]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:43 power sudo[3788479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/public_html --output=json'
Sep  8 04:46:43 power sudo[3788479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:43 power sudo[3788479]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:47 power sudo[3788675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep  8 04:46:47 power sudo[3788675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:47 power sudo[3788675]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:47 power sudo[3788683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nationa2 --output=json'
Sep  8 04:46:47 power sudo[3788683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:47 power sudo[3788683]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:51 power sudo[3788791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 /bin/sh -c 'cd /home/nationa2/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:46:51 power sudo[3788791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:51 power sudo[3788791]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:51 power sudo[3788798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nationa2 --user-current --json'
Sep  8 04:46:51 power sudo[3788798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:51 power sudo[3788798]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:51 power sudo[3788806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 LangPHP php_get_vhost_versions --output=json'
Sep  8 04:46:51 power sudo[3788806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:51 power sudo[3788806]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:51 power sudo[3788811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php74 --output=json'
Sep  8 04:46:51 power sudo[3788811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:52 power sudo[3788811]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:52 power sudo[3788819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:46:52 power sudo[3788819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:52 power sudo[3788819]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:52 power sudo[3788835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DomainInfo single_domain_data domain=beactiveday.mk return_https_redirect_status=1 --output=json'
Sep  8 04:46:52 power sudo[3788835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:52 power sudo[3788835]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:52 power sudo[3788841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 Mime list_redirects --output=json'
Sep  8 04:46:52 power sudo[3788841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:52 power sudo[3788841]: pam_unix(sudo:session): session closed for user root
Sep  8 04:46:54 power sudo[3788923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DirectoryPrivacy is_directory_protected dir=/home/nationa2/public_html --output=json'
Sep  8 04:46:54 power sudo[3788923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:46:54 power sudo[3788923]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:08 power sudo[3790146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep  8 04:48:08 power sudo[3790146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:08 power sudo[3790146]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:08 power sudo[3790151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cetplatf --output=json'
Sep  8 04:48:08 power sudo[3790151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:08 power sudo[3790151]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:12 power sudo[3790231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/beep.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:48:12 power sudo[3790231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:12 power sudo[3790231]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:12 power sudo[3790237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  8 04:48:12 power sudo[3790237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:12 power sudo[3790237]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:12 power sudo[3790255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf LangPHP php_get_vhost_versions --output=json'
Sep  8 04:48:12 power sudo[3790255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:12 power sudo[3790255]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:12 power sudo[3790273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:48:13 power sudo[3790273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:13 power sudo[3790273]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:13 power sudo[3790314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=beep.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 04:48:13 power sudo[3790314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:13 power sudo[3790314]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:13 power sudo[3790321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf Mime list_redirects --output=json'
Sep  8 04:48:13 power sudo[3790321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:13 power sudo[3790321]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:16 power sudo[3790399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/beep.cetplatform.mk --output=json'
Sep  8 04:48:16 power sudo[3790399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:16 power sudo[3790399]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:20 power sudo[3790605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep  8 04:48:20 power sudo[3790605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:20 power sudo[3790605]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:20 power sudo[3790614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bianasho --output=json'
Sep  8 04:48:20 power sudo[3790614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:20 power sudo[3790614]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:28 power sudo[3790734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho /bin/sh -c 'cd /home/bianasho/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:48:28 power sudo[3790734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:28 power sudo[3790734]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:28 power sudo[3790740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bianasho --user-current --json'
Sep  8 04:48:28 power sudo[3790740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:28 power sudo[3790740]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:28 power sudo[3790745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho LangPHP php_get_vhost_versions --output=json'
Sep  8 04:48:28 power sudo[3790745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:28 power sudo[3790745]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:28 power sudo[3790754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:48:28 power sudo[3790754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:28 power sudo[3790754]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:30 power sudo[3790773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DomainInfo single_domain_data domain=bianashoes.mk return_https_redirect_status=1 --output=json'
Sep  8 04:48:30 power sudo[3790773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:30 power sudo[3790773]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:30 power sudo[3790783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho Mime list_redirects --output=json'
Sep  8 04:48:30 power sudo[3790783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:30 power sudo[3790783]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:35 power sudo[3790900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DirectoryPrivacy is_directory_protected dir=/home/bianasho/public_html --output=json'
Sep  8 04:48:35 power sudo[3790900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:35 power sudo[3790900]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:39 power sudo[3791109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep  8 04:48:39 power sudo[3791109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:39 power sudo[3791109]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:39 power sudo[3791115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=velmk --output=json'
Sep  8 04:48:39 power sudo[3791115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:39 power sudo[3791115]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:45 power sudo[3791243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk /bin/sh -c 'cd /home/velmk/blog.vel.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:48:45 power sudo[3791243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:45 power sudo[3791243]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:45 power sudo[3791249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user velmk --user-current --json'
Sep  8 04:48:45 power sudo[3791249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:46 power sudo[3791249]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:46 power sudo[3791259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk LangPHP php_get_vhost_versions --output=json'
Sep  8 04:48:46 power sudo[3791259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:46 power sudo[3791259]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:46 power sudo[3791267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:48:46 power sudo[3791267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:46 power sudo[3791267]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:47 power sudo[3791286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DomainInfo single_domain_data domain=blog.vel.mk return_https_redirect_status=1 --output=json'
Sep  8 04:48:47 power sudo[3791286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:47 power sudo[3791286]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:47 power sudo[3791292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk Mime list_redirects --output=json'
Sep  8 04:48:47 power sudo[3791292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:47 power sudo[3791292]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:50 power sudo[3791408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DirectoryPrivacy is_directory_protected dir=/home/velmk/blog.vel.mk --output=json'
Sep  8 04:48:51 power sudo[3791408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:51 power sudo[3791408]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:54 power sudo[3791608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep  8 04:48:54 power sudo[3791608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:55 power sudo[3791608]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:55 power sudo[3791615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enaspotc --output=json'
Sep  8 04:48:55 power sudo[3791615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:55 power sudo[3791615]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:57 power sudo[3791682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/boiling.pt && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:48:57 power sudo[3791682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:58 power sudo[3791682]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:58 power sudo[3791692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep  8 04:48:58 power sudo[3791692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:58 power sudo[3791692]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:58 power sudo[3791697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc LangPHP php_get_vhost_versions --output=json'
Sep  8 04:48:58 power sudo[3791697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:58 power sudo[3791697]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:58 power sudo[3791702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:48:58 power sudo[3791702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:58 power sudo[3791702]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:58 power sudo[3791722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=boiling.pt return_https_redirect_status=1 --output=json'
Sep  8 04:48:58 power sudo[3791722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:59 power sudo[3791722]: pam_unix(sudo:session): session closed for user root
Sep  8 04:48:59 power sudo[3791728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc Mime list_redirects --output=json'
Sep  8 04:48:59 power sudo[3791728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:48:59 power sudo[3791728]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:01 power sudo[3791804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/boiling.pt --output=json'
Sep  8 04:49:01 power sudo[3791804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:01 power sudo[3791804]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:04 power sudo[3792005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep  8 04:49:04 power sudo[3792005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:05 power sudo[3792005]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:05 power sudo[3792013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bonitavi --output=json'
Sep  8 04:49:05 power sudo[3792013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:05 power sudo[3792013]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:09 power sudo[3792112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi /bin/sh -c 'cd /home/bonitavi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:49:09 power sudo[3792112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:09 power sudo[3792112]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:09 power sudo[3792118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bonitavi --user-current --json'
Sep  8 04:49:09 power sudo[3792118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:09 power sudo[3792118]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:09 power sudo[3792126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi LangPHP php_get_vhost_versions --output=json'
Sep  8 04:49:09 power sudo[3792126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:09 power sudo[3792126]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:09 power sudo[3792134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:49:09 power sudo[3792134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:09 power sudo[3792134]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:09 power sudo[3792150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DomainInfo single_domain_data domain=bonita-vita.com return_https_redirect_status=1 --output=json'
Sep  8 04:49:09 power sudo[3792150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:09 power sudo[3792150]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:09 power sudo[3792156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi Mime list_redirects --output=json'
Sep  8 04:49:09 power sudo[3792156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:09 power sudo[3792156]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:13 power sudo[3792248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DirectoryPrivacy is_directory_protected dir=/home/bonitavi/public_html --output=json'
Sep  8 04:49:13 power sudo[3792248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:13 power sudo[3792248]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:15 power sudo[3792489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep  8 04:49:15 power sudo[3792489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:16 power sudo[3792489]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:16 power sudo[3792498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bovincom --output=json'
Sep  8 04:49:16 power sudo[3792498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:16 power sudo[3792498]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:24 power sudo[3792641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom /bin/sh -c 'cd /home/bovincom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:49:24 power sudo[3792641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:24 power sudo[3792641]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:24 power sudo[3792647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bovincom --user-current --json'
Sep  8 04:49:24 power sudo[3792647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:24 power sudo[3792647]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:24 power sudo[3792654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom LangPHP php_get_vhost_versions --output=json'
Sep  8 04:49:24 power sudo[3792654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:24 power sudo[3792654]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:24 power sudo[3792663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:49:24 power sudo[3792663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:24 power sudo[3792663]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:25 power sudo[3792686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DomainInfo single_domain_data domain=bovin.com.mk return_https_redirect_status=1 --output=json'
Sep  8 04:49:25 power sudo[3792686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:25 power sudo[3792686]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:25 power sudo[3792696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom Mime list_redirects --output=json'
Sep  8 04:49:25 power sudo[3792696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:25 power sudo[3792696]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:30 power sudo[3792820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DirectoryPrivacy is_directory_protected dir=/home/bovincom/public_html --output=json'
Sep  8 04:49:30 power sudo[3792820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:30 power sudo[3792820]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:34 power sudo[3793036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep  8 04:49:34 power sudo[3793036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:35 power sudo[3793036]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:35 power sudo[3793042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=butelmk --output=json'
Sep  8 04:49:35 power sudo[3793042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:35 power sudo[3793042]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:48 power sudo[3793278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk /bin/sh -c 'cd /home/butelmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:49:48 power sudo[3793278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:48 power sudo[3793278]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:48 power sudo[3793294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user butelmk --user-current --json'
Sep  8 04:49:48 power sudo[3793294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:48 power sudo[3793294]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:48 power sudo[3793318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk LangPHP php_get_vhost_versions --output=json'
Sep  8 04:49:48 power sudo[3793318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:48 power sudo[3793318]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:48 power sudo[3793324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  8 04:49:48 power sudo[3793324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:48 power sudo[3793324]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:48 power sudo[3793330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=alt-php73 --output=json'
Sep  8 04:49:48 power sudo[3793330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:49 power sudo[3793330]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:49 power sudo[3793341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:49:49 power sudo[3793341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:49 power sudo[3793341]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:49 power sudo[3793371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DomainInfo single_domain_data domain=butel.mk return_https_redirect_status=1 --output=json'
Sep  8 04:49:49 power sudo[3793371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:49 power sudo[3793371]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:49 power sudo[3793378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk Mime list_redirects --output=json'
Sep  8 04:49:49 power sudo[3793378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:50 power sudo[3793378]: pam_unix(sudo:session): session closed for user root
Sep  8 04:49:56 power sudo[3793527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DirectoryPrivacy is_directory_protected dir=/home/butelmk/public_html --output=json'
Sep  8 04:49:56 power sudo[3793527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:49:56 power sudo[3793527]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:01 power sudo[3793795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep  8 04:50:01 power sudo[3793795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:01 power systemd[3793900]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:50:01 power sudo[3793795]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:01 power sudo[3793931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=izzomk --output=json'
Sep  8 04:50:01 power sudo[3793931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:01 power sudo[3793931]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:09 power sudo[3794144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/caffeizzo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:50:09 power sudo[3794144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:09 power sudo[3794144]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:09 power sudo[3794151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep  8 04:50:09 power sudo[3794151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:09 power sudo[3794151]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:09 power sudo[3794162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk LangPHP php_get_vhost_versions --output=json'
Sep  8 04:50:09 power sudo[3794162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:09 power sudo[3794162]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:09 power sudo[3794167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:50:09 power sudo[3794167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:09 power sudo[3794167]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:10 power sudo[3794192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=caffeizzo.mk return_https_redirect_status=1 --output=json'
Sep  8 04:50:10 power sudo[3794192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:10 power sudo[3794192]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:10 power sudo[3794202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk Mime list_redirects --output=json'
Sep  8 04:50:10 power sudo[3794202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:10 power sudo[3794202]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:14 power sudo[3794323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/caffeizzo.mk --output=json'
Sep  8 04:50:14 power sudo[3794323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:14 power sudo[3794323]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:22 power sudo[3794634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/cateye.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:50:22 power sudo[3794634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:22 power sudo[3794634]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:22 power sudo[3794641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  8 04:50:22 power sudo[3794641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:22 power sudo[3794641]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:22 power sudo[3794651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:50:22 power sudo[3794651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:22 power sudo[3794651]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:23 power sudo[3794667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cateye.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 04:50:23 power sudo[3794667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:23 power sudo[3794667]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:26 power sudo[3794781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/cateye.cetplatform.mk --output=json'
Sep  8 04:50:26 power sudo[3794781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:26 power sudo[3794781]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:34 power sudo[3795083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:50:34 power sudo[3795083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:34 power sudo[3795083]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:34 power sudo[3795091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  8 04:50:34 power sudo[3795091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:35 power sudo[3795091]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:35 power sudo[3795101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:50:35 power sudo[3795101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:35 power sudo[3795101]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:36 power sudo[3795125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 04:50:36 power sudo[3795125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:36 power sudo[3795125]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:40 power sudo[3795244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/public_html --output=json'
Sep  8 04:50:40 power sudo[3795244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:40 power sudo[3795244]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:43 power sudo[3795431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep  8 04:50:43 power sudo[3795431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:43 power sudo[3795431]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:43 power sudo[3795437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=chemhemc --output=json'
Sep  8 04:50:43 power sudo[3795437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:43 power sudo[3795437]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:47 power sudo[3795539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:50:47 power sudo[3795539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:47 power sudo[3795539]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:47 power sudo[3795546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep  8 04:50:47 power sudo[3795546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:48 power sudo[3795546]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:48 power sudo[3795562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc LangPHP php_get_vhost_versions --output=json'
Sep  8 04:50:48 power sudo[3795562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:48 power sudo[3795562]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:48 power sudo[3795570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:50:48 power sudo[3795570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:48 power sudo[3795570]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:48 power sudo[3795604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=chemhem.com return_https_redirect_status=1 --output=json'
Sep  8 04:50:48 power sudo[3795604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:48 power sudo[3795604]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:48 power sudo[3795613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc Mime list_redirects --output=json'
Sep  8 04:50:48 power sudo[3795613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:48 power sudo[3795613]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:50 power sudo[3795698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/public_html --output=json'
Sep  8 04:50:50 power sudo[3795698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:51 power sudo[3795698]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:52 power sudo[3795766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:50:52 power sudo[3795766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:52 power sudo[3795766]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:52 power sudo[3795771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:50:52 power sudo[3795771]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:50:52 power sudo[3795771]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:50:52 power sudo[3795771]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:50:52 power sudo[3795771]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:50:52 power sudo[3795771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:52 power sudo[3795771]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:52 power sudo[3795776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:50:52 power sudo[3795776]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:50:52 power sudo[3795776]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:50:52 power sudo[3795776]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:50:52 power sudo[3795776]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:50:52 power sudo[3795776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:52 power sudo[3795776]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:54 power sudo[3795888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:50:54 power sudo[3795888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:54 power sudo[3795888]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:54 power sudo[3795893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:50:54 power sudo[3795893]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:50:54 power sudo[3795893]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:50:54 power sudo[3795893]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:50:54 power sudo[3795893]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:50:54 power sudo[3795893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:54 power sudo[3795893]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:54 power sudo[3795898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:50:54 power sudo[3795898]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:50:54 power sudo[3795898]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:50:54 power sudo[3795898]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:50:54 power sudo[3795898]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:50:54 power sudo[3795898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:54 power sudo[3795898]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:54 power sudo[3795940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep  8 04:50:55 power sudo[3795940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:55 power sudo[3795940]: pam_unix(sudo:session): session closed for user root
Sep  8 04:50:55 power sudo[3795949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cosmatob --output=json'
Sep  8 04:50:55 power sudo[3795949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:50:55 power sudo[3795949]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:01 power sudo[3796079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob /bin/sh -c 'cd /home/cosmatob/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:51:01 power sudo[3796079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:01 power sudo[3796079]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:02 power sudo[3796086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cosmatob --user-current --json'
Sep  8 04:51:02 power sudo[3796086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:02 power sudo[3796086]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:02 power sudo[3796099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob LangPHP php_get_vhost_versions --output=json'
Sep  8 04:51:02 power sudo[3796099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:02 power sudo[3796099]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:02 power sudo[3796106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:51:02 power sudo[3796106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:02 power sudo[3796106]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:03 power sudo[3796128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DomainInfo single_domain_data domain=cosmatobacco.mk return_https_redirect_status=1 --output=json'
Sep  8 04:51:03 power sudo[3796128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:03 power sudo[3796128]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:03 power sudo[3796134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob Mime list_redirects --output=json'
Sep  8 04:51:03 power sudo[3796134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:03 power sudo[3796134]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:08 power sudo[3796235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DirectoryPrivacy is_directory_protected dir=/home/cosmatob/public_html --output=json'
Sep  8 04:51:08 power sudo[3796235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:08 power sudo[3796235]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:15 power sudo[3796584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:51:15 power sudo[3796584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:15 power sudo[3796584]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:15 power sudo[3796592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep  8 04:51:16 power sudo[3796592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:16 power sudo[3796592]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:16 power sudo[3796604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:51:16 power sudo[3796604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:16 power sudo[3796604]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:16 power sudo[3796619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=dadar.mk return_https_redirect_status=1 --output=json'
Sep  8 04:51:16 power sudo[3796619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:16 power sudo[3796619]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:18 power sudo[3796714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/public_html --output=json'
Sep  8 04:51:18 power sudo[3796714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:18 power sudo[3796714]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:22 power sudo[3796995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep  8 04:51:22 power sudo[3796995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:22 power sudo[3796995]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:22 power sudo[3797001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=delcevca --output=json'
Sep  8 04:51:22 power sudo[3797001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:22 power sudo[3797001]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:28 power sudo[3797169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:51:28 power sudo[3797169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:28 power sudo[3797169]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:28 power sudo[3797181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user delcevca --user-current --json'
Sep  8 04:51:28 power sudo[3797181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:28 power sudo[3797181]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:28 power sudo[3797199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca LangPHP php_get_vhost_versions --output=json'
Sep  8 04:51:28 power sudo[3797199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:28 power sudo[3797199]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:28 power sudo[3797204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:51:28 power sudo[3797204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:28 power sudo[3797204]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:28 power sudo[3797223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DomainInfo single_domain_data domain=delcevcani.mk return_https_redirect_status=1 --output=json'
Sep  8 04:51:28 power sudo[3797223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:29 power sudo[3797223]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:29 power sudo[3797229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca Mime list_redirects --output=json'
Sep  8 04:51:29 power sudo[3797229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:29 power sudo[3797229]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:32 power sudo[3797313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DirectoryPrivacy is_directory_protected dir=/home/delcevca/public_html --output=json'
Sep  8 04:51:32 power sudo[3797313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:32 power sudo[3797313]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:33 power sudo[3797380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:51:33 power sudo[3797380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:33 power sudo[3797380]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:33 power sudo[3797385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:51:33 power sudo[3797385]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:51:33 power sudo[3797385]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:51:33 power sudo[3797385]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:51:33 power sudo[3797385]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:51:33 power sudo[3797385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:33 power sudo[3797385]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:33 power sudo[3797390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:51:33 power sudo[3797390]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:51:33 power sudo[3797390]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:51:33 power sudo[3797390]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:51:33 power sudo[3797390]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:51:33 power sudo[3797390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:33 power sudo[3797390]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:33 power sudo[3797395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:51:33 power sudo[3797395]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:51:33 power sudo[3797395]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:51:33 power sudo[3797395]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:51:33 power sudo[3797395]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:51:33 power sudo[3797395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:33 power sudo[3797395]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:35 power sudo[3797505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:51:35 power sudo[3797505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:35 power sudo[3797505]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:35 power sudo[3797510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:51:35 power sudo[3797510]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:51:35 power sudo[3797510]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:51:35 power sudo[3797510]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:51:35 power sudo[3797510]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:51:35 power sudo[3797510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:35 power sudo[3797510]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:35 power sudo[3797515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:51:35 power sudo[3797515]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:51:35 power sudo[3797515]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:51:35 power sudo[3797515]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:51:35 power sudo[3797515]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:51:35 power sudo[3797515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:35 power sudo[3797515]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:35 power sudo[3797520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:51:35 power sudo[3797520]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:51:35 power sudo[3797520]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:51:35 power sudo[3797520]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:51:35 power sudo[3797520]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:51:35 power sudo[3797520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:35 power sudo[3797520]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:36 power sudo[3797560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep  8 04:51:36 power sudo[3797560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:36 power sudo[3797560]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:36 power sudo[3797565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=edomcomm --output=json'
Sep  8 04:51:36 power sudo[3797565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:36 power sudo[3797565]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:39 power sudo[3797641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:51:39 power sudo[3797641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:39 power sudo[3797641]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:39 power sudo[3797650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user edomcomm --user-current --json'
Sep  8 04:51:39 power sudo[3797650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:40 power sudo[3797650]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:40 power sudo[3797657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm LangPHP php_get_vhost_versions --output=json'
Sep  8 04:51:40 power sudo[3797657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:40 power sudo[3797657]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:40 power sudo[3797665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:51:40 power sudo[3797665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:40 power sudo[3797665]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:40 power sudo[3797691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=deosol.mk return_https_redirect_status=1 --output=json'
Sep  8 04:51:40 power sudo[3797691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:40 power sudo[3797691]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:40 power sudo[3797697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm Mime list_redirects --output=json'
Sep  8 04:51:40 power sudo[3797697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:40 power sudo[3797697]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:43 power sudo[3797820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/w --output=json'
Sep  8 04:51:43 power sudo[3797820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:43 power sudo[3797820]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:50 power sudo[3798154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/ekobalans.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:51:50 power sudo[3798154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:50 power sudo[3798154]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:50 power sudo[3798164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  8 04:51:50 power sudo[3798164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:50 power sudo[3798164]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:50 power sudo[3798172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:51:50 power sudo[3798172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:50 power sudo[3798172]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:50 power sudo[3798188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=ekobalans.mk return_https_redirect_status=1 --output=json'
Sep  8 04:51:50 power sudo[3798188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:50 power sudo[3798188]: pam_unix(sudo:session): session closed for user root
Sep  8 04:51:52 power sudo[3798274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/ekobalans.mk --output=json'
Sep  8 04:51:53 power sudo[3798274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:51:53 power sudo[3798274]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:00 power sudo[3798679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/moetodete.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:52:00 power sudo[3798679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:00 power sudo[3798679]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:00 power sudo[3798691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  8 04:52:00 power sudo[3798691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:00 power sudo[3798691]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:00 power sudo[3798696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:52:00 power sudo[3798696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:00 power sudo[3798696]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:01 power sudo[3798794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=moetodete.mk return_https_redirect_status=1 --output=json'
Sep  8 04:52:01 power sudo[3798794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:01 power sudo[3798794]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:04 power sudo[3799022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/moetodete.mk --output=json'
Sep  8 04:52:04 power sudo[3799022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:04 power sudo[3799022]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:07 power sudo[3799263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep  8 04:52:07 power sudo[3799263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:07 power sudo[3799263]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:07 power sudo[3799270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=detskagr --output=json'
Sep  8 04:52:07 power sudo[3799270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:07 power sudo[3799270]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:14 power sudo[3799394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:52:14 power sudo[3799394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:14 power sudo[3799394]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:14 power sudo[3799400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user detskagr --user-current --json'
Sep  8 04:52:14 power sudo[3799400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:15 power sudo[3799400]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:15 power sudo[3799409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr LangPHP php_get_vhost_versions --output=json'
Sep  8 04:52:15 power sudo[3799409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:15 power sudo[3799409]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:15 power sudo[3799418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:52:15 power sudo[3799418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:15 power sudo[3799418]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:15 power sudo[3799433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DomainInfo single_domain_data domain=detskagradinka-prolet.mk return_https_redirect_status=1 --output=json'
Sep  8 04:52:15 power sudo[3799433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:15 power sudo[3799433]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:15 power sudo[3799440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr Mime list_redirects --output=json'
Sep  8 04:52:15 power sudo[3799440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:15 power sudo[3799440]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:19 power sudo[3799611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DirectoryPrivacy is_directory_protected dir=/home/detskagr/public_html/wordpress --output=json'
Sep  8 04:52:19 power sudo[3799611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:19 power sudo[3799611]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:20 power sudo[3799676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:52:20 power sudo[3799676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:20 power sudo[3799676]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:20 power sudo[3799681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  8 04:52:20 power sudo[3799681]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  8 04:52:20 power sudo[3799681]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  8 04:52:20 power sudo[3799681]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  8 04:52:20 power sudo[3799681]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:52:20 power sudo[3799681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:20 power sudo[3799681]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:20 power sudo[3799686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  8 04:52:20 power sudo[3799686]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  8 04:52:20 power sudo[3799686]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  8 04:52:20 power sudo[3799686]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  8 04:52:20 power sudo[3799686]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:52:20 power sudo[3799686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:20 power sudo[3799686]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:20 power sudo[3799691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep  8 04:52:20 power sudo[3799691]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep  8 04:52:20 power sudo[3799691]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep  8 04:52:20 power sudo[3799691]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep  8 04:52:20 power sudo[3799691]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:52:20 power sudo[3799691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:21 power sudo[3799691]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:22 power sudo[3799803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:52:22 power sudo[3799803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:22 power sudo[3799803]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:22 power sudo[3799808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  8 04:52:22 power sudo[3799808]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  8 04:52:22 power sudo[3799808]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  8 04:52:22 power sudo[3799808]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  8 04:52:22 power sudo[3799808]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:52:22 power sudo[3799808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:22 power sudo[3799808]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:22 power sudo[3799813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  8 04:52:22 power sudo[3799813]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  8 04:52:22 power sudo[3799813]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  8 04:52:22 power sudo[3799813]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  8 04:52:22 power sudo[3799813]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:52:22 power sudo[3799813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:22 power sudo[3799813]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:23 power sudo[3799819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep  8 04:52:23 power sudo[3799819]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep  8 04:52:23 power sudo[3799819]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep  8 04:52:23 power sudo[3799819]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep  8 04:52:23 power sudo[3799819]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:52:23 power sudo[3799819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:23 power sudo[3799819]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:23 power sudo[3799858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep  8 04:52:23 power sudo[3799858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:23 power sudo[3799858]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:23 power sudo[3799863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eaptekam --output=json'
Sep  8 04:52:23 power sudo[3799863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:24 power sudo[3799863]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:29 power sudo[3799975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam /bin/sh -c 'cd /home/eaptekam/dev.eapteka.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:52:29 power sudo[3799975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:29 power sudo[3799975]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:29 power sudo[3799981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eaptekam --user-current --json'
Sep  8 04:52:29 power sudo[3799981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:29 power sudo[3799981]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:29 power sudo[3799987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam LangPHP php_get_vhost_versions --output=json'
Sep  8 04:52:29 power sudo[3799987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:30 power sudo[3799987]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:30 power sudo[3799992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:52:30 power sudo[3799992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:30 power sudo[3799992]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:30 power sudo[3800014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DomainInfo single_domain_data domain=dev.eapteka.mk return_https_redirect_status=1 --output=json'
Sep  8 04:52:30 power sudo[3800014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:30 power sudo[3800014]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:30 power sudo[3800025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam Mime list_redirects --output=json'
Sep  8 04:52:30 power sudo[3800025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:30 power sudo[3800025]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:34 power sudo[3800142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DirectoryPrivacy is_directory_protected dir=/home/eaptekam/dev.eapteka.mk --output=json'
Sep  8 04:52:34 power sudo[3800142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:34 power sudo[3800142]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:37 power sudo[3800341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep  8 04:52:38 power sudo[3800341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:38 power sudo[3800341]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:38 power sudo[3800351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dimpalne --output=json'
Sep  8 04:52:38 power sudo[3800351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:38 power sudo[3800351]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:42 power sudo[3800427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne /bin/sh -c 'cd /home/dimpalne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:52:42 power sudo[3800427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:42 power sudo[3800427]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:42 power sudo[3800434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dimpalne --user-current --json'
Sep  8 04:52:42 power sudo[3800434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:43 power sudo[3800434]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:43 power sudo[3800441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne LangPHP php_get_vhost_versions --output=json'
Sep  8 04:52:43 power sudo[3800441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:43 power sudo[3800441]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:43 power sudo[3800447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:52:43 power sudo[3800447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:43 power sudo[3800447]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:43 power sudo[3800464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DomainInfo single_domain_data domain=dimpal.net return_https_redirect_status=1 --output=json'
Sep  8 04:52:43 power sudo[3800464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:43 power sudo[3800464]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:43 power sudo[3800470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne Mime list_redirects --output=json'
Sep  8 04:52:43 power sudo[3800470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:43 power sudo[3800470]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:46 power sudo[3800558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DirectoryPrivacy is_directory_protected dir=/home/dimpalne/public_html --output=json'
Sep  8 04:52:46 power sudo[3800558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:46 power sudo[3800558]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:50 power sudo[3800766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep  8 04:52:50 power sudo[3800766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:50 power sudo[3800766]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:50 power sudo[3800771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dnevnoin --output=json'
Sep  8 04:52:50 power sudo[3800771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:50 power sudo[3800771]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:53 power sudo[3800829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin /bin/sh -c 'cd /home/dnevnoin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:52:53 power sudo[3800829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:53 power sudo[3800829]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:53 power sudo[3800835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dnevnoin --user-current --json'
Sep  8 04:52:53 power sudo[3800835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:53 power sudo[3800835]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:53 power sudo[3800846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin LangPHP php_get_vhost_versions --output=json'
Sep  8 04:52:53 power sudo[3800846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:54 power sudo[3800846]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:54 power sudo[3800853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:52:54 power sudo[3800853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:54 power sudo[3800853]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:54 power sudo[3800870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin DomainInfo single_domain_data domain=dnevnoinfo.mk return_https_redirect_status=1 --output=json'
Sep  8 04:52:54 power sudo[3800870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:54 power sudo[3800870]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:54 power sudo[3800878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin Mime list_redirects --output=json'
Sep  8 04:52:54 power sudo[3800878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:54 power sudo[3800878]: pam_unix(sudo:session): session closed for user root
Sep  8 04:52:57 power sudo[3800960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin DirectoryPrivacy is_directory_protected dir=/home/dnevnoin/public_html --output=json'
Sep  8 04:52:57 power sudo[3800960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:52:57 power sudo[3800960]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:03 power sudo[3801284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=dreamholidays.bbbustours.mk return_https_redirect_status=1 --output=json'
Sep  8 04:53:03 power sudo[3801284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:04 power sudo[3801284]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:06 power sudo[3801334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/dreamholidays.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:53:06 power sudo[3801334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:06 power sudo[3801334]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:06 power sudo[3801340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep  8 04:53:06 power sudo[3801340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:06 power sudo[3801340]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:06 power sudo[3801345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:53:06 power sudo[3801345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:06 power sudo[3801345]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:10 power sudo[3801435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/dreamholidays.mk --output=json'
Sep  8 04:53:10 power sudo[3801435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:10 power sudo[3801435]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:13 power sudo[3801634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep  8 04:53:13 power sudo[3801634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:14 power sudo[3801634]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:14 power sudo[3801641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=drleomk --output=json'
Sep  8 04:53:14 power sudo[3801641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:14 power sudo[3801641]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:19 power sudo[3801794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk /bin/sh -c 'cd /home/drleomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:53:19 power sudo[3801794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:19 power sudo[3801794]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:19 power sudo[3801800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user drleomk --user-current --json'
Sep  8 04:53:19 power sudo[3801800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:19 power sudo[3801800]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:19 power sudo[3801812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk LangPHP php_get_vhost_versions --output=json'
Sep  8 04:53:19 power sudo[3801812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:19 power sudo[3801812]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:19 power sudo[3801817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:53:19 power sudo[3801817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:19 power sudo[3801817]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:19 power sudo[3801833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DomainInfo single_domain_data domain=drleo.mk return_https_redirect_status=1 --output=json'
Sep  8 04:53:20 power sudo[3801833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:20 power sudo[3801833]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:20 power sudo[3801839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk Mime list_redirects --output=json'
Sep  8 04:53:20 power sudo[3801839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:20 power sudo[3801839]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:22 power sudo[3801915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DirectoryPrivacy is_directory_protected dir=/home/drleomk/public_html --output=json'
Sep  8 04:53:22 power sudo[3801915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:22 power sudo[3801915]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:26 power sudo[3802108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep  8 04:53:26 power sudo[3802108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:26 power sudo[3802108]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:26 power sudo[3802114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=goodnews --output=json'
Sep  8 04:53:26 power sudo[3802114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:27 power sudo[3802114]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:31 power sudo[3802253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:53:31 power sudo[3802253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:31 power sudo[3802253]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:31 power sudo[3802263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  8 04:53:31 power sudo[3802263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:31 power sudo[3802263]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:31 power sudo[3802268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews LangPHP php_get_vhost_versions --output=json'
Sep  8 04:53:31 power sudo[3802268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:31 power sudo[3802268]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:31 power sudo[3802273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:53:31 power sudo[3802273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:31 power sudo[3802273]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:32 power sudo[3802291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=elan.mk return_https_redirect_status=1 --output=json'
Sep  8 04:53:32 power sudo[3802291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:32 power sudo[3802291]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:32 power sudo[3802298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews Mime list_redirects --output=json'
Sep  8 04:53:32 power sudo[3802298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:32 power sudo[3802298]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:35 power sudo[3802383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/elan.mk --output=json'
Sep  8 04:53:35 power sudo[3802383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:35 power sudo[3802383]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:35 power sudo[3802444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:53:35 power sudo[3802444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:35 power sudo[3802444]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:35 power sudo[3802449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 04:53:35 power sudo[3802449]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 04:53:35 power sudo[3802449]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 04:53:35 power sudo[3802449]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 04:53:35 power sudo[3802449]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:53:35 power sudo[3802449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:35 power sudo[3802449]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:35 power sudo[3802454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 04:53:35 power sudo[3802454]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 04:53:35 power sudo[3802454]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 04:53:35 power sudo[3802454]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 04:53:35 power sudo[3802454]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:53:36 power sudo[3802454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:36 power sudo[3802454]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:37 power sudo[3802548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:53:37 power sudo[3802548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:37 power sudo[3802548]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:37 power sudo[3802554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 04:53:37 power sudo[3802554]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 04:53:37 power sudo[3802554]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 04:53:37 power sudo[3802554]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 04:53:37 power sudo[3802554]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:53:37 power sudo[3802554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:37 power sudo[3802554]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:37 power sudo[3802559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 04:53:37 power sudo[3802559]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 04:53:37 power sudo[3802559]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 04:53:37 power sudo[3802559]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 04:53:37 power sudo[3802559]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:53:37 power sudo[3802559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:37 power sudo[3802559]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:38 power sudo[3802588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep  8 04:53:38 power sudo[3802588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:38 power sudo[3802588]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:38 power sudo[3802597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=electrol --output=json'
Sep  8 04:53:38 power sudo[3802597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:38 power sudo[3802597]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:42 power sudo[3802676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol /bin/sh -c 'cd /home/electrol/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:53:42 power sudo[3802676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:42 power sudo[3802676]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:42 power sudo[3802682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user electrol --user-current --json'
Sep  8 04:53:42 power sudo[3802682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:43 power sudo[3802682]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:43 power sudo[3802690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol LangPHP php_get_vhost_versions --output=json'
Sep  8 04:53:43 power sudo[3802690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:43 power sudo[3802690]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:43 power sudo[3802695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:53:43 power sudo[3802695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:43 power sudo[3802695]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:44 power sudo[3802717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DomainInfo single_domain_data domain=electrolight.mk return_https_redirect_status=1 --output=json'
Sep  8 04:53:44 power sudo[3802717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:44 power sudo[3802717]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:44 power sudo[3802724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol Mime list_redirects --output=json'
Sep  8 04:53:44 power sudo[3802724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:44 power sudo[3802724]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:47 power sudo[3802821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DirectoryPrivacy is_directory_protected dir=/home/electrol/public_html --output=json'
Sep  8 04:53:47 power sudo[3802821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:48 power sudo[3802821]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:52 power sudo[3803049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep  8 04:53:52 power sudo[3803049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:52 power sudo[3803049]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:52 power sudo[3803055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=elektrot --output=json'
Sep  8 04:53:52 power sudo[3803055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:52 power sudo[3803055]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:54 power sudo[3803117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot /bin/sh -c 'cd /home/elektrot/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:53:54 power sudo[3803117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:54 power sudo[3803117]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:54 power sudo[3803123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user elektrot --user-current --json'
Sep  8 04:53:54 power sudo[3803123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:55 power sudo[3803123]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:55 power sudo[3803136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot LangPHP php_get_vhost_versions --output=json'
Sep  8 04:53:55 power sudo[3803136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:55 power sudo[3803136]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:55 power sudo[3803146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:53:55 power sudo[3803146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:55 power sudo[3803146]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:55 power sudo[3803159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DomainInfo single_domain_data domain=elektrotehnika-inzinering.mk return_https_redirect_status=1 --output=json'
Sep  8 04:53:55 power sudo[3803159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:55 power sudo[3803159]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:55 power sudo[3803166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot Mime list_redirects --output=json'
Sep  8 04:53:55 power sudo[3803166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:55 power sudo[3803166]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:57 power sudo[3803248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy is_directory_protected dir=/home/elektrot/public_html/wp --output=json'
Sep  8 04:53:57 power sudo[3803248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:57 power sudo[3803248]: pam_unix(sudo:session): session closed for user root
Sep  8 04:53:57 power sudo[3803254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy list_users dir=/home/elektrot/public_html/wp --output=json'
Sep  8 04:53:57 power sudo[3803254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:53:57 power sudo[3803254]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:02 power sudo[3803456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:54:02 power sudo[3803456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:03 power sudo[3803456]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:03 power sudo[3803462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep  8 04:54:03 power sudo[3803462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:03 power sudo[3803462]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:03 power sudo[3803471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:54:03 power sudo[3803471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:03 power sudo[3803471]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:04 power sudo[3803486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=enaspot.com return_https_redirect_status=1 --output=json'
Sep  8 04:54:04 power sudo[3803486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:04 power sudo[3803486]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:06 power sudo[3803578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/public_html --output=json'
Sep  8 04:54:06 power sudo[3803578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:06 power sudo[3803578]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:10 power sudo[3803789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep  8 04:54:10 power sudo[3803789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:10 power sudo[3803789]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:10 power sudo[3803798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enochmk --output=json'
Sep  8 04:54:10 power sudo[3803798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:10 power sudo[3803798]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:17 power sudo[3803905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:54:17 power sudo[3803905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:17 power sudo[3803905]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:17 power sudo[3803918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enochmk --user-current --json'
Sep  8 04:54:17 power sudo[3803918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:17 power sudo[3803918]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:17 power sudo[3803946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk LangPHP php_get_vhost_versions --output=json'
Sep  8 04:54:17 power sudo[3803946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:17 power sudo[3803946]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:17 power sudo[3803968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:54:17 power sudo[3803968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:17 power sudo[3803968]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:18 power sudo[3804016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DomainInfo single_domain_data domain=enoch.mk return_https_redirect_status=1 --output=json'
Sep  8 04:54:18 power sudo[3804016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:18 power sudo[3804016]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:18 power sudo[3804023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk Mime list_redirects --output=json'
Sep  8 04:54:18 power sudo[3804023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:18 power sudo[3804023]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:22 power sudo[3804125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DirectoryPrivacy is_directory_protected dir=/home/enochmk/public_html --output=json'
Sep  8 04:54:22 power sudo[3804125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:22 power sudo[3804125]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:23 power sudo[3804183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:54:23 power sudo[3804183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:23 power sudo[3804183]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:23 power sudo[3804188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 04:54:23 power sudo[3804188]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 04:54:23 power sudo[3804188]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 04:54:23 power sudo[3804188]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 04:54:23 power sudo[3804188]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:54:23 power sudo[3804188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:23 power sudo[3804188]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:23 power sudo[3804193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 04:54:23 power sudo[3804193]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 04:54:23 power sudo[3804193]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 04:54:23 power sudo[3804193]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 04:54:23 power sudo[3804193]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:54:23 power sudo[3804193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:23 power sudo[3804193]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:25 power sudo[3804296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:54:25 power sudo[3804296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:25 power sudo[3804296]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:25 power sudo[3804301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 04:54:25 power sudo[3804301]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 04:54:25 power sudo[3804301]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 04:54:25 power sudo[3804301]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 04:54:25 power sudo[3804301]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:54:25 power sudo[3804301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:25 power sudo[3804301]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:25 power sudo[3804306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 04:54:25 power sudo[3804306]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 04:54:25 power sudo[3804306]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 04:54:25 power sudo[3804306]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 04:54:25 power sudo[3804306]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:54:25 power sudo[3804306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:25 power sudo[3804306]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:29 power sudo[3804407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/equip.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:54:29 power sudo[3804407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:29 power sudo[3804407]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:29 power sudo[3804414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  8 04:54:29 power sudo[3804414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:29 power sudo[3804414]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:29 power sudo[3804419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:54:29 power sudo[3804419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:29 power sudo[3804419]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:30 power sudo[3804441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=equip.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 04:54:30 power sudo[3804441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:30 power sudo[3804441]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:32 power sudo[3804527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/equip.cetplatform.mk --output=json'
Sep  8 04:54:32 power sudo[3804527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:32 power sudo[3804527]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:36 power sudo[3804723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep  8 04:54:36 power sudo[3804723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:36 power sudo[3804723]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:36 power sudo[3804732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eurofarm --output=json'
Sep  8 04:54:36 power sudo[3804732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:36 power sudo[3804732]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:44 power sudo[3804877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm /bin/sh -c 'cd /home/eurofarm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:54:44 power sudo[3804877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:44 power sudo[3804877]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:44 power sudo[3804883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eurofarm --user-current --json'
Sep  8 04:54:44 power sudo[3804883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:44 power sudo[3804883]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:44 power sudo[3804901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm LangPHP php_get_vhost_versions --output=json'
Sep  8 04:54:44 power sudo[3804901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:44 power sudo[3804901]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:44 power sudo[3804906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:54:44 power sudo[3804906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:44 power sudo[3804906]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:45 power sudo[3804931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DomainInfo single_domain_data domain=eurofarm.com.mk return_https_redirect_status=1 --output=json'
Sep  8 04:54:45 power sudo[3804931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:45 power sudo[3804931]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:45 power sudo[3804938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm Mime list_redirects --output=json'
Sep  8 04:54:45 power sudo[3804938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:45 power sudo[3804938]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:50 power sudo[3805081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DirectoryPrivacy is_directory_protected dir=/home/eurofarm/public_html --output=json'
Sep  8 04:54:50 power sudo[3805081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:50 power sudo[3805081]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:53 power sudo[3805274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep  8 04:54:53 power sudo[3805274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:53 power sudo[3805274]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:53 power sudo[3805279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=euromaki --output=json'
Sep  8 04:54:53 power sudo[3805279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:53 power sudo[3805279]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:57 power sudo[3805383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki /bin/sh -c 'cd /home/euromaki/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:54:57 power sudo[3805383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:57 power sudo[3805383]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:57 power sudo[3805389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user euromaki --user-current --json'
Sep  8 04:54:57 power sudo[3805389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:58 power sudo[3805389]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:58 power sudo[3805395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki LangPHP php_get_vhost_versions --output=json'
Sep  8 04:54:58 power sudo[3805395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:58 power sudo[3805395]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:58 power sudo[3805401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:54:58 power sudo[3805401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:58 power sudo[3805401]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:58 power sudo[3805425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DomainInfo single_domain_data domain=euromakinsurance.mk return_https_redirect_status=1 --output=json'
Sep  8 04:54:58 power sudo[3805425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:58 power sudo[3805425]: pam_unix(sudo:session): session closed for user root
Sep  8 04:54:58 power sudo[3805431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki Mime list_redirects --output=json'
Sep  8 04:54:58 power sudo[3805431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:54:58 power sudo[3805431]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:01 power systemd[3805571]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 04:55:03 power sudo[3805652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DirectoryPrivacy is_directory_protected dir=/home/euromaki/public_html --output=json'
Sep  8 04:55:03 power sudo[3805652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:03 power sudo[3805652]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:06 power sudo[3805857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep  8 04:55:06 power sudo[3805857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:06 power sudo[3805857]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:06 power sudo[3805872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evberasm --output=json'
Sep  8 04:55:06 power sudo[3805872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:06 power sudo[3805872]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:14 power sudo[3805999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm /bin/sh -c 'cd /home/evberasm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:55:14 power sudo[3805999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:14 power sudo[3805999]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:14 power sudo[3806007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evberasm --user-current --json'
Sep  8 04:55:14 power sudo[3806007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:14 power sudo[3806007]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:14 power sudo[3806017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm LangPHP php_get_vhost_versions --output=json'
Sep  8 04:55:14 power sudo[3806017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:14 power sudo[3806017]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:14 power sudo[3806022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:55:14 power sudo[3806022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:14 power sudo[3806022]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:14 power sudo[3806037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DomainInfo single_domain_data domain=evberasmusplus.com.mk return_https_redirect_status=1 --output=json'
Sep  8 04:55:14 power sudo[3806037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:15 power sudo[3806037]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:15 power sudo[3806044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm Mime list_redirects --output=json'
Sep  8 04:55:15 power sudo[3806044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:15 power sudo[3806044]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:18 power sudo[3806205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DirectoryPrivacy is_directory_protected dir=/home/evberasm/public_html/wp --output=json'
Sep  8 04:55:18 power sudo[3806205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:18 power sudo[3806205]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:22 power sudo[3806401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep  8 04:55:22 power sudo[3806401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:22 power sudo[3806401]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:22 power sudo[3806407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evolvepl --output=json'
Sep  8 04:55:22 power sudo[3806407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:22 power sudo[3806407]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:27 power sudo[3806512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:55:27 power sudo[3806512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:27 power sudo[3806512]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:27 power sudo[3806518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evolvepl --user-current --json'
Sep  8 04:55:27 power sudo[3806518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:27 power sudo[3806518]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:27 power sudo[3806525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl LangPHP php_get_vhost_versions --output=json'
Sep  8 04:55:27 power sudo[3806525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:27 power sudo[3806525]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:27 power sudo[3806530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:55:27 power sudo[3806530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:27 power sudo[3806530]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:28 power sudo[3806547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DomainInfo single_domain_data domain=evolveplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 04:55:28 power sudo[3806547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:28 power sudo[3806547]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:28 power sudo[3806555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl Mime list_redirects --output=json'
Sep  8 04:55:28 power sudo[3806555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:28 power sudo[3806555]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:31 power sudo[3806636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DirectoryPrivacy is_directory_protected dir=/home/evolvepl/public_html --output=json'
Sep  8 04:55:31 power sudo[3806636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:31 power sudo[3806636]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:32 power sudo[3806702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:55:32 power sudo[3806702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:32 power sudo[3806702]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:32 power sudo[3806707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:55:32 power sudo[3806707]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:55:32 power sudo[3806707]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:55:32 power sudo[3806707]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:55:32 power sudo[3806707]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:55:32 power sudo[3806707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:32 power sudo[3806707]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:32 power sudo[3806712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:55:32 power sudo[3806712]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:55:32 power sudo[3806712]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:55:32 power sudo[3806712]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:55:32 power sudo[3806712]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:55:32 power sudo[3806712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:33 power sudo[3806712]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:33 power sudo[3806718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:55:33 power sudo[3806718]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:55:33 power sudo[3806718]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:55:33 power sudo[3806718]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:55:33 power sudo[3806718]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:55:33 power sudo[3806718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:33 power sudo[3806718]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:35 power sudo[3806840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:55:35 power sudo[3806840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:35 power sudo[3806840]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:35 power sudo[3806845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:55:35 power sudo[3806845]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:55:35 power sudo[3806845]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:55:35 power sudo[3806845]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:55:35 power sudo[3806845]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:55:35 power sudo[3806845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:35 power sudo[3806845]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:35 power sudo[3806850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:55:35 power sudo[3806850]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:55:35 power sudo[3806850]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:55:35 power sudo[3806850]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:55:35 power sudo[3806850]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:55:35 power sudo[3806850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:35 power sudo[3806850]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:35 power sudo[3806855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:55:35 power sudo[3806855]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:55:35 power sudo[3806855]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:55:35 power sudo[3806855]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:55:35 power sudo[3806855]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:55:35 power sudo[3806855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:35 power sudo[3806855]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:40 power sudo[3806983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/ey.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:55:40 power sudo[3806983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:40 power sudo[3806983]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:40 power sudo[3806992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  8 04:55:40 power sudo[3806992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:40 power sudo[3806992]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:40 power sudo[3807002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:55:40 power sudo[3807002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:40 power sudo[3807002]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:40 power sudo[3807020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=ey.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 04:55:40 power sudo[3807020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:41 power sudo[3807020]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:43 power sudo[3807105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/ey.cetplatform.mk --output=json'
Sep  8 04:55:43 power sudo[3807105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:43 power sudo[3807105]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:47 power sudo[3807313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep  8 04:55:47 power sudo[3807313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:47 power sudo[3807313]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:47 power sudo[3807321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=holiyayt --output=json'
Sep  8 04:55:47 power sudo[3807321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:47 power sudo[3807321]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:50 power sudo[3807414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/fitkit.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:55:50 power sudo[3807414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:50 power sudo[3807414]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:50 power sudo[3807420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep  8 04:55:50 power sudo[3807420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:50 power sudo[3807420]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:50 power sudo[3807425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt LangPHP php_get_vhost_versions --output=json'
Sep  8 04:55:50 power sudo[3807425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:51 power sudo[3807425]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:51 power sudo[3807430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:55:51 power sudo[3807430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:51 power sudo[3807430]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:51 power sudo[3807443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=fitkit.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep  8 04:55:51 power sudo[3807443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:51 power sudo[3807443]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:51 power sudo[3807452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt Mime list_redirects --output=json'
Sep  8 04:55:51 power sudo[3807452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:51 power sudo[3807452]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:52 power sudo[3807515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/fitkit.holiyaytravel.com --output=json'
Sep  8 04:55:52 power sudo[3807515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:52 power sudo[3807515]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:56 power sudo[3807702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep  8 04:55:56 power sudo[3807702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:56 power sudo[3807702]: pam_unix(sudo:session): session closed for user root
Sep  8 04:55:56 power sudo[3807708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=v5srybi9dcdx --output=json'
Sep  8 04:55:56 power sudo[3807708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:55:56 power sudo[3807708]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:00 power sudo[3807797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/flowoptstudio.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:56:00 power sudo[3807797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:00 power sudo[3807797]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:00 power sudo[3807804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep  8 04:56:00 power sudo[3807804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:00 power sudo[3807804]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:00 power sudo[3807813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx LangPHP php_get_vhost_versions --output=json'
Sep  8 04:56:00 power sudo[3807813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:00 power sudo[3807813]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:00 power sudo[3807818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:56:00 power sudo[3807818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:00 power sudo[3807818]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:01 power sudo[3807833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=flowoptstudio.com return_https_redirect_status=1 --output=json'
Sep  8 04:56:01 power sudo[3807833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:01 power sudo[3807833]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:01 power sudo[3807846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx Mime list_redirects --output=json'
Sep  8 04:56:01 power sudo[3807846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:01 power sudo[3807846]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:03 power sudo[3807915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/flowoptstudio.com --output=json'
Sep  8 04:56:03 power sudo[3807915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:03 power sudo[3807915]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:07 power sudo[3808116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep  8 04:56:07 power sudo[3808116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:07 power sudo[3808116]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:07 power sudo[3808121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=folklore --output=json'
Sep  8 04:56:07 power sudo[3808121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:07 power sudo[3808121]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:09 power sudo[3808190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:56:09 power sudo[3808190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:09 power sudo[3808190]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:09 power sudo[3808196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user folklore --user-current --json'
Sep  8 04:56:09 power sudo[3808196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:10 power sudo[3808196]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:10 power sudo[3808203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore LangPHP php_get_vhost_versions --output=json'
Sep  8 04:56:10 power sudo[3808203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:10 power sudo[3808203]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:10 power sudo[3808209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:56:10 power sudo[3808209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:10 power sudo[3808209]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:10 power sudo[3808225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DomainInfo single_domain_data domain=folklorefestivals.com return_https_redirect_status=1 --output=json'
Sep  8 04:56:10 power sudo[3808225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:10 power sudo[3808225]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:10 power sudo[3808231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore Mime list_redirects --output=json'
Sep  8 04:56:10 power sudo[3808231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:11 power sudo[3808231]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:12 power sudo[3808310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DirectoryPrivacy is_directory_protected dir=/home/folklore/public_html --output=json'
Sep  8 04:56:12 power sudo[3808310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:13 power sudo[3808310]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:13 power sudo[3808362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:56:13 power sudo[3808362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:13 power sudo[3808362]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:13 power sudo[3808367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:56:13 power sudo[3808367]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:56:13 power sudo[3808367]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:56:13 power sudo[3808367]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:56:13 power sudo[3808367]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:56:13 power sudo[3808367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:13 power sudo[3808367]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:13 power sudo[3808372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:56:13 power sudo[3808372]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:56:13 power sudo[3808372]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:56:13 power sudo[3808372]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:56:13 power sudo[3808372]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:56:13 power sudo[3808372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:14 power sudo[3808372]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:14 power sudo[3808377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:56:14 power sudo[3808377]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:56:14 power sudo[3808377]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:56:14 power sudo[3808377]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:56:14 power sudo[3808377]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:56:14 power sudo[3808377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:14 power sudo[3808377]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:15 power sudo[3808459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:56:15 power sudo[3808459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:15 power sudo[3808459]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:15 power sudo[3808466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:56:15 power sudo[3808466]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:56:15 power sudo[3808466]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:56:15 power sudo[3808466]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:56:15 power sudo[3808466]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:56:15 power sudo[3808466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:15 power sudo[3808466]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:15 power sudo[3808471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:56:15 power sudo[3808471]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:56:15 power sudo[3808471]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:56:15 power sudo[3808471]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:56:15 power sudo[3808471]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:56:15 power sudo[3808471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:15 power sudo[3808471]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:15 power sudo[3808477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:56:15 power sudo[3808477]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:56:15 power sudo[3808477]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:56:15 power sudo[3808477]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:56:15 power sudo[3808477]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:56:15 power sudo[3808477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:15 power sudo[3808477]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:16 power sudo[3808503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep  8 04:56:16 power sudo[3808503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:16 power sudo[3808503]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:16 power sudo[3808512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=forzares --output=json'
Sep  8 04:56:16 power sudo[3808512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:16 power sudo[3808512]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:21 power sudo[3808678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares /bin/sh -c 'cd /home/forzares/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:56:21 power sudo[3808678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:21 power sudo[3808678]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:21 power sudo[3808684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user forzares --user-current --json'
Sep  8 04:56:21 power sudo[3808684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:22 power sudo[3808684]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:22 power sudo[3808700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares LangPHP php_get_vhost_versions --output=json'
Sep  8 04:56:22 power sudo[3808700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:22 power sudo[3808700]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:22 power sudo[3808717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:56:22 power sudo[3808717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:22 power sudo[3808717]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:22 power sudo[3808805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DomainInfo single_domain_data domain=forzarestaurant.com.mk return_https_redirect_status=1 --output=json'
Sep  8 04:56:22 power sudo[3808805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:23 power sudo[3808805]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:23 power sudo[3808816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares Mime list_redirects --output=json'
Sep  8 04:56:23 power sudo[3808816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:23 power sudo[3808816]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:26 power sudo[3808950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DirectoryPrivacy is_directory_protected dir=/home/forzares/public_html --output=json'
Sep  8 04:56:26 power sudo[3808950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:26 power sudo[3808950]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:29 power sudo[3809127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep  8 04:56:29 power sudo[3809127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:29 power sudo[3809127]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:29 power sudo[3809132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=getaldus --output=json'
Sep  8 04:56:29 power sudo[3809132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:29 power sudo[3809132]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:32 power sudo[3809185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus /bin/sh -c 'cd /home/getaldus/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:56:32 power sudo[3809185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:32 power sudo[3809185]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:32 power sudo[3809191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user getaldus --user-current --json'
Sep  8 04:56:32 power sudo[3809191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:32 power sudo[3809191]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:32 power sudo[3809199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus LangPHP php_get_vhost_versions --output=json'
Sep  8 04:56:32 power sudo[3809199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:32 power sudo[3809199]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:32 power sudo[3809205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:56:32 power sudo[3809205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:32 power sudo[3809205]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:32 power sudo[3809222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DomainInfo single_domain_data domain=getaldus.mk return_https_redirect_status=1 --output=json'
Sep  8 04:56:32 power sudo[3809222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:33 power sudo[3809222]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:33 power sudo[3809230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus Mime list_redirects --output=json'
Sep  8 04:56:33 power sudo[3809230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:33 power sudo[3809230]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:34 power sudo[3809306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DirectoryPrivacy is_directory_protected dir=/home/getaldus/public_html --output=json'
Sep  8 04:56:34 power sudo[3809306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:34 power sudo[3809306]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:38 power sudo[3809506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep  8 04:56:38 power sudo[3809506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:38 power sudo[3809506]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:38 power sudo[3809514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gocruise --output=json'
Sep  8 04:56:38 power sudo[3809514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:38 power sudo[3809514]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:43 power sudo[3809596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise /bin/sh -c 'cd /home/gocruise/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:56:43 power sudo[3809596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:43 power sudo[3809596]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:43 power sudo[3809602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gocruise --user-current --json'
Sep  8 04:56:43 power sudo[3809602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:43 power sudo[3809602]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:43 power sudo[3809609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise LangPHP php_get_vhost_versions --output=json'
Sep  8 04:56:44 power sudo[3809609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:44 power sudo[3809609]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:44 power sudo[3809615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:56:44 power sudo[3809615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:44 power sudo[3809615]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:44 power sudo[3809636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DomainInfo single_domain_data domain=gocruise.mk return_https_redirect_status=1 --output=json'
Sep  8 04:56:44 power sudo[3809636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:44 power sudo[3809636]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:44 power sudo[3809643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise Mime list_redirects --output=json'
Sep  8 04:56:44 power sudo[3809643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:44 power sudo[3809643]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:47 power sudo[3809732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DirectoryPrivacy is_directory_protected dir=/home/gocruise/public_html --output=json'
Sep  8 04:56:48 power sudo[3809732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:48 power sudo[3809732]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:51 power sudo[3809945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep  8 04:56:51 power sudo[3809945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:51 power sudo[3809945]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:51 power sudo[3809956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gogovan1 --output=json'
Sep  8 04:56:51 power sudo[3809956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:51 power sudo[3809956]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:55 power sudo[3810046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 /bin/sh -c 'cd /home/gogovan1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:56:55 power sudo[3810046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:55 power sudo[3810046]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:55 power sudo[3810053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gogovan1 --user-current --json'
Sep  8 04:56:55 power sudo[3810053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:55 power sudo[3810053]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:55 power sudo[3810064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 LangPHP php_get_vhost_versions --output=json'
Sep  8 04:56:56 power sudo[3810064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:56 power sudo[3810064]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:56 power sudo[3810069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:56:56 power sudo[3810069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:56 power sudo[3810069]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:56 power sudo[3810087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DomainInfo single_domain_data domain=gogovan.mk return_https_redirect_status=1 --output=json'
Sep  8 04:56:56 power sudo[3810087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:56 power sudo[3810087]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:56 power sudo[3810094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 Mime list_redirects --output=json'
Sep  8 04:56:56 power sudo[3810094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:56 power sudo[3810094]: pam_unix(sudo:session): session closed for user root
Sep  8 04:56:59 power sudo[3810185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DirectoryPrivacy is_directory_protected dir=/home/gogovan1/public_html --output=json'
Sep  8 04:56:59 power sudo[3810185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:56:59 power sudo[3810185]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:03 power sudo[3810424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep  8 04:57:03 power sudo[3810424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:03 power sudo[3810424]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:03 power sudo[3810429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=golakkom --output=json'
Sep  8 04:57:03 power sudo[3810429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:03 power sudo[3810429]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:10 power sudo[3810557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:57:10 power sudo[3810557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:10 power sudo[3810557]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:10 power sudo[3810563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user golakkom --user-current --json'
Sep  8 04:57:10 power sudo[3810563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:10 power sudo[3810563]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:10 power sudo[3810577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom LangPHP php_get_vhost_versions --output=json'
Sep  8 04:57:10 power sudo[3810577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:11 power sudo[3810577]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:11 power sudo[3810583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:57:11 power sudo[3810583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:11 power sudo[3810583]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:11 power sudo[3810603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DomainInfo single_domain_data domain=golak-komerc.mk return_https_redirect_status=1 --output=json'
Sep  8 04:57:11 power sudo[3810603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:11 power sudo[3810603]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:11 power sudo[3810609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom Mime list_redirects --output=json'
Sep  8 04:57:11 power sudo[3810609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:11 power sudo[3810609]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:16 power sudo[3810710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DirectoryPrivacy is_directory_protected dir=/home/golakkom/public_html --output=json'
Sep  8 04:57:16 power sudo[3810710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:16 power sudo[3810710]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:16 power sudo[3810760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:57:16 power sudo[3810760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:16 power sudo[3810760]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:16 power sudo[3810765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:57:16 power sudo[3810765]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:57:16 power sudo[3810765]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:57:16 power sudo[3810765]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:57:16 power sudo[3810765]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:57:16 power sudo[3810765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:16 power sudo[3810765]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:16 power sudo[3810770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:57:16 power sudo[3810770]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:57:16 power sudo[3810770]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:57:16 power sudo[3810770]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:57:16 power sudo[3810770]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:57:16 power sudo[3810770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:17 power sudo[3810770]: pam_unix(sudo:session): session closed for user root
Sep  8 04:57:17 power sudo[3810777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:57:17 power sudo[3810777]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:57:17 power sudo[3810777]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:57:17 power sudo[3810777]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:57:17 power sudo[3810777]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:57:17 power sudo[3810777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:57:17 power sudo[3810777]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:15 power sudo[3811641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:58:15 power sudo[3811641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:15 power sudo[3811641]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:15 power sudo[3811651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  8 04:58:15 power sudo[3811651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:15 power sudo[3811651]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:15 power sudo[3811658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:58:15 power sudo[3811658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:15 power sudo[3811658]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:16 power sudo[3811690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=goodnews.mk return_https_redirect_status=1 --output=json'
Sep  8 04:58:16 power sudo[3811690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:16 power sudo[3811690]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:19 power sudo[3811801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/public_html --output=json'
Sep  8 04:58:19 power sudo[3811801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:19 power sudo[3811801]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:24 power sudo[3812107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep  8 04:58:24 power sudo[3812107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:24 power sudo[3812107]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:24 power sudo[3812122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=herbalpl --output=json'
Sep  8 04:58:24 power sudo[3812122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:24 power sudo[3812122]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:30 power sudo[3812243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl /bin/sh -c 'cd /home/herbalpl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:58:30 power sudo[3812243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:30 power sudo[3812243]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:30 power sudo[3812250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user herbalpl --user-current --json'
Sep  8 04:58:30 power sudo[3812250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:30 power sudo[3812250]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:30 power sudo[3812258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl LangPHP php_get_vhost_versions --output=json'
Sep  8 04:58:30 power sudo[3812258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:30 power sudo[3812258]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:30 power sudo[3812265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:58:30 power sudo[3812265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:30 power sudo[3812265]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:31 power sudo[3812282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DomainInfo single_domain_data domain=herbalplus.mk return_https_redirect_status=1 --output=json'
Sep  8 04:58:31 power sudo[3812282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:31 power sudo[3812282]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:31 power sudo[3812288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl Mime list_redirects --output=json'
Sep  8 04:58:31 power sudo[3812288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:31 power sudo[3812288]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:35 power sudo[3812390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DirectoryPrivacy is_directory_protected dir=/home/herbalpl/public_html --output=json'
Sep  8 04:58:35 power sudo[3812390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:35 power sudo[3812390]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:43 power sudo[3812734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/hero.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:58:43 power sudo[3812734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:44 power sudo[3812734]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:44 power sudo[3812741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  8 04:58:44 power sudo[3812741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:44 power sudo[3812741]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:44 power sudo[3812751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:58:44 power sudo[3812751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:44 power sudo[3812751]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:44 power sudo[3812765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=hero.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 04:58:44 power sudo[3812765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:44 power sudo[3812765]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:47 power sudo[3812865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/hero.cetplatform.mk --output=json'
Sep  8 04:58:47 power sudo[3812865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:47 power sudo[3812865]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:54 power sudo[3813164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:58:54 power sudo[3813164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:54 power sudo[3813164]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:54 power sudo[3813171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep  8 04:58:54 power sudo[3813171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:54 power sudo[3813171]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:54 power sudo[3813183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:58:54 power sudo[3813183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:54 power sudo[3813183]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:55 power sudo[3813207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep  8 04:58:55 power sudo[3813207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:56 power sudo[3813207]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:58 power sudo[3813296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/public_html --output=json'
Sep  8 04:58:58 power sudo[3813296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:58 power sudo[3813296]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:59 power sudo[3813351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:58:59 power sudo[3813351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:59 power sudo[3813351]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:59 power sudo[3813356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:58:59 power sudo[3813356]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:58:59 power sudo[3813356]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:58:59 power sudo[3813356]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:58:59 power sudo[3813356]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:58:59 power sudo[3813356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:58:59 power sudo[3813356]: pam_unix(sudo:session): session closed for user root
Sep  8 04:58:59 power sudo[3813361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:58:59 power sudo[3813361]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:58:59 power sudo[3813361]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:58:59 power sudo[3813361]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:58:59 power sudo[3813361]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:58:59 power sudo[3813361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:00 power sudo[3813361]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:00 power sudo[3813376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:59:00 power sudo[3813376]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:59:00 power sudo[3813376]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:59:00 power sudo[3813376]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:59:00 power sudo[3813376]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:59:00 power sudo[3813376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:00 power sudo[3813376]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:01 power sudo[3813464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:59:01 power sudo[3813464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:01 power sudo[3813464]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:01 power sudo[3813469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 04:59:01 power sudo[3813469]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 04:59:01 power sudo[3813469]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 04:59:01 power sudo[3813469]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 04:59:01 power sudo[3813469]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:59:01 power sudo[3813469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:01 power sudo[3813469]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:01 power sudo[3813475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:59:01 power sudo[3813475]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:59:01 power sudo[3813475]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:59:01 power sudo[3813475]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:59:01 power sudo[3813475]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:59:01 power sudo[3813475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:02 power sudo[3813475]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:02 power sudo[3813485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 04:59:02 power sudo[3813485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 04:59:02 power sudo[3813485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 04:59:02 power sudo[3813485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 04:59:02 power sudo[3813485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 04:59:02 power sudo[3813485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:02 power sudo[3813485]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:02 power sudo[3813515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep  8 04:59:02 power sudo[3813515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:03 power sudo[3813515]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:03 power sudo[3813520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vezilkac --output=json'
Sep  8 04:59:03 power sudo[3813520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:03 power sudo[3813520]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:08 power sudo[3813606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/vezden.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:59:08 power sudo[3813606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:08 power sudo[3813606]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:08 power sudo[3813615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  8 04:59:08 power sudo[3813615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:08 power sudo[3813615]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:08 power sudo[3813621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac LangPHP php_get_vhost_versions --output=json'
Sep  8 04:59:08 power sudo[3813621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:08 power sudo[3813621]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:08 power sudo[3813626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:59:08 power sudo[3813626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:08 power sudo[3813626]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:08 power sudo[3813643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezden.mk return_https_redirect_status=1 --output=json'
Sep  8 04:59:08 power sudo[3813643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:08 power sudo[3813643]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:08 power sudo[3813649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Mime list_redirects --output=json'
Sep  8 04:59:08 power sudo[3813649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:09 power sudo[3813649]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:11 power sudo[3813744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/vezden.mk --output=json'
Sep  8 04:59:11 power sudo[3813744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:11 power sudo[3813744]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:27 power sudo[3814262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/metatet && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:59:27 power sudo[3814262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:27 power sudo[3814262]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:27 power sudo[3814273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  8 04:59:27 power sudo[3814273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:27 power sudo[3814273]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:27 power sudo[3814281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:59:27 power sudo[3814281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:27 power sudo[3814281]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:27 power sudo[3814296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=metatet.com return_https_redirect_status=1 --output=json'
Sep  8 04:59:28 power sudo[3814296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:28 power sudo[3814296]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:34 power sudo[3814418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/metatet --output=json'
Sep  8 04:59:34 power sudo[3814418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:34 power sudo[3814418]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:50 power sudo[3814829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 04:59:50 power sudo[3814829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:50 power sudo[3814829]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:50 power sudo[3814835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  8 04:59:50 power sudo[3814835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:51 power sudo[3814835]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:51 power sudo[3814845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 04:59:51 power sudo[3814845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:51 power sudo[3814845]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:51 power sudo[3814863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezilka.com return_https_redirect_status=1 --output=json'
Sep  8 04:59:51 power sudo[3814863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:51 power sudo[3814863]: pam_unix(sudo:session): session closed for user root
Sep  8 04:59:57 power sudo[3814998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html --output=json'
Sep  8 04:59:57 power sudo[3814998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 04:59:58 power sudo[3814998]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:01 power systemd[3815363]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 05:00:01 power systemd[3815364]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 05:00:01 power systemd[3815365]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 05:00:01 power systemd[3815361]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:00:06 power sudo[3815746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/sorabotnici && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:00:06 power sudo[3815746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:06 power sudo[3815746]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:06 power sudo[3815752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  8 05:00:06 power sudo[3815752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:06 power sudo[3815752]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:06 power sudo[3815764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:00:06 power sudo[3815764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:06 power sudo[3815764]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:06 power sudo[3815778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=sorabotnici.vezilka.com return_https_redirect_status=1 --output=json'
Sep  8 05:00:06 power sudo[3815778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:06 power sudo[3815778]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:09 power sudo[3815870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/sorabotnici --output=json'
Sep  8 05:00:09 power sudo[3815870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:09 power sudo[3815870]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:17 power sudo[3816331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/pp && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:00:17 power sudo[3816331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:17 power sudo[3816331]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:17 power sudo[3816337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  8 05:00:17 power sudo[3816337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:17 power sudo[3816337]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:17 power sudo[3816347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:00:17 power sudo[3816347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:17 power sudo[3816347]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:17 power sudo[3816364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=pp.denicija.mk return_https_redirect_status=1 --output=json'
Sep  8 05:00:17 power sudo[3816364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:17 power sudo[3816364]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:20 power sudo[3816615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/pp --output=json'
Sep  8 05:00:20 power sudo[3816615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:20 power sudo[3816615]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:24 power sudo[3816962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep  8 05:00:24 power sudo[3816962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:24 power sudo[3816962]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:24 power sudo[3816971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=madzomk --output=json'
Sep  8 05:00:24 power sudo[3816971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:24 power sudo[3816971]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:29 power sudo[3817074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk /bin/sh -c 'cd /home/madzomk/hotelcitypark.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:00:29 power sudo[3817074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:29 power sudo[3817074]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:29 power sudo[3817080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user madzomk --user-current --json'
Sep  8 05:00:29 power sudo[3817080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:30 power sudo[3817080]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:30 power sudo[3817090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk LangPHP php_get_vhost_versions --output=json'
Sep  8 05:00:30 power sudo[3817090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:30 power sudo[3817090]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:30 power sudo[3817096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:00:30 power sudo[3817096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:30 power sudo[3817096]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:30 power sudo[3817120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DomainInfo single_domain_data domain=hotelcitypark.mk return_https_redirect_status=1 --output=json'
Sep  8 05:00:30 power sudo[3817120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:30 power sudo[3817120]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:30 power sudo[3817127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk Mime list_redirects --output=json'
Sep  8 05:00:30 power sudo[3817127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:30 power sudo[3817127]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:34 power sudo[3817233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DirectoryPrivacy is_directory_protected dir=/home/madzomk/hotelcitypark.mk --output=json'
Sep  8 05:00:34 power sudo[3817233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:34 power sudo[3817233]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:38 power sudo[3817450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep  8 05:00:38 power sudo[3817450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:38 power sudo[3817450]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:38 power sudo[3817461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=imdskopj --output=json'
Sep  8 05:00:38 power sudo[3817461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:38 power sudo[3817461]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:42 power sudo[3817542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj /bin/sh -c 'cd /home/imdskopj/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:00:42 power sudo[3817542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:42 power sudo[3817542]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:42 power sudo[3817551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user imdskopj --user-current --json'
Sep  8 05:00:42 power sudo[3817551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:42 power sudo[3817551]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:42 power sudo[3817556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj LangPHP php_get_vhost_versions --output=json'
Sep  8 05:00:42 power sudo[3817556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:42 power sudo[3817556]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:42 power sudo[3817561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:00:42 power sudo[3817561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:42 power sudo[3817561]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:42 power sudo[3817575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DomainInfo single_domain_data domain=imdskopje.mk return_https_redirect_status=1 --output=json'
Sep  8 05:00:42 power sudo[3817575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:43 power sudo[3817575]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:43 power sudo[3817581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj Mime list_redirects --output=json'
Sep  8 05:00:43 power sudo[3817581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:43 power sudo[3817581]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:45 power sudo[3817659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DirectoryPrivacy is_directory_protected dir=/home/imdskopj/public_html --output=json'
Sep  8 05:00:45 power sudo[3817659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:45 power sudo[3817659]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:49 power sudo[3817891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep  8 05:00:49 power sudo[3817891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:49 power sudo[3817891]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:49 power sudo[3817900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=infopor1 --output=json'
Sep  8 05:00:49 power sudo[3817900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:49 power sudo[3817900]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:53 power sudo[3817987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:00:53 power sudo[3817987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:53 power sudo[3817987]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:53 power sudo[3817993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user infopor1 --user-current --json'
Sep  8 05:00:53 power sudo[3817993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:54 power sudo[3817993]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:54 power sudo[3818002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 LangPHP php_get_vhost_versions --output=json'
Sep  8 05:00:54 power sudo[3818002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:54 power sudo[3818002]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:54 power sudo[3818007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:00:54 power sudo[3818007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:54 power sudo[3818007]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:54 power sudo[3818028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DomainInfo single_domain_data domain=infoportal.mk return_https_redirect_status=1 --output=json'
Sep  8 05:00:54 power sudo[3818028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:54 power sudo[3818028]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:54 power sudo[3818036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 Mime list_redirects --output=json'
Sep  8 05:00:54 power sudo[3818036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:54 power sudo[3818036]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:57 power sudo[3818125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DirectoryPrivacy is_directory_protected dir=/home/infopor1/public_html --output=json'
Sep  8 05:00:57 power sudo[3818125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:57 power sudo[3818125]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:58 power sudo[3818183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:00:58 power sudo[3818183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:58 power sudo[3818183]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:58 power sudo[3818188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:00:58 power sudo[3818188]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:00:58 power sudo[3818188]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:00:58 power sudo[3818188]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:00:58 power sudo[3818188]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:00:58 power sudo[3818188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:58 power sudo[3818188]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:58 power sudo[3818193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:00:58 power sudo[3818193]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:00:58 power sudo[3818193]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:00:58 power sudo[3818193]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:00:58 power sudo[3818193]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:00:58 power sudo[3818193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:59 power sudo[3818193]: pam_unix(sudo:session): session closed for user root
Sep  8 05:00:59 power sudo[3818199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:00:59 power sudo[3818199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:00:59 power sudo[3818199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:00:59 power sudo[3818199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:00:59 power sudo[3818199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:00:59 power sudo[3818199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:00:59 power sudo[3818199]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:00 power sudo[3818306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:00 power sudo[3818306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:00 power sudo[3818306]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:00 power sudo[3818311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:01:00 power sudo[3818311]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:01:00 power sudo[3818311]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:01:00 power sudo[3818311]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:01:00 power sudo[3818311]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:00 power sudo[3818311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:00 power sudo[3818311]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:00 power sudo[3818316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:01:00 power sudo[3818316]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:01:00 power sudo[3818316]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:01:00 power sudo[3818316]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:01:00 power sudo[3818316]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:00 power sudo[3818316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:01 power sudo[3818316]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:01 power sudo[3818322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:01:01 power sudo[3818322]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:01:01 power sudo[3818322]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:01:01 power sudo[3818322]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:01:01 power sudo[3818322]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:01 power sudo[3818322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:01 power sudo[3818322]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:01 power sudo[3818361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep  8 05:01:01 power sudo[3818361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:01 power sudo[3818361]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:01 power sudo[3818384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=intelek1 --output=json'
Sep  8 05:01:01 power sudo[3818384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:02 power sudo[3818384]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:06 power sudo[3818482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:01:06 power sudo[3818482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:06 power sudo[3818482]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:06 power sudo[3818488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user intelek1 --user-current --json'
Sep  8 05:01:06 power sudo[3818488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:06 power sudo[3818488]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:06 power sudo[3818497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 LangPHP php_get_vhost_versions --output=json'
Sep  8 05:01:06 power sudo[3818497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:06 power sudo[3818497]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:06 power sudo[3818503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:01:06 power sudo[3818503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:06 power sudo[3818503]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:07 power sudo[3818526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DomainInfo single_domain_data domain=intelekt-bb.com return_https_redirect_status=1 --output=json'
Sep  8 05:01:07 power sudo[3818526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:07 power sudo[3818526]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:07 power sudo[3818532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 Mime list_redirects --output=json'
Sep  8 05:01:07 power sudo[3818532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:07 power sudo[3818532]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:10 power sudo[3818609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DirectoryPrivacy is_directory_protected dir=/home/intelek1/public_html --output=json'
Sep  8 05:01:10 power sudo[3818609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:10 power sudo[3818609]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:11 power sudo[3818673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:11 power sudo[3818673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:11 power sudo[3818673]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:11 power sudo[3818678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:01:11 power sudo[3818678]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:01:11 power sudo[3818678]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:01:11 power sudo[3818678]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:01:11 power sudo[3818678]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:11 power sudo[3818678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:11 power sudo[3818678]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:11 power sudo[3818683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:01:11 power sudo[3818683]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:01:11 power sudo[3818683]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:01:11 power sudo[3818683]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:01:11 power sudo[3818683]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:11 power sudo[3818683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:11 power sudo[3818683]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:11 power sudo[3818689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:01:11 power sudo[3818689]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:01:11 power sudo[3818689]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:01:11 power sudo[3818689]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:01:11 power sudo[3818689]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:11 power sudo[3818689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:11 power sudo[3818689]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:13 power sudo[3818791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:13 power sudo[3818791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:13 power sudo[3818791]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:13 power sudo[3818796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:01:13 power sudo[3818796]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:01:13 power sudo[3818796]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:01:13 power sudo[3818796]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:01:13 power sudo[3818796]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:13 power sudo[3818796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:13 power sudo[3818796]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:13 power sudo[3818801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:01:13 power sudo[3818801]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:01:13 power sudo[3818801]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:01:13 power sudo[3818801]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:01:13 power sudo[3818801]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:13 power sudo[3818801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:13 power sudo[3818801]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:13 power sudo[3818805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:01:13 power sudo[3818805]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:01:13 power sudo[3818805]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:01:13 power sudo[3818805]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:01:13 power sudo[3818805]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:01:13 power sudo[3818805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:13 power sudo[3818805]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:15 power sudo[3818876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=invoices.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep  8 05:01:15 power sudo[3818876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:15 power sudo[3818876]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:17 power sudo[3818906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/invoices.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:01:17 power sudo[3818906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:17 power sudo[3818906]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:17 power sudo[3818912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep  8 05:01:17 power sudo[3818912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:17 power sudo[3818912]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:17 power sudo[3818922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:01:17 power sudo[3818922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:17 power sudo[3818922]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:19 power sudo[3819011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/invoices.holiyaytravel.com --output=json'
Sep  8 05:01:19 power sudo[3819011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:19 power sudo[3819011]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:23 power sudo[3819251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep  8 05:01:23 power sudo[3819251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:23 power sudo[3819251]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:23 power sudo[3819278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jpparkin --output=json'
Sep  8 05:01:23 power sudo[3819278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:23 power sudo[3819278]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:26 power sudo[3819450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin /bin/sh -c 'cd /home/jpparkin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:01:26 power sudo[3819450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:26 power sudo[3819450]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:26 power sudo[3819463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jpparkin --user-current --json'
Sep  8 05:01:26 power sudo[3819463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:26 power sudo[3819463]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:26 power sudo[3819476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin LangPHP php_get_vhost_versions --output=json'
Sep  8 05:01:26 power sudo[3819476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:26 power sudo[3819476]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:26 power sudo[3819482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:01:26 power sudo[3819482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:26 power sudo[3819482]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:27 power sudo[3819496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DomainInfo single_domain_data domain=jpparkinzinegotino.mk return_https_redirect_status=1 --output=json'
Sep  8 05:01:27 power sudo[3819496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:27 power sudo[3819496]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:27 power sudo[3819506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin Mime list_redirects --output=json'
Sep  8 05:01:27 power sudo[3819506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:27 power sudo[3819506]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:29 power sudo[3819577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DirectoryPrivacy is_directory_protected dir=/home/jpparkin/public_html --output=json'
Sep  8 05:01:29 power sudo[3819577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:29 power sudo[3819577]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:32 power sudo[3819747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep  8 05:01:32 power sudo[3819747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:32 power sudo[3819747]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:32 power sudo[3819753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=karpospo --output=json'
Sep  8 05:01:32 power sudo[3819753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:32 power sudo[3819753]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:36 power sudo[3819846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo /bin/sh -c 'cd /home/karpospo/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:01:36 power sudo[3819846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:36 power sudo[3819846]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:36 power sudo[3819852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user karpospo --user-current --json'
Sep  8 05:01:36 power sudo[3819852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:37 power sudo[3819852]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:37 power sudo[3819861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo LangPHP php_get_vhost_versions --output=json'
Sep  8 05:01:37 power sudo[3819861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:37 power sudo[3819861]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:37 power sudo[3819866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:01:37 power sudo[3819866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:37 power sudo[3819866]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:37 power sudo[3819882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DomainInfo single_domain_data domain=karpospoliklinika.com.mk return_https_redirect_status=1 --output=json'
Sep  8 05:01:37 power sudo[3819882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:37 power sudo[3819882]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:37 power sudo[3819891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo Mime list_redirects --output=json'
Sep  8 05:01:37 power sudo[3819891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:37 power sudo[3819891]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:40 power sudo[3819982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DirectoryPrivacy is_directory_protected dir=/home/karpospo/public_html --output=json'
Sep  8 05:01:40 power sudo[3819982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:41 power sudo[3819982]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:47 power sudo[3820234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:01:47 power sudo[3820234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:47 power sudo[3820234]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:47 power sudo[3820240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  8 05:01:47 power sudo[3820240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:47 power sudo[3820240]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:47 power sudo[3820246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:01:47 power sudo[3820246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:47 power sudo[3820246]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:48 power sudo[3820262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=kaysharov.com return_https_redirect_status=1 --output=json'
Sep  8 05:01:48 power sudo[3820262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:48 power sudo[3820262]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:50 power sudo[3820364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com --output=json'
Sep  8 05:01:50 power sudo[3820364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:50 power sudo[3820364]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:59 power sudo[3820671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:01:59 power sudo[3820671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:01:59 power sudo[3820671]: pam_unix(sudo:session): session closed for user root
Sep  8 05:01:59 power sudo[3820677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  8 05:01:59 power sudo[3820677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:00 power sudo[3820677]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:00 power sudo[3820685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:02:00 power sudo[3820685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:00 power sudo[3820685]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:03 power sudo[3820787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com/test --output=json'
Sep  8 05:02:03 power sudo[3820787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:03 power sudo[3820787]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:06 power sudo[3820993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep  8 05:02:06 power sudo[3820993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:07 power sudo[3820993]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:07 power sudo[3820998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kolened1 --output=json'
Sep  8 05:02:07 power sudo[3820998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:07 power sudo[3820998]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:19 power sudo[3821296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:02:19 power sudo[3821296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:19 power sudo[3821296]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:19 power sudo[3821320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kolened1 --user-current --json'
Sep  8 05:02:19 power sudo[3821320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:20 power sudo[3821320]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:20 power sudo[3821329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 LangPHP php_get_vhost_versions --output=json'
Sep  8 05:02:20 power sudo[3821329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:20 power sudo[3821329]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:20 power sudo[3821335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:02:20 power sudo[3821335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:20 power sudo[3821335]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:20 power sudo[3821356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DomainInfo single_domain_data domain=kolenedelkovski.edu.mk return_https_redirect_status=1 --output=json'
Sep  8 05:02:20 power sudo[3821356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:20 power sudo[3821356]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:20 power sudo[3821363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 Mime list_redirects --output=json'
Sep  8 05:02:20 power sudo[3821363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:20 power sudo[3821363]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:26 power sudo[3821560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DirectoryPrivacy is_directory_protected dir=/home/kolened1/public_html --output=json'
Sep  8 05:02:26 power sudo[3821560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:26 power sudo[3821560]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:27 power sudo[3821624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:02:27 power sudo[3821624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:27 power sudo[3821624]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:27 power sudo[3821629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:02:27 power sudo[3821629]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:02:27 power sudo[3821629]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:02:27 power sudo[3821629]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:02:27 power sudo[3821629]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:02:27 power sudo[3821629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:27 power sudo[3821629]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:27 power sudo[3821634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:02:27 power sudo[3821634]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:02:27 power sudo[3821634]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:02:27 power sudo[3821634]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:02:27 power sudo[3821634]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:02:27 power sudo[3821634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:27 power sudo[3821634]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:29 power sudo[3821749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:02:29 power sudo[3821749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:29 power sudo[3821749]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:29 power sudo[3821754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:02:29 power sudo[3821754]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:02:29 power sudo[3821754]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:02:29 power sudo[3821754]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:02:29 power sudo[3821754]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:02:29 power sudo[3821754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:29 power sudo[3821754]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:29 power sudo[3821759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:02:29 power sudo[3821759]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:02:29 power sudo[3821759]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:02:29 power sudo[3821759]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:02:29 power sudo[3821759]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:02:29 power sudo[3821759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:30 power sudo[3821759]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:30 power sudo[3821803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep  8 05:02:30 power sudo[3821803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:31 power sudo[3821803]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:31 power sudo[3821810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kouzonco --output=json'
Sep  8 05:02:31 power sudo[3821810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:31 power sudo[3821810]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:34 power sudo[3821892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco /bin/sh -c 'cd /home/kouzonco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:02:34 power sudo[3821892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:34 power sudo[3821892]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:34 power sudo[3821901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kouzonco --user-current --json'
Sep  8 05:02:34 power sudo[3821901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:34 power sudo[3821901]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:34 power sudo[3821907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco LangPHP php_get_vhost_versions --output=json'
Sep  8 05:02:34 power sudo[3821907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:34 power sudo[3821907]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:34 power sudo[3821912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:02:34 power sudo[3821912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:34 power sudo[3821912]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:35 power sudo[3821926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DomainInfo single_domain_data domain=kouzon.com.hn return_https_redirect_status=1 --output=json'
Sep  8 05:02:35 power sudo[3821926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:35 power sudo[3821926]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:35 power sudo[3821932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco Mime list_redirects --output=json'
Sep  8 05:02:35 power sudo[3821932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:35 power sudo[3821932]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:37 power sudo[3822008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DirectoryPrivacy is_directory_protected dir=/home/kouzonco/public_html --output=json'
Sep  8 05:02:37 power sudo[3822008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:37 power sudo[3822008]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:41 power sudo[3822207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep  8 05:02:41 power sudo[3822207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:41 power sudo[3822207]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:41 power sudo[3822215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sprintst --output=json'
Sep  8 05:02:41 power sudo[3822215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:41 power sudo[3822215]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:45 power sudo[3822286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst /bin/sh -c 'cd /home/sprintst/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:02:45 power sudo[3822286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:45 power sudo[3822286]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:45 power sudo[3822292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sprintst --user-current --json'
Sep  8 05:02:46 power sudo[3822292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:46 power sudo[3822292]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:46 power sudo[3822298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst LangPHP php_get_vhost_versions --output=json'
Sep  8 05:02:46 power sudo[3822298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:46 power sudo[3822298]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:46 power sudo[3822306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:02:46 power sudo[3822306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:46 power sudo[3822306]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:46 power sudo[3822323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DomainInfo single_domain_data domain=kritiki.mk return_https_redirect_status=1 --output=json'
Sep  8 05:02:46 power sudo[3822323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:46 power sudo[3822323]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:46 power sudo[3822329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst Mime list_redirects --output=json'
Sep  8 05:02:46 power sudo[3822329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:46 power sudo[3822329]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:49 power sudo[3822435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DirectoryPrivacy is_directory_protected dir=/home/sprintst/public_html --output=json'
Sep  8 05:02:49 power sudo[3822435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:49 power sudo[3822435]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:53 power sudo[3822636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep  8 05:02:53 power sudo[3822636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:53 power sudo[3822636]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:53 power sudo[3822643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kujnamon --output=json'
Sep  8 05:02:53 power sudo[3822643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:53 power sudo[3822643]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:58 power sudo[3822737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon /bin/sh -c 'cd /home/kujnamon/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:02:58 power sudo[3822737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:58 power sudo[3822737]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:58 power sudo[3822743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kujnamon --user-current --json'
Sep  8 05:02:58 power sudo[3822743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:58 power sudo[3822743]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:58 power sudo[3822748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon LangPHP php_get_vhost_versions --output=json'
Sep  8 05:02:58 power sudo[3822748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:58 power sudo[3822748]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:58 power sudo[3822753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:02:58 power sudo[3822753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:58 power sudo[3822753]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:59 power sudo[3822770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DomainInfo single_domain_data domain=kujnamoni.mk return_https_redirect_status=1 --output=json'
Sep  8 05:02:59 power sudo[3822770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:59 power sudo[3822770]: pam_unix(sudo:session): session closed for user root
Sep  8 05:02:59 power sudo[3822776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon Mime list_redirects --output=json'
Sep  8 05:02:59 power sudo[3822776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:02:59 power sudo[3822776]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:02 power sudo[3822869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DirectoryPrivacy is_directory_protected dir=/home/kujnamon/public_html --output=json'
Sep  8 05:03:02 power sudo[3822869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:02 power sudo[3822869]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:09 power sudo[3823152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/love.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:03:09 power sudo[3823152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:09 power sudo[3823152]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:09 power sudo[3823158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  8 05:03:09 power sudo[3823158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:10 power sudo[3823158]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:10 power sudo[3823166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:03:10 power sudo[3823166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:10 power sudo[3823166]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:10 power sudo[3823185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=love.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 05:03:10 power sudo[3823185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:10 power sudo[3823185]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:13 power sudo[3823269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/love.cetplatform.mk --output=json'
Sep  8 05:03:13 power sudo[3823269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:13 power sudo[3823269]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:17 power sudo[3823487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep  8 05:03:17 power sudo[3823487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:17 power sudo[3823487]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:17 power sudo[3823496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makdrone --output=json'
Sep  8 05:03:17 power sudo[3823496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:17 power sudo[3823496]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:21 power sudo[3823605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:03:21 power sudo[3823605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:21 power sudo[3823605]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:21 power sudo[3823613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makdrone --user-current --json'
Sep  8 05:03:21 power sudo[3823613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:22 power sudo[3823613]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:22 power sudo[3823623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone LangPHP php_get_vhost_versions --output=json'
Sep  8 05:03:22 power sudo[3823623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:22 power sudo[3823623]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:22 power sudo[3823628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:03:22 power sudo[3823628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:22 power sudo[3823628]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:22 power sudo[3823650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DomainInfo single_domain_data domain=makdrone.mk return_https_redirect_status=1 --output=json'
Sep  8 05:03:22 power sudo[3823650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:22 power sudo[3823650]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:22 power sudo[3823657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone Mime list_redirects --output=json'
Sep  8 05:03:22 power sudo[3823657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:22 power sudo[3823657]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:25 power sudo[3823811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DirectoryPrivacy is_directory_protected dir=/home/makdrone/public_html --output=json'
Sep  8 05:03:25 power sudo[3823811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:25 power sudo[3823811]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:26 power sudo[3823870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:03:26 power sudo[3823870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:26 power sudo[3823870]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:26 power sudo[3823875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:03:26 power sudo[3823875]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:03:26 power sudo[3823875]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:03:26 power sudo[3823875]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:03:26 power sudo[3823875]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:03:26 power sudo[3823875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:26 power sudo[3823875]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:26 power sudo[3823880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:03:26 power sudo[3823880]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:03:26 power sudo[3823880]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:03:26 power sudo[3823880]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:03:26 power sudo[3823880]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:03:26 power sudo[3823880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:26 power sudo[3823880]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:26 power sudo[3823885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:03:26 power sudo[3823885]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:03:26 power sudo[3823885]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:03:26 power sudo[3823885]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:03:26 power sudo[3823885]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:03:26 power sudo[3823885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:26 power sudo[3823885]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:28 power sudo[3823992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:03:28 power sudo[3823992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:28 power sudo[3823992]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:28 power sudo[3823997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:03:28 power sudo[3823997]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:03:28 power sudo[3823997]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:03:28 power sudo[3823997]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:03:28 power sudo[3823997]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:03:28 power sudo[3823997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:28 power sudo[3823997]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:28 power sudo[3824002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:03:28 power sudo[3824002]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:03:28 power sudo[3824002]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:03:28 power sudo[3824002]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:03:28 power sudo[3824002]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:03:28 power sudo[3824002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:28 power sudo[3824002]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:28 power sudo[3824007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:03:28 power sudo[3824007]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:03:28 power sudo[3824007]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:03:28 power sudo[3824007]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:03:28 power sudo[3824007]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:03:28 power sudo[3824007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:28 power sudo[3824007]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:29 power sudo[3824049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep  8 05:03:29 power sudo[3824049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:29 power sudo[3824049]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:29 power sudo[3824054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makoasmk --output=json'
Sep  8 05:03:29 power sudo[3824054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:29 power sudo[3824054]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:34 power sudo[3824158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk /bin/sh -c 'cd /home/makoasmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:03:34 power sudo[3824158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:34 power sudo[3824158]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:34 power sudo[3824164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makoasmk --user-current --json'
Sep  8 05:03:34 power sudo[3824164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:34 power sudo[3824164]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:35 power sudo[3824170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk LangPHP php_get_vhost_versions --output=json'
Sep  8 05:03:35 power sudo[3824170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:35 power sudo[3824170]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:35 power sudo[3824175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:03:35 power sudo[3824175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:35 power sudo[3824175]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:35 power sudo[3824190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DomainInfo single_domain_data domain=makoas.mk return_https_redirect_status=1 --output=json'
Sep  8 05:03:35 power sudo[3824190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:35 power sudo[3824190]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:35 power sudo[3824199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk Mime list_redirects --output=json'
Sep  8 05:03:35 power sudo[3824199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:35 power sudo[3824199]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:39 power sudo[3824295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DirectoryPrivacy is_directory_protected dir=/home/makoasmk/public_html --output=json'
Sep  8 05:03:39 power sudo[3824295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:39 power sudo[3824295]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:48 power sudo[3824606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/mango.ambitioussolutions.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:03:48 power sudo[3824606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:48 power sudo[3824606]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:48 power sudo[3824612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep  8 05:03:48 power sudo[3824612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:48 power sudo[3824612]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:48 power sudo[3824631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:03:48 power sudo[3824631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:48 power sudo[3824631]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:49 power sudo[3824661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=mango.ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep  8 05:03:49 power sudo[3824661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:49 power sudo[3824661]: pam_unix(sudo:session): session closed for user root
Sep  8 05:03:53 power sudo[3824746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/mango.ambitioussolutions.mk --output=json'
Sep  8 05:03:53 power sudo[3824746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:03:53 power sudo[3824746]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:03 power sudo[3825080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/mkvesti.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:04:03 power sudo[3825080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:03 power sudo[3825080]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:03 power sudo[3825091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  8 05:04:03 power sudo[3825091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:03 power sudo[3825091]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:03 power sudo[3825098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:04:03 power sudo[3825098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:03 power sudo[3825098]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:03 power sudo[3825125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=mkvesti.mk return_https_redirect_status=1 --output=json'
Sep  8 05:04:03 power sudo[3825125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:04 power sudo[3825125]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:07 power sudo[3825236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/mkvesti.mk --output=json'
Sep  8 05:04:07 power sudo[3825236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:07 power sudo[3825236]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:12 power sudo[3825500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep  8 05:04:12 power sudo[3825500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:12 power sudo[3825500]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:12 power sudo[3825506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=modernar --output=json'
Sep  8 05:04:12 power sudo[3825506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:12 power sudo[3825506]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:16 power sudo[3825577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:04:16 power sudo[3825577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:16 power sudo[3825577]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:16 power sudo[3825583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user modernar --user-current --json'
Sep  8 05:04:16 power sudo[3825583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:17 power sudo[3825583]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:17 power sudo[3825589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar LangPHP php_get_vhost_versions --output=json'
Sep  8 05:04:17 power sudo[3825589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:17 power sudo[3825589]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:17 power sudo[3825594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:04:17 power sudo[3825594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:17 power sudo[3825594]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:17 power sudo[3825616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DomainInfo single_domain_data domain=modernart.mk return_https_redirect_status=1 --output=json'
Sep  8 05:04:17 power sudo[3825616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:17 power sudo[3825616]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:17 power sudo[3825622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar Mime list_redirects --output=json'
Sep  8 05:04:17 power sudo[3825622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:18 power sudo[3825622]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:20 power sudo[3825710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DirectoryPrivacy is_directory_protected dir=/home/modernar/public_html --output=json'
Sep  8 05:04:20 power sudo[3825710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:20 power sudo[3825710]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:21 power sudo[3825769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:04:21 power sudo[3825769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:21 power sudo[3825769]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:21 power sudo[3825774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:04:21 power sudo[3825774]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:04:21 power sudo[3825774]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:04:21 power sudo[3825774]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:04:21 power sudo[3825774]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:04:21 power sudo[3825774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:21 power sudo[3825774]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:21 power sudo[3825779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:04:21 power sudo[3825779]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:04:21 power sudo[3825779]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:04:21 power sudo[3825779]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:04:21 power sudo[3825779]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:04:21 power sudo[3825779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:22 power sudo[3825779]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:22 power sudo[3825784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:04:22 power sudo[3825784]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:04:22 power sudo[3825784]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:04:22 power sudo[3825784]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:04:22 power sudo[3825784]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:04:22 power sudo[3825784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:22 power sudo[3825784]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:24 power sudo[3825890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:04:24 power sudo[3825890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:24 power sudo[3825890]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:24 power sudo[3825895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:04:24 power sudo[3825895]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:04:24 power sudo[3825895]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:04:24 power sudo[3825895]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:04:24 power sudo[3825895]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:04:24 power sudo[3825895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:24 power sudo[3825895]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:24 power sudo[3825900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:04:24 power sudo[3825900]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:04:24 power sudo[3825900]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:04:24 power sudo[3825900]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:04:24 power sudo[3825900]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:04:24 power sudo[3825900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:24 power sudo[3825900]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:24 power sudo[3825906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:04:24 power sudo[3825906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:04:24 power sudo[3825906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:04:24 power sudo[3825906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:04:24 power sudo[3825906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:04:24 power sudo[3825906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:24 power sudo[3825906]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:28 power sudo[3826047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:04:28 power sudo[3826047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:28 power sudo[3826047]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:28 power sudo[3826053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep  8 05:04:28 power sudo[3826053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:28 power sudo[3826053]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:28 power sudo[3826062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:04:28 power sudo[3826062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:28 power sudo[3826062]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:29 power sudo[3826078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=momcurls.com return_https_redirect_status=1 --output=json'
Sep  8 05:04:29 power sudo[3826078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:29 power sudo[3826078]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:31 power sudo[3826170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/public_html --output=json'
Sep  8 05:04:31 power sudo[3826170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:31 power sudo[3826170]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:35 power sudo[3826402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep  8 05:04:35 power sudo[3826402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:35 power sudo[3826402]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:35 power sudo[3826410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mpbmk --output=json'
Sep  8 05:04:35 power sudo[3826410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:35 power sudo[3826410]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:37 power sudo[3826461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk /bin/sh -c 'cd /home/mpbmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:04:37 power sudo[3826461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:37 power sudo[3826461]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:37 power sudo[3826470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mpbmk --user-current --json'
Sep  8 05:04:37 power sudo[3826470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:37 power sudo[3826470]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:37 power sudo[3826477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk LangPHP php_get_vhost_versions --output=json'
Sep  8 05:04:37 power sudo[3826477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:37 power sudo[3826477]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:37 power sudo[3826483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:04:37 power sudo[3826483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:37 power sudo[3826483]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:38 power sudo[3826496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DomainInfo single_domain_data domain=mpb.mk return_https_redirect_status=1 --output=json'
Sep  8 05:04:38 power sudo[3826496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:38 power sudo[3826496]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:38 power sudo[3826503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk Mime list_redirects --output=json'
Sep  8 05:04:38 power sudo[3826503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:38 power sudo[3826503]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:40 power sudo[3826581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DirectoryPrivacy is_directory_protected dir=/home/mpbmk/public_html --output=json'
Sep  8 05:04:40 power sudo[3826581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:40 power sudo[3826581]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:43 power sudo[3826778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep  8 05:04:43 power sudo[3826778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:43 power sudo[3826778]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:43 power sudo[3826783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mspmk --output=json'
Sep  8 05:04:43 power sudo[3826783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:43 power sudo[3826783]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:48 power sudo[3826905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk /bin/sh -c 'cd /home/mspmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:04:48 power sudo[3826905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:48 power sudo[3826905]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:48 power sudo[3826913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mspmk --user-current --json'
Sep  8 05:04:48 power sudo[3826913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:49 power sudo[3826913]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:49 power sudo[3826925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk LangPHP php_get_vhost_versions --output=json'
Sep  8 05:04:49 power sudo[3826925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:49 power sudo[3826925]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:49 power sudo[3826931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:04:49 power sudo[3826931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:49 power sudo[3826931]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:49 power sudo[3826950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DomainInfo single_domain_data domain=msp.mk return_https_redirect_status=1 --output=json'
Sep  8 05:04:49 power sudo[3826950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:50 power sudo[3826950]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:50 power sudo[3826960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk Mime list_redirects --output=json'
Sep  8 05:04:50 power sudo[3826960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:50 power sudo[3826960]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:53 power sudo[3827042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DirectoryPrivacy is_directory_protected dir=/home/mspmk/public_html --output=json'
Sep  8 05:04:53 power sudo[3827042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:53 power sudo[3827042]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:57 power sudo[3827240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep  8 05:04:57 power sudo[3827240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:57 power sudo[3827240]: pam_unix(sudo:session): session closed for user root
Sep  8 05:04:57 power sudo[3827247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mstmmk --output=json'
Sep  8 05:04:57 power sudo[3827247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:04:57 power sudo[3827247]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:01 power sudo[3827331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk /bin/sh -c 'cd /home/mstmmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:05:01 power sudo[3827331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:01 power sudo[3827331]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:01 power sudo[3827337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mstmmk --user-current --json'
Sep  8 05:05:01 power sudo[3827337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:01 power sudo[3827337]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:01 power sudo[3827342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk LangPHP php_get_vhost_versions --output=json'
Sep  8 05:05:01 power sudo[3827342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:01 power sudo[3827342]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:01 power sudo[3827420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:05:01 power sudo[3827420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:01 power sudo[3827420]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:01 power systemd[3827446]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:05:02 power sudo[3827483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DomainInfo single_domain_data domain=mstm.mk return_https_redirect_status=1 --output=json'
Sep  8 05:05:02 power sudo[3827483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:02 power sudo[3827483]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:02 power sudo[3827492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk Mime list_redirects --output=json'
Sep  8 05:05:02 power sudo[3827492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:02 power sudo[3827492]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:05 power sudo[3827585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DirectoryPrivacy is_directory_protected dir=/home/mstmmk/public_html --output=json'
Sep  8 05:05:05 power sudo[3827585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:06 power sudo[3827585]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:08 power sudo[3827780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep  8 05:05:08 power sudo[3827780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:09 power sudo[3827780]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:09 power sudo[3827790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=naksorgm --output=json'
Sep  8 05:05:09 power sudo[3827790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:09 power sudo[3827790]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:16 power sudo[3827904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm /bin/sh -c 'cd /home/naksorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:05:16 power sudo[3827904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:16 power sudo[3827904]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:16 power sudo[3827910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user naksorgm --user-current --json'
Sep  8 05:05:16 power sudo[3827910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:17 power sudo[3827910]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:17 power sudo[3827920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm LangPHP php_get_vhost_versions --output=json'
Sep  8 05:05:17 power sudo[3827920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:17 power sudo[3827920]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:17 power sudo[3827930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:05:17 power sudo[3827930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:17 power sudo[3827930]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:17 power sudo[3827945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DomainInfo single_domain_data domain=naks.org.mk return_https_redirect_status=1 --output=json'
Sep  8 05:05:17 power sudo[3827945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:17 power sudo[3827945]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:17 power sudo[3827952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm Mime list_redirects --output=json'
Sep  8 05:05:17 power sudo[3827952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:17 power sudo[3827952]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:22 power sudo[3828069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DirectoryPrivacy is_directory_protected dir=/home/naksorgm/public_html --output=json'
Sep  8 05:05:22 power sudo[3828069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:22 power sudo[3828069]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:26 power sudo[3828302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep  8 05:05:26 power sudo[3828302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:26 power sudo[3828302]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:26 power sudo[3828308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nasaidni --output=json'
Sep  8 05:05:26 power sudo[3828308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:26 power sudo[3828308]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:29 power sudo[3828421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html/test.nasaidnina.com.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:05:29 power sudo[3828421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:29 power sudo[3828421]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:29 power sudo[3828427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep  8 05:05:29 power sudo[3828427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:30 power sudo[3828427]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:30 power sudo[3828436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni LangPHP php_get_vhost_versions --output=json'
Sep  8 05:05:30 power sudo[3828436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:30 power sudo[3828436]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:30 power sudo[3828442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:05:30 power sudo[3828442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:30 power sudo[3828442]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:30 power sudo[3828456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=test.nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep  8 05:05:30 power sudo[3828456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:30 power sudo[3828456]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:30 power sudo[3828464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni Mime list_redirects --output=json'
Sep  8 05:05:30 power sudo[3828464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:30 power sudo[3828464]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:33 power sudo[3828565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html/test.nasaidnina.com.mk/wp --output=json'
Sep  8 05:05:33 power sudo[3828565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:33 power sudo[3828565]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:40 power sudo[3828861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:05:40 power sudo[3828861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:40 power sudo[3828861]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:40 power sudo[3828868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep  8 05:05:40 power sudo[3828868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:40 power sudo[3828868]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:40 power sudo[3828874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:05:40 power sudo[3828874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:40 power sudo[3828874]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:40 power sudo[3828889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep  8 05:05:40 power sudo[3828889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:40 power sudo[3828889]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:43 power sudo[3828989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html --output=json'
Sep  8 05:05:43 power sudo[3828989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:43 power sudo[3828989]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:46 power sudo[3829200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep  8 05:05:46 power sudo[3829200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:46 power sudo[3829200]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:46 power sudo[3829206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ismassag --output=json'
Sep  8 05:05:46 power sudo[3829206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:46 power sudo[3829206]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:54 power sudo[3829377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag /bin/sh -c 'cd /home/ismassag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:05:54 power sudo[3829377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:54 power sudo[3829377]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:54 power sudo[3829383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ismassag --user-current --json'
Sep  8 05:05:54 power sudo[3829383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:54 power sudo[3829383]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:54 power sudo[3829392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag LangPHP php_get_vhost_versions --output=json'
Sep  8 05:05:54 power sudo[3829392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:55 power sudo[3829392]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:55 power sudo[3829401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:05:55 power sudo[3829401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:55 power sudo[3829401]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:55 power sudo[3829418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DomainInfo single_domain_data domain=needmassagetherapy.co.uk return_https_redirect_status=1 --output=json'
Sep  8 05:05:55 power sudo[3829418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:55 power sudo[3829418]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:55 power sudo[3829424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag Mime list_redirects --output=json'
Sep  8 05:05:55 power sudo[3829424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:55 power sudo[3829424]: pam_unix(sudo:session): session closed for user root
Sep  8 05:05:59 power sudo[3829565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DirectoryPrivacy is_directory_protected dir=/home/ismassag/public_html --output=json'
Sep  8 05:05:59 power sudo[3829565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:05:59 power sudo[3829565]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:01 power systemd[3829659]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 05:06:06 power sudo[3829838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:06:06 power sudo[3829838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:06 power sudo[3829838]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:06 power sudo[3829844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep  8 05:06:06 power sudo[3829844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:07 power sudo[3829844]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:07 power sudo[3829853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:06:07 power sudo[3829853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:07 power sudo[3829853]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:07 power sudo[3829867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=new.chemhem.com return_https_redirect_status=1 --output=json'
Sep  8 05:06:07 power sudo[3829867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:07 power sudo[3829867]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:10 power sudo[3829950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/new.chemhem.com --output=json'
Sep  8 05:06:10 power sudo[3829950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:10 power sudo[3829950]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:11 power sudo[3830012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:11 power sudo[3830012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:11 power sudo[3830012]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:11 power sudo[3830020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  8 05:06:11 power sudo[3830020]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  8 05:06:11 power sudo[3830020]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  8 05:06:11 power sudo[3830020]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  8 05:06:11 power sudo[3830020]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:11 power sudo[3830020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:11 power sudo[3830020]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:11 power sudo[3830025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  8 05:06:11 power sudo[3830025]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  8 05:06:11 power sudo[3830025]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  8 05:06:11 power sudo[3830025]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  8 05:06:11 power sudo[3830025]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:11 power sudo[3830025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:11 power sudo[3830025]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:11 power sudo[3830030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep  8 05:06:11 power sudo[3830030]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep  8 05:06:11 power sudo[3830030]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep  8 05:06:11 power sudo[3830030]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep  8 05:06:11 power sudo[3830030]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:11 power sudo[3830030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:11 power sudo[3830030]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:13 power sudo[3830154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:13 power sudo[3830154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:13 power sudo[3830154]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:13 power sudo[3830160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  8 05:06:13 power sudo[3830160]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  8 05:06:13 power sudo[3830160]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  8 05:06:13 power sudo[3830160]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  8 05:06:13 power sudo[3830160]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:13 power sudo[3830160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:13 power sudo[3830160]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:13 power sudo[3830168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  8 05:06:13 power sudo[3830168]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  8 05:06:13 power sudo[3830168]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  8 05:06:13 power sudo[3830168]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  8 05:06:13 power sudo[3830168]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:13 power sudo[3830168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:13 power sudo[3830168]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:13 power sudo[3830173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep  8 05:06:13 power sudo[3830173]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep  8 05:06:13 power sudo[3830173]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep  8 05:06:13 power sudo[3830173]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep  8 05:06:13 power sudo[3830173]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:13 power sudo[3830173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:13 power sudo[3830173]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:14 power sudo[3830207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep  8 05:06:14 power sudo[3830207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:14 power sudo[3830207]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:14 power sudo[3830218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikolov1 --output=json'
Sep  8 05:06:14 power sudo[3830218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:14 power sudo[3830218]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:18 power sudo[3830328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:06:18 power sudo[3830328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:18 power sudo[3830328]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:18 power sudo[3830334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikolov1 --user-current --json'
Sep  8 05:06:18 power sudo[3830334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:18 power sudo[3830334]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:18 power sudo[3830343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 LangPHP php_get_vhost_versions --output=json'
Sep  8 05:06:18 power sudo[3830343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:19 power sudo[3830343]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:19 power sudo[3830349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:06:19 power sudo[3830349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:19 power sudo[3830349]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:19 power sudo[3830369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DomainInfo single_domain_data domain=nikolovproduction.com return_https_redirect_status=1 --output=json'
Sep  8 05:06:19 power sudo[3830369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:19 power sudo[3830369]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:19 power sudo[3830375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 Mime list_redirects --output=json'
Sep  8 05:06:19 power sudo[3830375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:19 power sudo[3830375]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:22 power sudo[3830468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DirectoryPrivacy is_directory_protected dir=/home/nikolov1/public_html --output=json'
Sep  8 05:06:22 power sudo[3830468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:22 power sudo[3830468]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:23 power sudo[3830529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:23 power sudo[3830529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:23 power sudo[3830529]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:23 power sudo[3830537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:06:23 power sudo[3830537]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:06:23 power sudo[3830537]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:06:23 power sudo[3830537]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:06:23 power sudo[3830537]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:23 power sudo[3830537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:23 power sudo[3830537]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:23 power sudo[3830542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:06:23 power sudo[3830542]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:06:23 power sudo[3830542]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:06:23 power sudo[3830542]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:06:23 power sudo[3830542]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:23 power sudo[3830542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:23 power sudo[3830542]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:23 power sudo[3830547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:06:23 power sudo[3830547]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:06:23 power sudo[3830547]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:06:23 power sudo[3830547]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:06:23 power sudo[3830547]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:23 power sudo[3830547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:23 power sudo[3830547]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:25 power sudo[3830732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:25 power sudo[3830732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:25 power sudo[3830732]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:25 power sudo[3830737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:06:25 power sudo[3830737]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:06:25 power sudo[3830737]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:06:25 power sudo[3830737]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:06:25 power sudo[3830737]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:25 power sudo[3830737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:25 power sudo[3830737]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:25 power sudo[3830742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:06:25 power sudo[3830742]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:06:25 power sudo[3830742]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:06:25 power sudo[3830742]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:06:25 power sudo[3830742]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:25 power sudo[3830742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:25 power sudo[3830742]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:25 power sudo[3830747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:06:25 power sudo[3830747]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:06:25 power sudo[3830747]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:06:25 power sudo[3830747]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:06:25 power sudo[3830747]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:06:25 power sudo[3830747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:25 power sudo[3830747]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:26 power sudo[3830784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep  8 05:06:26 power sudo[3830784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:26 power sudo[3830784]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:26 power sudo[3830812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nolimits --output=json'
Sep  8 05:06:26 power sudo[3830812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:26 power sudo[3830812]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:30 power sudo[3830960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits /bin/sh -c 'cd /home/nolimits/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:06:30 power sudo[3830960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:30 power sudo[3830960]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:30 power sudo[3830967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nolimits --user-current --json'
Sep  8 05:06:30 power sudo[3830967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:30 power sudo[3830967]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:30 power sudo[3830976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits LangPHP php_get_vhost_versions --output=json'
Sep  8 05:06:30 power sudo[3830976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:30 power sudo[3830976]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:31 power sudo[3830981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:06:31 power sudo[3830981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:31 power sudo[3830981]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:31 power sudo[3830999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DomainInfo single_domain_data domain=nolimits.mk return_https_redirect_status=1 --output=json'
Sep  8 05:06:31 power sudo[3830999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:31 power sudo[3830999]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:31 power sudo[3831005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits Mime list_redirects --output=json'
Sep  8 05:06:31 power sudo[3831005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:31 power sudo[3831005]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:33 power sudo[3831082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DirectoryPrivacy is_directory_protected dir=/home/nolimits/public_html/tru-find --output=json'
Sep  8 05:06:33 power sudo[3831082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:33 power sudo[3831082]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:36 power sudo[3831281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep  8 05:06:36 power sudo[3831281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:36 power sudo[3831281]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:36 power sudo[3831287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=onlinesh --output=json'
Sep  8 05:06:36 power sudo[3831287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:37 power sudo[3831287]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:40 power sudo[3831356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh /bin/sh -c 'cd /home/onlinesh/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:06:40 power sudo[3831356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:40 power sudo[3831356]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:40 power sudo[3831362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user onlinesh --user-current --json'
Sep  8 05:06:40 power sudo[3831362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:40 power sudo[3831362]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:40 power sudo[3831370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh LangPHP php_get_vhost_versions --output=json'
Sep  8 05:06:40 power sudo[3831370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:40 power sudo[3831370]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:40 power sudo[3831375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:06:40 power sudo[3831375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:40 power sudo[3831375]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:40 power sudo[3831394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DomainInfo single_domain_data domain=onlineshop.com.mk return_https_redirect_status=1 --output=json'
Sep  8 05:06:40 power sudo[3831394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:40 power sudo[3831394]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:40 power sudo[3831400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh Mime list_redirects --output=json'
Sep  8 05:06:40 power sudo[3831400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:41 power sudo[3831400]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:43 power sudo[3831483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DirectoryPrivacy is_directory_protected dir=/home/onlinesh/public_html --output=json'
Sep  8 05:06:43 power sudo[3831483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:43 power sudo[3831483]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:46 power sudo[3831667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep  8 05:06:46 power sudo[3831667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:47 power sudo[3831667]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:47 power sudo[3831672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=palenzok --output=json'
Sep  8 05:06:47 power sudo[3831672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:47 power sudo[3831672]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:50 power sudo[3831770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok /bin/sh -c 'cd /home/palenzok/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:06:50 power sudo[3831770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:50 power sudo[3831770]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:50 power sudo[3831778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user palenzok --user-current --json'
Sep  8 05:06:50 power sudo[3831778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:50 power sudo[3831778]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:50 power sudo[3831784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok LangPHP php_get_vhost_versions --output=json'
Sep  8 05:06:50 power sudo[3831784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:50 power sudo[3831784]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:50 power sudo[3831789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:06:50 power sudo[3831789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:50 power sudo[3831789]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:51 power sudo[3831814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DomainInfo single_domain_data domain=palenzokompani.mk return_https_redirect_status=1 --output=json'
Sep  8 05:06:51 power sudo[3831814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:52 power sudo[3831814]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:52 power sudo[3831824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok Mime list_redirects --output=json'
Sep  8 05:06:52 power sudo[3831824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:52 power sudo[3831824]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:54 power sudo[3831902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DirectoryPrivacy is_directory_protected dir=/home/palenzok/public_html --output=json'
Sep  8 05:06:54 power sudo[3831902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:54 power sudo[3831902]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:58 power sudo[3832093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep  8 05:06:58 power sudo[3832093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:58 power sudo[3832093]: pam_unix(sudo:session): session closed for user root
Sep  8 05:06:58 power sudo[3832098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pelagoni --output=json'
Sep  8 05:06:58 power sudo[3832098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:06:58 power sudo[3832098]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:01 power systemd[3832173]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 05:07:03 power sudo[3832202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni /bin/sh -c 'cd /home/pelagoni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:07:03 power sudo[3832202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:03 power sudo[3832202]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:03 power sudo[3832212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pelagoni --user-current --json'
Sep  8 05:07:03 power sudo[3832212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:03 power sudo[3832212]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:03 power sudo[3832216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni LangPHP php_get_vhost_versions --output=json'
Sep  8 05:07:03 power sudo[3832216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:03 power sudo[3832216]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:03 power sudo[3832225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:07:03 power sudo[3832225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:03 power sudo[3832225]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:04 power sudo[3832252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DomainInfo single_domain_data domain=pelagonijaregion.mk return_https_redirect_status=1 --output=json'
Sep  8 05:07:04 power sudo[3832252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:04 power sudo[3832252]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:04 power sudo[3832258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni Mime list_redirects --output=json'
Sep  8 05:07:04 power sudo[3832258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:04 power sudo[3832258]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:07 power sudo[3832342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DirectoryPrivacy is_directory_protected dir=/home/pelagoni/public_html/p --output=json'
Sep  8 05:07:07 power sudo[3832342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:07 power sudo[3832342]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:11 power sudo[3832561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep  8 05:07:11 power sudo[3832561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:12 power sudo[3832561]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:12 power sudo[3832569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=biplmk --output=json'
Sep  8 05:07:12 power sudo[3832569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:12 power sudo[3832569]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:15 power sudo[3832668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk /bin/sh -c 'cd /home/biplmk/petstop.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:07:15 power sudo[3832668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:15 power sudo[3832668]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:15 power sudo[3832674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user biplmk --user-current --json'
Sep  8 05:07:15 power sudo[3832674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:15 power sudo[3832674]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:15 power sudo[3832681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk LangPHP php_get_vhost_versions --output=json'
Sep  8 05:07:15 power sudo[3832681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:16 power sudo[3832681]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:16 power sudo[3832686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:07:16 power sudo[3832686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:16 power sudo[3832686]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:16 power sudo[3832702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DomainInfo single_domain_data domain=petstop.mk return_https_redirect_status=1 --output=json'
Sep  8 05:07:16 power sudo[3832702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:16 power sudo[3832702]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:16 power sudo[3832708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk Mime list_redirects --output=json'
Sep  8 05:07:16 power sudo[3832708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:16 power sudo[3832708]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:19 power sudo[3832793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DirectoryPrivacy is_directory_protected dir=/home/biplmk/petstop.mk/wp --output=json'
Sep  8 05:07:19 power sudo[3832793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:19 power sudo[3832793]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:22 power sudo[3833029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep  8 05:07:22 power sudo[3833029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:22 power sudo[3833029]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:22 power sudo[3833034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=premiumi --output=json'
Sep  8 05:07:22 power sudo[3833034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:22 power sudo[3833034]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:26 power sudo[3833102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:07:26 power sudo[3833102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:26 power sudo[3833102]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:26 power sudo[3833108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user premiumi --user-current --json'
Sep  8 05:07:26 power sudo[3833108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:26 power sudo[3833108]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:26 power sudo[3833117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi LangPHP php_get_vhost_versions --output=json'
Sep  8 05:07:26 power sudo[3833117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:26 power sudo[3833117]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:26 power sudo[3833130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:07:26 power sudo[3833130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:26 power sudo[3833130]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:27 power sudo[3833186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DomainInfo single_domain_data domain=premiuminsurance.mk return_https_redirect_status=1 --output=json'
Sep  8 05:07:27 power sudo[3833186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:27 power sudo[3833186]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:27 power sudo[3833193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi Mime list_redirects --output=json'
Sep  8 05:07:27 power sudo[3833193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:27 power sudo[3833193]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:29 power sudo[3833270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DirectoryPrivacy is_directory_protected dir=/home/premiumi/public_html --output=json'
Sep  8 05:07:29 power sudo[3833270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:29 power sudo[3833270]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:30 power sudo[3833315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:30 power sudo[3833315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:30 power sudo[3833315]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:30 power sudo[3833320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:07:30 power sudo[3833320]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:07:30 power sudo[3833320]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:07:30 power sudo[3833320]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:07:30 power sudo[3833320]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:30 power sudo[3833320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:30 power sudo[3833320]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:30 power sudo[3833329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:07:30 power sudo[3833329]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:07:30 power sudo[3833329]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:07:30 power sudo[3833329]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:07:30 power sudo[3833329]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:30 power sudo[3833329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:30 power sudo[3833329]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:30 power sudo[3833336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:07:30 power sudo[3833336]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:07:30 power sudo[3833336]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:07:30 power sudo[3833336]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:07:30 power sudo[3833336]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:30 power sudo[3833336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:30 power sudo[3833336]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:32 power sudo[3833494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:32 power sudo[3833494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:32 power sudo[3833494]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:32 power sudo[3833499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:07:32 power sudo[3833499]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:07:32 power sudo[3833499]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:07:32 power sudo[3833499]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:07:32 power sudo[3833499]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:32 power sudo[3833499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:32 power sudo[3833499]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:32 power sudo[3833505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:07:32 power sudo[3833505]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:07:32 power sudo[3833505]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:07:32 power sudo[3833505]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:07:32 power sudo[3833505]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:32 power sudo[3833505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:32 power sudo[3833505]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:32 power sudo[3833512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:07:32 power sudo[3833512]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:07:32 power sudo[3833512]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:07:32 power sudo[3833512]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:07:32 power sudo[3833512]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:32 power sudo[3833512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:32 power sudo[3833512]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:38 power sudo[3833653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:07:38 power sudo[3833653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:38 power sudo[3833653]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:38 power sudo[3833659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep  8 05:07:38 power sudo[3833659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:38 power sudo[3833659]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:38 power sudo[3833666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:07:38 power sudo[3833666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:38 power sudo[3833666]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:39 power sudo[3833684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep  8 05:07:39 power sudo[3833684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:39 power sudo[3833684]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:41 power sudo[3833774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/public_html --output=json'
Sep  8 05:07:41 power sudo[3833774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:42 power sudo[3833774]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:46 power sudo[3834015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep  8 05:07:46 power sudo[3834015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:46 power sudo[3834015]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:46 power sudo[3834020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=radekrat --output=json'
Sep  8 05:07:46 power sudo[3834020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:46 power sudo[3834020]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:52 power sudo[3834128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:07:52 power sudo[3834128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:52 power sudo[3834128]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:52 power sudo[3834134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user radekrat --user-current --json'
Sep  8 05:07:52 power sudo[3834134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:52 power sudo[3834134]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:52 power sudo[3834140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat LangPHP php_get_vhost_versions --output=json'
Sep  8 05:07:52 power sudo[3834140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:53 power sudo[3834140]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:53 power sudo[3834146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:07:53 power sudo[3834146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:53 power sudo[3834146]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:53 power sudo[3834163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DomainInfo single_domain_data domain=radekratovce.edu.mk return_https_redirect_status=1 --output=json'
Sep  8 05:07:53 power sudo[3834163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:53 power sudo[3834163]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:53 power sudo[3834169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat Mime list_redirects --output=json'
Sep  8 05:07:53 power sudo[3834169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:53 power sudo[3834169]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:57 power sudo[3834279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DirectoryPrivacy is_directory_protected dir=/home/radekrat/public_html/wp --output=json'
Sep  8 05:07:57 power sudo[3834279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:57 power sudo[3834279]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:57 power sudo[3834323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:57 power sudo[3834323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:57 power sudo[3834323]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:57 power sudo[3834328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:07:57 power sudo[3834328]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:07:57 power sudo[3834328]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:07:57 power sudo[3834328]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:07:57 power sudo[3834328]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:57 power sudo[3834328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:57 power sudo[3834328]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:57 power sudo[3834333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  8 05:07:57 power sudo[3834333]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  8 05:07:57 power sudo[3834333]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  8 05:07:57 power sudo[3834333]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  8 05:07:57 power sudo[3834333]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:57 power sudo[3834333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:57 power sudo[3834333]: pam_unix(sudo:session): session closed for user root
Sep  8 05:07:57 power sudo[3834342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  8 05:07:57 power sudo[3834342]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  8 05:07:57 power sudo[3834342]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  8 05:07:57 power sudo[3834342]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  8 05:07:57 power sudo[3834342]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:07:57 power sudo[3834342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:07:57 power sudo[3834342]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:03 power sudo[3834556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep  8 05:08:03 power sudo[3834556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:03 power sudo[3834556]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:03 power sudo[3834566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rasmorgm --output=json'
Sep  8 05:08:03 power sudo[3834566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:03 power sudo[3834566]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:10 power sudo[3834697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm /bin/sh -c 'cd /home/rasmorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:08:10 power sudo[3834697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:10 power sudo[3834697]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:10 power sudo[3834703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rasmorgm --user-current --json'
Sep  8 05:08:10 power sudo[3834703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:10 power sudo[3834703]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:10 power sudo[3834710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm LangPHP php_get_vhost_versions --output=json'
Sep  8 05:08:10 power sudo[3834710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:10 power sudo[3834710]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:10 power sudo[3834715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:08:10 power sudo[3834715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:10 power sudo[3834715]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:11 power sudo[3834733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DomainInfo single_domain_data domain=rasm.org.mk return_https_redirect_status=1 --output=json'
Sep  8 05:08:11 power sudo[3834733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:11 power sudo[3834733]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:11 power sudo[3834739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm Mime list_redirects --output=json'
Sep  8 05:08:11 power sudo[3834739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:11 power sudo[3834739]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:14 power sudo[3834824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DirectoryPrivacy is_directory_protected dir=/home/rasmorgm/public_html --output=json'
Sep  8 05:08:14 power sudo[3834824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:14 power sudo[3834824]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:18 power sudo[3835023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep  8 05:08:18 power sudo[3835023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:18 power sudo[3835023]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:18 power sudo[3835042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=recorgmk --output=json'
Sep  8 05:08:18 power sudo[3835042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:18 power sudo[3835042]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:25 power sudo[3835141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk /bin/sh -c 'cd /home/recorgmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:08:25 power sudo[3835141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:25 power sudo[3835141]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:25 power sudo[3835147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user recorgmk --user-current --json'
Sep  8 05:08:25 power sudo[3835147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:25 power sudo[3835147]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:25 power sudo[3835159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk LangPHP php_get_vhost_versions --output=json'
Sep  8 05:08:25 power sudo[3835159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:25 power sudo[3835159]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:25 power sudo[3835165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:08:25 power sudo[3835165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:25 power sudo[3835165]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:25 power sudo[3835183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DomainInfo single_domain_data domain=rec.org.mk return_https_redirect_status=1 --output=json'
Sep  8 05:08:25 power sudo[3835183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:26 power sudo[3835183]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:26 power sudo[3835189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk Mime list_redirects --output=json'
Sep  8 05:08:26 power sudo[3835189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:26 power sudo[3835189]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:29 power sudo[3835370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DirectoryPrivacy is_directory_protected dir=/home/recorgmk/public_html --output=json'
Sep  8 05:08:29 power sudo[3835370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:29 power sudo[3835370]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:33 power sudo[3835605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep  8 05:08:33 power sudo[3835605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:33 power sudo[3835605]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:33 power sudo[3835612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stravelm --output=json'
Sep  8 05:08:33 power sudo[3835612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:33 power sudo[3835612]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:37 power sudo[3835708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm /bin/sh -c 'cd /home/stravelm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:08:37 power sudo[3835708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:37 power sudo[3835708]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:37 power sudo[3835714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stravelm --user-current --json'
Sep  8 05:08:37 power sudo[3835714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:38 power sudo[3835714]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:38 power sudo[3835724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm LangPHP php_get_vhost_versions --output=json'
Sep  8 05:08:38 power sudo[3835724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:38 power sudo[3835724]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:38 power sudo[3835729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:08:38 power sudo[3835729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:38 power sudo[3835729]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:39 power sudo[3835749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DomainInfo single_domain_data domain=s-travel.mk return_https_redirect_status=1 --output=json'
Sep  8 05:08:39 power sudo[3835749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:39 power sudo[3835749]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:39 power sudo[3835758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm Mime list_redirects --output=json'
Sep  8 05:08:39 power sudo[3835758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:39 power sudo[3835758]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:42 power sudo[3835850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DirectoryPrivacy is_directory_protected dir=/home/stravelm/public_html --output=json'
Sep  8 05:08:42 power sudo[3835850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:42 power sudo[3835850]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:45 power sudo[3836043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep  8 05:08:45 power sudo[3836043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:45 power sudo[3836043]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:45 power sudo[3836050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=simbiome --output=json'
Sep  8 05:08:45 power sudo[3836050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:45 power sudo[3836050]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:50 power sudo[3836153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome /bin/sh -c 'cd /home/simbiome/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:08:50 power sudo[3836153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:51 power sudo[3836153]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:51 power sudo[3836160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user simbiome --user-current --json'
Sep  8 05:08:51 power sudo[3836160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:51 power sudo[3836160]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:51 power sudo[3836169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome LangPHP php_get_vhost_versions --output=json'
Sep  8 05:08:51 power sudo[3836169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:51 power sudo[3836169]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:51 power sudo[3836174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:08:51 power sudo[3836174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:51 power sudo[3836174]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:52 power sudo[3836195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DomainInfo single_domain_data domain=simbiomedic.mk return_https_redirect_status=1 --output=json'
Sep  8 05:08:52 power sudo[3836195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:52 power sudo[3836195]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:52 power sudo[3836205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome Mime list_redirects --output=json'
Sep  8 05:08:52 power sudo[3836205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:52 power sudo[3836205]: pam_unix(sudo:session): session closed for user root
Sep  8 05:08:55 power sudo[3836304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DirectoryPrivacy is_directory_protected dir=/home/simbiome/public_html --output=json'
Sep  8 05:08:55 power sudo[3836304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:08:55 power sudo[3836304]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:04 power sudo[3836604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/sk.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:09:04 power sudo[3836604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:04 power sudo[3836604]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:04 power sudo[3836610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  8 05:09:04 power sudo[3836610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:04 power sudo[3836610]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:04 power sudo[3836617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:09:04 power sudo[3836617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:04 power sudo[3836617]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:05 power sudo[3836637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=sk.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 05:09:05 power sudo[3836637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:05 power sudo[3836637]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:08 power sudo[3836737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/sk.cetplatform.mk --output=json'
Sep  8 05:09:08 power sudo[3836737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:08 power sudo[3836737]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:12 power sudo[3836945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep  8 05:09:12 power sudo[3836945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:12 power sudo[3836945]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:12 power sudo[3836957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=solemor1 --output=json'
Sep  8 05:09:12 power sudo[3836957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:12 power sudo[3836957]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:15 power sudo[3837018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:09:15 power sudo[3837018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:15 power sudo[3837018]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:15 power sudo[3837027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep  8 05:09:15 power sudo[3837027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:15 power sudo[3837027]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:15 power sudo[3837033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 LangPHP php_get_vhost_versions --output=json'
Sep  8 05:09:15 power sudo[3837033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:15 power sudo[3837033]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:15 power sudo[3837039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:09:15 power sudo[3837039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:15 power sudo[3837039]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:16 power sudo[3837058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=solem.org.mk return_https_redirect_status=1 --output=json'
Sep  8 05:09:16 power sudo[3837058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:16 power sudo[3837058]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:16 power sudo[3837067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 Mime list_redirects --output=json'
Sep  8 05:09:16 power sudo[3837067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:16 power sudo[3837067]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:18 power sudo[3837153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html --output=json'
Sep  8 05:09:18 power sudo[3837153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:18 power sudo[3837153]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:19 power sudo[3837215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:09:19 power sudo[3837215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:19 power sudo[3837215]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:19 power sudo[3837220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:09:19 power sudo[3837220]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:09:19 power sudo[3837220]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:09:19 power sudo[3837220]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:09:19 power sudo[3837220]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:09:19 power sudo[3837220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:19 power sudo[3837220]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:19 power sudo[3837225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:09:19 power sudo[3837225]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:09:19 power sudo[3837225]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:09:19 power sudo[3837225]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:09:19 power sudo[3837225]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:09:19 power sudo[3837225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:19 power sudo[3837225]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:19 power sudo[3837235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:09:19 power sudo[3837235]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:09:19 power sudo[3837235]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:09:19 power sudo[3837235]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:09:19 power sudo[3837235]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:09:19 power sudo[3837235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:19 power sudo[3837235]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:21 power sudo[3837350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:09:21 power sudo[3837350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:21 power sudo[3837350]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:21 power sudo[3837355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:09:21 power sudo[3837355]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:09:21 power sudo[3837355]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:09:21 power sudo[3837355]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:09:21 power sudo[3837355]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:09:21 power sudo[3837355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:21 power sudo[3837355]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:21 power sudo[3837360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:09:21 power sudo[3837360]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:09:21 power sudo[3837360]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:09:21 power sudo[3837360]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:09:21 power sudo[3837360]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:09:21 power sudo[3837360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:21 power sudo[3837360]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:21 power sudo[3837366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:09:21 power sudo[3837366]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:09:21 power sudo[3837366]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:09:21 power sudo[3837366]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:09:21 power sudo[3837366]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:09:21 power sudo[3837366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:21 power sudo[3837366]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:28 power sudo[3837497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html/vedi && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:09:28 power sudo[3837497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:28 power sudo[3837497]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:28 power sudo[3837514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep  8 05:09:28 power sudo[3837514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:28 power sudo[3837514]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:28 power sudo[3837549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:09:28 power sudo[3837549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:28 power sudo[3837549]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:28 power sudo[3837563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=vedi.mk return_https_redirect_status=1 --output=json'
Sep  8 05:09:28 power sudo[3837563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:29 power sudo[3837563]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:31 power sudo[3837637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html/vedi --output=json'
Sep  8 05:09:31 power sudo[3837637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:31 power sudo[3837637]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:34 power sudo[3837856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep  8 05:09:34 power sudo[3837856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:34 power sudo[3837856]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:34 power sudo[3837865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sssoluti --output=json'
Sep  8 05:09:34 power sudo[3837865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:35 power sudo[3837865]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:39 power sudo[3837965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti /bin/sh -c 'cd /home/sssoluti/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:09:40 power sudo[3837965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:40 power sudo[3837965]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:40 power sudo[3837971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sssoluti --user-current --json'
Sep  8 05:09:40 power sudo[3837971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:40 power sudo[3837971]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:40 power sudo[3837982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti LangPHP php_get_vhost_versions --output=json'
Sep  8 05:09:40 power sudo[3837982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:40 power sudo[3837982]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:40 power sudo[3837987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:09:40 power sudo[3837987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:40 power sudo[3837987]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:40 power sudo[3838002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DomainInfo single_domain_data domain=sssolutions.mk return_https_redirect_status=1 --output=json'
Sep  8 05:09:40 power sudo[3838002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:40 power sudo[3838002]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:40 power sudo[3838009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti Mime list_redirects --output=json'
Sep  8 05:09:40 power sudo[3838009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:40 power sudo[3838009]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:43 power sudo[3838112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DirectoryPrivacy is_directory_protected dir=/home/sssoluti/public_html --output=json'
Sep  8 05:09:43 power sudo[3838112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:43 power sudo[3838112]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:47 power sudo[3838317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep  8 05:09:47 power sudo[3838317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:47 power sudo[3838317]: pam_unix(sudo:session): session closed for user root
Sep  8 05:09:47 power sudo[3838324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=supremel --output=json'
Sep  8 05:09:47 power sudo[3838324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:09:47 power sudo[3838324]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:02 power systemd[3838704]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:10:16 power sudo[3839015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:10:16 power sudo[3839015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:16 power sudo[3839015]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:16 power sudo[3839021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep  8 05:10:16 power sudo[3839021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:16 power sudo[3839021]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:16 power sudo[3839029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel LangPHP php_get_vhost_versions --output=json'
Sep  8 05:10:16 power sudo[3839029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:16 power sudo[3839029]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:16 power sudo[3839045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:10:16 power sudo[3839045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:16 power sudo[3839045]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:17 power sudo[3839065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=supremeleader.eu return_https_redirect_status=1 --output=json'
Sep  8 05:10:17 power sudo[3839065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:17 power sudo[3839065]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:17 power sudo[3839073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel Mime list_redirects --output=json'
Sep  8 05:10:17 power sudo[3839073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:17 power sudo[3839073]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:21 power sudo[3839236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/public_html --output=json'
Sep  8 05:10:22 power sudo[3839236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:22 power sudo[3839236]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:25 power sudo[3839508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep  8 05:10:25 power sudo[3839508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:26 power sudo[3839508]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:26 power sudo[3839514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=tehnodro --output=json'
Sep  8 05:10:26 power sudo[3839514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:26 power sudo[3839514]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:31 power sudo[3839682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:10:31 power sudo[3839682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:31 power sudo[3839682]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:31 power sudo[3839688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user tehnodro --user-current --json'
Sep  8 05:10:31 power sudo[3839688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:31 power sudo[3839688]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:31 power sudo[3839707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro LangPHP php_get_vhost_versions --output=json'
Sep  8 05:10:31 power sudo[3839707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:31 power sudo[3839707]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:31 power sudo[3839714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:10:31 power sudo[3839714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:31 power sudo[3839714]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:32 power sudo[3839750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DomainInfo single_domain_data domain=tehnodrom.mk return_https_redirect_status=1 --output=json'
Sep  8 05:10:32 power sudo[3839750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:33 power sudo[3839750]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:33 power sudo[3839757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro Mime list_redirects --output=json'
Sep  8 05:10:33 power sudo[3839757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:33 power sudo[3839757]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:36 power sudo[3839877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DirectoryPrivacy is_directory_protected dir=/home/tehnodro/public_html --output=json'
Sep  8 05:10:36 power sudo[3839877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:36 power sudo[3839877]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:37 power sudo[3839945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:10:37 power sudo[3839945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:37 power sudo[3839945]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:37 power sudo[3839951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:10:37 power sudo[3839951]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:10:37 power sudo[3839951]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:10:37 power sudo[3839951]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:10:37 power sudo[3839951]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:10:37 power sudo[3839951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:37 power sudo[3839951]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:37 power sudo[3839957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:10:37 power sudo[3839957]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:10:37 power sudo[3839957]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:10:37 power sudo[3839957]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:10:37 power sudo[3839957]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:10:37 power sudo[3839957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:37 power sudo[3839957]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:37 power sudo[3839965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:10:37 power sudo[3839965]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:10:37 power sudo[3839965]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:10:37 power sudo[3839965]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:10:37 power sudo[3839965]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:10:37 power sudo[3839965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:37 power sudo[3839965]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:39 power sudo[3840069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:10:39 power sudo[3840069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:39 power sudo[3840069]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:39 power sudo[3840075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:10:39 power sudo[3840075]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:10:39 power sudo[3840075]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:10:39 power sudo[3840075]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:10:39 power sudo[3840075]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:10:39 power sudo[3840075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:39 power sudo[3840075]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:39 power sudo[3840080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:10:39 power sudo[3840080]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:10:39 power sudo[3840080]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:10:39 power sudo[3840080]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:10:39 power sudo[3840080]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:10:39 power sudo[3840080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:39 power sudo[3840080]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:39 power sudo[3840085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:10:39 power sudo[3840085]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:10:39 power sudo[3840085]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:10:39 power sudo[3840085]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:10:39 power sudo[3840085]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:10:39 power sudo[3840085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:39 power sudo[3840085]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:46 power sudo[3840224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/theuniversalgroup.net && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:10:46 power sudo[3840224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:46 power sudo[3840224]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:46 power sudo[3840230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep  8 05:10:46 power sudo[3840230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:46 power sudo[3840230]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:46 power sudo[3840238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:10:46 power sudo[3840238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:46 power sudo[3840238]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:46 power sudo[3840254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=theuniversalgroup.net return_https_redirect_status=1 --output=json'
Sep  8 05:10:46 power sudo[3840254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:46 power sudo[3840254]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:49 power sudo[3840356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/theuniversalgroup.net --output=json'
Sep  8 05:10:49 power sudo[3840356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:49 power sudo[3840356]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:52 power sudo[3840566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep  8 05:10:52 power sudo[3840566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:53 power sudo[3840566]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:53 power sudo[3840572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=viewinn --output=json'
Sep  8 05:10:53 power sudo[3840572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:53 power sudo[3840572]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:55 power sudo[3840639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn /bin/sh -c 'cd /home/viewinn/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:10:55 power sudo[3840639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:55 power sudo[3840639]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:55 power sudo[3840648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user viewinn --user-current --json'
Sep  8 05:10:55 power sudo[3840648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:55 power sudo[3840648]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:55 power sudo[3840653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn LangPHP php_get_vhost_versions --output=json'
Sep  8 05:10:55 power sudo[3840653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:55 power sudo[3840653]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:55 power sudo[3840660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:10:55 power sudo[3840660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:55 power sudo[3840660]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:56 power sudo[3840679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DomainInfo single_domain_data domain=viewinn.mk return_https_redirect_status=1 --output=json'
Sep  8 05:10:56 power sudo[3840679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:56 power sudo[3840679]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:56 power sudo[3840686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn Mime list_redirects --output=json'
Sep  8 05:10:56 power sudo[3840686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:56 power sudo[3840686]: pam_unix(sudo:session): session closed for user root
Sep  8 05:10:58 power sudo[3840767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DirectoryPrivacy is_directory_protected dir=/home/viewinn/public_html --output=json'
Sep  8 05:10:58 power sudo[3840767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:10:58 power sudo[3840767]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:01 power sudo[3840963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep  8 05:11:01 power sudo[3840963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:01 power sudo[3840963]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:01 power sudo[3840978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wikicamp --output=json'
Sep  8 05:11:01 power sudo[3840978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:01 power sudo[3840978]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:10 power sudo[3841097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp /bin/sh -c 'cd /home/wikicamp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:11:10 power sudo[3841097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:10 power sudo[3841097]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:10 power sudo[3841104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wikicamp --user-current --json'
Sep  8 05:11:10 power sudo[3841104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:10 power sudo[3841104]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:10 power sudo[3841111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp LangPHP php_get_vhost_versions --output=json'
Sep  8 05:11:10 power sudo[3841111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:10 power sudo[3841111]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:10 power sudo[3841119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:11:10 power sudo[3841119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:10 power sudo[3841119]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:10 power sudo[3841141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DomainInfo single_domain_data domain=wikicamp.mk return_https_redirect_status=1 --output=json'
Sep  8 05:11:10 power sudo[3841141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:10 power sudo[3841141]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:10 power sudo[3841148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp Mime list_redirects --output=json'
Sep  8 05:11:10 power sudo[3841148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:10 power sudo[3841148]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:15 power sudo[3841248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DirectoryPrivacy is_directory_protected dir=/home/wikicamp/public_html --output=json'
Sep  8 05:11:15 power sudo[3841248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:15 power sudo[3841248]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:18 power sudo[3841455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep  8 05:11:18 power sudo[3841455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:18 power sudo[3841455]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:18 power sudo[3841461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workandt --output=json'
Sep  8 05:11:18 power sudo[3841461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:18 power sudo[3841461]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:24 power sudo[3841542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt /bin/sh -c 'cd /home/workandt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:11:24 power sudo[3841542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:24 power sudo[3841542]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:24 power sudo[3841548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workandt --user-current --json'
Sep  8 05:11:24 power sudo[3841548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:24 power sudo[3841548]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:24 power sudo[3841561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt LangPHP php_get_vhost_versions --output=json'
Sep  8 05:11:24 power sudo[3841561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:24 power sudo[3841561]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:24 power sudo[3841568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:11:24 power sudo[3841568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:24 power sudo[3841568]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:25 power sudo[3841592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DomainInfo single_domain_data domain=workandtravel.mk return_https_redirect_status=1 --output=json'
Sep  8 05:11:25 power sudo[3841592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:25 power sudo[3841592]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:25 power sudo[3841613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt Mime list_redirects --output=json'
Sep  8 05:11:25 power sudo[3841613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:25 power sudo[3841613]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:28 power sudo[3841807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DirectoryPrivacy is_directory_protected dir=/home/workandt/public_html --output=json'
Sep  8 05:11:28 power sudo[3841807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:28 power sudo[3841807]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:36 power sudo[3842127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/yoe.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:11:36 power sudo[3842127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:36 power sudo[3842127]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:36 power sudo[3842133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  8 05:11:36 power sudo[3842133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:36 power sudo[3842133]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:36 power sudo[3842139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:11:36 power sudo[3842139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:36 power sudo[3842139]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:37 power sudo[3842157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=yoe.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  8 05:11:37 power sudo[3842157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:37 power sudo[3842157]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:40 power sudo[3842232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/yoe.cetplatform.mk --output=json'
Sep  8 05:11:40 power sudo[3842232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:40 power sudo[3842232]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:43 power sudo[3842439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep  8 05:11:43 power sudo[3842439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:44 power sudo[3842439]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:44 power sudo[3842444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=youthgua --output=json'
Sep  8 05:11:44 power sudo[3842444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:44 power sudo[3842444]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:49 power sudo[3842542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua /bin/sh -c 'cd /home/youthgua/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:11:49 power sudo[3842542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:49 power sudo[3842542]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:49 power sudo[3842548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user youthgua --user-current --json'
Sep  8 05:11:49 power sudo[3842548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:49 power sudo[3842548]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:49 power sudo[3842553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua LangPHP php_get_vhost_versions --output=json'
Sep  8 05:11:49 power sudo[3842553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:49 power sudo[3842553]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:49 power sudo[3842562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:11:49 power sudo[3842562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:49 power sudo[3842562]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:49 power sudo[3842578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DomainInfo single_domain_data domain=youthguarantee-wb.eu return_https_redirect_status=1 --output=json'
Sep  8 05:11:50 power sudo[3842578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:50 power sudo[3842578]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:50 power sudo[3842588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua Mime list_redirects --output=json'
Sep  8 05:11:50 power sudo[3842588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:50 power sudo[3842588]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:53 power sudo[3842674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DirectoryPrivacy is_directory_protected dir=/home/youthgua/public_html --output=json'
Sep  8 05:11:53 power sudo[3842674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:53 power sudo[3842674]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:56 power sudo[3842868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep  8 05:11:56 power sudo[3842868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:56 power sudo[3842868]: pam_unix(sudo:session): session closed for user root
Sep  8 05:11:56 power sudo[3842874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=zampmk --output=json'
Sep  8 05:11:56 power sudo[3842874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:11:56 power sudo[3842874]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:00 power sudo[3842960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk /bin/sh -c 'cd /home/zampmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:12:00 power sudo[3842960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:00 power sudo[3842960]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:00 power sudo[3842966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user zampmk --user-current --json'
Sep  8 05:12:00 power sudo[3842966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:00 power sudo[3842966]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:00 power sudo[3842972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk LangPHP php_get_vhost_versions --output=json'
Sep  8 05:12:01 power sudo[3842972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:01 power sudo[3842972]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:01 power sudo[3842984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:12:01 power sudo[3842984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:01 power sudo[3842984]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:01 power systemd[3843015]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 05:12:01 power sudo[3843033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DomainInfo single_domain_data domain=zamp.mk return_https_redirect_status=1 --output=json'
Sep  8 05:12:01 power sudo[3843033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:01 power sudo[3843033]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:01 power sudo[3843040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk Mime list_redirects --output=json'
Sep  8 05:12:01 power sudo[3843040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:01 power sudo[3843040]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:04 power sudo[3843127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DirectoryPrivacy is_directory_protected dir=/home/zampmk/public_html --output=json'
Sep  8 05:12:04 power sudo[3843127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:04 power sudo[3843127]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:08 power sudo[3843363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep  8 05:12:08 power sudo[3843363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:08 power sudo[3843363]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:08 power sudo[3843372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ivanjord --output=json'
Sep  8 05:12:08 power sudo[3843372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:08 power sudo[3843372]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:18 power sudo[3843521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord /bin/sh -c 'cd /home/ivanjord/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:12:18 power sudo[3843521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:18 power sudo[3843521]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:18 power sudo[3843530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ivanjord --user-current --json'
Sep  8 05:12:18 power sudo[3843530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:18 power sudo[3843530]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:18 power sudo[3843535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord LangPHP php_get_vhost_versions --output=json'
Sep  8 05:12:18 power sudo[3843535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:18 power sudo[3843535]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:18 power sudo[3843540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:12:18 power sudo[3843540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:18 power sudo[3843540]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:19 power sudo[3843566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DomainInfo single_domain_data domain=novaidninazastip.mk return_https_redirect_status=1 --output=json'
Sep  8 05:12:19 power sudo[3843566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:19 power sudo[3843566]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:19 power sudo[3843572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord Mime list_redirects --output=json'
Sep  8 05:12:19 power sudo[3843572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:19 power sudo[3843572]: pam_unix(sudo:session): session closed for user root
Sep  8 05:12:24 power sudo[3843731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DirectoryPrivacy is_directory_protected dir=/home/ivanjord/public_html --output=json'
Sep  8 05:12:24 power sudo[3843731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:12:24 power sudo[3843731]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:36 power sudo[3844940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:13:36 power sudo[3844940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:36 power sudo[3844940]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:36 power sudo[3844946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep  8 05:13:36 power sudo[3844946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:36 power sudo[3844946]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:36 power sudo[3844955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:13:36 power sudo[3844955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:36 power sudo[3844955]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:36 power sudo[3844971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=izzo.mk return_https_redirect_status=1 --output=json'
Sep  8 05:13:36 power sudo[3844971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:37 power sudo[3844971]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:39 power sudo[3845058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/public_html/wp --output=json'
Sep  8 05:13:39 power sudo[3845058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:39 power sudo[3845058]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:43 power sudo[3845254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep  8 05:13:43 power sudo[3845254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:43 power sudo[3845254]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:43 power sudo[3845259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=janiboja --output=json'
Sep  8 05:13:43 power sudo[3845259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:43 power sudo[3845259]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:46 power sudo[3845320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:13:46 power sudo[3845320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:46 power sudo[3845320]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:46 power sudo[3845326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user janiboja --user-current --json'
Sep  8 05:13:46 power sudo[3845326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:46 power sudo[3845326]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:46 power sudo[3845331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja LangPHP php_get_vhost_versions --output=json'
Sep  8 05:13:46 power sudo[3845331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:46 power sudo[3845331]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:46 power sudo[3845336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:13:46 power sudo[3845336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:46 power sudo[3845336]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:47 power sudo[3845350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DomainInfo single_domain_data domain=janibojadzi.com return_https_redirect_status=1 --output=json'
Sep  8 05:13:47 power sudo[3845350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:47 power sudo[3845350]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:47 power sudo[3845359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja Mime list_redirects --output=json'
Sep  8 05:13:47 power sudo[3845359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:47 power sudo[3845359]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:49 power sudo[3845471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DirectoryPrivacy is_directory_protected dir=/home/janiboja/public_html --output=json'
Sep  8 05:13:49 power sudo[3845471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:49 power sudo[3845471]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:50 power sudo[3845543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:13:50 power sudo[3845543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:50 power sudo[3845543]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:50 power sudo[3845548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:13:50 power sudo[3845548]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:13:50 power sudo[3845548]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:13:50 power sudo[3845548]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:13:50 power sudo[3845548]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:13:50 power sudo[3845548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:50 power sudo[3845548]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:50 power sudo[3845553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:13:50 power sudo[3845553]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:13:50 power sudo[3845553]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:13:50 power sudo[3845553]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:13:50 power sudo[3845553]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:13:50 power sudo[3845553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:50 power sudo[3845553]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:50 power sudo[3845559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:13:50 power sudo[3845559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:13:50 power sudo[3845559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:13:50 power sudo[3845559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:13:50 power sudo[3845559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:13:50 power sudo[3845559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:50 power sudo[3845559]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:52 power sudo[3845654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:13:52 power sudo[3845654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:52 power sudo[3845654]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:52 power sudo[3845659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:13:52 power sudo[3845659]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:13:52 power sudo[3845659]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:13:52 power sudo[3845659]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:13:52 power sudo[3845659]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:13:52 power sudo[3845659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:52 power sudo[3845659]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:52 power sudo[3845664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:13:52 power sudo[3845664]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:13:52 power sudo[3845664]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:13:52 power sudo[3845664]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:13:52 power sudo[3845664]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:13:52 power sudo[3845664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:52 power sudo[3845664]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:52 power sudo[3845670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:13:52 power sudo[3845670]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:13:52 power sudo[3845670]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:13:52 power sudo[3845670]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:13:52 power sudo[3845670]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:13:52 power sudo[3845670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:52 power sudo[3845670]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:52 power sudo[3845709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep  8 05:13:52 power sudo[3845709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:53 power sudo[3845709]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:53 power sudo[3845718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jaramk --output=json'
Sep  8 05:13:53 power sudo[3845718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:53 power sudo[3845718]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:58 power sudo[3845801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:13:58 power sudo[3845801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:58 power sudo[3845801]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:58 power sudo[3845814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jaramk --user-current --json'
Sep  8 05:13:58 power sudo[3845814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:58 power sudo[3845814]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:58 power sudo[3845819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk LangPHP php_get_vhost_versions --output=json'
Sep  8 05:13:58 power sudo[3845819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:58 power sudo[3845819]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:58 power sudo[3845824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:13:58 power sudo[3845824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:58 power sudo[3845824]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:58 power sudo[3845839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DomainInfo single_domain_data domain=jara.mk return_https_redirect_status=1 --output=json'
Sep  8 05:13:58 power sudo[3845839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:58 power sudo[3845839]: pam_unix(sudo:session): session closed for user root
Sep  8 05:13:58 power sudo[3845845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk Mime list_redirects --output=json'
Sep  8 05:13:58 power sudo[3845845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:13:59 power sudo[3845845]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:01 power sudo[3845935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DirectoryPrivacy is_directory_protected dir=/home/jaramk/public_html --output=json'
Sep  8 05:14:01 power sudo[3845935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:01 power sudo[3845935]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:02 power sudo[3845997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:14:02 power sudo[3845997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:02 power sudo[3845997]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:02 power sudo[3846002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep  8 05:14:02 power sudo[3846002]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep  8 05:14:02 power sudo[3846002]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep  8 05:14:02 power sudo[3846002]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep  8 05:14:02 power sudo[3846002]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:14:02 power sudo[3846002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:02 power sudo[3846002]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:02 power sudo[3846007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 05:14:02 power sudo[3846007]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 05:14:02 power sudo[3846007]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 05:14:02 power sudo[3846007]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 05:14:02 power sudo[3846007]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:14:02 power sudo[3846007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:02 power sudo[3846007]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:02 power sudo[3846012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 05:14:02 power sudo[3846012]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 05:14:02 power sudo[3846012]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 05:14:02 power sudo[3846012]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 05:14:02 power sudo[3846012]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:14:02 power sudo[3846012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:02 power sudo[3846012]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:04 power sudo[3846122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:14:04 power sudo[3846122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:04 power sudo[3846122]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:04 power sudo[3846127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep  8 05:14:04 power sudo[3846127]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep  8 05:14:04 power sudo[3846127]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep  8 05:14:04 power sudo[3846127]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep  8 05:14:04 power sudo[3846127]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:14:04 power sudo[3846127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:04 power sudo[3846127]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:04 power sudo[3846132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 05:14:04 power sudo[3846132]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 05:14:04 power sudo[3846132]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 05:14:04 power sudo[3846132]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 05:14:04 power sudo[3846132]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:14:04 power sudo[3846132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:04 power sudo[3846132]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:04 power sudo[3846137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  8 05:14:04 power sudo[3846137]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  8 05:14:04 power sudo[3846137]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  8 05:14:04 power sudo[3846137]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  8 05:14:04 power sudo[3846137]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:14:04 power sudo[3846137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:04 power sudo[3846137]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:05 power sudo[3846177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep  8 05:14:05 power sudo[3846177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:05 power sudo[3846177]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:05 power sudo[3846182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=innofabl --output=json'
Sep  8 05:14:05 power sudo[3846182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:05 power sudo[3846182]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:19 power sudo[3846408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/kupireciklirano.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:14:19 power sudo[3846408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:19 power sudo[3846408]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:19 power sudo[3846414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep  8 05:14:19 power sudo[3846414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:19 power sudo[3846414]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:19 power sudo[3846427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl LangPHP php_get_vhost_versions --output=json'
Sep  8 05:14:19 power sudo[3846427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:19 power sudo[3846427]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:20 power sudo[3846435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:14:20 power sudo[3846435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:20 power sudo[3846435]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:22 power sudo[3846493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=kupireciklirano.mk return_https_redirect_status=1 --output=json'
Sep  8 05:14:22 power sudo[3846493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:22 power sudo[3846493]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:22 power sudo[3846500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl Mime list_redirects --output=json'
Sep  8 05:14:22 power sudo[3846500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:22 power sudo[3846500]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:31 power sudo[3846665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/kupireciklirano.mk --output=json'
Sep  8 05:14:31 power sudo[3846665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:31 power sudo[3846665]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:35 power sudo[3846922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep  8 05:14:35 power sudo[3846922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:35 power sudo[3846922]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:35 power sudo[3846928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mapaspla --output=json'
Sep  8 05:14:35 power sudo[3846928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:35 power sudo[3846928]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:38 power sudo[3847014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:14:38 power sudo[3847014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:38 power sudo[3847014]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:38 power sudo[3847024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep  8 05:14:38 power sudo[3847024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:39 power sudo[3847024]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:39 power sudo[3847032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla LangPHP php_get_vhost_versions --output=json'
Sep  8 05:14:39 power sudo[3847032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:39 power sudo[3847032]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:39 power sudo[3847038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:14:39 power sudo[3847038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:39 power sudo[3847038]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:40 power sudo[3847061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DomainInfo single_domain_data domain=mapasplastik.com return_https_redirect_status=1 --output=json'
Sep  8 05:14:40 power sudo[3847061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:40 power sudo[3847061]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:40 power sudo[3847074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla Mime list_redirects --output=json'
Sep  8 05:14:40 power sudo[3847074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:40 power sudo[3847074]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:42 power sudo[3847167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html/eng --output=json'
Sep  8 05:14:42 power sudo[3847167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:43 power sudo[3847167]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:59 power sudo[3847616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:14:59 power sudo[3847616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:59 power sudo[3847616]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:59 power sudo[3847629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep  8 05:14:59 power sudo[3847629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:59 power sudo[3847629]: pam_unix(sudo:session): session closed for user root
Sep  8 05:14:59 power sudo[3847634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:14:59 power sudo[3847634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:14:59 power sudo[3847634]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:01 power systemd[3847773]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:15:02 power sudo[3847856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html --output=json'
Sep  8 05:15:02 power sudo[3847856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:03 power sudo[3847856]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:08 power sudo[3848111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep  8 05:15:08 power sudo[3848111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:08 power sudo[3848111]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:08 power sudo[3848117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mediatag --output=json'
Sep  8 05:15:08 power sudo[3848117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:08 power sudo[3848117]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:13 power sudo[3848220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag /bin/sh -c 'cd /home/mediatag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:15:13 power sudo[3848220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:13 power sudo[3848220]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:13 power sudo[3848226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mediatag --user-current --json'
Sep  8 05:15:13 power sudo[3848226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:13 power sudo[3848226]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:13 power sudo[3848231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag LangPHP php_get_vhost_versions --output=json'
Sep  8 05:15:13 power sudo[3848231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:13 power sudo[3848231]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:13 power sudo[3848236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:15:13 power sudo[3848236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:13 power sudo[3848236]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:14 power sudo[3848249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DomainInfo single_domain_data domain=mediatag.mk return_https_redirect_status=1 --output=json'
Sep  8 05:15:14 power sudo[3848249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:14 power sudo[3848249]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:14 power sudo[3848258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag Mime list_redirects --output=json'
Sep  8 05:15:14 power sudo[3848258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:14 power sudo[3848258]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:19 power sudo[3848384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DirectoryPrivacy is_directory_protected dir=/home/mediatag/public_html --output=json'
Sep  8 05:15:19 power sudo[3848384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:19 power sudo[3848384]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:29 power sudo[3848690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/mulprotex.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:15:29 power sudo[3848690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:29 power sudo[3848690]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:30 power sudo[3848696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep  8 05:15:30 power sudo[3848696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:30 power sudo[3848696]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:30 power sudo[3848704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:15:30 power sudo[3848704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:30 power sudo[3848704]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:30 power sudo[3848718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=mulprotex.com return_https_redirect_status=1 --output=json'
Sep  8 05:15:30 power sudo[3848718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:30 power sudo[3848718]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:35 power sudo[3848880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/mulprotex.com --output=json'
Sep  8 05:15:35 power sudo[3848880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:35 power sudo[3848880]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:38 power sudo[3849072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep  8 05:15:38 power sudo[3849072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:38 power sudo[3849072]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:38 power sudo[3849077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nefrolog --output=json'
Sep  8 05:15:38 power sudo[3849077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:38 power sudo[3849077]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:42 power sudo[3849174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog /bin/sh -c 'cd /home/nefrolog/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:15:42 power sudo[3849174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:42 power sudo[3849174]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:42 power sudo[3849180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nefrolog --user-current --json'
Sep  8 05:15:42 power sudo[3849180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:42 power sudo[3849180]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:42 power sudo[3849187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog LangPHP php_get_vhost_versions --output=json'
Sep  8 05:15:42 power sudo[3849187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:42 power sudo[3849187]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:42 power sudo[3849192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:15:42 power sudo[3849192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:42 power sudo[3849192]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:43 power sudo[3849209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DomainInfo single_domain_data domain=nefrologija.mk return_https_redirect_status=1 --output=json'
Sep  8 05:15:43 power sudo[3849209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:43 power sudo[3849209]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:43 power sudo[3849215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog Mime list_redirects --output=json'
Sep  8 05:15:43 power sudo[3849215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:43 power sudo[3849215]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:46 power sudo[3849311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DirectoryPrivacy is_directory_protected dir=/home/nefrolog/public_html --output=json'
Sep  8 05:15:46 power sudo[3849311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:46 power sudo[3849311]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:49 power sudo[3849506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep  8 05:15:49 power sudo[3849506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:50 power sudo[3849506]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:50 power sudo[3849512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikimare --output=json'
Sep  8 05:15:50 power sudo[3849512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:50 power sudo[3849512]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:56 power sudo[3849634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:15:56 power sudo[3849634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:56 power sudo[3849634]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:56 power sudo[3849640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep  8 05:15:56 power sudo[3849640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:57 power sudo[3849640]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:57 power sudo[3849650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare LangPHP php_get_vhost_versions --output=json'
Sep  8 05:15:57 power sudo[3849650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:57 power sudo[3849650]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:57 power sudo[3849658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:15:57 power sudo[3849658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:57 power sudo[3849658]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:57 power sudo[3849673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DomainInfo single_domain_data domain=niki-mare.com return_https_redirect_status=1 --output=json'
Sep  8 05:15:57 power sudo[3849673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:57 power sudo[3849673]: pam_unix(sudo:session): session closed for user root
Sep  8 05:15:57 power sudo[3849681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare Mime list_redirects --output=json'
Sep  8 05:15:57 power sudo[3849681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:15:57 power sudo[3849681]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:01 power sudo[3849777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html/wp --output=json'
Sep  8 05:16:01 power sudo[3849777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:01 power sudo[3849777]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:11 power sudo[3850097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:16:11 power sudo[3850097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:11 power sudo[3850097]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:11 power sudo[3850103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep  8 05:16:11 power sudo[3850103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:11 power sudo[3850103]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:12 power sudo[3850108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:16:12 power sudo[3850108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:12 power sudo[3850108]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:16 power sudo[3850207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html --output=json'
Sep  8 05:16:16 power sudo[3850207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:16 power sudo[3850207]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:19 power sudo[3850411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep  8 05:16:19 power sudo[3850411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:19 power sudo[3850411]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:19 power sudo[3850418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nucktra1 --output=json'
Sep  8 05:16:19 power sudo[3850418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:20 power sudo[3850418]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:24 power sudo[3850514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:16:24 power sudo[3850514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:24 power sudo[3850514]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:24 power sudo[3850520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep  8 05:16:24 power sudo[3850520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:24 power sudo[3850520]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:24 power sudo[3850526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 LangPHP php_get_vhost_versions --output=json'
Sep  8 05:16:24 power sudo[3850526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:24 power sudo[3850526]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:24 power sudo[3850533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php56 --output=json'
Sep  8 05:16:24 power sudo[3850533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:25 power sudo[3850533]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:25 power sudo[3850546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:16:25 power sudo[3850546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:25 power sudo[3850546]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:25 power sudo[3850563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep  8 05:16:25 power sudo[3850563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:26 power sudo[3850563]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:26 power sudo[3850568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 Mime list_redirects --output=json'
Sep  8 05:16:26 power sudo[3850568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:26 power sudo[3850568]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:30 power sudo[3850651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/public_html --output=json'
Sep  8 05:16:30 power sudo[3850651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:30 power sudo[3850651]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:35 power sudo[3851049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep  8 05:16:35 power sudo[3851049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:35 power sudo[3851049]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:35 power sudo[3851055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pravekom --output=json'
Sep  8 05:16:35 power sudo[3851055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:35 power sudo[3851055]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:46 power sudo[3851237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom /bin/sh -c 'cd /home/pravekom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:16:46 power sudo[3851237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:46 power sudo[3851237]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:46 power sudo[3851242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pravekom --user-current --json'
Sep  8 05:16:46 power sudo[3851242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:46 power sudo[3851242]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:46 power sudo[3851250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom LangPHP php_get_vhost_versions --output=json'
Sep  8 05:16:46 power sudo[3851250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:46 power sudo[3851250]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:46 power sudo[3851258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:16:46 power sudo[3851258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:46 power sudo[3851258]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:47 power sudo[3851272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DomainInfo single_domain_data domain=praveko.mk return_https_redirect_status=1 --output=json'
Sep  8 05:16:47 power sudo[3851272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:47 power sudo[3851272]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:47 power sudo[3851279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom Mime list_redirects --output=json'
Sep  8 05:16:47 power sudo[3851279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:47 power sudo[3851279]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:53 power sudo[3851411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DirectoryPrivacy is_directory_protected dir=/home/pravekom/public_html --output=json'
Sep  8 05:16:53 power sudo[3851411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:53 power sudo[3851411]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:56 power sudo[3851608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep  8 05:16:56 power sudo[3851608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:56 power sudo[3851608]: pam_unix(sudo:session): session closed for user root
Sep  8 05:16:56 power sudo[3851614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=proverim --output=json'
Sep  8 05:16:56 power sudo[3851614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:16:57 power sudo[3851614]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:02 power sudo[3851739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:17:02 power sudo[3851739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:02 power sudo[3851739]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:02 power sudo[3851745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user proverim --user-current --json'
Sep  8 05:17:02 power sudo[3851745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:03 power sudo[3851745]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:03 power sudo[3851752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim LangPHP php_get_vhost_versions --output=json'
Sep  8 05:17:03 power sudo[3851752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:03 power sudo[3851752]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:03 power sudo[3851761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:17:03 power sudo[3851761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:03 power sudo[3851761]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:03 power sudo[3851779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DomainInfo single_domain_data domain=proveri.mk return_https_redirect_status=1 --output=json'
Sep  8 05:17:03 power sudo[3851779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:03 power sudo[3851779]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:03 power sudo[3851785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim Mime list_redirects --output=json'
Sep  8 05:17:03 power sudo[3851785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:03 power sudo[3851785]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:06 power sudo[3851878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DirectoryPrivacy is_directory_protected dir=/home/proverim/public_html --output=json'
Sep  8 05:17:06 power sudo[3851878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:06 power sudo[3851878]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:07 power sudo[3851943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:07 power sudo[3851943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:07 power sudo[3851943]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:07 power sudo[3851948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:17:07 power sudo[3851948]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:17:07 power sudo[3851948]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:17:07 power sudo[3851948]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:17:07 power sudo[3851948]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:07 power sudo[3851948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:07 power sudo[3851948]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:07 power sudo[3851953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:07 power sudo[3851953]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:07 power sudo[3851953]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:07 power sudo[3851953]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:07 power sudo[3851953]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:07 power sudo[3851953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:07 power sudo[3851953]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:07 power sudo[3851959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:07 power sudo[3851959]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:07 power sudo[3851959]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:07 power sudo[3851959]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:07 power sudo[3851959]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:07 power sudo[3851959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:07 power sudo[3851959]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:09 power sudo[3852104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:09 power sudo[3852104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:09 power sudo[3852104]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:09 power sudo[3852109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:17:09 power sudo[3852109]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:17:09 power sudo[3852109]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:17:09 power sudo[3852109]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:17:09 power sudo[3852109]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:09 power sudo[3852109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:09 power sudo[3852109]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:09 power sudo[3852114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:09 power sudo[3852114]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:09 power sudo[3852114]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:09 power sudo[3852114]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:09 power sudo[3852114]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:09 power sudo[3852114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:09 power sudo[3852114]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:09 power sudo[3852119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:09 power sudo[3852119]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:09 power sudo[3852119]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:09 power sudo[3852119]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:09 power sudo[3852119]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:09 power sudo[3852119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:09 power sudo[3852119]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:10 power sudo[3852174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep  8 05:17:10 power sudo[3852174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:10 power sudo[3852174]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:10 power sudo[3852183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rastiraz --output=json'
Sep  8 05:17:10 power sudo[3852183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:10 power sudo[3852183]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:13 power sudo[3852255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:17:13 power sudo[3852255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:13 power sudo[3852255]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:13 power sudo[3852261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rastiraz --user-current --json'
Sep  8 05:17:13 power sudo[3852261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:14 power sudo[3852261]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:14 power sudo[3852269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz LangPHP php_get_vhost_versions --output=json'
Sep  8 05:17:14 power sudo[3852269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:14 power sudo[3852269]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:14 power sudo[3852281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:17:14 power sudo[3852281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:14 power sudo[3852281]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:14 power sudo[3852296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DomainInfo single_domain_data domain=rastirazvoj.mk return_https_redirect_status=1 --output=json'
Sep  8 05:17:14 power sudo[3852296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:14 power sudo[3852296]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:14 power sudo[3852307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz Mime list_redirects --output=json'
Sep  8 05:17:14 power sudo[3852307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:14 power sudo[3852307]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:16 power sudo[3852379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DirectoryPrivacy is_directory_protected dir=/home/rastiraz/public_html --output=json'
Sep  8 05:17:16 power sudo[3852379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:16 power sudo[3852379]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:17 power sudo[3852441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:17 power sudo[3852441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:17 power sudo[3852441]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:17 power sudo[3852446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:17:17 power sudo[3852446]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:17:17 power sudo[3852446]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:17:17 power sudo[3852446]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:17:17 power sudo[3852446]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:17 power sudo[3852446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:17 power sudo[3852446]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:17 power sudo[3852452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:17 power sudo[3852452]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:17 power sudo[3852452]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:17 power sudo[3852452]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:17 power sudo[3852452]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:17 power sudo[3852452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:17 power sudo[3852452]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:17 power sudo[3852457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:17 power sudo[3852457]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:17 power sudo[3852457]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:17 power sudo[3852457]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:17 power sudo[3852457]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:17 power sudo[3852457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:17 power sudo[3852457]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:19 power sudo[3852592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:19 power sudo[3852592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:19 power sudo[3852592]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:19 power sudo[3852597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:17:19 power sudo[3852597]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:17:19 power sudo[3852597]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:17:19 power sudo[3852597]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:17:19 power sudo[3852597]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:19 power sudo[3852597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:19 power sudo[3852597]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:19 power sudo[3852602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:19 power sudo[3852602]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:19 power sudo[3852602]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:19 power sudo[3852602]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:19 power sudo[3852602]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:19 power sudo[3852602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:19 power sudo[3852602]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:19 power sudo[3852607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:19 power sudo[3852607]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:19 power sudo[3852607]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:19 power sudo[3852607]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:19 power sudo[3852607]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:19 power sudo[3852607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:19 power sudo[3852607]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:20 power sudo[3852663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep  8 05:17:20 power sudo[3852663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:20 power sudo[3852663]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:20 power sudo[3852670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=conserva --output=json'
Sep  8 05:17:20 power sudo[3852670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:20 power sudo[3852670]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:24 power sudo[3852775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva /bin/sh -c 'cd /home/conserva/RebornMacedonia.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:17:24 power sudo[3852775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:24 power sudo[3852775]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:24 power sudo[3852781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user conserva --user-current --json'
Sep  8 05:17:24 power sudo[3852781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:24 power sudo[3852781]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:24 power sudo[3852789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva LangPHP php_get_vhost_versions --output=json'
Sep  8 05:17:24 power sudo[3852789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:24 power sudo[3852789]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:24 power sudo[3852797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:17:24 power sudo[3852797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:24 power sudo[3852797]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:25 power sudo[3852812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DomainInfo single_domain_data domain=rebornmacedonia.com return_https_redirect_status=1 --output=json'
Sep  8 05:17:25 power sudo[3852812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:25 power sudo[3852812]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:25 power sudo[3852823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva Mime list_redirects --output=json'
Sep  8 05:17:25 power sudo[3852823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:25 power sudo[3852823]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:28 power sudo[3852908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DirectoryPrivacy is_directory_protected dir=/home/conserva/RebornMacedonia.com --output=json'
Sep  8 05:17:28 power sudo[3852908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:28 power sudo[3852908]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:31 power sudo[3853104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep  8 05:17:31 power sudo[3853104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:31 power sudo[3853104]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:31 power sudo[3853109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=maleshne --output=json'
Sep  8 05:17:32 power sudo[3853109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:32 power sudo[3853109]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:36 power sudo[3853230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:17:36 power sudo[3853230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:36 power sudo[3853230]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:36 power sudo[3853236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user maleshne --user-current --json'
Sep  8 05:17:36 power sudo[3853236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:36 power sudo[3853236]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:36 power sudo[3853243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne LangPHP php_get_vhost_versions --output=json'
Sep  8 05:17:36 power sudo[3853243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:36 power sudo[3853243]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:36 power sudo[3853248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:17:36 power sudo[3853248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:36 power sudo[3853248]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:37 power sudo[3853262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DomainInfo single_domain_data domain=restoranmrs.mk return_https_redirect_status=1 --output=json'
Sep  8 05:17:37 power sudo[3853262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:37 power sudo[3853262]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:37 power sudo[3853268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne Mime list_redirects --output=json'
Sep  8 05:17:37 power sudo[3853268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:37 power sudo[3853268]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:39 power sudo[3853356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DirectoryPrivacy is_directory_protected dir=/home/maleshne/public_html --output=json'
Sep  8 05:17:39 power sudo[3853356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:39 power sudo[3853356]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:40 power sudo[3853419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:40 power sudo[3853419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:40 power sudo[3853419]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:40 power sudo[3853424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:17:40 power sudo[3853424]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:17:40 power sudo[3853424]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:17:40 power sudo[3853424]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:17:40 power sudo[3853424]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:40 power sudo[3853424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:40 power sudo[3853424]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:40 power sudo[3853429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:40 power sudo[3853429]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:40 power sudo[3853429]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:40 power sudo[3853429]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:40 power sudo[3853429]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:40 power sudo[3853429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:40 power sudo[3853429]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:43 power sudo[3853566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:43 power sudo[3853566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:43 power sudo[3853566]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:43 power sudo[3853571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:17:43 power sudo[3853571]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:17:43 power sudo[3853571]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:17:43 power sudo[3853571]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:17:43 power sudo[3853571]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:43 power sudo[3853571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:43 power sudo[3853571]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:43 power sudo[3853579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:17:43 power sudo[3853579]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:17:43 power sudo[3853579]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:17:43 power sudo[3853579]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:17:43 power sudo[3853579]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:17:43 power sudo[3853579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:43 power sudo[3853579]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:44 power sudo[3853615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep  8 05:17:44 power sudo[3853615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:44 power sudo[3853615]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:44 power sudo[3853620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=samasped --output=json'
Sep  8 05:17:44 power sudo[3853620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:44 power sudo[3853620]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:51 power sudo[3853766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped /bin/sh -c 'cd /home/samasped/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:17:51 power sudo[3853766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:51 power sudo[3853766]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:51 power sudo[3853773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user samasped --user-current --json'
Sep  8 05:17:51 power sudo[3853773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:51 power sudo[3853773]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:51 power sudo[3853783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped LangPHP php_get_vhost_versions --output=json'
Sep  8 05:17:51 power sudo[3853783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:51 power sudo[3853783]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:51 power sudo[3853788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:17:51 power sudo[3853788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:51 power sudo[3853788]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:52 power sudo[3853801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DomainInfo single_domain_data domain=samasped.mk return_https_redirect_status=1 --output=json'
Sep  8 05:17:52 power sudo[3853801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:52 power sudo[3853801]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:52 power sudo[3853807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped Mime list_redirects --output=json'
Sep  8 05:17:52 power sudo[3853807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:52 power sudo[3853807]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:55 power sudo[3853918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DirectoryPrivacy is_directory_protected dir=/home/samasped/public_html --output=json'
Sep  8 05:17:55 power sudo[3853918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:55 power sudo[3853918]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:59 power sudo[3854315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep  8 05:17:59 power sudo[3854315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:59 power sudo[3854315]: pam_unix(sudo:session): session closed for user root
Sep  8 05:17:59 power sudo[3854324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=seloviro --output=json'
Sep  8 05:17:59 power sudo[3854324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:17:59 power sudo[3854324]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:05 power sudo[3854483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:18:05 power sudo[3854483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:05 power sudo[3854483]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:05 power sudo[3854490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user seloviro --user-current --json'
Sep  8 05:18:05 power sudo[3854490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:05 power sudo[3854490]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:05 power sudo[3854500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro LangPHP php_get_vhost_versions --output=json'
Sep  8 05:18:05 power sudo[3854500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:06 power sudo[3854500]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:06 power sudo[3854505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:18:06 power sudo[3854505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:06 power sudo[3854505]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:06 power sudo[3854528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DomainInfo single_domain_data domain=selovirovo.mk return_https_redirect_status=1 --output=json'
Sep  8 05:18:06 power sudo[3854528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:06 power sudo[3854528]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:06 power sudo[3854534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro Mime list_redirects --output=json'
Sep  8 05:18:06 power sudo[3854534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:06 power sudo[3854534]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:10 power sudo[3854646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DirectoryPrivacy is_directory_protected dir=/home/seloviro/public_html --output=json'
Sep  8 05:18:10 power sudo[3854646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:10 power sudo[3854646]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:11 power sudo[3854708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:18:11 power sudo[3854708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:11 power sudo[3854708]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:11 power sudo[3854713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:18:11 power sudo[3854713]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:18:11 power sudo[3854713]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:18:11 power sudo[3854713]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:18:11 power sudo[3854713]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:18:11 power sudo[3854713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:11 power sudo[3854713]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:11 power sudo[3854718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:18:11 power sudo[3854718]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:18:11 power sudo[3854718]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:18:11 power sudo[3854718]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:18:11 power sudo[3854718]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:18:11 power sudo[3854718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:11 power sudo[3854718]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:11 power sudo[3854724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:18:11 power sudo[3854724]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:18:11 power sudo[3854724]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:18:11 power sudo[3854724]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:18:11 power sudo[3854724]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:18:11 power sudo[3854724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:11 power sudo[3854724]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:13 power sudo[3854841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:18:13 power sudo[3854841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:13 power sudo[3854841]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:13 power sudo[3854846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:18:13 power sudo[3854846]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:18:13 power sudo[3854846]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:18:13 power sudo[3854846]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:18:13 power sudo[3854846]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:18:13 power sudo[3854846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:13 power sudo[3854846]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:13 power sudo[3854851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:18:13 power sudo[3854851]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:18:13 power sudo[3854851]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:18:13 power sudo[3854851]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:18:13 power sudo[3854851]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:18:13 power sudo[3854851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:13 power sudo[3854851]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:13 power sudo[3854856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:18:13 power sudo[3854856]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:18:13 power sudo[3854856]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:18:13 power sudo[3854856]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:18:13 power sudo[3854856]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:18:13 power sudo[3854856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:13 power sudo[3854856]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:14 power sudo[3854904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep  8 05:18:14 power sudo[3854904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:14 power sudo[3854904]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:14 power sudo[3854918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=skyapart --output=json'
Sep  8 05:18:14 power sudo[3854918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:14 power sudo[3854918]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:16 power sudo[3854990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart /bin/sh -c 'cd /home/skyapart/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:18:16 power sudo[3854990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:16 power sudo[3854990]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:16 power sudo[3854996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user skyapart --user-current --json'
Sep  8 05:18:16 power sudo[3854996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:16 power sudo[3854996]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:16 power sudo[3855001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart LangPHP php_get_vhost_versions --output=json'
Sep  8 05:18:16 power sudo[3855001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:17 power sudo[3855001]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:17 power sudo[3855006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:18:17 power sudo[3855006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:17 power sudo[3855006]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:17 power sudo[3855025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DomainInfo single_domain_data domain=skyapartments.mk return_https_redirect_status=1 --output=json'
Sep  8 05:18:17 power sudo[3855025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:17 power sudo[3855025]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:17 power sudo[3855031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart Mime list_redirects --output=json'
Sep  8 05:18:17 power sudo[3855031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:17 power sudo[3855031]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:19 power sudo[3855122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DirectoryPrivacy is_directory_protected dir=/home/skyapart/public_html --output=json'
Sep  8 05:18:19 power sudo[3855122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:19 power sudo[3855122]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:23 power sudo[3855321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep  8 05:18:23 power sudo[3855321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:23 power sudo[3855321]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:23 power sudo[3855329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=socioloz --output=json'
Sep  8 05:18:23 power sudo[3855329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:23 power sudo[3855329]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:33 power sudo[3855482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz /bin/sh -c 'cd /home/socioloz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:18:33 power sudo[3855482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:33 power sudo[3855482]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:33 power sudo[3855496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user socioloz --user-current --json'
Sep  8 05:18:33 power sudo[3855496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:33 power sudo[3855496]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:33 power sudo[3855505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz LangPHP php_get_vhost_versions --output=json'
Sep  8 05:18:33 power sudo[3855505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:33 power sudo[3855505]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:33 power sudo[3855510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:18:33 power sudo[3855510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:33 power sudo[3855510]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:34 power sudo[3855525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DomainInfo single_domain_data domain=sociolozi.org.mk return_https_redirect_status=1 --output=json'
Sep  8 05:18:34 power sudo[3855525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:34 power sudo[3855525]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:34 power sudo[3855531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz Mime list_redirects --output=json'
Sep  8 05:18:34 power sudo[3855531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:34 power sudo[3855531]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:40 power sudo[3855696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DirectoryPrivacy is_directory_protected dir=/home/socioloz/public_html --output=json'
Sep  8 05:18:40 power sudo[3855696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:40 power sudo[3855696]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:45 power sudo[3855899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep  8 05:18:45 power sudo[3855899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:45 power sudo[3855899]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:45 power sudo[3855907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stojnevi --output=json'
Sep  8 05:18:45 power sudo[3855907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:45 power sudo[3855907]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:48 power sudo[3856001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi /bin/sh -c 'cd /home/stojnevi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:18:48 power sudo[3856001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:48 power sudo[3856001]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:48 power sudo[3856009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stojnevi --user-current --json'
Sep  8 05:18:48 power sudo[3856009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:48 power sudo[3856009]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:49 power sudo[3856015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi LangPHP php_get_vhost_versions --output=json'
Sep  8 05:18:49 power sudo[3856015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:49 power sudo[3856015]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:49 power sudo[3856020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:18:49 power sudo[3856020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:49 power sudo[3856020]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:49 power sudo[3856040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DomainInfo single_domain_data domain=stojnevi.mk return_https_redirect_status=1 --output=json'
Sep  8 05:18:49 power sudo[3856040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:49 power sudo[3856040]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:49 power sudo[3856049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi Mime list_redirects --output=json'
Sep  8 05:18:49 power sudo[3856049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:49 power sudo[3856049]: pam_unix(sudo:session): session closed for user root
Sep  8 05:18:52 power sudo[3856149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DirectoryPrivacy is_directory_protected dir=/home/stojnevi/public_html --output=json'
Sep  8 05:18:52 power sudo[3856149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:18:52 power sudo[3856149]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:02 power sudo[3856554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/teatar.nucktrajkoprokopiev.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:19:02 power sudo[3856554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:02 power sudo[3856554]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:02 power sudo[3856560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep  8 05:19:02 power sudo[3856560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:02 power sudo[3856560]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:02 power sudo[3856567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:19:02 power sudo[3856567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:02 power sudo[3856567]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:03 power sudo[3856580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=teatar.nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep  8 05:19:03 power sudo[3856580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:03 power sudo[3856580]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:06 power sudo[3856687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/teatar.nucktrajkoprokopiev.mk/mk --output=json'
Sep  8 05:19:06 power sudo[3856687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:06 power sudo[3856687]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:10 power sudo[3856900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep  8 05:19:10 power sudo[3856900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:10 power sudo[3856900]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:10 power sudo[3856913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=trudovop --output=json'
Sep  8 05:19:10 power sudo[3856913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:10 power sudo[3856913]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:18 power sudo[3857057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop /bin/sh -c 'cd /home/trudovop/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:19:18 power sudo[3857057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:18 power sudo[3857057]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:18 power sudo[3857063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user trudovop --user-current --json'
Sep  8 05:19:18 power sudo[3857063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:18 power sudo[3857063]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:18 power sudo[3857068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop LangPHP php_get_vhost_versions --output=json'
Sep  8 05:19:18 power sudo[3857068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:18 power sudo[3857068]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:18 power sudo[3857073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:19:19 power sudo[3857073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:19 power sudo[3857073]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:19 power sudo[3857090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DomainInfo single_domain_data domain=trudovopravo.mk return_https_redirect_status=1 --output=json'
Sep  8 05:19:19 power sudo[3857090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:19 power sudo[3857090]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:19 power sudo[3857097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop Mime list_redirects --output=json'
Sep  8 05:19:19 power sudo[3857097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:19 power sudo[3857097]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:24 power sudo[3857192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DirectoryPrivacy is_directory_protected dir=/home/trudovop/public_html --output=json'
Sep  8 05:19:24 power sudo[3857192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:24 power sudo[3857192]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:27 power sudo[3857403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep  8 05:19:27 power sudo[3857403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:27 power sudo[3857403]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:27 power sudo[3857409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=urbanexp --output=json'
Sep  8 05:19:27 power sudo[3857409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:28 power sudo[3857409]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:34 power sudo[3857553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp /bin/sh -c 'cd /home/urbanexp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:19:34 power sudo[3857553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:34 power sudo[3857553]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:34 power sudo[3857559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user urbanexp --user-current --json'
Sep  8 05:19:34 power sudo[3857559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:34 power sudo[3857559]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:34 power sudo[3857565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp LangPHP php_get_vhost_versions --output=json'
Sep  8 05:19:34 power sudo[3857565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:35 power sudo[3857565]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:35 power sudo[3857573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:19:35 power sudo[3857573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:35 power sudo[3857573]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:35 power sudo[3857589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DomainInfo single_domain_data domain=urbanexpert.mk return_https_redirect_status=1 --output=json'
Sep  8 05:19:35 power sudo[3857589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:35 power sudo[3857589]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:35 power sudo[3857603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp Mime list_redirects --output=json'
Sep  8 05:19:35 power sudo[3857603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:35 power sudo[3857603]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:38 power sudo[3857729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DirectoryPrivacy is_directory_protected dir=/home/urbanexp/public_html --output=json'
Sep  8 05:19:38 power sudo[3857729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:38 power sudo[3857729]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:41 power sudo[3857930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep  8 05:19:41 power sudo[3857930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:42 power sudo[3857930]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:42 power sudo[3857936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vfxnestc --output=json'
Sep  8 05:19:42 power sudo[3857936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:42 power sudo[3857936]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:48 power sudo[3858034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc /bin/sh -c 'cd /home/vfxnestc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:19:48 power sudo[3858034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:48 power sudo[3858034]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:48 power sudo[3858040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vfxnestc --user-current --json'
Sep  8 05:19:48 power sudo[3858040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:48 power sudo[3858040]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:48 power sudo[3858065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc LangPHP php_get_vhost_versions --output=json'
Sep  8 05:19:48 power sudo[3858065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:48 power sudo[3858065]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:48 power sudo[3858076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:19:48 power sudo[3858076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:48 power sudo[3858076]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:48 power sudo[3858092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DomainInfo single_domain_data domain=vfxnest.com return_https_redirect_status=1 --output=json'
Sep  8 05:19:48 power sudo[3858092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:49 power sudo[3858092]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:49 power sudo[3858099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc Mime list_redirects --output=json'
Sep  8 05:19:49 power sudo[3858099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:49 power sudo[3858099]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:52 power sudo[3858184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DirectoryPrivacy is_directory_protected dir=/home/vfxnestc/public_html --output=json'
Sep  8 05:19:52 power sudo[3858184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:52 power sudo[3858184]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:57 power sudo[3858398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep  8 05:19:57 power sudo[3858398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:58 power sudo[3858398]: pam_unix(sudo:session): session closed for user root
Sep  8 05:19:58 power sudo[3858404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=volkanco --output=json'
Sep  8 05:19:58 power sudo[3858404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:19:58 power sudo[3858404]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:01 power systemd[3858570]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:20:02 power sudo[3858606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:20:02 power sudo[3858606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:02 power sudo[3858606]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:02 power sudo[3858614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep  8 05:20:02 power sudo[3858614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:02 power sudo[3858614]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:02 power sudo[3858623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco LangPHP php_get_vhost_versions --output=json'
Sep  8 05:20:02 power sudo[3858623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:02 power sudo[3858623]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:02 power sudo[3858630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:20:02 power sudo[3858630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:02 power sudo[3858630]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:03 power sudo[3858650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DomainInfo single_domain_data domain=volkan.com.mk return_https_redirect_status=1 --output=json'
Sep  8 05:20:03 power sudo[3858650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:03 power sudo[3858650]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:03 power sudo[3858660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mime list_redirects --output=json'
Sep  8 05:20:03 power sudo[3858660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:03 power sudo[3858660]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:05 power sudo[3858760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DirectoryPrivacy is_directory_protected dir=/home/volkanco/public_html --output=json'
Sep  8 05:20:05 power sudo[3858760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:05 power sudo[3858760]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:06 power sudo[3858835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:20:06 power sudo[3858835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:06 power sudo[3858835]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:06 power sudo[3858840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:20:06 power sudo[3858840]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:20:06 power sudo[3858840]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:20:06 power sudo[3858840]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:20:06 power sudo[3858840]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:20:06 power sudo[3858840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:06 power sudo[3858840]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:06 power sudo[3858845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:20:06 power sudo[3858845]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:20:06 power sudo[3858845]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:20:06 power sudo[3858845]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:20:06 power sudo[3858845]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:20:06 power sudo[3858845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:07 power sudo[3858845]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:07 power sudo[3858854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:20:07 power sudo[3858854]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:20:07 power sudo[3858854]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:20:07 power sudo[3858854]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:20:07 power sudo[3858854]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:20:07 power sudo[3858854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:07 power sudo[3858854]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:09 power sudo[3858971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:20:09 power sudo[3858971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:09 power sudo[3858971]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:09 power sudo[3858976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  8 05:20:09 power sudo[3858976]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  8 05:20:09 power sudo[3858976]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  8 05:20:09 power sudo[3858976]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  8 05:20:09 power sudo[3858976]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:20:09 power sudo[3858976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:09 power sudo[3858976]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:09 power sudo[3858984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:20:09 power sudo[3858984]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:20:09 power sudo[3858984]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:20:09 power sudo[3858984]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:20:09 power sudo[3858984]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:20:09 power sudo[3858984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:09 power sudo[3858984]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:09 power sudo[3858990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  8 05:20:09 power sudo[3858990]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  8 05:20:09 power sudo[3858990]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  8 05:20:09 power sudo[3858990]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  8 05:20:09 power sudo[3858990]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  8 05:20:09 power sudo[3858990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:09 power sudo[3858990]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:09 power sudo[3859028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep  8 05:20:09 power sudo[3859028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:10 power sudo[3859028]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:10 power sudo[3859035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=glammace --output=json'
Sep  8 05:20:10 power sudo[3859035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:10 power sudo[3859035]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:20 power sudo[3859227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace /bin/sh -c 'cd /home/glammace/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:20:20 power sudo[3859227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:20 power sudo[3859227]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:20 power sudo[3859233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user glammace --user-current --json'
Sep  8 05:20:20 power sudo[3859233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:20 power sudo[3859233]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:20 power sudo[3859243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace LangPHP php_get_vhost_versions --output=json'
Sep  8 05:20:21 power sudo[3859243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:21 power sudo[3859243]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:21 power sudo[3859253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:20:21 power sudo[3859253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:21 power sudo[3859253]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:21 power sudo[3859266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DomainInfo single_domain_data domain=wikimedia.mk return_https_redirect_status=1 --output=json'
Sep  8 05:20:21 power sudo[3859266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:21 power sudo[3859266]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:21 power sudo[3859273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace Mime list_redirects --output=json'
Sep  8 05:20:21 power sudo[3859273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:21 power sudo[3859273]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:26 power sudo[3859389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DirectoryPrivacy is_directory_protected dir=/home/glammace/public_html --output=json'
Sep  8 05:20:26 power sudo[3859389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:26 power sudo[3859389]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:37 power sudo[3859755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:20:37 power sudo[3859755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:37 power sudo[3859755]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:37 power sudo[3859761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep  8 05:20:37 power sudo[3859761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:37 power sudo[3859761]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:37 power sudo[3859768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:20:37 power sudo[3859768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:37 power sudo[3859768]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:38 power sudo[3859785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=wineberry.mk return_https_redirect_status=1 --output=json'
Sep  8 05:20:38 power sudo[3859785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:38 power sudo[3859785]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:42 power sudo[3859890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/public_html --output=json'
Sep  8 05:20:42 power sudo[3859890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:42 power sudo[3859890]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:46 power sudo[3860088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep  8 05:20:46 power sudo[3860088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:46 power sudo[3860088]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:46 power sudo[3860094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workbenc --output=json'
Sep  8 05:20:46 power sudo[3860094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:46 power sudo[3860094]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:49 power sudo[3860197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc /bin/sh -c 'cd /home/workbenc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  8 05:20:49 power sudo[3860197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:49 power sudo[3860197]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:49 power sudo[3860204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workbenc --user-current --json'
Sep  8 05:20:49 power sudo[3860204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:50 power sudo[3860204]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:50 power sudo[3860217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc LangPHP php_get_vhost_versions --output=json'
Sep  8 05:20:50 power sudo[3860217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:50 power sudo[3860217]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:50 power sudo[3860227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  8 05:20:50 power sudo[3860227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:50 power sudo[3860227]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:50 power sudo[3860248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DomainInfo single_domain_data domain=workbench-ent.com return_https_redirect_status=1 --output=json'
Sep  8 05:20:50 power sudo[3860248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:50 power sudo[3860248]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:50 power sudo[3860257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc Mime list_redirects --output=json'
Sep  8 05:20:50 power sudo[3860257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:50 power sudo[3860257]: pam_unix(sudo:session): session closed for user root
Sep  8 05:20:52 power sudo[3860334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DirectoryPrivacy is_directory_protected dir=/home/workbenc/public_html --output=json'
Sep  8 05:20:52 power sudo[3860334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:20:52 power sudo[3860334]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/hooks
Sep  8 05:21:58 power sudo[3864522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864522]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep  8 05:21:58 power sudo[3864526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864526]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864532]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864536]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864540]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864544]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864548]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864552]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864557]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864561]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864565]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864569]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864574]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864578]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864582]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864586]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864590]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864594]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864598]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864602]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864606]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864610]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/animatem/animate.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864614]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/animatem/animate.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864618]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864622]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864626]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864630]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864634]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864638]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864642]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864646]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864650]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864654]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864658]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864662]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864666]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864670]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864674]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864678]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864682]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864686]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864690]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864695]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864699]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864703]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864707]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864711]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864715]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864719]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:58 power sudo[3864723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  8 05:21:58 power sudo[3864723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:58 power sudo[3864723]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864727]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864731]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864735]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864739]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864743]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864747]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864751]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864755]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864759]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864763]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864770]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864774]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864778]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864782]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864786]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864790]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864794]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864798]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864802]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864806]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864811]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864816]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864820]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864824]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864828]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864832]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864836]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864840]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864844]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864848]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864852]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864856]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864860]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864864]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864868]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864872]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864876]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864880]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864884]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864888]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864892]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864896]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864900]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864904]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864908]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864912]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864916]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864920]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864924]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864928]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864932]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864936]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864940]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864944]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864948]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864952]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864956]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864960]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864964]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864968]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864972]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864976]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864980]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864984]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864988]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864992]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3864996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3864996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3864996]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3865000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3865000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3865000]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3865004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3865004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3865004]: pam_unix(sudo:session): session closed for user root
Sep  8 05:21:59 power sudo[3865008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  8 05:21:59 power sudo[3865008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:21:59 power sudo[3865008]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865012]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865016]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865020]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865024]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865028]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865032]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865036]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865040]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865044]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865048]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865052]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865059]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865063]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865067]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865072]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865076]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865080]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865084]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865088]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865092]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865096]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865100]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865104]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865108]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865112]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865116]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865120]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865124]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865128]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865132]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865136]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865140]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865144]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865148]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865152]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865156]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865160]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865164]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865168]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865172]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865176]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865180]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865184]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865188]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865192]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865196]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865202]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865206]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865210]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865214]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865219]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865223]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865227]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865231]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865235]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865239]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865243]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865247]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865251]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865255]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865259]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865263]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865267]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865271]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865275]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865279]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865283]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865287]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865291]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865295]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:00 power sudo[3865299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep  8 05:22:00 power sudo[3865299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:00 power sudo[3865299]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865303]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865309]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865313]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865317]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865321]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865325]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865329]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865333]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865337]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865342]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865349]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865353]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865357]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865368]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865372]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865376]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865380]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865384]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865388]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865392]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865396]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865400]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865404]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865408]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865412]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865416]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865420]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865424]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865428]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865432]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865436]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865440]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865445]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865449]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865453]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865457]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865461]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865465]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865469]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865473]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865477]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865481]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865485]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865489]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865493]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865497]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865501]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865505]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865509]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865513]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865517]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865521]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865525]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865533]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865537]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865541]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865545]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865549]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865553]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865557]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865561]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865565]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865570]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865574]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865578]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865582]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865586]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865590]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865594]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:01 power sudo[3865598]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:01 power sudo[3865602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep  8 05:22:01 power sudo[3865602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865602]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865606]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865610]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865614]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865618]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865622]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865626]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865630]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865634]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865638]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865642]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865649]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865653]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865657]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865661]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865665]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865670]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865675]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865679]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865684]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865688]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865692]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865697]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865701]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865705]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865709]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865713]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865717]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865721]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865725]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865729]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865733]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865737]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865741]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865746]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865750]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865754]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865758]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865762]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865766]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865772]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865776]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865780]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865784]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865788]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865792]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865796]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865800]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865804]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865808]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865814]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865818]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865822]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865826]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865830]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865835]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865839]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865843]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865847]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865851]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865855]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865859]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865863]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865867]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865871]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865875]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:02 power sudo[3865879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:02 power sudo[3865879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:02 power sudo[3865879]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865883]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865887]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865891]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865895]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865899]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865903]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865907]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865911]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865915]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865919]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865925]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865930]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865934]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865938]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865942]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865946]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865950]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865954]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865958]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865962]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865966]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865970]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865974]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865978]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865982]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865986]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865990]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865994]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3865998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3865998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3865998]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866002]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866006]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866010]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866014]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866018]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866022]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866026]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866030]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866034]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866038]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866042]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866046]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866050]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866055]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866059]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866064]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866068]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866072]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866076]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866080]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866084]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866088]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866092]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866096]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866100]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866105]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866113]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866117]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866121]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866125]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866129]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866133]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866137]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866141]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866145]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866150]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866154]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:03 power sudo[3866158]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:03 power sudo[3866162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  8 05:22:03 power sudo[3866162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866162]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866166]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866170]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866174]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866178]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866182]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866186]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866190]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866194]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866200]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866204]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866212]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866216]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866220]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866224]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep  8 05:22:04 power sudo[3866228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866228]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866234]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866238]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866242]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866246]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866250]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866254]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866258]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866262]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866266]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866270]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866275]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866279]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866283]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866287]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866291]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866295]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866299]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866303]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866307]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866311]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866315]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866319]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866323]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866328]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866332]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866336]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866340]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866344]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866348]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866352]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866356]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866360]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866364]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866368]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866372]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866376]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866380]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866384]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:04 power sudo[3866388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  8 05:22:04 power sudo[3866388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:04 power sudo[3866388]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866392]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866396]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866400]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866404]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866409]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866413]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866417]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866421]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866425]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866429]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866433]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866440]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866444]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866448]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866452]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866456]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866460]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866464]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866468]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866472]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866476]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866480]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866484]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866488]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866492]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866496]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866500]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866504]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866509]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866514]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866518]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866522]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866526]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866530]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866534]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866538]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866542]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866546]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866550]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866554]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866558]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866562]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866567]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866571]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866575]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866579]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866583]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866588]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866592]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866597]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866601]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866606]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866610]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866614]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866618]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866622]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866626]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866630]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866634]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866638]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866642]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866646]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866650]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866654]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866658]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866662]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866666]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866670]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866674]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866678]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:05 power sudo[3866682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:05 power sudo[3866682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:05 power sudo[3866682]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866686]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866693]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866698]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866702]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866706]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866710]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866714]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866718]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866722]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866726]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866733]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866737]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866741]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866745]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866749]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866753]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866757]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866761]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866765]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866769]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866773]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866777]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866781]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866785]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866789]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866793]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866797]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866801]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866805]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866809]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866813]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866817]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866821]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866825]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866829]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866833]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866837]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866841]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866845]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866849]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866853]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866857]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866861]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866865]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866869]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866873]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866877]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866881]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866885]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866890]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866894]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866898]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866902]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866906]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866910]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866915]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866919]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866923]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866927]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866931]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866935]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866939]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866943]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866947]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866951]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866955]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866959]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866963]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:06 power sudo[3866967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  8 05:22:06 power sudo[3866967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:06 power sudo[3866967]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3866971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3866971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3866971]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3866975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3866975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3866975]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3866979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3866979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3866979]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3866983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3866983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3866983]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3866987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3866987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3866987]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3866991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3866991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3866991]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3866995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3866995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3866995]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3866999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3866999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3866999]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867003]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867007]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867012]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867019]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867023]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867027]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867031]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867035]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867039]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867043]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867047]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867051]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867055]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867059]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867063]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867067]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867071]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867075]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867079]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867083]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867087]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867091]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867095]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867099]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867103]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867107]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867111]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867115]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867119]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867123]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867127]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867131]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867135]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867139]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867143]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867147]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867151]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867155]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867159]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867163]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867167]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867171]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867175]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867179]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867183]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867187]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867192]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867196]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867200]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867204]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867208]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867212]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867216]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867220]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867224]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867228]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867232]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867236]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867240]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867244]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867248]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867253]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867257]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:07 power sudo[3867261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  8 05:22:07 power sudo[3867261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:07 power sudo[3867261]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867265]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867269]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867273]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867277]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867281]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867285]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867289]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867293]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867297]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867301]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867305]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867312]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867316]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867320]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867324]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867328]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867332]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867336]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867340]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867344]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867348]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867352]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867356]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867360]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867364]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867368]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867372]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867376]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867380]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867384]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867388]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867392]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867396]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867400]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867404]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867408]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867412]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867416]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867420]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867424]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867428]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867432]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867436]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867440]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867444]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867448]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867452]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867456]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867460]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867464]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867468]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867472]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867476]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867480]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867484]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867489]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867493]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867497]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867502]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867507]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867511]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867515]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867520]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867525]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867529]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867533]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867537]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867541]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:08 power sudo[3867545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  8 05:22:08 power sudo[3867545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:08 power sudo[3867545]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867549]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867553]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867557]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867561]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867565]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867569]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867573]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867577]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867581]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867585]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867593]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867597]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867601]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867605]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867609]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867613]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867617]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867621]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867626]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867631]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867635]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867639]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867643]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867648]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867652]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867656]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867660]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867664]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867668]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867672]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867676]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867680]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867684]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867688]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867692]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867696]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867700]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867704]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867708]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867712]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867716]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867720]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867724]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867728]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867732]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867736]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867740]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867744]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867748]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867752]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867756]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867761]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867765]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867769]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867774]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867778]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867782]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867786]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867790]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867794]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867799]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867803]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867807]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867812]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867816]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep  8 05:22:09 power sudo[3867822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:09 power sudo[3867822]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:09 power sudo[3867826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867826]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:10 power sudo[3867830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867830]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:10 power sudo[3867835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867835]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:10 power sudo[3867839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867839]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:10 power sudo[3867843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867843]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:10 power sudo[3867847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867847]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:10 power sudo[3867851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867851]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:10 power sudo[3867855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867855]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:10 power sudo[3867859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867859]: pam_unix(sudo:session): session closed for user root
Sep  8 05:22:10 power sudo[3867863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  8 05:22:10 power sudo[3867863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:22:10 power sudo[3867863]: pam_unix(sudo:session): session closed for user root
Sep  8 05:25:01 power systemd[3870372]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:30:01 power systemd[3874160]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:30:01 power systemd[3874161]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 05:30:01 power systemd[3874165]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 05:30:01 power systemd[3874162]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 05:35:01 power systemd[3878412]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:35:06 power systemd[3878584]: pam_unix(systemd-user:session): session opened for user datelcom(uid=1066) by datelcom(uid=0)
Sep  8 05:35:06 power su[3878580]: pam_unix(su:session): session opened for user datelcom(uid=1066) by (uid=0)
Sep  8 05:35:06 power su[3878580]: pam_unix(su:session): session closed for user datelcom
Sep  8 05:36:01 power systemd[3879391]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 05:37:01 power systemd[3880472]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 05:40:01 power systemd[3882641]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:42:01 power systemd[3884268]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 05:42:03 power sudo[3884308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 05:42:03 power sudo[3884308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884308]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 05:42:03 power sudo[3884312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884312]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 05:42:03 power sudo[3884316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884316]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=rnQxVrXhFO'
Sep  8 05:42:03 power sudo[3884320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884320]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 05:42:03 power sudo[3884329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884329]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 05:42:03 power sudo[3884333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884333]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 05:42:03 power sudo[3884337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884337]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 05:42:03 power sudo[3884341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884341]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 05:42:03 power sudo[3884347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884347]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 05:42:03 power sudo[3884351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884351]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 05:42:03 power sudo[3884355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884355]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 05:42:03 power sudo[3884359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884359]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 05:42:03 power sudo[3884363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:03 power sudo[3884363]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:03 power sudo[3884367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 05:42:03 power sudo[3884367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:04 power sudo[3884367]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:08 power sudo[3884399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 05:42:08 power sudo[3884399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:08 power sudo[3884399]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:08 power sudo[3884404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 05:42:08 power sudo[3884404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:08 power sudo[3884404]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:08 power sudo[3884410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=supremel user-2=v5srybi9dcdx user-3=gorsajmk user-4=aquatech user-5=zdmgpsor user-6=inkigaic user-7=modernar user-8=taneccom user-9=innofabl user-10=premiumi user-11=vacuacti user-12=bozinovm user-13=fnjorgmk user-14=prizmapl user-15=darkogor user-16=dslmk user-17=versusmk user-18=fiziosmk user-19=ambitiou user-20=radekrat user-21=starluxm user-22=fffhpcwr user-23=tcieuroc user-24=mapaspla user-25=solemor1 user-26=nationa2 user-27=onlinesh user-28=euronic2 user-29=matratze user-30=kardiome user-31=apgrupmk user-32=mediasol user-33=bogdanos user-34=carrent1 user-35=hausmark user-36=nikolov1 user-37=forzares user-38=aptekazd user-39=nikimare user-40=lblawcom user-41=nucktra1 user-42=intelek1 user-43=mediatag user-44=vtranseu user-45=pravekom user-46=infopor1 user-47=glammace user-48=albuname user-49=imdskopj
Sep  8 05:42:08 power sudo[3884410]: wp-toolkit : (command continued) user-50=nutrivim user-51=chemhemc user-52=samasped user-53=zapovim1 user-54=elektrot user-55=euromaki user-56=cosmatob user-57=solointe user-58=jaramk user-59=recorgmk user-60=taktcomm user-61=animatem user-62=cleanerm user-63=progress user-64=sssoluti user-65=atspedco user-66=bbbustou user-67=kaoilmk user-68=biplmk user-69=pelagini user-70=viplastc user-71=wineberr user-72=mbmehani user-73=ismassag user-74=workbenc user-75=electrol user-76=trigemat user-77=eliksirz user-78=naksorgm user-79=golakkom user-80=solarinv user-81=eurofarm user-82=bauerin2 user-83=folklore user-84=bonitavi user-85=evberasm user-86=conserva user-87=vegemk1 user-88=cupidpro user-89=euronic3 user-90=jpkomuna user-91=izzomk user-92=makdrone user-93=tehnodro user-94=peshkai1 user-95=fxxcom user-96=dimpalne user-97=eaptekam user-98=gradbai1 user-99=evacommk user-100=aptekafa user-101=madzomk user-102=youthgua user-103=anitermc
Sep  8 05:42:08 power sudo[3884410]: wp-toolkit : (command continued) user-104=hotammk user-105=cajsproc user-106=vmro user-107=viewinn user-108=trudovop user-109=enaspotc user-110=uhostmk5 user-111=bauerbg user-112=raremk user-113=oouslave user-114=stojnevi user-115=evolvepl user-116=pelagoni user-117=socioloz user-118=avtogumi user-119=nefrolog user-120=ekostoc1 user-121=levantmk user-122=oncolog1 user-123=caramk user-124=frizered user-125=hidrommk user-126=sprintst user-127=enochmk user-128=herbalpl user-129=dikimk12 user-130=berbermk user-131=edomcomm user-132=nolimits user-133=nlpmkorg user-134=centarba user-135=kolened1 user-136=seloviro user-137=gocruise user-138=mstmmk user-139=goodnews user-140=proverim user-141=dadarmk user-142=tealmk user-143=rastiraz user-144=holiyayt user-145=wondersp user-146=robustco user-147=stravelm user-148=pecakome user-149=dnevnoin user-150=gjorgeiv user-151=tradeyou user-152=klimimk user-153=sparkupm user-154=stokovna user-155=custome1
Sep  8 05:42:08 power sudo[3884410]: wp-toolkit : (command continued) user-156=zampmk user-157=busymard user-158=zvskopje user-159=palenzok user-160=cabinetm user-161=vezilkac user-162=itradeco user-163=janiboja user-164=bovincom user-165=stojano1 user-166=premiums user-167=butelmk user-168=daris user-169=screenme user-170=arturaco user-171=ideaplus user-172=karpospo user-173=nasaidni user-174=drleomk user-175=jpparkin user-176=inotekso user-177=dalmacom user-178=cetplatf user-179=premiuma user-180=kouzonco user-181=agrosind user-182=mpbmk user-183=velmk user-184=gogovan1 user-185=kujnamon user-186=univerz1 user-187=datalink user-188=rasmorgm user-189=bianasho user-190=makoasmk user-191=skyapart user-192=mfashion user-193=volkanco user-194=goartsym user-195=dhamachi user-196=workandt user-197=getaldus user-198=simbiome user-199=delcevca user-200=barececo user-201=infobadi user-202=mspmk user-203=detskagr user-204=spdcompu user-205=urbanexp user-206=wikicamp user-207=vfxnestc
Sep  8 05:42:08 power sudo[3884410]: wp-toolkit : (command continued) user-208=polyeste user-209=ivanjord user-210=groskome user-211=sedcmk user-212=datelcom user-213=maleshne user-214=bizporta feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 05:42:08 power sudo[3884410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:09 power sudo[3884410]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:09 power sudo[3884418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 05:42:09 power sudo[3884418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:09 power sudo[3884418]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:09 power sudo[3884422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eku1v3PgvZ8OpmAE.~
Sep  8 05:42:09 power sudo[3884422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:09 power sudo[3884422]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:09 power sudo[3884426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eku1v3PgvZ8OpmAE.~\''
Sep  8 05:42:09 power sudo[3884426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:09 power sudo[3884426]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:09 power sudo[3884431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eku1v3PgvZ8OpmAE.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 05:42:09 power sudo[3884431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:09 power sudo[3884431]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:09 power sudo[3884435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 05:42:09 power sudo[3884435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:09 power sudo[3884435]: pam_unix(sudo:session): session closed for user root
Sep  8 05:42:09 power sudo[3884709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 05:42:09 power sudo[3884709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 05:42:09 power sudo[3884709]: pam_unix(sudo:session): session closed for user root
Sep  8 05:45:01 power systemd[3887630]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:50:01 power systemd[3891985]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 05:55:01 power systemd[3895939]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:00:01 power systemd[3900671]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:00:01 power systemd[3900680]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 06:00:01 power systemd[3900681]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 06:00:01 power systemd[3900684]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 06:05:01 power systemd[3906537]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:06:02 power systemd[3907806]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 06:07:01 power systemd[3908819]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 06:10:01 power systemd[3911775]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:12:01 power systemd[3913551]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 06:15:01 power systemd[3916189]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:20:01 power systemd[3921110]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:25:01 power systemd[3925478]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:30:01 power systemd[3929600]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:30:01 power systemd[3929603]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 06:30:01 power systemd[3929604]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 06:30:01 power systemd[3929606]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 06:35:01 power systemd[3934184]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:36:01 power systemd[3935012]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 06:37:01 power systemd[3935854]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 06:40:01 power systemd[3938013]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:42:01 power systemd[3939750]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 06:42:03 power sudo[3939790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 06:42:03 power sudo[3939790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939790]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 06:42:03 power sudo[3939797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939797]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 06:42:03 power sudo[3939801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939801]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=A20P4JRwV9'
Sep  8 06:42:03 power sudo[3939805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939805]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 06:42:03 power sudo[3939810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939810]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 06:42:03 power sudo[3939815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939815]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 06:42:03 power sudo[3939819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939819]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 06:42:03 power sudo[3939823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939823]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 06:42:03 power sudo[3939831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939831]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 06:42:03 power sudo[3939835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939835]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 06:42:03 power sudo[3939840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939840]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 06:42:03 power sudo[3939845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939845]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 06:42:03 power sudo[3939852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:03 power sudo[3939852]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:03 power sudo[3939857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 06:42:03 power sudo[3939857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:04 power sudo[3939857]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:05 power sudo[3939966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 06:42:05 power sudo[3939966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:05 power sudo[3939966]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:05 power sudo[3939972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 06:42:05 power sudo[3939972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:06 power sudo[3939972]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:06 power sudo[3939978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=folklore user-2=bauerin2 user-3=evberasm user-4=bonitavi user-5=euronic3 user-6=cupidpro user-7=vegemk1 user-8=conserva user-9=izzomk user-10=jpkomuna user-11=tehnodro user-12=makdrone user-13=eaptekam user-14=dimpalne user-15=fxxcom user-16=peshkai1 user-17=madzomk user-18=aptekafa user-19=evacommk user-20=gradbai1 user-21=recorgmk user-22=taktcomm user-23=jaramk user-24=solointe user-25=sssoluti user-26=atspedco user-27=progress user-28=cleanerm user-29=animatem user-30=kaoilmk user-31=biplmk user-32=bbbustou user-33=pelagini user-34=wineberr user-35=viplastc user-36=workbenc user-37=ismassag user-38=mbmehani user-39=golakkom user-40=eliksirz user-41=naksorgm user-42=trigemat user-43=electrol user-44=eurofarm user-45=solarinv user-46=matratze user-47=euronic2 user-48=bogdanos user-49=carrent1
Sep  8 06:42:06 power sudo[3939978]: wp-toolkit : (command continued) user-50=mediasol user-51=apgrupmk user-52=kardiome user-53=nikimare user-54=aptekazd user-55=forzares user-56=nikolov1 user-57=hausmark user-58=mediatag user-59=intelek1 user-60=nucktra1 user-61=lblawcom user-62=infopor1 user-63=vtranseu user-64=pravekom user-65=imdskopj user-66=albuname user-67=glammace user-68=samasped user-69=chemhemc user-70=nutrivim user-71=cosmatob user-72=euromaki user-73=elektrot user-74=zapovim1 user-75=aquatech user-76=gorsajmk user-77=v5srybi9dcdx user-78=supremel user-79=zdmgpsor user-80=modernar user-81=inkigaic user-82=dslmk user-83=fnjorgmk user-84=prizmapl user-85=darkogor user-86=bozinovm user-87=vacuacti user-88=premiumi user-89=innofabl user-90=taneccom user-91=ambitiou user-92=fiziosmk user-93=versusmk user-94=fffhpcwr user-95=starluxm user-96=radekrat user-97=tcieuroc user-98=onlinesh user-99=nationa2 user-100=solemor1 user-101=mapaspla user-102=mpbmk user-103=agrosind
Sep  8 06:42:06 power sudo[3939978]: wp-toolkit : (command continued) user-104=datalink user-105=kujnamon user-106=univerz1 user-107=gogovan1 user-108=velmk user-109=skyapart user-110=makoasmk user-111=bianasho user-112=rasmorgm user-113=barececo user-114=getaldus user-115=simbiome user-116=delcevca user-117=workandt user-118=dhamachi user-119=volkanco user-120=goartsym user-121=mfashion user-122=spdcompu user-123=detskagr user-124=infobadi user-125=mspmk user-126=wikicamp user-127=urbanexp user-128=sedcmk user-129=ivanjord user-130=groskome user-131=polyeste user-132=vfxnestc user-133=bizporta user-134=maleshne user-135=datelcom user-136=stokovna user-137=sparkupm user-138=klimimk user-139=palenzok user-140=zampmk user-141=zvskopje user-142=busymard user-143=custome1 user-144=janiboja user-145=itradeco user-146=vezilkac user-147=cabinetm user-148=stojano1 user-149=bovincom user-150=karpospo user-151=nasaidni user-152=ideaplus user-153=screenme user-154=arturaco user-155=daris
Sep  8 06:42:06 power sudo[3939978]: wp-toolkit : (command continued) user-156=butelmk user-157=premiums user-158=inotekso user-159=jpparkin user-160=drleomk user-161=kouzonco user-162=premiuma user-163=cetplatf user-164=dalmacom user-165=dikimk12 user-166=herbalpl user-167=enochmk user-168=sprintst user-169=edomcomm user-170=berbermk user-171=kolened1 user-172=nlpmkorg user-173=centarba user-174=nolimits user-175=seloviro user-176=goodnews user-177=mstmmk user-178=gocruise user-179=tealmk user-180=dadarmk user-181=proverim user-182=pecakome user-183=stravelm user-184=robustco user-185=wondersp user-186=holiyayt user-187=rastiraz user-188=tradeyou user-189=gjorgeiv user-190=dnevnoin user-191=anitermc user-192=youthgua user-193=cajsproc user-194=hotammk user-195=enaspotc user-196=viewinn user-197=trudovop user-198=vmro user-199=stojnevi user-200=oouslave user-201=raremk user-202=bauerbg user-203=uhostmk5 user-204=evolvepl user-205=avtogumi user-206=socioloz user-207=pelagoni
Sep  8 06:42:06 power sudo[3939978]: wp-toolkit : (command continued) user-208=levantmk user-209=oncolog1 user-210=ekostoc1 user-211=nefrolog user-212=hidrommk user-213=frizered user-214=caramk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 06:42:06 power sudo[3939978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:06 power sudo[3939978]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:06 power sudo[3939989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 06:42:06 power sudo[3939989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:06 power sudo[3939989]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:06 power sudo[3939994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Vyx0nVuwbm0T3BVe.~
Sep  8 06:42:06 power sudo[3939994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:06 power sudo[3939994]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:06 power sudo[3939998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Vyx0nVuwbm0T3BVe.~\''
Sep  8 06:42:06 power sudo[3939998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:06 power sudo[3939998]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:06 power sudo[3940003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Vyx0nVuwbm0T3BVe.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 06:42:06 power sudo[3940003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:06 power sudo[3940003]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:06 power sudo[3940007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 06:42:06 power sudo[3940007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:06 power sudo[3940007]: pam_unix(sudo:session): session closed for user root
Sep  8 06:42:10 power sudo[3940933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 06:42:10 power sudo[3940933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 06:42:11 power sudo[3940933]: pam_unix(sudo:session): session closed for user root
Sep  8 06:45:01 power systemd[3943213]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:50:01 power systemd[3947468]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 06:55:01 power systemd[3951346]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:00:01 power systemd[3955967]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:00:01 power systemd[3955969]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 07:00:01 power systemd[3955970]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 07:00:01 power systemd[3955972]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 07:05:01 power systemd[3961351]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:06:01 power systemd[3962245]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 07:07:01 power systemd[3963121]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 07:10:02 power systemd[3965728]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:12:01 power systemd[3967427]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 07:15:01 power systemd[3970031]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:16:09 power sshd[3970930]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 07:16:09 power sshd[3970930]: Connection closed by 87.236.176.102 port 58787
Sep  8 07:16:09 power sshd[3970947]: Connection closed by 87.236.176.102 port 42167 [preauth]
Sep  8 07:20:01 power systemd[3974277]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:21:10 power sudo[3975300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 07:21:10 power sudo[3975300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:21:10 power sudo[3975300]: pam_unix(sudo:session): session closed for user root
Sep  8 07:21:10 power sudo[3975306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep  8 07:21:10 power sudo[3975306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:21:10 power sudo[3975306]: pam_unix(sudo:session): session closed for user root
Sep  8 07:21:10 power sudo[3975313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr Mime list_redirects --output=json'
Sep  8 07:21:10 power sudo[3975313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:21:10 power sudo[3975313]: pam_unix(sudo:session): session closed for user root
Sep  8 07:25:01 power systemd[3978825]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:30:01 power systemd[3982632]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:30:01 power systemd[3982635]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 07:30:01 power systemd[3982636]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 07:30:01 power systemd[3982638]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 07:35:01 power systemd[3989169]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:36:01 power systemd[3990025]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 07:37:01 power systemd[3990766]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 07:40:01 power systemd[3993492]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:42:01 power systemd[3995021]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 07:42:03 power sudo[3995085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 07:42:03 power sudo[3995085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995085]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 07:42:03 power sudo[3995089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995089]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 07:42:03 power sudo[3995093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995093]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=5Tn0okl6LS'
Sep  8 07:42:03 power sudo[3995097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995097]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 07:42:03 power sudo[3995103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995103]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 07:42:03 power sudo[3995107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995107]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 07:42:03 power sudo[3995111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995111]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 07:42:03 power sudo[3995115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995115]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 07:42:03 power sudo[3995120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995120]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 07:42:03 power sudo[3995126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995126]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 07:42:03 power sudo[3995130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995130]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 07:42:03 power sudo[3995134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995134]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 07:42:03 power sudo[3995138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:03 power sudo[3995138]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:03 power sudo[3995142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 07:42:03 power sudo[3995142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:04 power sudo[3995142]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:06 power sudo[3995165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 07:42:06 power sudo[3995165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:06 power sudo[3995165]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:06 power sudo[3995172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 07:42:06 power sudo[3995172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:06 power sudo[3995172]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:06 power sudo[3995179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=cetplatf user-2=dalmacom user-3=kouzonco user-4=premiuma user-5=inotekso user-6=jpparkin user-7=drleomk user-8=butelmk user-9=daris user-10=premiums user-11=karpospo user-12=nasaidni user-13=ideaplus user-14=screenme user-15=arturaco user-16=bovincom user-17=stojano1 user-18=vezilkac user-19=cabinetm user-20=janiboja user-21=itradeco user-22=custome1 user-23=palenzok user-24=zampmk user-25=busymard user-26=zvskopje user-27=klimimk user-28=stokovna user-29=sparkupm user-30=maleshne user-31=datelcom user-32=bizporta user-33=polyeste user-34=vfxnestc user-35=sedcmk user-36=ivanjord user-37=groskome user-38=wikicamp user-39=urbanexp user-40=infobadi user-41=mspmk user-42=spdcompu user-43=detskagr user-44=dhamachi user-45=goartsym user-46=volkanco user-47=mfashion user-48=barececo user-49=delcevca
Sep  8 07:42:06 power sudo[3995179]: wp-toolkit : (command continued) user-50=getaldus user-51=simbiome user-52=workandt user-53=rasmorgm user-54=skyapart user-55=bianasho user-56=makoasmk user-57=kujnamon user-58=univerz1 user-59=velmk user-60=gogovan1 user-61=datalink user-62=mpbmk user-63=agrosind user-64=caramk user-65=hidrommk user-66=frizered user-67=levantmk user-68=oncolog1 user-69=ekostoc1 user-70=nefrolog user-71=pelagoni user-72=socioloz user-73=avtogumi user-74=evolvepl user-75=oouslave user-76=raremk user-77=bauerbg user-78=uhostmk5 user-79=stojnevi user-80=enaspotc user-81=trudovop user-82=viewinn user-83=vmro user-84=cajsproc user-85=hotammk user-86=anitermc user-87=youthgua user-88=dnevnoin user-89=gjorgeiv user-90=tradeyou user-91=holiyayt user-92=rastiraz user-93=pecakome user-94=stravelm user-95=robustco user-96=wondersp user-97=dadarmk user-98=proverim user-99=tealmk user-100=gocruise user-101=goodnews user-102=mstmmk user-103=seloviro user-104=nolimits
Sep  8 07:42:06 power sudo[3995179]: wp-toolkit : (command continued) user-105=kolened1 user-106=nlpmkorg user-107=centarba user-108=edomcomm user-109=berbermk user-110=dikimk12 user-111=herbalpl user-112=enochmk user-113=sprintst user-114=solarinv user-115=eurofarm user-116=eliksirz user-117=naksorgm user-118=trigemat user-119=electrol user-120=golakkom user-121=mbmehani user-122=workbenc user-123=ismassag user-124=wineberr user-125=viplastc user-126=pelagini user-127=biplmk user-128=kaoilmk user-129=bbbustou user-130=progress user-131=cleanerm user-132=animatem user-133=atspedco user-134=sssoluti user-135=jaramk user-136=solointe user-137=recorgmk user-138=taktcomm user-139=gradbai1 user-140=aptekafa user-141=madzomk user-142=evacommk user-143=fxxcom user-144=peshkai1 user-145=eaptekam user-146=dimpalne user-147=makdrone user-148=tehnodro user-149=izzomk user-150=jpkomuna user-151=conserva user-152=euronic3 user-153=cupidpro user-154=vegemk1 user-155=evberasm user-156=bonitavi
Sep  8 07:42:06 power sudo[3995179]: wp-toolkit : (command continued) user-157=bauerin2 user-158=folklore user-159=solemor1 user-160=mapaspla user-161=onlinesh user-162=nationa2 user-163=tcieuroc user-164=starluxm user-165=radekrat user-166=fffhpcwr user-167=versusmk user-168=ambitiou user-169=fiziosmk user-170=taneccom user-171=prizmapl user-172=dslmk user-173=fnjorgmk user-174=darkogor user-175=bozinovm user-176=vacuacti user-177=premiumi user-178=innofabl user-179=inkigaic user-180=modernar user-181=zdmgpsor user-182=v5srybi9dcdx user-183=supremel user-184=aquatech user-185=gorsajmk user-186=elektrot user-187=zapovim1 user-188=cosmatob user-189=euromaki user-190=nutrivim user-191=samasped user-192=chemhemc user-193=albuname user-194=glammace user-195=imdskopj user-196=pravekom user-197=vtranseu user-198=infopor1 user-199=nucktra1 user-200=lblawcom user-201=mediatag user-202=intelek1 user-203=nikolov1 user-204=hausmark user-205=nikimare user-206=aptekazd user-207=forzares
Sep  8 07:42:06 power sudo[3995179]: wp-toolkit : (command continued) user-208=kardiome user-209=carrent1 user-210=bogdanos user-211=mediasol user-212=apgrupmk user-213=matratze user-214=euronic2 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 07:42:06 power sudo[3995179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:06 power sudo[3995179]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:06 power sudo[3995195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 07:42:06 power sudo[3995195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:06 power sudo[3995195]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:06 power sudo[3995200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lk8o97th7fnFutVB.~
Sep  8 07:42:06 power sudo[3995200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:06 power sudo[3995200]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:06 power sudo[3995204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lk8o97th7fnFutVB.~\''
Sep  8 07:42:06 power sudo[3995204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:06 power sudo[3995204]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:06 power sudo[3995209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lk8o97th7fnFutVB.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 07:42:06 power sudo[3995209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:06 power sudo[3995209]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:06 power sudo[3995213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 07:42:06 power sudo[3995213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:06 power sudo[3995213]: pam_unix(sudo:session): session closed for user root
Sep  8 07:42:07 power sudo[3995679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 07:42:07 power sudo[3995679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 07:42:07 power sudo[3995679]: pam_unix(sudo:session): session closed for user root
Sep  8 07:45:01 power systemd[3998601]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:50:01 power systemd[4003705]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 07:55:01 power systemd[4008266]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:00:01 power systemd[4012900]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 08:00:01 power systemd[4012901]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 08:00:01 power systemd[4012891]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:00:01 power systemd[4012902]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 08:00:01 power systemd[4012908]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  8 08:05:01 power systemd[4018109]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:06:01 power systemd[4019151]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 08:07:01 power systemd[4019899]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 08:10:01 power systemd[4023510]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:12:01 power systemd[4025098]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 08:15:01 power systemd[4027623]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:20:01 power systemd[4031774]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:25:01 power systemd[4036443]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:30:01 power systemd[4040723]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:30:01 power systemd[4040725]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 08:30:01 power systemd[4040726]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 08:30:01 power systemd[4040728]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 08:31:32 power unix_chkpwd[4042164]: password check failed for user (root)
Sep  8 08:31:32 power sshd[4042149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.193.227  user=root
Sep  8 08:31:33 power sshd[4042149]: Failed password for root from 45.131.193.227 port 39260 ssh2
Sep  8 08:31:34 power sshd[4042149]: Connection closed by authenticating user root 45.131.193.227 port 39260 [preauth]
Sep  8 08:35:01 power systemd[4045176]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:36:01 power systemd[4046022]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 08:37:01 power systemd[4046865]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 08:38:26 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 08:40:02 power systemd[4049824]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:40:44 power sshd[4050337]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 08:40:44 power sshd[4050337]: Connection closed by 45.131.193.227 port 11767
Sep  8 08:40:46 power unix_chkpwd[4050364]: password check failed for user (root)
Sep  8 08:40:46 power sshd[4050342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.193.227  user=root
Sep  8 08:40:48 power sshd[4050342]: Failed password for root from 45.131.193.227 port 22105 ssh2
Sep  8 08:40:48 power sshd[4050342]: Connection closed by authenticating user root 45.131.193.227 port 22105 [preauth]
Sep  8 08:42:01 power systemd[4051255]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 08:42:03 power sudo[4051312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 08:42:03 power sudo[4051312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051312]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 08:42:03 power sudo[4051316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051316]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 08:42:03 power sudo[4051320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051320]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=iAej890HeZ'
Sep  8 08:42:03 power sudo[4051324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051324]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 08:42:03 power sudo[4051329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051329]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 08:42:03 power sudo[4051334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051334]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 08:42:03 power sudo[4051338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051338]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 08:42:03 power sudo[4051345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051345]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 08:42:03 power sudo[4051352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051352]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 08:42:03 power sudo[4051356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051356]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 08:42:03 power sudo[4051360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051360]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 08:42:03 power sudo[4051364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051364]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 08:42:03 power sudo[4051368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:03 power sudo[4051368]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:03 power sudo[4051372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 08:42:03 power sudo[4051372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:04 power sudo[4051372]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:05 power sudo[4051414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 08:42:05 power sudo[4051414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:05 power sudo[4051414]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:05 power sudo[4051419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 08:42:05 power sudo[4051419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:05 power sudo[4051419]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:05 power sudo[4051427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=agrosind user-2=mpbmk user-3=datalink user-4=velmk user-5=gogovan1 user-6=univerz1 user-7=kujnamon user-8=makoasmk user-9=bianasho user-10=skyapart user-11=rasmorgm user-12=workandt user-13=getaldus user-14=simbiome user-15=delcevca user-16=barececo user-17=mfashion user-18=goartsym user-19=volkanco user-20=dhamachi user-21=detskagr user-22=spdcompu user-23=mspmk user-24=infobadi user-25=urbanexp user-26=wikicamp user-27=ivanjord user-28=groskome user-29=sedcmk user-30=vfxnestc user-31=polyeste user-32=bizporta user-33=datelcom user-34=maleshne user-35=sparkupm user-36=stokovna user-37=klimimk user-38=zampmk user-39=busymard user-40=zvskopje user-41=palenzok user-42=custome1 user-43=itradeco user-44=janiboja user-45=cabinetm user-46=vezilkac user-47=stojano1 user-48=bovincom user-49=screenme user-50=arturaco
Sep  8 08:42:05 power sudo[4051427]: wp-toolkit : (command continued) user-51=ideaplus user-52=nasaidni user-53=karpospo user-54=premiums user-55=daris user-56=butelmk user-57=drleomk user-58=jpparkin user-59=inotekso user-60=premiuma user-61=kouzonco user-62=dalmacom user-63=cetplatf user-64=sprintst user-65=herbalpl user-66=enochmk user-67=dikimk12 user-68=berbermk user-69=edomcomm user-70=nlpmkorg user-71=centarba user-72=kolened1 user-73=nolimits user-74=seloviro user-75=mstmmk user-76=goodnews user-77=gocruise user-78=tealmk user-79=proverim user-80=dadarmk user-81=wondersp user-82=robustco user-83=stravelm user-84=pecakome user-85=rastiraz user-86=holiyayt user-87=tradeyou user-88=gjorgeiv user-89=dnevnoin user-90=youthgua user-91=anitermc user-92=hotammk user-93=cajsproc user-94=vmro user-95=viewinn user-96=trudovop user-97=enaspotc user-98=stojnevi user-99=uhostmk5 user-100=bauerbg user-101=raremk user-102=oouslave user-103=evolvepl user-104=socioloz user-105=avtogumi
Sep  8 08:42:05 power sudo[4051427]: wp-toolkit : (command continued) user-106=pelagoni user-107=nefrolog user-108=levantmk user-109=ekostoc1 user-110=oncolog1 user-111=frizered user-112=hidrommk user-113=caramk user-114=folklore user-115=bauerin2 user-116=bonitavi user-117=evberasm user-118=vegemk1 user-119=cupidpro user-120=euronic3 user-121=conserva user-122=jpkomuna user-123=izzomk user-124=tehnodro user-125=makdrone user-126=dimpalne user-127=eaptekam user-128=peshkai1 user-129=fxxcom user-130=evacommk user-131=aptekafa user-132=madzomk user-133=gradbai1 user-134=taktcomm user-135=recorgmk user-136=solointe user-137=jaramk user-138=atspedco user-139=sssoluti user-140=animatem user-141=cleanerm user-142=progress user-143=bbbustou user-144=kaoilmk user-145=biplmk user-146=pelagini user-147=viplastc user-148=wineberr user-149=ismassag user-150=workbenc user-151=mbmehani user-152=golakkom user-153=electrol user-154=trigemat user-155=eliksirz user-156=naksorgm user-157=eurofarm
Sep  8 08:42:05 power sudo[4051427]: wp-toolkit : (command continued) user-158=solarinv user-159=euronic2 user-160=matratze user-161=apgrupmk user-162=mediasol user-163=carrent1 user-164=bogdanos user-165=kardiome user-166=forzares user-167=aptekazd user-168=nikimare user-169=hausmark user-170=nikolov1 user-171=intelek1 user-172=mediatag user-173=lblawcom user-174=nucktra1 user-175=infopor1 user-176=vtranseu user-177=pravekom user-178=imdskopj user-179=glammace user-180=albuname user-181=chemhemc user-182=samasped user-183=nutrivim user-184=euromaki user-185=cosmatob user-186=zapovim1 user-187=elektrot user-188=gorsajmk user-189=aquatech user-190=supremel user-191=v5srybi9dcdx user-192=zdmgpsor user-193=modernar user-194=inkigaic user-195=innofabl user-196=premiumi user-197=vacuacti user-198=bozinovm user-199=dslmk user-200=darkogor user-201=prizmapl user-202=fnjorgmk user-203=taneccom user-204=fiziosmk user-205=ambitiou user-206=versusmk user-207=fffhpcwr user-208=radekrat
Sep  8 08:42:05 power sudo[4051427]: wp-toolkit : (command continued) user-209=starluxm user-210=tcieuroc user-211=nationa2 user-212=onlinesh user-213=mapaspla user-214=solemor1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 08:42:05 power sudo[4051427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:06 power sudo[4051427]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:06 power sudo[4051444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 08:42:06 power sudo[4051444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:06 power sudo[4051444]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:06 power sudo[4051449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hQHHTWUlBThaxHdi.~
Sep  8 08:42:06 power sudo[4051449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:06 power sudo[4051449]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:06 power sudo[4051453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hQHHTWUlBThaxHdi.~\''
Sep  8 08:42:06 power sudo[4051453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:06 power sudo[4051453]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:06 power sudo[4051459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hQHHTWUlBThaxHdi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 08:42:06 power sudo[4051459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:06 power sudo[4051459]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:06 power sudo[4051464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 08:42:06 power sudo[4051464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:06 power sudo[4051464]: pam_unix(sudo:session): session closed for user root
Sep  8 08:42:10 power sudo[4051999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 08:42:10 power sudo[4051999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 08:42:10 power sudo[4051999]: pam_unix(sudo:session): session closed for user root
Sep  8 08:45:01 power systemd[4054968]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:45:07 power sshd[4054706]: Connection closed by 206.168.34.78 port 48644 [preauth]
Sep  8 08:50:01 power systemd[4059538]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 08:51:55 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 08:55:01 power systemd[4064046]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:00:01 power systemd[4068294]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:00:01 power systemd[4068296]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 09:00:01 power systemd[4068295]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 09:00:01 power systemd[4068299]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  8 09:00:01 power systemd[4068298]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 09:05:01 power systemd[4073381]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:06:01 power systemd[4074386]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 09:07:01 power systemd[4075726]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 09:10:01 power systemd[4078741]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:11:57 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 180.149.231.12 has been locked due to Imunify RBL
Sep  8 09:12:01 power systemd[4080394]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 09:15:01 power systemd[4082925]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:20:02 power systemd[4088508]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:22:06 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 180.149.231.12 has been locked due to Imunify RBL
Sep  8 09:25:01 power systemd[4093693]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:30:01 power systemd[4098806]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:30:01 power systemd[4098810]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 09:30:01 power systemd[4098811]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 09:30:01 power systemd[4098813]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 09:35:01 power systemd[4104166]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:36:01 power systemd[4105341]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 09:37:01 power systemd[4106460]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 09:37:04 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 09:40:01 power systemd[4110065]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:42:01 power systemd[4112333]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 09:42:03 power sudo[4112404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 09:42:03 power sudo[4112404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112404]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 09:42:03 power sudo[4112408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112408]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 09:42:03 power sudo[4112412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112412]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=kBzrkrPc0q'
Sep  8 09:42:03 power sudo[4112417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112417]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 09:42:03 power sudo[4112422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112422]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 09:42:03 power sudo[4112427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112427]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 09:42:03 power sudo[4112431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112431]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 09:42:03 power sudo[4112435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112435]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 09:42:03 power sudo[4112444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112444]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 09:42:03 power sudo[4112448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112448]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 09:42:03 power sudo[4112452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112452]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 09:42:03 power sudo[4112456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112456]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 09:42:03 power sudo[4112460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:03 power sudo[4112460]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:03 power sudo[4112464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 09:42:03 power sudo[4112464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:04 power sudo[4112464]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:06 power sudo[4112521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 09:42:06 power sudo[4112521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:06 power sudo[4112521]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:06 power sudo[4112527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 09:42:06 power sudo[4112527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:06 power sudo[4112527]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:06 power sudo[4112535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=gradbai1 user-2=madzomk user-3=aptekafa user-4=evacommk user-5=fxxcom user-6=peshkai1 user-7=dimpalne user-8=eaptekam user-9=makdrone user-10=tehnodro user-11=jpkomuna user-12=izzomk user-13=conserva user-14=cupidpro user-15=vegemk1 user-16=euronic3 user-17=evberasm user-18=bonitavi user-19=bauerin2 user-20=folklore user-21=solarinv user-22=eurofarm user-23=electrol user-24=naksorgm user-25=eliksirz user-26=trigemat user-27=golakkom user-28=mbmehani user-29=ismassag user-30=workbenc user-31=viplastc user-32=wineberr user-33=pelagini user-34=bbbustou user-35=biplmk user-36=kaoilmk user-37=cleanerm user-38=animatem user-39=progress user-40=atspedco user-41=sssoluti user-42=solointe user-43=jaramk user-44=recorgmk user-45=taktcomm user-46=zapovim1 user-47=elektrot user-48=euromaki user-49=cosmatob
Sep  8 09:42:06 power sudo[4112535]: wp-toolkit : (command continued) user-50=nutrivim user-51=samasped user-52=chemhemc user-53=albuname user-54=glammace user-55=imdskopj user-56=pravekom user-57=vtranseu user-58=infopor1 user-59=lblawcom user-60=nucktra1 user-61=mediatag user-62=intelek1 user-63=hausmark user-64=nikolov1 user-65=forzares user-66=nikimare user-67=aptekazd user-68=kardiome user-69=apgrupmk user-70=carrent1 user-71=bogdanos user-72=mediasol user-73=matratze user-74=euronic2 user-75=mapaspla user-76=solemor1 user-77=nationa2 user-78=onlinesh user-79=tcieuroc user-80=starluxm user-81=radekrat user-82=fffhpcwr user-83=versusmk user-84=fiziosmk user-85=ambitiou user-86=taneccom user-87=vacuacti user-88=innofabl user-89=premiumi user-90=dslmk user-91=darkogor user-92=prizmapl user-93=fnjorgmk user-94=bozinovm user-95=inkigaic user-96=modernar user-97=zdmgpsor user-98=supremel user-99=v5srybi9dcdx user-100=aquatech user-101=gorsajmk user-102=maleshne user-103=datelcom
Sep  8 09:42:06 power sudo[4112535]: wp-toolkit : (command continued) user-104=bizporta user-105=polyeste user-106=vfxnestc user-107=groskome user-108=ivanjord user-109=sedcmk user-110=urbanexp user-111=wikicamp user-112=mspmk user-113=infobadi user-114=detskagr user-115=spdcompu user-116=mfashion user-117=dhamachi user-118=goartsym user-119=volkanco user-120=workandt user-121=barececo user-122=getaldus user-123=delcevca user-124=simbiome user-125=rasmorgm user-126=skyapart user-127=makoasmk user-128=bianasho user-129=univerz1 user-130=kujnamon user-131=gogovan1 user-132=velmk user-133=datalink user-134=mpbmk user-135=agrosind user-136=dalmacom user-137=cetplatf user-138=premiuma user-139=kouzonco user-140=drleomk user-141=inotekso user-142=jpparkin user-143=daris user-144=butelmk user-145=premiums user-146=arturaco user-147=screenme user-148=karpospo user-149=nasaidni user-150=ideaplus user-151=bovincom user-152=stojano1 user-153=cabinetm user-154=vezilkac user-155=itradeco
Sep  8 09:42:06 power sudo[4112535]: wp-toolkit : (command continued) user-156=janiboja user-157=custome1 user-158=zampmk user-159=busymard user-160=zvskopje user-161=palenzok user-162=klimimk user-163=stokovna user-164=sparkupm user-165=dnevnoin user-166=gjorgeiv user-167=tradeyou user-168=rastiraz user-169=holiyayt user-170=robustco user-171=stravelm user-172=wondersp user-173=pecakome user-174=proverim user-175=dadarmk user-176=tealmk user-177=gocruise user-178=mstmmk user-179=goodnews user-180=seloviro user-181=nolimits user-182=kolened1 user-183=nlpmkorg user-184=centarba user-185=berbermk user-186=edomcomm user-187=herbalpl user-188=enochmk user-189=sprintst user-190=dikimk12 user-191=caramk user-192=hidrommk user-193=frizered user-194=levantmk user-195=ekostoc1 user-196=oncolog1 user-197=nefrolog user-198=pelagoni user-199=socioloz user-200=avtogumi user-201=evolvepl user-202=bauerbg user-203=uhostmk5 user-204=oouslave user-205=raremk user-206=stojnevi user-207=trudovop
Sep  8 09:42:06 power sudo[4112535]: wp-toolkit : (command continued) user-208=viewinn user-209=vmro user-210=enaspotc user-211=hotammk user-212=cajsproc user-213=anitermc user-214=youthgua feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 09:42:06 power sudo[4112535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:07 power sudo[4112535]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:07 power sudo[4112547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 09:42:07 power sudo[4112547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:07 power sudo[4112547]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:07 power sudo[4112551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-D6S6YogM0eg6ZjWI.~
Sep  8 09:42:07 power sudo[4112551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:07 power sudo[4112551]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:07 power sudo[4112556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-D6S6YogM0eg6ZjWI.~\''
Sep  8 09:42:07 power sudo[4112556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:07 power sudo[4112556]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:07 power sudo[4112561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-D6S6YogM0eg6ZjWI.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 09:42:07 power sudo[4112561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:07 power sudo[4112561]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:07 power sudo[4112565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 09:42:07 power sudo[4112565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:07 power sudo[4112565]: pam_unix(sudo:session): session closed for user root
Sep  8 09:42:11 power sudo[4112826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 09:42:11 power sudo[4112826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 09:42:11 power sudo[4112826]: pam_unix(sudo:session): session closed for user root
Sep  8 09:45:01 power systemd[4116563]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:50:01 power systemd[4121419]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 09:55:02 power systemd[4129763]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:00:01 power systemd[4134398]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:00:01 power systemd[4134402]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 10:00:01 power systemd[4134401]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 10:00:01 power systemd[4134404]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 10:05:01 power systemd[4140718]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:06:02 power systemd[4142236]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 10:07:01 power systemd[4143241]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 10:10:01 power systemd[4146563]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:12:01 power systemd[4148573]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 10:15:01 power systemd[4152039]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:20:01 power systemd[4158185]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:25:01 power systemd[4164158]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:30:01 power systemd[4168857]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:30:01 power systemd[4168860]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 10:30:01 power systemd[4168862]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 10:30:01 power systemd[4168863]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 10:35:01 power systemd[4174254]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:36:01 power systemd[4175676]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 10:37:01 power systemd[4176948]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 10:40:01 power systemd[4180984]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:42:01 power systemd[4182955]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 10:42:03 power sudo[4182996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 10:42:03 power sudo[4182996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4182996]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 10:42:03 power sudo[4183000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183000]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 10:42:03 power sudo[4183004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183004]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=A6QXJKPbY7'
Sep  8 10:42:03 power sudo[4183008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183008]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 10:42:03 power sudo[4183013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183013]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 10:42:03 power sudo[4183017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183017]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 10:42:03 power sudo[4183021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183021]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 10:42:03 power sudo[4183025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183025]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 10:42:03 power sudo[4183030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183030]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 10:42:03 power sudo[4183034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183034]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 10:42:03 power sudo[4183038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183038]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 10:42:03 power sudo[4183043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183043]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 10:42:03 power sudo[4183048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:03 power sudo[4183048]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:03 power sudo[4183052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 10:42:03 power sudo[4183052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:04 power sudo[4183052]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:06 power sudo[4183075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 10:42:06 power sudo[4183075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:06 power sudo[4183075]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:06 power sudo[4183083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 10:42:06 power sudo[4183083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:06 power sudo[4183083]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:06 power sudo[4183091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=drleomk user-2=inotekso user-3=jpparkin user-4=arturaco user-5=screenme user-6=nasaidni user-7=karpospo user-8=ideaplus user-9=daris user-10=butelmk user-11=premiums user-12=premiuma user-13=kouzonco user-14=dalmacom user-15=cetplatf user-16=zampmk user-17=busymard user-18=zvskopje user-19=palenzok user-20=custome1 user-21=stokovna user-22=sparkupm user-23=klimimk user-24=stojano1 user-25=bovincom user-26=itradeco user-27=janiboja user-28=cabinetm user-29=vezilkac user-30=urbanexp user-31=wikicamp user-32=detskagr user-33=spdcompu user-34=mspmk user-35=infobadi user-36=bizporta user-37=maleshne user-38=datelcom user-39=ivanjord user-40=groskome user-41=sedcmk user-42=polyeste user-43=vfxnestc user-44=datalink user-45=kujnamon user-46=univerz1 user-47=gogovan1 user-48=velmk user-49=mpbmk user-50=agrosind
Sep  8 10:42:06 power sudo[4183091]: wp-toolkit : (command continued) user-51=workandt user-52=barececo user-53=getaldus user-54=delcevca user-55=simbiome user-56=mfashion user-57=dhamachi user-58=volkanco user-59=goartsym user-60=skyapart user-61=makoasmk user-62=bianasho user-63=rasmorgm user-64=socioloz user-65=avtogumi user-66=pelagoni user-67=evolvepl user-68=hidrommk user-69=frizered user-70=caramk user-71=levantmk user-72=oncolog1 user-73=ekostoc1 user-74=nefrolog user-75=hotammk user-76=cajsproc user-77=anitermc user-78=youthgua user-79=stojnevi user-80=bauerbg user-81=uhostmk5 user-82=oouslave user-83=raremk user-84=viewinn user-85=trudovop user-86=vmro user-87=enaspotc user-88=tealmk user-89=proverim user-90=dadarmk user-91=mstmmk user-92=goodnews user-93=gocruise user-94=gjorgeiv user-95=tradeyou user-96=dnevnoin user-97=stravelm user-98=robustco user-99=wondersp user-100=pecakome user-101=rastiraz user-102=holiyayt user-103=berbermk user-104=edomcomm user-105=enochmk
Sep  8 10:42:06 power sudo[4183091]: wp-toolkit : (command continued) user-106=herbalpl user-107=sprintst user-108=dikimk12 user-109=seloviro user-110=kolened1 user-111=nlpmkorg user-112=centarba user-113=nolimits user-114=ismassag user-115=workbenc user-116=mbmehani user-117=viplastc user-118=wineberr user-119=eurofarm user-120=solarinv user-121=golakkom user-122=electrol user-123=eliksirz user-124=naksorgm user-125=trigemat user-126=atspedco user-127=sssoluti user-128=cleanerm user-129=animatem user-130=progress user-131=taktcomm user-132=recorgmk user-133=solointe user-134=jaramk user-135=pelagini user-136=bbbustou user-137=kaoilmk user-138=biplmk user-139=tehnodro user-140=makdrone user-141=jpkomuna user-142=izzomk user-143=madzomk user-144=aptekafa user-145=evacommk user-146=gradbai1 user-147=dimpalne user-148=eaptekam user-149=fxxcom user-150=peshkai1 user-151=folklore user-152=bauerin2 user-153=cupidpro user-154=vegemk1 user-155=euronic3 user-156=conserva user-157=evberasm
Sep  8 10:42:06 power sudo[4183091]: wp-toolkit : (command continued) user-158=bonitavi user-159=fffhpcwr user-160=starluxm user-161=radekrat user-162=fiziosmk user-163=ambitiou user-164=versusmk user-165=nationa2 user-166=onlinesh user-167=mapaspla user-168=solemor1 user-169=tcieuroc user-170=zdmgpsor user-171=aquatech user-172=gorsajmk user-173=supremel user-174=v5srybi9dcdx user-175=vacuacti user-176=innofabl user-177=premiumi user-178=dslmk user-179=prizmapl user-180=fnjorgmk user-181=darkogor user-182=bozinovm user-183=teh user-184=taneccom user-185=modernar user-186=inkigaic user-187=imdskopj user-188=albuname user-189=glammace user-190=infopor1 user-191=pravekom user-192=vtranseu user-193=cosmatob user-194=euromaki user-195=elektrot user-196=zapovim1 user-197=samasped user-198=chemhemc user-199=nutrivim user-200=apgrupmk user-201=bogdanos user-202=carrent1 user-203=mediasol user-204=kardiome user-205=matratze user-206=euronic2 user-207=mediatag user-208=intelek1
Sep  8 10:42:06 power sudo[4183091]: wp-toolkit : (command continued) user-209=lblawcom user-210=nucktra1 user-211=forzares user-212=nikimare user-213=aptekazd user-214=nikolov1 user-215=hausmark feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 10:42:06 power sudo[4183091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:06 power sudo[4183091]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:06 power sudo[4183101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 10:42:06 power sudo[4183101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:06 power sudo[4183101]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:06 power sudo[4183106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jGglfsWQQCQWZsEV.~
Sep  8 10:42:06 power sudo[4183106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:06 power sudo[4183106]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:06 power sudo[4183110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jGglfsWQQCQWZsEV.~\''
Sep  8 10:42:06 power sudo[4183110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:06 power sudo[4183110]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:06 power sudo[4183116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jGglfsWQQCQWZsEV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 10:42:06 power sudo[4183116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:06 power sudo[4183116]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:06 power sudo[4183120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 10:42:06 power sudo[4183120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:06 power sudo[4183120]: pam_unix(sudo:session): session closed for user root
Sep  8 10:42:11 power sudo[4184070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 10:42:11 power sudo[4184070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 10:42:11 power sudo[4184070]: pam_unix(sudo:session): session closed for user root
Sep  8 10:45:01 power systemd[4187019]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:49:22 power sshd[4191131]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 10:49:22 power sshd[4191131]: Connection closed by 191.209.37.140 port 57082
Sep  8 10:49:22 power sshd[4191134]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 10:49:22 power sshd[4191134]: Connection closed by 191.209.37.140 port 33121
Sep  8 10:49:22 power sshd[4191132]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 10:49:22 power sshd[4191132]: Connection closed by 191.209.37.140 port 54684
Sep  8 10:49:22 power sshd[4191135]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 10:49:22 power sshd[4191135]: Connection closed by 191.209.37.140 port 47554
Sep  8 10:49:22 power sshd[4191136]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 10:49:22 power sshd[4191136]: Connection closed by 191.209.37.140 port 50329
Sep  8 10:49:22 power sshd[4191139]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 10:49:22 power sshd[4191139]: Connection closed by 191.209.37.140 port 37664
Sep  8 10:50:01 power systemd[4191755]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 10:55:01 power systemd[2399]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:00:01 power systemd[6835]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:00:01 power systemd[6837]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 11:00:01 power systemd[6838]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 11:00:01 power systemd[6840]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 11:05:01 power systemd[12372]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:06:01 power systemd[13311]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 11:06:43 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 11:07:01 power systemd[14154]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 11:10:01 power systemd[16893]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:12:01 power systemd[18704]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 11:15:01 power systemd[21474]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:20:01 power systemd[26928]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:20:54 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 11:25:01 power systemd[32514]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:30:01 power systemd[38625]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:30:01 power systemd[38628]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 11:30:01 power systemd[38627]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 11:30:01 power systemd[38630]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 11:35:01 power systemd[44064]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:36:01 power systemd[45034]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 11:37:01 power systemd[45899]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 11:39:49 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 11:40:01 power systemd[48631]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:42:01 power systemd[50327]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 11:42:03 power sudo[50365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 11:42:03 power sudo[50365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50365]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 11:42:03 power sudo[50370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50370]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 11:42:03 power sudo[50375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50375]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=7JN7kkMsGC'
Sep  8 11:42:03 power sudo[50379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50379]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 11:42:03 power sudo[50388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50388]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 11:42:03 power sudo[50393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50393]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 11:42:03 power sudo[50397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50397]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 11:42:03 power sudo[50402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50402]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 11:42:03 power sudo[50409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50409]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 11:42:03 power sudo[50413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50413]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 11:42:03 power sudo[50417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50417]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 11:42:03 power sudo[50421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50421]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 11:42:03 power sudo[50425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:03 power sudo[50425]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:03 power sudo[50430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 11:42:03 power sudo[50430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:04 power sudo[50430]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:06 power sudo[50471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 11:42:06 power sudo[50471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:06 power sudo[50471]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:06 power sudo[50476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 11:42:06 power sudo[50476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:06 power sudo[50476]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:06 power sudo[50482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=solarinv user-2=eurofarm user-3=electrol user-4=trigemat user-5=eliksirz user-6=naksorgm user-7=golakkom user-8=mbmehani user-9=ismassag user-10=workbenc user-11=viplastc user-12=wineberr user-13=pelagini user-14=bbbustou user-15=kaoilmk user-16=biplmk user-17=animatem user-18=cleanerm user-19=progress user-20=atspedco user-21=sssoluti user-22=solointe user-23=jaramk user-24=recorgmk user-25=taktcomm user-26=gradbai1 user-27=evacommk user-28=aptekafa user-29=madzomk user-30=peshkai1 user-31=fxxcom user-32=dimpalne user-33=eaptekam user-34=makdrone user-35=tehnodro user-36=jpkomuna user-37=izzomk user-38=conserva user-39=vegemk1 user-40=cupidpro user-41=euronic3 user-42=bonitavi user-43=evberasm user-44=bauerin2 user-45=folklore user-46=mapaspla user-47=solemor1 user-48=nationa2 user-49=onlinesh
Sep  8 11:42:06 power sudo[50482]: wp-toolkit : (command continued) user-50=tcieuroc user-51=radekrat user-52=starluxm user-53=fffhpcwr user-54=versusmk user-55=fiziosmk user-56=ambitiou user-57=teh user-58=taneccom user-59=premiumi user-60=innofabl user-61=vacuacti user-62=bozinovm user-63=dslmk user-64=fnjorgmk user-65=darkogor user-66=prizmapl user-67=inkigaic user-68=modernar user-69=zdmgpsor user-70=supremel user-71=v5srybi9dcdx user-72=gorsajmk user-73=aquatech user-74=zapovim1 user-75=elektrot user-76=euromaki user-77=cosmatob user-78=nutrivim user-79=samasped user-80=chemhemc user-81=glammace user-82=albuname user-83=imdskopj user-84=pravekom user-85=vtranseu user-86=infopor1 user-87=lblawcom user-88=nucktra1 user-89=intelek1 user-90=mediatag user-91=hausmark user-92=nikolov1 user-93=forzares user-94=aptekazd user-95=nikimare user-96=kardiome user-97=apgrupmk user-98=mediasol user-99=bogdanos user-100=carrent1 user-101=euronic2 user-102=matratze user-103=dalmacom
Sep  8 11:42:06 power sudo[50482]: wp-toolkit : (command continued) user-104=cetplatf user-105=premiuma user-106=kouzonco user-107=drleomk user-108=jpparkin user-109=inotekso user-110=premiums user-111=butelmk user-112=daris user-113=screenme user-114=arturaco user-115=ideaplus user-116=nasaidni user-117=karpospo user-118=bovincom user-119=stojano1 user-120=cabinetm user-121=vezilkac user-122=itradeco user-123=janiboja user-124=custome1 user-125=zvskopje user-126=busymard user-127=zampmk user-128=palenzok user-129=klimimk user-130=sparkupm user-131=stokovna user-132=datelcom user-133=maleshne user-134=bizporta user-135=vfxnestc user-136=polyeste user-137=groskome user-138=ivanjord user-139=sedcmk user-140=urbanexp user-141=wikicamp user-142=infobadi user-143=mspmk user-144=detskagr user-145=spdcompu user-146=mfashion user-147=volkanco user-148=goartsym user-149=dhamachi user-150=workandt user-151=delcevca user-152=getaldus user-153=simbiome user-154=barececo user-155=rasmorgm
Sep  8 11:42:06 power sudo[50482]: wp-toolkit : (command continued) user-156=makoasmk user-157=bianasho user-158=skyapart user-159=gogovan1 user-160=velmk user-161=univerz1 user-162=kujnamon user-163=datalink user-164=agrosind user-165=mpbmk user-166=caramk user-167=frizered user-168=hidrommk user-169=nefrolog user-170=ekostoc1 user-171=levantmk user-172=oncolog1 user-173=pelagoni user-174=avtogumi user-175=socioloz user-176=evolvepl user-177=uhostmk5 user-178=bauerbg user-179=raremk user-180=oouslave user-181=stojnevi user-182=vmro user-183=viewinn user-184=trudovop user-185=enaspotc user-186=hotammk user-187=cajsproc user-188=youthgua user-189=anitermc user-190=dnevnoin user-191=tradeyou user-192=gjorgeiv user-193=rastiraz user-194=holiyayt user-195=wondersp user-196=stravelm user-197=robustco user-198=pecakome user-199=proverim user-200=dadarmk user-201=tealmk user-202=gocruise user-203=mstmmk user-204=goodnews user-205=seloviro user-206=nolimits user-207=nlpmkorg
Sep  8 11:42:06 power sudo[50482]: wp-toolkit : (command continued) user-208=centarba user-209=kolened1 user-210=berbermk user-211=edomcomm user-212=sprintst user-213=herbalpl user-214=enochmk user-215=dikimk12 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 11:42:06 power sudo[50482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:07 power sudo[50482]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:07 power sudo[50487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 11:42:07 power sudo[50487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:07 power sudo[50487]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:07 power sudo[50496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Lq0wr3QLaAknffU6.~
Sep  8 11:42:07 power sudo[50496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:07 power sudo[50496]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:07 power sudo[50500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Lq0wr3QLaAknffU6.~\''
Sep  8 11:42:07 power sudo[50500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:07 power sudo[50500]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:07 power sudo[50505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Lq0wr3QLaAknffU6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 11:42:07 power sudo[50505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:07 power sudo[50505]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:07 power sudo[50509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 11:42:07 power sudo[50509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:07 power sudo[50509]: pam_unix(sudo:session): session closed for user root
Sep  8 11:42:11 power sudo[51578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 11:42:11 power sudo[51578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 11:42:11 power sudo[51578]: pam_unix(sudo:session): session closed for user root
Sep  8 11:45:01 power systemd[54424]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:50:01 power systemd[59313]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 11:51:38 power sshd[60814]: Connection closed by 45.33.80.243 port 56212 [preauth]
Sep  8 11:51:39 power sshd[60828]: Connection closed by 45.33.80.243 port 56228 [preauth]
Sep  8 11:51:40 power sshd[60840]: Connection closed by 45.33.80.243 port 56230 [preauth]
Sep  8 11:55:01 power systemd[63718]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:00:01 power systemd[68945]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 12:00:01 power systemd[68944]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:00:01 power systemd[68947]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 12:00:01 power systemd[68949]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 12:00:01 power systemd[68951]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  8 12:05:01 power systemd[75545]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:06:01 power systemd[77026]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 12:07:01 power systemd[78339]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 12:10:01 power systemd[81415]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:12:01 power systemd[83136]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 12:15:01 power systemd[85880]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:20:01 power systemd[90455]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:25:01 power systemd[94873]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:30:01 power systemd[99005]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:30:01 power systemd[99007]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 12:30:01 power systemd[99006]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 12:30:01 power systemd[99009]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 12:35:01 power systemd[103655]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:36:01 power systemd[104636]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 12:37:01 power systemd[105404]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 12:39:32 power sudo[108126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 12:39:32 power sudo[108126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:39:32 power sudo[108126]: pam_unix(sudo:session): session closed for user root
Sep  8 12:39:32 power sudo[108132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status teh'
Sep  8 12:39:33 power sudo[108132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:39:33 power sudo[108132]: pam_unix(sudo:session): session closed for user root
Sep  8 12:40:01 power systemd[109047]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:40:25 power sshd[109207]: Connection closed by 167.94.138.173 port 33124 [preauth]
Sep  8 12:42:01 power systemd[111101]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 12:42:03 power sudo[111139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 12:42:03 power sudo[111139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111139]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 12:42:03 power sudo[111143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111143]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 12:42:03 power sudo[111147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111147]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=BDH1StPA23'
Sep  8 12:42:03 power sudo[111151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111151]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 12:42:03 power sudo[111156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111156]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 12:42:03 power sudo[111160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111160]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 12:42:03 power sudo[111164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111164]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 12:42:03 power sudo[111172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111172]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 12:42:03 power sudo[111181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111181]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 12:42:03 power sudo[111185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111185]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 12:42:03 power sudo[111190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111190]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 12:42:03 power sudo[111194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111194]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 12:42:03 power sudo[111198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:03 power sudo[111198]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:03 power sudo[111202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 12:42:03 power sudo[111202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:04 power sudo[111202]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:06 power sudo[111235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 12:42:06 power sudo[111235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:06 power sudo[111235]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:06 power sudo[111243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 12:42:06 power sudo[111243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:06 power sudo[111243]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:06 power sudo[111251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=premiums user-2=butelmk user-3=daris user-4=screenme user-5=arturaco user-6=ideaplus user-7=karpospo user-8=nasaidni user-9=drleomk user-10=jpparkin user-11=inotekso user-12=dalmacom user-13=cetplatf user-14=premiuma user-15=kouzonco user-16=klimimk user-17=sparkupm user-18=stokovna user-19=custome1 user-20=busymard user-21=zvskopje user-22=zampmk user-23=palenzok user-24=cabinetm user-25=vezilkac user-26=itradeco user-27=janiboja user-28=bovincom user-29=stojano1 user-30=infobadi user-31=mspmk user-32=detskagr user-33=spdcompu user-34=urbanexp user-35=wikicamp user-36=vfxnestc user-37=polyeste user-38=ivanjord user-39=groskome user-40=sedcmk user-41=datelcom user-42=maleshne user-43=bizporta user-44=agrosind user-45=mpbmk user-46=gogovan1 user-47=velmk user-48=univerz1 user-49=kujnamon user-50=datalink
Sep  8 12:42:06 power sudo[111251]: wp-toolkit : (command continued) user-51=rasmorgm user-52=makoasmk user-53=bianasho user-54=skyapart user-55=mfashion user-56=volkanco user-57=goartsym user-58=dhamachi user-59=workandt user-60=delcevca user-61=getaldus user-62=simbiome user-63=barececo user-64=evolvepl user-65=pelagoni user-66=socioloz user-67=avtogumi user-68=nefrolog user-69=levantmk user-70=oncolog1 user-71=ekostoc1 user-72=caramk user-73=frizered user-74=hidrommk user-75=youthgua user-76=anitermc user-77=hotammk user-78=cajsproc user-79=vmro user-80=viewinn user-81=trudovop user-82=enaspotc user-83=uhostmk5 user-84=bauerbg user-85=raremk user-86=oouslave user-87=stojnevi user-88=gocruise user-89=mstmmk user-90=goodnews user-91=proverim user-92=dadarmk user-93=tealmk user-94=rastiraz user-95=holiyayt user-96=wondersp user-97=robustco user-98=stravelm user-99=pecakome user-100=dnevnoin user-101=gjorgeiv user-102=tradeyou user-103=sprintst user-104=enochmk user-105=herbalpl
Sep  8 12:42:06 power sudo[111251]: wp-toolkit : (command continued) user-106=dikimk12 user-107=berbermk user-108=edomcomm user-109=nolimits user-110=nlpmkorg user-111=centarba user-112=kolened1 user-113=seloviro user-114=viplastc user-115=wineberr user-116=mbmehani user-117=ismassag user-118=workbenc user-119=electrol user-120=trigemat user-121=naksorgm user-122=eliksirz user-123=golakkom user-124=solarinv user-125=eurofarm user-126=solointe user-127=jaramk user-128=taktcomm user-129=recorgmk user-130=animatem user-131=cleanerm user-132=progress user-133=atspedco user-134=sssoluti user-135=bbbustou user-136=biplmk user-137=kaoilmk user-138=pelagini user-139=jpkomuna user-140=izzomk user-141=makdrone user-142=tehnodro user-143=peshkai1 user-144=fxxcom user-145=dimpalne user-146=eaptekam user-147=gradbai1 user-148=evacommk user-149=aptekafa user-150=madzomk user-151=bauerin2 user-152=folklore user-153=bonitavi user-154=evberasm user-155=conserva user-156=vegemk1 user-157=cupidpro
Sep  8 12:42:06 power sudo[111251]: wp-toolkit : (command continued) user-158=euronic3 user-159=versusmk user-160=fiziosmk user-161=ambitiou user-162=radekrat user-163=starluxm user-164=fffhpcwr user-165=tcieuroc user-166=mapaspla user-167=solemor1 user-168=nationa2 user-169=onlinesh user-170=supremel user-171=v5srybi9dcdx user-172=gorsajmk user-173=aquatech user-174=zdmgpsor user-175=inkigaic user-176=modernar user-177=teh user-178=taneccom user-179=innofabl user-180=premiumi user-181=vacuacti user-182=bozinovm user-183=dslmk user-184=fnjorgmk user-185=darkogor user-186=prizmapl user-187=vtranseu user-188=pravekom user-189=infopor1 user-190=glammace user-191=albuname user-192=imdskopj user-193=nutrivim user-194=samasped user-195=chemhemc user-196=elektrot user-197=zapovim1 user-198=cosmatob user-199=euromaki user-200=euronic2 user-201=matratze user-202=kardiome user-203=apgrupmk user-204=mediasol user-205=carrent1 user-206=bogdanos user-207=hausmark user-208=nikolov1
Sep  8 12:42:06 power sudo[111251]: wp-toolkit : (command continued) user-209=forzares user-210=aptekazd user-211=nikimare user-212=lblawcom user-213=nucktra1 user-214=intelek1 user-215=mediatag feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 12:42:06 power sudo[111251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:06 power sudo[111251]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:06 power sudo[111257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 12:42:06 power sudo[111257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:06 power sudo[111257]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:06 power sudo[111261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-dgKjUxbN47f6BneZ.~
Sep  8 12:42:06 power sudo[111261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:06 power sudo[111261]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:06 power sudo[111265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-dgKjUxbN47f6BneZ.~\''
Sep  8 12:42:06 power sudo[111265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:06 power sudo[111265]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:06 power sudo[111270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-dgKjUxbN47f6BneZ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 12:42:06 power sudo[111270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:06 power sudo[111270]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:06 power sudo[111274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 12:42:06 power sudo[111274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:06 power sudo[111274]: pam_unix(sudo:session): session closed for user root
Sep  8 12:42:11 power sudo[112142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 12:42:11 power sudo[112142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 12:42:11 power sudo[112142]: pam_unix(sudo:session): session closed for user root
Sep  8 12:45:01 power systemd[114731]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:50:01 power systemd[118858]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 12:55:01 power systemd[122950]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:00:02 power systemd[127399]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:00:02 power systemd[127401]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 13:00:02 power systemd[127402]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 13:00:02 power systemd[127404]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 13:05:00 power sshd[132820]: error: kex_exchange_identification: banner line contains invalid characters
Sep  8 13:05:00 power sshd[132820]: banner exchange: Connection from 47.251.90.59 port 21610: invalid format
Sep  8 13:05:01 power sshd[132835]: Invalid user  from 47.251.90.59 port 21618
Sep  8 13:05:01 power sshd[132835]: Connection closed by invalid user  47.251.90.59 port 21618 [preauth]
Sep  8 13:05:01 power systemd[132933]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:05:11 power sudo[133169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 13:05:11 power sudo[133169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:05:11 power sudo[133169]: pam_unix(sudo:session): session closed for user root
Sep  8 13:05:11 power sudo[133174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status teh'
Sep  8 13:05:11 power sudo[133174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:05:11 power sudo[133174]: pam_unix(sudo:session): session closed for user root
Sep  8 13:06:01 power systemd[134490]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 13:07:01 power systemd[135510]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 13:10:01 power systemd[138243]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:12:01 power systemd[140030]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 13:13:55 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 13:15:01 power systemd[142757]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:17:56 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 13:20:01 power systemd[147667]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:21:45 power sudo[149176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 13:21:45 power sudo[149176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:21:45 power sudo[149176]: pam_unix(sudo:session): session closed for user root
Sep  8 13:21:45 power sudo[149181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status teh'
Sep  8 13:21:45 power sudo[149181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:21:45 power sudo[149181]: pam_unix(sudo:session): session closed for user root
Sep  8 13:25:01 power systemd[153060]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:30:01 power systemd[158069]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:30:01 power systemd[158071]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 13:30:01 power systemd[158072]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 13:30:01 power systemd[158074]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 13:32:10 power sudo[160608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:10 power sudo[160608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:10 power sudo[160608]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:11 power sudo[160632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:11 power sudo[160632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:11 power sudo[160632]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:11 power sudo[160655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:11 power sudo[160655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:11 power sudo[160655]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:11 power sudo[160675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:11 power sudo[160675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:11 power sudo[160675]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:11 power sudo[160695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:11 power sudo[160695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:11 power sudo[160695]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:12 power sudo[160718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:12 power sudo[160718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:12 power sudo[160718]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:12 power sudo[160740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:12 power sudo[160740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:12 power sudo[160740]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:12 power sudo[160760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:12 power sudo[160760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:12 power sudo[160760]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:12 power sudo[160781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:12 power sudo[160781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:12 power sudo[160781]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:13 power sudo[160807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:13 power sudo[160807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:13 power sudo[160807]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:13 power sudo[160832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:13 power sudo[160832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:13 power sudo[160832]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:13 power sudo[160851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:13 power sudo[160851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:13 power sudo[160851]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:13 power sudo[160873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:13 power sudo[160873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:13 power sudo[160873]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:14 power sudo[160898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:14 power sudo[160898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:14 power sudo[160898]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:14 power sudo[160921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:14 power sudo[160921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:14 power sudo[160921]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:14 power sudo[160953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:14 power sudo[160953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:14 power sudo[160953]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:14 power sudo[160985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:14 power sudo[160985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:14 power sudo[160985]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:30 power sudo[161646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:30 power sudo[161646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:30 power sudo[161646]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:30 power sudo[161670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:30 power sudo[161670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:30 power sudo[161670]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:30 power sudo[161728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:30 power sudo[161728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:30 power sudo[161728]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:31 power sudo[161752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:31 power sudo[161752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:31 power sudo[161752]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:31 power sudo[161777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:31 power sudo[161777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:31 power sudo[161777]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:31 power sudo[161799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:31 power sudo[161799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:31 power sudo[161799]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:31 power sudo[161820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:31 power sudo[161820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:31 power sudo[161820]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:32 power sudo[161844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:32 power sudo[161844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:32 power sudo[161844]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:32 power sudo[161872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:32 power sudo[161872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:32 power sudo[161872]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:32 power sudo[161894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:32 power sudo[161894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:32 power sudo[161894]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:32 power sudo[161915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:32 power sudo[161915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:32 power sudo[161915]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:33 power sudo[161952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:33 power sudo[161952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:33 power sudo[161952]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:33 power sudo[161978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:33 power sudo[161978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:33 power sudo[161978]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:33 power sudo[162000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:33 power sudo[162000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:33 power sudo[162000]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:33 power sudo[162025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:33 power sudo[162025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:34 power sudo[162025]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:34 power sudo[162058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:34 power sudo[162058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:34 power sudo[162058]: pam_unix(sudo:session): session closed for user root
Sep  8 13:32:34 power sudo[162103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:32:34 power sudo[162103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:32:34 power sudo[162103]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:15 power sudo[164385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:15 power sudo[164385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:15 power sudo[164385]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:15 power sudo[164409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:15 power sudo[164409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:15 power sudo[164409]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:16 power sudo[164429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:16 power sudo[164429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:16 power sudo[164429]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:16 power sudo[164451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:16 power sudo[164451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:16 power sudo[164451]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:16 power sudo[164471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:16 power sudo[164471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:16 power sudo[164471]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:16 power sudo[164491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:16 power sudo[164491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:16 power sudo[164491]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:17 power sudo[164510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:17 power sudo[164510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:17 power sudo[164510]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:17 power sudo[164532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:17 power sudo[164532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:17 power sudo[164532]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:17 power sudo[164551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:17 power sudo[164551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:17 power sudo[164551]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:17 power sudo[164570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:17 power sudo[164570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:17 power sudo[164570]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:18 power sudo[164598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:18 power sudo[164598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:18 power sudo[164598]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:18 power sudo[164635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:18 power sudo[164635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:18 power sudo[164635]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:18 power sudo[164664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:18 power sudo[164664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:18 power sudo[164664]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:18 power sudo[164688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:18 power sudo[164688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:19 power sudo[164688]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:19 power sudo[164714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:19 power sudo[164714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:19 power sudo[164714]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:19 power sudo[164763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:19 power sudo[164763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:19 power sudo[164763]: pam_unix(sudo:session): session closed for user root
Sep  8 13:34:19 power sudo[164801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 getpkginfo \'pkg=Promo XL\' --output=json'
Sep  8 13:34:19 power sudo[164801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:34:19 power sudo[164801]: pam_unix(sudo:session): session closed for user root
Sep  8 13:35:01 power systemd[166644]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:35:17 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 13:35:49 power sudo[167609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 13:35:49 power sudo[167609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:35:49 power sudo[167609]: pam_unix(sudo:session): session closed for user root
Sep  8 13:35:49 power sudo[167614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnologija'
Sep  8 13:35:49 power sudo[167614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:35:49 power sudo[167614]: pam_unix(sudo:session): session closed for user root
Sep  8 13:36:01 power systemd[167902]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 13:37:01 power systemd[169397]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 13:38:44 power sshd[170984]: error: kex_exchange_identification: read: Connection reset by peer
Sep  8 13:38:44 power sshd[170984]: Connection reset by 167.94.138.118 port 45294
Sep  8 13:38:45 power sshd[171010]: error: kex_exchange_identification: banner line contains invalid characters
Sep  8 13:38:45 power sshd[171010]: error: send_error: write: Connection reset by peer
Sep  8 13:38:45 power sshd[171010]: banner exchange: Connection from 167.94.138.118 port 45296: invalid format
Sep  8 13:38:48 power sshd[171032]: error: kex_exchange_identification: read: Connection reset by peer
Sep  8 13:38:48 power sshd[171032]: Connection reset by 167.94.138.118 port 45310
Sep  8 13:39:09 power sshd[171170]: Connection closed by 167.94.138.118 port 39602 [preauth]
Sep  8 13:40:01 power systemd[172367]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:42:01 power systemd[174278]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 13:42:03 power sudo[174332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 13:42:03 power sudo[174332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174332]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 13:42:03 power sudo[174339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174339]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 13:42:03 power sudo[174343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174343]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=rZPholT4NX'
Sep  8 13:42:03 power sudo[174347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174347]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 13:42:03 power sudo[174352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174352]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 13:42:03 power sudo[174356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174356]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 13:42:03 power sudo[174360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174360]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 13:42:03 power sudo[174365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174365]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 13:42:03 power sudo[174372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174372]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 13:42:03 power sudo[174376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174376]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 13:42:03 power sudo[174380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174380]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 13:42:03 power sudo[174384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174384]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 13:42:03 power sudo[174388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:03 power sudo[174388]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:03 power sudo[174392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 13:42:03 power sudo[174392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:04 power sudo[174392]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:05 power sudo[174417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 13:42:06 power sudo[174417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:06 power sudo[174417]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:06 power sudo[174423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 13:42:06 power sudo[174423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:06 power sudo[174423]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:06 power sudo[174428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=infobadi user-2=mspmk user-3=spdcompu user-4=detskagr user-5=wikicamp user-6=urbanexp user-7=vfxnestc user-8=polyeste user-9=sedcmk user-10=groskome user-11=ivanjord user-12=datelcom user-13=maleshne user-14=bizporta user-15=agrosind user-16=mpbmk user-17=gogovan1 user-18=velmk user-19=kujnamon user-20=univerz1 user-21=datalink user-22=rasmorgm user-23=bianasho user-24=makoasmk user-25=skyapart user-26=volkanco user-27=goartsym user-28=dhamachi user-29=mfashion user-30=delcevca user-31=getaldus user-32=simbiome user-33=barececo user-34=workandt user-35=premiums user-36=butelmk user-37=daris user-38=ideaplus user-39=nasaidni user-40=karpospo user-41=arturaco user-42=screenme user-43=jpparkin user-44=inotekso user-45=drleomk user-46=cetplatf user-47=dalmacom user-48=kouzonco user-49=premiuma user-50=klimimk
Sep  8 13:42:06 power sudo[174428]: wp-toolkit : (command continued) user-51=sparkupm user-52=stokovna user-53=custome1 user-54=palenzok user-55=zampmk user-56=busymard user-57=zvskopje user-58=vezilkac user-59=cabinetm user-60=janiboja user-61=itradeco user-62=bovincom user-63=stojano1 user-64=gocruise user-65=goodnews user-66=mstmmk user-67=dadarmk user-68=proverim user-69=tealmk user-70=holiyayt user-71=rastiraz user-72=pecakome user-73=wondersp user-74=robustco user-75=stravelm user-76=dnevnoin user-77=gjorgeiv user-78=tradeyou user-79=dikimk12 user-80=sprintst user-81=enochmk user-82=herbalpl user-83=edomcomm user-84=berbermk user-85=nolimits user-86=centarba user-87=nlpmkorg user-88=kolened1 user-89=seloviro user-90=evolvepl user-91=pelagoni user-92=avtogumi user-93=socioloz user-94=nefrolog user-95=levantmk user-96=oncolog1 user-97=ekostoc1 user-98=caramk user-99=frizered user-100=hidrommk user-101=youthgua user-102=anitermc user-103=cajsproc user-104=hotammk
Sep  8 13:42:06 power sudo[174428]: wp-toolkit : (command continued) user-105=enaspotc user-106=vmro user-107=trudovop user-108=viewinn user-109=raremk user-110=oouslave user-111=uhostmk5 user-112=bauerbg user-113=stojnevi user-114=izzomk user-115=jpkomuna user-116=makdrone user-117=tehnodro user-118=peshkai1 user-119=fxxcom user-120=eaptekam user-121=dimpalne user-122=gradbai1 user-123=evacommk user-124=madzomk user-125=aptekafa user-126=bauerin2 user-127=folklore user-128=bonitavi user-129=evberasm user-130=conserva user-131=euronic3 user-132=vegemk1 user-133=cupidpro user-134=wineberr user-135=viplastc user-136=mbmehani user-137=workbenc user-138=ismassag user-139=trigemat user-140=naksorgm user-141=eliksirz user-142=electrol user-143=golakkom user-144=solarinv user-145=eurofarm user-146=jaramk user-147=solointe user-148=taktcomm user-149=recorgmk user-150=progress user-151=animatem user-152=cleanerm user-153=atspedco user-154=sssoluti user-155=kaoilmk user-156=biplmk
Sep  8 13:42:06 power sudo[174428]: wp-toolkit : (command continued) user-157=bbbustou user-158=pelagini user-159=pravekom user-160=vtranseu user-161=infopor1 user-162=glammace user-163=albuname user-164=imdskopj user-165=nutrivim user-166=samasped user-167=chemhemc user-168=elektrot user-169=zapovim1 user-170=cosmatob user-171=euromaki user-172=euronic2 user-173=matratze user-174=kardiome user-175=mediasol user-176=carrent1 user-177=bogdanos user-178=apgrupmk user-179=hausmark user-180=nikolov1 user-181=aptekazd user-182=nikimare user-183=forzares user-184=nucktra1 user-185=lblawcom user-186=intelek1 user-187=mediatag user-188=versusmk user-189=ambitiou user-190=fiziosmk user-191=radekrat user-192=starluxm user-193=fffhpcwr user-194=tcieuroc user-195=solemor1 user-196=mapaspla user-197=onlinesh user-198=nationa2 user-199=v5srybi9dcdx user-200=supremel user-201=gorsajmk user-202=aquatech user-203=zdmgpsor user-204=inkigaic user-205=modernar user-206=taneccom user-207=tehnologija
Sep  8 13:42:06 power sudo[174428]: wp-toolkit : (command continued) user-208=bozinovm user-209=fnjorgmk user-210=prizmapl user-211=darkogor user-212=dslmk user-213=innofabl user-214=premiumi user-215=vacuacti feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 13:42:06 power sudo[174428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:06 power sudo[174428]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:06 power sudo[174440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 13:42:06 power sudo[174440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:06 power sudo[174440]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:06 power sudo[174444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Gl8XeRNZ4WKx9gd0.~
Sep  8 13:42:06 power sudo[174444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:06 power sudo[174444]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:06 power sudo[174448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Gl8XeRNZ4WKx9gd0.~\''
Sep  8 13:42:06 power sudo[174448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:06 power sudo[174448]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:06 power sudo[174453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Gl8XeRNZ4WKx9gd0.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 13:42:06 power sudo[174453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:06 power sudo[174453]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:06 power sudo[174457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 13:42:06 power sudo[174457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:06 power sudo[174457]: pam_unix(sudo:session): session closed for user root
Sep  8 13:42:10 power sudo[174790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 13:42:10 power sudo[174790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 13:42:10 power sudo[174790]: pam_unix(sudo:session): session closed for user root
Sep  8 13:45:02 power systemd[177947]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:50:01 power systemd[183569]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 13:55:01 power systemd[188195]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:00:01 power systemd[193131]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:00:01 power systemd[193133]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 14:00:01 power systemd[193132]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 14:00:01 power systemd[193134]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 14:05:01 power systemd[198018]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:06:01 power systemd[198883]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 14:07:01 power systemd[199783]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 14:10:02 power systemd[202574]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:12:01 power systemd[204270]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 14:15:01 power systemd[208438]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:20:01 power systemd[213013]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:25:01 power systemd[217350]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:30:01 power systemd[221801]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 14:30:01 power systemd[221800]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:30:01 power systemd[221803]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 14:30:01 power systemd[221804]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 14:35:01 power systemd[226547]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:36:01 power systemd[227421]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 14:37:01 power systemd[228174]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 14:40:01 power systemd[230672]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:42:01 power systemd[232382]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 14:42:03 power sudo[232426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 14:42:03 power sudo[232426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232426]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 14:42:03 power sudo[232431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232431]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 14:42:03 power sudo[232435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232435]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=6kj4BIJIHR'
Sep  8 14:42:03 power sudo[232439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232439]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 14:42:03 power sudo[232444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232444]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 14:42:03 power sudo[232448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232448]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 14:42:03 power sudo[232452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232452]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 14:42:03 power sudo[232457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232457]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 14:42:03 power sudo[232462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232462]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 14:42:03 power sudo[232466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232466]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 14:42:03 power sudo[232470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232470]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 14:42:03 power sudo[232474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232474]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:03 power sudo[232478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 14:42:03 power sudo[232478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:03 power sudo[232478]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:04 power sudo[232483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 14:42:04 power sudo[232483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:04 power sudo[232483]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:06 power sudo[232507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 14:42:06 power sudo[232507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:06 power sudo[232507]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:06 power sudo[232516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 14:42:06 power sudo[232516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:06 power sudo[232516]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:06 power sudo[232524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=stojano1 user-2=bovincom user-3=itradeco user-4=janiboja user-5=cabinetm user-6=vezilkac user-7=zvskopje user-8=busymard user-9=zampmk user-10=palenzok user-11=custome1 user-12=stokovna user-13=sparkupm user-14=klimimk user-15=premiuma user-16=kouzonco user-17=dalmacom user-18=cetplatf user-19=drleomk user-20=inotekso user-21=jpparkin user-22=screenme user-23=arturaco user-24=karpospo user-25=nasaidni user-26=ideaplus user-27=butelmk user-28=daris user-29=premiums user-30=workandt user-31=barececo user-32=simbiome user-33=getaldus user-34=delcevca user-35=mfashion user-36=dhamachi user-37=goartsym user-38=volkanco user-39=skyapart user-40=makoasmk user-41=bianasho user-42=rasmorgm user-43=datalink user-44=univerz1 user-45=kujnamon user-46=velmk user-47=gogovan1 user-48=mpbmk user-49=agrosind user-50=bizporta
Sep  8 14:42:06 power sudo[232524]: wp-toolkit : (command continued) user-51=maleshne user-52=datelcom user-53=groskome user-54=ivanjord user-55=sedcmk user-56=polyeste user-57=vfxnestc user-58=urbanexp user-59=wikicamp user-60=detskagr user-61=spdcompu user-62=mspmk user-63=infobadi user-64=stojnevi user-65=bauerbg user-66=uhostmk5 user-67=oouslave user-68=raremk user-69=viewinn user-70=trudovop user-71=vmro user-72=enaspotc user-73=hotammk user-74=cajsproc user-75=anitermc user-76=youthgua user-77=hidrommk user-78=frizered user-79=caramk user-80=levantmk user-81=oncolog1 user-82=ekostoc1 user-83=nefrolog user-84=avtogumi user-85=socioloz user-86=pelagoni user-87=evolvepl user-88=seloviro user-89=kolened1 user-90=centarba user-91=nlpmkorg user-92=nolimits user-93=berbermk user-94=edomcomm user-95=enochmk user-96=herbalpl user-97=sprintst user-98=dikimk12 user-99=gjorgeiv user-100=tradeyou user-101=dnevnoin user-102=stravelm user-103=robustco user-104=wondersp user-105=pecakome
Sep  8 14:42:06 power sudo[232524]: wp-toolkit : (command continued) user-106=rastiraz user-107=holiyayt user-108=tealmk user-109=proverim user-110=dadarmk user-111=mstmmk user-112=goodnews user-113=gocruise user-114=pelagini user-115=bbbustou user-116=kaoilmk user-117=biplmk user-118=sssoluti user-119=atspedco user-120=cleanerm user-121=animatem user-122=progress user-123=recorgmk user-124=taktcomm user-125=solointe user-126=jaramk user-127=eurofarm user-128=solarinv user-129=golakkom user-130=electrol user-131=naksorgm user-132=eliksirz user-133=trigemat user-134=ismassag user-135=workbenc user-136=mbmehani user-137=viplastc user-138=wineberr user-139=cupidpro user-140=vegemk1 user-141=euronic3 user-142=conserva user-143=evberasm user-144=bonitavi user-145=folklore user-146=bauerin2 user-147=madzomk user-148=aptekafa user-149=evacommk user-150=gradbai1 user-151=dimpalne user-152=eaptekam user-153=fxxcom user-154=peshkai1 user-155=tehnodro user-156=makdrone user-157=jpkomuna
Sep  8 14:42:06 power sudo[232524]: wp-toolkit : (command continued) user-158=izzomk user-159=vacuacti user-160=premiumi user-161=innofabl user-162=fnjorgmk user-163=prizmapl user-164=darkogor user-165=dslmk user-166=bozinovm user-167=tehnologija user-168=taneccom user-169=modernar user-170=inkigaic user-171=zdmgpsor user-172=aquatech user-173=gorsajmk user-174=supremel user-175=v5srybi9dcdx user-176=nationa2 user-177=onlinesh user-178=mapaspla user-179=solemor1 user-180=tcieuroc user-181=fffhpcwr user-182=starluxm user-183=radekrat user-184=fiziosmk user-185=ambitiou user-186=versusmk user-187=mediatag user-188=intelek1 user-189=lblawcom user-190=nucktra1 user-191=forzares user-192=nikimare user-193=aptekazd user-194=nikolov1 user-195=hausmark user-196=apgrupmk user-197=bogdanos user-198=carrent1 user-199=mediasol user-200=kardiome user-201=matratze user-202=euronic2 user-203=cosmatob user-204=euromaki user-205=elektrot user-206=zapovim1 user-207=chemhemc user-208=samasped
Sep  8 14:42:06 power sudo[232524]: wp-toolkit : (command continued) user-209=nutrivim user-210=imdskopj user-211=albuname user-212=glammace user-213=infopor1 user-214=vtranseu user-215=pravekom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 14:42:06 power sudo[232524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:06 power sudo[232524]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:06 power sudo[232534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep  8 14:42:06 power sudo[232534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:07 power sudo[232534]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:07 power sudo[232544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro test -e /home/vmro/wordpress-backups
Sep  8 14:42:07 power sudo[232544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:07 power sudo[232544]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:07 power sudo[232557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep  8 14:42:07 power sudo[232557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:07 power sudo[232557]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:07 power sudo[232566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep  8 14:42:07 power sudo[232566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:07 power sudo[232566]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:07 power sudo[232578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep  8 14:42:07 power sudo[232578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:07 power sudo[232578]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:07 power sudo[232585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind test -e /home/agrosind/wordpress-backups
Sep  8 14:42:07 power sudo[232585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:07 power sudo[232585]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:07 power sudo[232597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep  8 14:42:07 power sudo[232597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:07 power sudo[232597]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:07 power sudo[232602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep  8 14:42:07 power sudo[232602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:07 power sudo[232602]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:07 power sudo[232613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep  8 14:42:07 power sudo[232613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:08 power sudo[232613]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:08 power sudo[232619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep  8 14:42:08 power sudo[232619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:08 power sudo[232619]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:08 power sudo[232632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep  8 14:42:08 power sudo[232632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:08 power sudo[232632]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:08 power sudo[232642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem test -e /home/animatem/wordpress-backups
Sep  8 14:42:08 power sudo[232642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:08 power sudo[232642]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:08 power sudo[232653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep  8 14:42:08 power sudo[232653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:08 power sudo[232653]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:08 power sudo[232660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc test -e /home/anitermc/wordpress-backups
Sep  8 14:42:08 power sudo[232660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:08 power sudo[232660]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:08 power sudo[232671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep  8 14:42:08 power sudo[232671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:08 power sudo[232671]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:08 power sudo[232678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep  8 14:42:08 power sudo[232678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:08 power sudo[232678]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:08 power sudo[232690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep  8 14:42:09 power sudo[232690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:09 power sudo[232690]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:09 power sudo[232695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd test -e /home/aptekazd/wordpress-backups
Sep  8 14:42:09 power sudo[232695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:09 power sudo[232695]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:09 power sudo[232711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep  8 14:42:09 power sudo[232711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:09 power sudo[232711]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:09 power sudo[232717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress test -e /home/progress/wordpress-backups
Sep  8 14:42:09 power sudo[232717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:09 power sudo[232717]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:09 power sudo[232729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep  8 14:42:09 power sudo[232729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:09 power sudo[232729]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:09 power sudo[232736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep  8 14:42:09 power sudo[232736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:09 power sudo[232736]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:09 power sudo[232748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep  8 14:42:09 power sudo[232748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:09 power sudo[232748]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:10 power sudo[232758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 test -e /home/nationa2/wordpress-backups
Sep  8 14:42:10 power sudo[232758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:10 power sudo[232758]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:10 power sudo[232769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep  8 14:42:10 power sudo[232769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:10 power sudo[232769]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:10 power sudo[232780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  8 14:42:10 power sudo[232780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:10 power sudo[232780]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:10 power sudo[232791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep  8 14:42:10 power sudo[232791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:10 power sudo[232791]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:10 power sudo[232797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho test -e /home/bianasho/wordpress-backups
Sep  8 14:42:10 power sudo[232797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:10 power sudo[232797]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:10 power sudo[232809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep  8 14:42:10 power sudo[232809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:10 power sudo[232809]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:10 power sudo[232816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk test -e /home/velmk/wordpress-backups
Sep  8 14:42:10 power sudo[232816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:10 power sudo[232816]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:10 power sudo[232827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep  8 14:42:10 power sudo[232827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:10 power sudo[232827]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:11 power sudo[232832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep  8 14:42:11 power sudo[232832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:11 power sudo[232832]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:11 power sudo[232843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep  8 14:42:11 power sudo[232843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:11 power sudo[232843]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:11 power sudo[232853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi test -e /home/bonitavi/wordpress-backups
Sep  8 14:42:11 power sudo[232853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:11 power sudo[232853]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:11 power sudo[232864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep  8 14:42:11 power sudo[232864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:11 power sudo[232864]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:11 power sudo[232870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom test -e /home/bovincom/wordpress-backups
Sep  8 14:42:11 power sudo[232870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:11 power sudo[232870]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:11 power sudo[232881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep  8 14:42:11 power sudo[232881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:11 power sudo[232881]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:11 power sudo[232888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk test -e /home/butelmk/wordpress-backups
Sep  8 14:42:11 power sudo[232888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:11 power sudo[232888]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:11 power sudo[232900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep  8 14:42:11 power sudo[232900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232900]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep  8 14:42:12 power sudo[232909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232909]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  8 14:42:12 power sudo[232920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232920]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  8 14:42:12 power sudo[232931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232931]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep  8 14:42:12 power sudo[232942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232942]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep  8 14:42:12 power sudo[232952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232952]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep  8 14:42:12 power sudo[232963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232963]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob test -e /home/cosmatob/wordpress-backups
Sep  8 14:42:12 power sudo[232970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232970]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep  8 14:42:12 power sudo[232982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232982]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep  8 14:42:12 power sudo[232993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232993]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[232999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca test -e /home/delcevca/wordpress-backups
Sep  8 14:42:12 power sudo[232999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:12 power sudo[232999]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:12 power sudo[233011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep  8 14:42:12 power sudo[233011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233011]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  8 14:42:13 power sudo[233019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233019]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  8 14:42:13 power sudo[233030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233030]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  8 14:42:13 power sudo[233041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233041]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep  8 14:42:13 power sudo[233052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233052]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr test -e /home/detskagr/wordpress-backups
Sep  8 14:42:13 power sudo[233061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233061]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep  8 14:42:13 power sudo[233072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233072]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam test -e /home/eaptekam/wordpress-backups
Sep  8 14:42:13 power sudo[233083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233083]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep  8 14:42:13 power sudo[233095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233095]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne test -e /home/dimpalne/wordpress-backups
Sep  8 14:42:13 power sudo[233101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:13 power sudo[233101]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:13 power sudo[233112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep  8 14:42:13 power sudo[233112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:14 power sudo[233112]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:14 power sudo[233119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin test -e /home/dnevnoin/wordpress-backups
Sep  8 14:42:14 power sudo[233119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:14 power sudo[233119]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:14 power sudo[233130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep  8 14:42:14 power sudo[233130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:14 power sudo[233130]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:14 power sudo[233145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep  8 14:42:14 power sudo[233145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:14 power sudo[233145]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:14 power sudo[233152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk test -e /home/drleomk/wordpress-backups
Sep  8 14:42:14 power sudo[233152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:14 power sudo[233152]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:14 power sudo[233165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep  8 14:42:14 power sudo[233165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:14 power sudo[233165]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:14 power sudo[233172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  8 14:42:14 power sudo[233172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:14 power sudo[233172]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:14 power sudo[233183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep  8 14:42:14 power sudo[233183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:14 power sudo[233183]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol test -e /home/electrol/wordpress-backups
Sep  8 14:42:15 power sudo[233196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:15 power sudo[233196]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep  8 14:42:15 power sudo[233208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:15 power sudo[233208]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot test -e /home/elektrot/wordpress-backups
Sep  8 14:42:15 power sudo[233217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:15 power sudo[233217]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep  8 14:42:15 power sudo[233230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:15 power sudo[233230]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep  8 14:42:15 power sudo[233243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:15 power sudo[233243]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk test -e /home/enochmk/wordpress-backups
Sep  8 14:42:15 power sudo[233268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:15 power sudo[233268]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  8 14:42:15 power sudo[233283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:15 power sudo[233283]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep  8 14:42:15 power sudo[233296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:15 power sudo[233296]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm test -e /home/eurofarm/wordpress-backups
Sep  8 14:42:15 power sudo[233318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:15 power sudo[233318]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:15 power sudo[233330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep  8 14:42:15 power sudo[233330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:16 power sudo[233330]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:16 power sudo[233336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki test -e /home/euromaki/wordpress-backups
Sep  8 14:42:16 power sudo[233336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:16 power sudo[233336]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:16 power sudo[233347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep  8 14:42:16 power sudo[233347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:16 power sudo[233347]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:16 power sudo[233355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm test -e /home/evberasm/wordpress-backups
Sep  8 14:42:16 power sudo[233355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:16 power sudo[233355]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:16 power sudo[233366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep  8 14:42:16 power sudo[233366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:16 power sudo[233366]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:16 power sudo[233374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl test -e /home/evolvepl/wordpress-backups
Sep  8 14:42:16 power sudo[233374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:16 power sudo[233374]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:16 power sudo[233386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  8 14:42:16 power sudo[233386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:16 power sudo[233386]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:16 power sudo[233397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep  8 14:42:16 power sudo[233397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:16 power sudo[233397]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:16 power sudo[233406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep  8 14:42:16 power sudo[233406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:16 power sudo[233406]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:16 power sudo[233417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep  8 14:42:16 power sudo[233417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:17 power sudo[233417]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:17 power sudo[233423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep  8 14:42:17 power sudo[233423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:17 power sudo[233423]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:17 power sudo[233435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep  8 14:42:17 power sudo[233435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:17 power sudo[233435]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:17 power sudo[233443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore test -e /home/folklore/wordpress-backups
Sep  8 14:42:17 power sudo[233443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:17 power sudo[233443]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:17 power sudo[233454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep  8 14:42:17 power sudo[233454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:17 power sudo[233454]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:17 power sudo[233461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares test -e /home/forzares/wordpress-backups
Sep  8 14:42:17 power sudo[233461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:17 power sudo[233461]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:17 power sudo[233473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep  8 14:42:17 power sudo[233473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:17 power sudo[233473]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:17 power sudo[233480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus test -e /home/getaldus/wordpress-backups
Sep  8 14:42:17 power sudo[233480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:17 power sudo[233480]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:18 power sudo[233493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep  8 14:42:18 power sudo[233493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:18 power sudo[233493]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:18 power sudo[233498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise test -e /home/gocruise/wordpress-backups
Sep  8 14:42:18 power sudo[233498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:18 power sudo[233498]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:18 power sudo[233514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep  8 14:42:18 power sudo[233514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:18 power sudo[233514]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:18 power sudo[233533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 test -e /home/gogovan1/wordpress-backups
Sep  8 14:42:18 power sudo[233533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:18 power sudo[233533]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:18 power sudo[233544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep  8 14:42:18 power sudo[233544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:18 power sudo[233544]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:18 power sudo[233550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom test -e /home/golakkom/wordpress-backups
Sep  8 14:42:18 power sudo[233550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:18 power sudo[233550]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:18 power sudo[233561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  8 14:42:18 power sudo[233561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:18 power sudo[233561]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:18 power sudo[233572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep  8 14:42:18 power sudo[233572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233572]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl test -e /home/herbalpl/wordpress-backups
Sep  8 14:42:19 power sudo[233580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233580]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  8 14:42:19 power sudo[233591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233591]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep  8 14:42:19 power sudo[233602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233602]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep  8 14:42:19 power sudo[233613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233613]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  8 14:42:19 power sudo[233622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233622]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  8 14:42:19 power sudo[233633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233633]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  8 14:42:19 power sudo[233646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233646]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  8 14:42:19 power sudo[233657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233657]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  8 14:42:19 power sudo[233668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233668]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep  8 14:42:19 power sudo[233680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233680]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk test -e /home/madzomk/wordpress-backups
Sep  8 14:42:19 power sudo[233688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233688]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep  8 14:42:19 power sudo[233700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233700]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj test -e /home/imdskopj/wordpress-backups
Sep  8 14:42:19 power sudo[233710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:19 power sudo[233710]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:19 power sudo[233721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep  8 14:42:19 power sudo[233721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:20 power sudo[233721]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:20 power sudo[233730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 test -e /home/infopor1/wordpress-backups
Sep  8 14:42:20 power sudo[233730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:20 power sudo[233730]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:20 power sudo[233741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep  8 14:42:20 power sudo[233741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:20 power sudo[233741]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:20 power sudo[233754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user inkigaic test -e /home/inkigaic/wordpress-backups
Sep  8 14:42:20 power sudo[233754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:20 power sudo[233754]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:20 power sudo[233765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep  8 14:42:20 power sudo[233765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:20 power sudo[233765]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:20 power sudo[233770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 test -e /home/intelek1/wordpress-backups
Sep  8 14:42:20 power sudo[233770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:20 power sudo[233770]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:20 power sudo[233783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep  8 14:42:20 power sudo[233783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:20 power sudo[233783]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:20 power sudo[233795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep  8 14:42:20 power sudo[233795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:20 power sudo[233795]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:20 power sudo[233802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin test -e /home/jpparkin/wordpress-backups
Sep  8 14:42:21 power sudo[233802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:21 power sudo[233802]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:21 power sudo[233813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep  8 14:42:21 power sudo[233813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:21 power sudo[233813]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:21 power sudo[233820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo test -e /home/karpospo/wordpress-backups
Sep  8 14:42:21 power sudo[233820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:21 power sudo[233820]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:21 power sudo[233835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  8 14:42:21 power sudo[233835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:21 power sudo[233835]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:21 power sudo[233846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  8 14:42:21 power sudo[233846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:21 power sudo[233846]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:21 power sudo[233857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep  8 14:42:21 power sudo[233857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:21 power sudo[233857]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:21 power sudo[233863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 test -e /home/kolened1/wordpress-backups
Sep  8 14:42:21 power sudo[233863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:21 power sudo[233863]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:21 power sudo[233874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep  8 14:42:21 power sudo[233874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:21 power sudo[233874]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:21 power sudo[233879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco test -e /home/kouzonco/wordpress-backups
Sep  8 14:42:21 power sudo[233879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:21 power sudo[233879]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:21 power sudo[233890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep  8 14:42:21 power sudo[233890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233890]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst test -e /home/sprintst/wordpress-backups
Sep  8 14:42:22 power sudo[233897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233897]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep  8 14:42:22 power sudo[233909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233909]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon test -e /home/kujnamon/wordpress-backups
Sep  8 14:42:22 power sudo[233919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233919]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  8 14:42:22 power sudo[233930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233930]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep  8 14:42:22 power sudo[233941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233941]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone test -e /home/makdrone/wordpress-backups
Sep  8 14:42:22 power sudo[233949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233949]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep  8 14:42:22 power sudo[233961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233961]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk test -e /home/makoasmk/wordpress-backups
Sep  8 14:42:22 power sudo[233972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233972]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep  8 14:42:22 power sudo[233984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233984]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[233995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  8 14:42:22 power sudo[233995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:22 power sudo[233995]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:22 power sudo[234006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep  8 14:42:22 power sudo[234006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:23 power sudo[234006]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:23 power sudo[234013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar test -e /home/modernar/wordpress-backups
Sep  8 14:42:23 power sudo[234013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:23 power sudo[234013]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:23 power sudo[234024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep  8 14:42:23 power sudo[234024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:23 power sudo[234024]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:23 power sudo[234040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep  8 14:42:23 power sudo[234040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:23 power sudo[234040]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:23 power sudo[234046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk test -e /home/mpbmk/wordpress-backups
Sep  8 14:42:23 power sudo[234046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:23 power sudo[234046]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:23 power sudo[234059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep  8 14:42:23 power sudo[234059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:23 power sudo[234059]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:23 power sudo[234064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk test -e /home/mspmk/wordpress-backups
Sep  8 14:42:23 power sudo[234064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:23 power sudo[234064]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:26 power sudo[234109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep  8 14:42:26 power sudo[234109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:26 power sudo[234109]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:26 power sudo[234117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk test -e /home/mstmmk/wordpress-backups
Sep  8 14:42:26 power sudo[234117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:26 power sudo[234117]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:26 power sudo[234128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep  8 14:42:26 power sudo[234128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:26 power sudo[234128]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:26 power sudo[234135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm test -e /home/naksorgm/wordpress-backups
Sep  8 14:42:26 power sudo[234135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:26 power sudo[234135]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:26 power sudo[234147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep  8 14:42:26 power sudo[234147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:27 power sudo[234147]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:27 power sudo[234154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep  8 14:42:27 power sudo[234154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:27 power sudo[234154]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:27 power sudo[234165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep  8 14:42:27 power sudo[234165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:27 power sudo[234165]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:27 power sudo[234179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep  8 14:42:27 power sudo[234179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:27 power sudo[234179]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:27 power sudo[234187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag test -e /home/ismassag/wordpress-backups
Sep  8 14:42:27 power sudo[234187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:27 power sudo[234187]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:27 power sudo[234198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep  8 14:42:27 power sudo[234198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:27 power sudo[234198]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:27 power sudo[234209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep  8 14:42:27 power sudo[234209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:27 power sudo[234209]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:27 power sudo[234215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 test -e /home/nikolov1/wordpress-backups
Sep  8 14:42:27 power sudo[234215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:27 power sudo[234215]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:27 power sudo[234226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep  8 14:42:27 power sudo[234226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:28 power sudo[234226]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:28 power sudo[234231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits test -e /home/nolimits/wordpress-backups
Sep  8 14:42:28 power sudo[234231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:28 power sudo[234231]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:28 power sudo[234242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep  8 14:42:28 power sudo[234242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:28 power sudo[234242]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:28 power sudo[234255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh test -e /home/onlinesh/wordpress-backups
Sep  8 14:42:28 power sudo[234255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:28 power sudo[234255]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:28 power sudo[234267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep  8 14:42:28 power sudo[234267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:28 power sudo[234267]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:28 power sudo[234278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok test -e /home/palenzok/wordpress-backups
Sep  8 14:42:28 power sudo[234278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:28 power sudo[234278]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:28 power sudo[234289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep  8 14:42:28 power sudo[234289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:28 power sudo[234289]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:28 power sudo[234300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni test -e /home/pelagoni/wordpress-backups
Sep  8 14:42:28 power sudo[234300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:28 power sudo[234300]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:28 power sudo[234311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep  8 14:42:28 power sudo[234311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:29 power sudo[234311]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:29 power sudo[234318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk test -e /home/biplmk/wordpress-backups
Sep  8 14:42:29 power sudo[234318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:29 power sudo[234318]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:29 power sudo[234329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep  8 14:42:29 power sudo[234329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:29 power sudo[234329]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:29 power sudo[234340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi test -e /home/premiumi/wordpress-backups
Sep  8 14:42:29 power sudo[234340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:29 power sudo[234340]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:29 power sudo[234351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep  8 14:42:29 power sudo[234351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:29 power sudo[234351]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:29 power sudo[234362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep  8 14:42:29 power sudo[234362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:29 power sudo[234362]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:29 power sudo[234368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat test -e /home/radekrat/wordpress-backups
Sep  8 14:42:29 power sudo[234368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:29 power sudo[234368]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:29 power sudo[234379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep  8 14:42:29 power sudo[234379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:29 power sudo[234379]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:29 power sudo[234390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm test -e /home/rasmorgm/wordpress-backups
Sep  8 14:42:29 power sudo[234390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:29 power sudo[234390]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:29 power sudo[234402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep  8 14:42:29 power sudo[234402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234402]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:30 power sudo[234417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk test -e /home/recorgmk/wordpress-backups
Sep  8 14:42:30 power sudo[234417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234417]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:30 power sudo[234430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep  8 14:42:30 power sudo[234430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234430]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:30 power sudo[234438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm test -e /home/stravelm/wordpress-backups
Sep  8 14:42:30 power sudo[234438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234438]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:30 power sudo[234449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep  8 14:42:30 power sudo[234449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234449]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:30 power sudo[234457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome test -e /home/simbiome/wordpress-backups
Sep  8 14:42:30 power sudo[234457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234457]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:30 power sudo[234468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  8 14:42:30 power sudo[234468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234468]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:30 power sudo[234480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep  8 14:42:30 power sudo[234480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234480]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:30 power sudo[234485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep  8 14:42:30 power sudo[234485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234485]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:30 power sudo[234496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep  8 14:42:30 power sudo[234496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:30 power sudo[234496]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:31 power sudo[234508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep  8 14:42:31 power sudo[234508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:31 power sudo[234508]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:31 power sudo[234515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti test -e /home/sssoluti/wordpress-backups
Sep  8 14:42:31 power sudo[234515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:31 power sudo[234515]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:31 power sudo[234530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep  8 14:42:31 power sudo[234530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:31 power sudo[234530]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:31 power sudo[234539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep  8 14:42:31 power sudo[234539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:31 power sudo[234539]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:31 power sudo[234550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep  8 14:42:31 power sudo[234550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:31 power sudo[234550]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:31 power sudo[234559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro test -e /home/tehnodro/wordpress-backups
Sep  8 14:42:31 power sudo[234559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:31 power sudo[234559]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:31 power sudo[234571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep  8 14:42:31 power sudo[234571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:31 power sudo[234571]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:31 power sudo[234582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep  8 14:42:31 power sudo[234582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:32 power sudo[234582]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:32 power sudo[234588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn test -e /home/viewinn/wordpress-backups
Sep  8 14:42:32 power sudo[234588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:32 power sudo[234588]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:32 power sudo[234600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep  8 14:42:32 power sudo[234600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:32 power sudo[234600]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:32 power sudo[234612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp test -e /home/wikicamp/wordpress-backups
Sep  8 14:42:32 power sudo[234612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:32 power sudo[234612]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:32 power sudo[234623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep  8 14:42:32 power sudo[234623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:32 power sudo[234623]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:32 power sudo[234634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt test -e /home/workandt/wordpress-backups
Sep  8 14:42:32 power sudo[234634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:32 power sudo[234634]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:32 power sudo[234647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  8 14:42:32 power sudo[234647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:32 power sudo[234647]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:32 power sudo[234658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep  8 14:42:32 power sudo[234658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:32 power sudo[234658]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:32 power sudo[234665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua test -e /home/youthgua/wordpress-backups
Sep  8 14:42:32 power sudo[234665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:32 power sudo[234665]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:32 power sudo[234676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep  8 14:42:32 power sudo[234676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:33 power sudo[234676]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:33 power sudo[234684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk test -e /home/zampmk/wordpress-backups
Sep  8 14:42:33 power sudo[234684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:33 power sudo[234684]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:33 power sudo[234695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep  8 14:42:33 power sudo[234695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:33 power sudo[234695]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:33 power sudo[234709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord test -e /home/ivanjord/wordpress-backups
Sep  8 14:42:33 power sudo[234709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:33 power sudo[234709]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:33 power sudo[234721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep  8 14:42:33 power sudo[234721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:33 power sudo[234721]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:33 power sudo[234732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep  8 14:42:33 power sudo[234732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:33 power sudo[234732]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:33 power sudo[234739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja test -e /home/janiboja/wordpress-backups
Sep  8 14:42:33 power sudo[234739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:33 power sudo[234739]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:33 power sudo[234750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep  8 14:42:33 power sudo[234750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:33 power sudo[234750]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:33 power sudo[234755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk test -e /home/jaramk/wordpress-backups
Sep  8 14:42:33 power sudo[234755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:33 power sudo[234755]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:33 power sudo[234766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep  8 14:42:33 power sudo[234766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:34 power sudo[234766]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:34 power sudo[234774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep  8 14:42:34 power sudo[234774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:34 power sudo[234774]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:34 power sudo[234788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep  8 14:42:34 power sudo[234788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:34 power sudo[234788]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:34 power sudo[234795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep  8 14:42:34 power sudo[234795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:34 power sudo[234795]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:34 power sudo[234807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep  8 14:42:34 power sudo[234807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:34 power sudo[234807]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:34 power sudo[234818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep  8 14:42:34 power sudo[234818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:34 power sudo[234818]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:34 power sudo[234823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag test -e /home/mediatag/wordpress-backups
Sep  8 14:42:34 power sudo[234823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:34 power sudo[234823]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:34 power sudo[234836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep  8 14:42:34 power sudo[234836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:34 power sudo[234836]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:34 power sudo[234849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep  8 14:42:34 power sudo[234849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:35 power sudo[234849]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:35 power sudo[234856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog test -e /home/nefrolog/wordpress-backups
Sep  8 14:42:35 power sudo[234856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:35 power sudo[234856]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:35 power sudo[234869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep  8 14:42:35 power sudo[234869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:35 power sudo[234869]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:35 power sudo[234881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep  8 14:42:35 power sudo[234881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:35 power sudo[234881]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:35 power sudo[234893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep  8 14:42:35 power sudo[234893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:35 power sudo[234893]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:35 power sudo[234904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep  8 14:42:35 power sudo[234904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:35 power sudo[234904]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:35 power sudo[234911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep  8 14:42:35 power sudo[234911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:35 power sudo[234911]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:35 power sudo[234923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep  8 14:42:35 power sudo[234923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:35 power sudo[234923]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:35 power sudo[234932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom test -e /home/pravekom/wordpress-backups
Sep  8 14:42:35 power sudo[234932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:35 power sudo[234932]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:35 power sudo[234944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep  8 14:42:35 power sudo[234944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:36 power sudo[234944]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:36 power sudo[234950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim test -e /home/proverim/wordpress-backups
Sep  8 14:42:36 power sudo[234950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:36 power sudo[234950]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:36 power sudo[234963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep  8 14:42:36 power sudo[234963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:36 power sudo[234963]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:36 power sudo[234974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz test -e /home/rastiraz/wordpress-backups
Sep  8 14:42:36 power sudo[234974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:36 power sudo[234974]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:36 power sudo[234985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep  8 14:42:36 power sudo[234985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:36 power sudo[234985]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:36 power sudo[234994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva test -e /home/conserva/wordpress-backups
Sep  8 14:42:36 power sudo[234994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:36 power sudo[234994]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:36 power sudo[235009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep  8 14:42:36 power sudo[235009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:36 power sudo[235009]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:36 power sudo[235015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne test -e /home/maleshne/wordpress-backups
Sep  8 14:42:36 power sudo[235015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:36 power sudo[235015]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:36 power sudo[235026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep  8 14:42:36 power sudo[235026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:37 power sudo[235026]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:37 power sudo[235033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped test -e /home/samasped/wordpress-backups
Sep  8 14:42:37 power sudo[235033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:37 power sudo[235033]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:37 power sudo[235044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep  8 14:42:37 power sudo[235044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:37 power sudo[235044]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:37 power sudo[235053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro test -e /home/seloviro/wordpress-backups
Sep  8 14:42:37 power sudo[235053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:37 power sudo[235053]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:37 power sudo[235064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep  8 14:42:37 power sudo[235064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:37 power sudo[235064]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:37 power sudo[235071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart test -e /home/skyapart/wordpress-backups
Sep  8 14:42:37 power sudo[235071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:37 power sudo[235071]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:37 power sudo[235083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep  8 14:42:37 power sudo[235083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:37 power sudo[235083]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:37 power sudo[235089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz test -e /home/socioloz/wordpress-backups
Sep  8 14:42:38 power sudo[235089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:38 power sudo[235089]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:38 power sudo[235100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep  8 14:42:38 power sudo[235100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:38 power sudo[235100]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:38 power sudo[235110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi test -e /home/stojnevi/wordpress-backups
Sep  8 14:42:38 power sudo[235110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:38 power sudo[235110]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:38 power sudo[235124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep  8 14:42:38 power sudo[235124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:38 power sudo[235124]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:38 power sudo[235135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep  8 14:42:38 power sudo[235135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:38 power sudo[235135]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:38 power sudo[235140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop test -e /home/trudovop/wordpress-backups
Sep  8 14:42:38 power sudo[235140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:38 power sudo[235140]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:38 power sudo[235151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep  8 14:42:38 power sudo[235151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:38 power sudo[235151]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:38 power sudo[235156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp test -e /home/urbanexp/wordpress-backups
Sep  8 14:42:38 power sudo[235156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:38 power sudo[235156]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:38 power sudo[235167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep  8 14:42:38 power sudo[235167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235167]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:39 power sudo[235173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc test -e /home/vfxnestc/wordpress-backups
Sep  8 14:42:39 power sudo[235173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235173]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:39 power sudo[235184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep  8 14:42:39 power sudo[235184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235184]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:39 power sudo[235193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/wordpress-backups
Sep  8 14:42:39 power sudo[235193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235193]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:39 power sudo[235205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep  8 14:42:39 power sudo[235205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235205]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:39 power sudo[235211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace test -e /home/glammace/wordpress-backups
Sep  8 14:42:39 power sudo[235211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235211]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:39 power sudo[235222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep  8 14:42:39 power sudo[235222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235222]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:39 power sudo[235233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep  8 14:42:39 power sudo[235233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235233]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:39 power sudo[235240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc test -e /home/workbenc/wordpress-backups
Sep  8 14:42:39 power sudo[235240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235240]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:39 power sudo[235251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep  8 14:42:39 power sudo[235251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:39 power sudo[235251]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:40 power sudo[236603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json'
Sep  8 14:42:40 power sudo[236603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:40 power sudo[236603]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:40 power sudo[236608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=5.9.96.240 --output=json'
Sep  8 14:42:40 power sudo[236608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:40 power sudo[236608]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:43 power sudo[236658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 14:42:43 power sudo[236658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:43 power sudo[236658]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:43 power sudo[236662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2FVPVseepc3lyRIl.~
Sep  8 14:42:43 power sudo[236662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:43 power sudo[236662]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:43 power sudo[236666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2FVPVseepc3lyRIl.~\''
Sep  8 14:42:43 power sudo[236666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:43 power sudo[236666]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:43 power sudo[236672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2FVPVseepc3lyRIl.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 14:42:43 power sudo[236672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:43 power sudo[236672]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:43 power sudo[236676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 14:42:43 power sudo[236676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:43 power sudo[236676]: pam_unix(sudo:session): session closed for user root
Sep  8 14:42:46 power sudo[236993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 14:42:46 power sudo[236993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 14:42:46 power sudo[236993]: pam_unix(sudo:session): session closed for user root
Sep  8 14:45:01 power systemd[239845]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:50:01 power systemd[245443]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:50:23 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 89.37.95.203 has been locked due to Imunify RBL
Sep  8 14:55:01 power systemd[250921]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 14:56:18 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 15:00:01 power systemd[255649]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:00:01 power systemd[255652]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 15:00:01 power systemd[255653]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 15:00:01 power systemd[255655]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 15:05:01 power systemd[260840]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:06:01 power systemd[261933]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 15:07:01 power systemd[262959]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 15:10:01 power systemd[265365]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:12:01 power systemd[267200]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 15:15:01 power systemd[269709]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:20:01 power systemd[274133]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:25:01 power systemd[278570]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:30:01 power systemd[283163]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:30:01 power systemd[283164]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 15:30:01 power systemd[283165]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 15:30:01 power systemd[283167]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 15:34:51 power sudo[287261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 15:34:51 power sudo[287261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:34:51 power sudo[287261]: pam_unix(sudo:session): session closed for user root
Sep  8 15:34:51 power sudo[287266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnologija'
Sep  8 15:34:51 power sudo[287266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:34:51 power sudo[287266]: pam_unix(sudo:session): session closed for user root
Sep  8 15:35:01 power systemd[287567]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:36:01 power systemd[288857]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 15:37:01 power systemd[289700]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 15:40:01 power systemd[292139]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:42:01 power systemd[294048]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 15:42:03 power sudo[294100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 15:42:03 power sudo[294100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294100]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 15:42:03 power sudo[294104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294104]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 15:42:03 power sudo[294108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294108]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=L749WCUCl3'
Sep  8 15:42:03 power sudo[294112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294112]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 15:42:03 power sudo[294117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294117]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 15:42:03 power sudo[294121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294121]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 15:42:03 power sudo[294127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294127]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 15:42:03 power sudo[294132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294132]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 15:42:03 power sudo[294139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294139]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 15:42:03 power sudo[294143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294143]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 15:42:03 power sudo[294147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294147]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:03 power sudo[294151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 15:42:03 power sudo[294151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:03 power sudo[294151]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:04 power sudo[294155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 15:42:04 power sudo[294155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:04 power sudo[294155]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:04 power sudo[294159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 15:42:04 power sudo[294159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:04 power sudo[294159]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:06 power sudo[294190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 15:42:06 power sudo[294190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:06 power sudo[294190]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:06 power sudo[294195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 15:42:06 power sudo[294195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:06 power sudo[294195]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:06 power sudo[294202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=kaoilmk user-2=biplmk user-3=bbbustou user-4=pelagini user-5=jaramk user-6=solointe user-7=recorgmk user-8=taktcomm user-9=progress user-10=animatem user-11=cleanerm user-12=atspedco user-13=sssoluti user-14=trigemat user-15=eliksirz user-16=naksorgm user-17=electrol user-18=golakkom user-19=solarinv user-20=eurofarm user-21=wineberr user-22=viplastc user-23=mbmehani user-24=workbenc user-25=ismassag user-26=bonitavi user-27=evberasm user-28=conserva user-29=euronic3 user-30=vegemk1 user-31=cupidpro user-32=bauerin2 user-33=folklore user-34=peshkai1 user-35=fxxcom user-36=eaptekam user-37=dimpalne user-38=gradbai1 user-39=evacommk user-40=madzomk user-41=aptekafa user-42=izzomk user-43=jpkomuna user-44=makdrone user-45=tehnodro user-46=inkigaic user-47=modernar user-48=taneccom user-49=tehnologija
Sep  8 15:42:06 power sudo[294202]: wp-toolkit : (command continued) user-50=bozinovm user-51=prizmapl user-52=darkogor user-53=fnjorgmk user-54=dslmk user-55=premiumi user-56=innofabl user-57=vacuacti user-58=v5srybi9dcdx user-59=supremel user-60=gorsajmk user-61=aquatech user-62=zdmgpsor user-63=tcieuroc user-64=solemor1 user-65=mapaspla user-66=onlinesh user-67=nationa2 user-68=versusmk user-69=ambitiou user-70=fiziosmk user-71=radekrat user-72=starluxm user-73=fffhpcwr user-74=nikolov1 user-75=hausmark user-76=aptekazd user-77=nikimare user-78=forzares user-79=nucktra1 user-80=lblawcom user-81=intelek1 user-82=mediatag user-83=euronic2 user-84=matratze user-85=kardiome user-86=mediasol user-87=bogdanos user-88=carrent1 user-89=apgrupmk user-90=nutrivim user-91=samasped user-92=chemhemc user-93=elektrot user-94=zapovim1 user-95=euromaki user-96=cosmatob user-97=vtranseu user-98=pravekom user-99=infopor1 user-100=glammace user-101=albuname user-102=imdskopj user-103=vezilkac
Sep  8 15:42:06 power sudo[294202]: wp-toolkit : (command continued) user-104=cabinetm user-105=janiboja user-106=itradeco user-107=bovincom user-108=stojano1 user-109=klimimk user-110=sparkupm user-111=stokovna user-112=custome1 user-113=palenzok user-114=busymard user-115=zvskopje user-116=zampmk user-117=cetplatf user-118=dalmacom user-119=kouzonco user-120=premiuma user-121=premiums user-122=daris user-123=butelmk user-124=ideaplus user-125=karpospo user-126=nasaidni user-127=arturaco user-128=screenme user-129=jpparkin user-130=inotekso user-131=drleomk user-132=rasmorgm user-133=makoasmk user-134=bianasho user-135=skyapart user-136=volkanco user-137=goartsym user-138=dhamachi user-139=mfashion user-140=delcevca user-141=getaldus user-142=simbiome user-143=barececo user-144=workandt user-145=agrosind user-146=mpbmk user-147=velmk user-148=gogovan1 user-149=kujnamon user-150=univerz1 user-151=datalink user-152=vfxnestc user-153=polyeste user-154=sedcmk user-155=groskome
Sep  8 15:42:06 power sudo[294202]: wp-toolkit : (command continued) user-156=ivanjord user-157=datelcom user-158=maleshne user-159=bizporta user-160=mspmk user-161=infobadi user-162=spdcompu user-163=detskagr user-164=wikicamp user-165=urbanexp user-166=enaspotc user-167=vmro user-168=viewinn user-169=trudovop user-170=raremk user-171=oouslave user-172=uhostmk5 user-173=bauerbg user-174=stojnevi user-175=youthgua user-176=anitermc user-177=cajsproc user-178=hotammk user-179=nefrolog user-180=ekostoc1 user-181=levantmk user-182=oncolog1 user-183=caramk user-184=frizered user-185=hidrommk user-186=evolvepl user-187=pelagoni user-188=avtogumi user-189=socioloz user-190=nolimits user-191=nlpmkorg user-192=centarba user-193=kolened1 user-194=seloviro user-195=dikimk12 user-196=sprintst user-197=enochmk user-198=herbalpl user-199=edomcomm user-200=berbermk user-201=holiyayt user-202=rastiraz user-203=pecakome user-204=wondersp user-205=stravelm user-206=robustco user-207=dnevnoin
Sep  8 15:42:06 power sudo[294202]: wp-toolkit : (command continued) user-208=tradeyou user-209=gjorgeiv user-210=gocruise user-211=goodnews user-212=mstmmk user-213=dadarmk user-214=proverim user-215=tealmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 15:42:06 power sudo[294202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:06 power sudo[294202]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:06 power sudo[294217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 15:42:06 power sudo[294217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:06 power sudo[294217]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:06 power sudo[294221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-neM44uIRB7D9TjwV.~
Sep  8 15:42:06 power sudo[294221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:06 power sudo[294221]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:06 power sudo[294225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-neM44uIRB7D9TjwV.~\''
Sep  8 15:42:06 power sudo[294225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:06 power sudo[294225]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:06 power sudo[294230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-neM44uIRB7D9TjwV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 15:42:06 power sudo[294230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:06 power sudo[294230]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:06 power sudo[294234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 15:42:06 power sudo[294234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:06 power sudo[294234]: pam_unix(sudo:session): session closed for user root
Sep  8 15:42:11 power sudo[295176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 15:42:11 power sudo[295176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 15:42:11 power sudo[295176]: pam_unix(sudo:session): session closed for user root
Sep  8 15:45:01 power systemd[298006]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:50:01 power systemd[303031]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 15:55:01 power systemd[307320]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:00:01 power systemd[312312]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:00:01 power systemd[312313]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 16:00:01 power systemd[312314]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 16:00:01 power systemd[312316]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 16:05:01 power systemd[317648]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:06:01 power systemd[318873]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 16:07:01 power systemd[319692]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 16:10:01 power systemd[322184]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:12:01 power systemd[323990]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 16:15:01 power systemd[326887]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:20:01 power systemd[331818]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:25:01 power systemd[336159]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:30:01 power systemd[341183]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:30:01 power systemd[341184]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 16:30:01 power systemd[341186]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 16:30:01 power systemd[341187]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 16:35:01 power systemd[346225]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:36:01 power systemd[347353]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 16:37:01 power systemd[348227]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 16:40:01 power systemd[350990]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:42:01 power systemd[353136]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 16:42:03 power sudo[353187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 16:42:03 power sudo[353187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353187]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 16:42:03 power sudo[353192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353192]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 16:42:03 power sudo[353196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353196]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=iG558OQOs0'
Sep  8 16:42:03 power sudo[353200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353200]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 16:42:03 power sudo[353205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353205]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 16:42:03 power sudo[353209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353209]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 16:42:03 power sudo[353213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353213]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 16:42:03 power sudo[353218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353218]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 16:42:03 power sudo[353229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353229]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 16:42:03 power sudo[353234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353234]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:03 power sudo[353240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 16:42:03 power sudo[353240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:03 power sudo[353240]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:04 power sudo[353244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 16:42:04 power sudo[353244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:04 power sudo[353244]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:04 power sudo[353248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 16:42:04 power sudo[353248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:04 power sudo[353248]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:04 power sudo[353252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 16:42:04 power sudo[353252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:04 power sudo[353252]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:06 power sudo[353305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 16:42:06 power sudo[353305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:06 power sudo[353305]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:06 power sudo[353314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 16:42:06 power sudo[353314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:06 power sudo[353314]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:06 power sudo[353319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=custome1 user-2=busymard user-3=zampmk user-4=zvskopje user-5=palenzok user-6=klimimk user-7=sparkupm user-8=stokovna user-9=bovincom user-10=stojano1 user-11=cabinetm user-12=vezilkac user-13=itradeco user-14=janiboja user-15=drleomk user-16=jpparkin user-17=inotekso user-18=premiums user-19=butelmk user-20=daris user-21=screenme user-22=arturaco user-23=ideaplus user-24=nasaidni user-25=karpospo user-26=dalmacom user-27=cetplatf user-28=premiuma user-29=kouzonco user-30=gogovan1 user-31=velmk user-32=kujnamon user-33=univerz1 user-34=datalink user-35=agrosind user-36=mpbmk user-37=mfashion user-38=goartsym user-39=volkanco user-40=dhamachi user-41=workandt user-42=simbiome user-43=getaldus user-44=delcevca user-45=barececo user-46=rasmorgm user-47=makoasmk user-48=bianasho user-49=skyapart user-50=urbanexp
Sep  8 16:42:06 power sudo[353319]: wp-toolkit : (command continued) user-51=wikicamp user-52=mspmk user-53=infobadi user-54=detskagr user-55=spdcompu user-56=datelcom user-57=maleshne user-58=bizporta user-59=vfxnestc user-60=polyeste user-61=ivanjord user-62=groskome user-63=sedcmk user-64=hotammk user-65=cajsproc user-66=youthgua user-67=anitermc user-68=uhostmk5 user-69=bauerbg user-70=raremk user-71=oouslave user-72=stojnevi user-73=vmro user-74=viewinn user-75=trudovop user-76=enaspotc user-77=pelagoni user-78=socioloz user-79=avtogumi user-80=evolvepl user-81=caramk user-82=frizered user-83=hidrommk user-84=nefrolog user-85=ekostoc1 user-86=levantmk user-87=oncolog1 user-88=berbermk user-89=edomcomm user-90=sprintst user-91=herbalpl user-92=enochmk user-93=dikimk12 user-94=seloviro user-95=nolimits user-96=centarba user-97=nlpmkorg user-98=kolened1 user-99=proverim user-100=dadarmk user-101=tealmk user-102=gocruise user-103=mstmmk user-104=goodnews user-105=dnevnoin
Sep  8 16:42:06 power sudo[353319]: wp-toolkit : (command continued) user-106=tradeyou user-107=gjorgeiv user-108=rastiraz user-109=holiyayt user-110=wondersp user-111=stravelm user-112=robustco user-113=pecakome user-114=animatem user-115=cleanerm user-116=progress user-117=sssoluti user-118=atspedco user-119=solointe user-120=jaramk user-121=recorgmk user-122=taktcomm user-123=pelagini user-124=bbbustou user-125=biplmk user-126=kaoilmk user-127=mbmehani user-128=ismassag user-129=workbenc user-130=viplastc user-131=wineberr user-132=solarinv user-133=eurofarm user-134=electrol user-135=trigemat user-136=eliksirz user-137=naksorgm user-138=golakkom user-139=bauerin2 user-140=folklore user-141=conserva user-142=vegemk1 user-143=cupidpro user-144=euronic3 user-145=bonitavi user-146=evberasm user-147=makdrone user-148=tehnodro user-149=jpkomuna user-150=izzomk user-151=gradbai1 user-152=evacommk user-153=aptekafa user-154=madzomk user-155=peshkai1 user-156=fxxcom user-157=dimpalne
Sep  8 16:42:06 power sudo[353319]: wp-toolkit : (command continued) user-158=eaptekam user-159=zdmgpsor user-160=supremel user-161=v5srybi9dcdx user-162=gorsajmk user-163=aquatech user-164=tehnologija user-165=taneccom user-166=innofabl user-167=premiumi user-168=vacuacti user-169=bozinovm user-170=fnjorgmk user-171=prizmapl user-172=dslmk user-173=darkogor user-174=inkigaic user-175=modernar user-176=radekrat user-177=starluxm user-178=fffhpcwr user-179=versusmk user-180=fiziosmk user-181=ambitiou user-182=mapaspla user-183=solemor1 user-184=nationa2 user-185=onlinesh user-186=tcieuroc user-187=kardiome user-188=apgrupmk user-189=mediasol user-190=carrent1 user-191=bogdanos user-192=euronic2 user-193=matratze user-194=lblawcom user-195=nucktra1 user-196=intelek1 user-197=mediatag user-198=nikolov1 user-199=hausmark user-200=forzares user-201=aptekazd user-202=nikimare user-203=glammace user-204=albuname user-205=imdskopj user-206=vtranseu user-207=pravekom user-208=infopor1
Sep  8 16:42:06 power sudo[353319]: wp-toolkit : (command continued) user-209=zapovim1 user-210=elektrot user-211=euromaki user-212=cosmatob user-213=nutrivim user-214=samasped user-215=chemhemc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 16:42:06 power sudo[353319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:06 power sudo[353319]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:06 power sudo[353334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 16:42:06 power sudo[353334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:06 power sudo[353334]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:06 power sudo[353338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c7bJpq6Y9N24q1iD.~
Sep  8 16:42:06 power sudo[353338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:06 power sudo[353338]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:06 power sudo[353342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c7bJpq6Y9N24q1iD.~\''
Sep  8 16:42:06 power sudo[353342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:06 power sudo[353342]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:06 power sudo[353347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c7bJpq6Y9N24q1iD.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 16:42:06 power sudo[353347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:06 power sudo[353347]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:07 power sudo[353351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 16:42:07 power sudo[353351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:07 power sudo[353351]: pam_unix(sudo:session): session closed for user root
Sep  8 16:42:07 power sudo[353890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 16:42:07 power sudo[353890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 16:42:07 power sudo[353890]: pam_unix(sudo:session): session closed for user root
Sep  8 16:45:01 power systemd[356816]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:50:01 power systemd[361311]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 16:54:57 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 16:55:01 power systemd[365957]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:00:01 power systemd[371357]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:00:01 power systemd[371360]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 17:00:01 power systemd[371361]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 17:00:01 power systemd[371363]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 17:05:01 power systemd[377036]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:06:01 power systemd[378399]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 17:07:01 power systemd[379455]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 17:10:01 power systemd[384097]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:12:01 power systemd[386204]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 17:14:19 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 38.246.32.40 has been locked due to Imunify RBL
Sep  8 17:15:02 power systemd[389139]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:20:01 power systemd[399921]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:25:01 power systemd[404940]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:30:01 power systemd[409486]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:30:01 power systemd[409489]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 17:30:01 power systemd[409487]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 17:30:01 power systemd[409490]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 17:35:01 power systemd[414982]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:36:01 power systemd[415936]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 17:37:01 power systemd[416782]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 17:40:01 power systemd[419632]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:42:01 power systemd[421838]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 17:42:03 power sudo[421882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 17:42:03 power sudo[421882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:03 power sudo[421882]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:03 power sudo[421886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 17:42:03 power sudo[421886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:03 power sudo[421886]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:03 power sudo[421891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 17:42:03 power sudo[421891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:03 power sudo[421891]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:03 power sudo[421895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=QY9ekdzUdp'
Sep  8 17:42:03 power sudo[421895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:03 power sudo[421895]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:03 power sudo[421900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 17:42:03 power sudo[421900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:03 power sudo[421900]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:03 power sudo[421904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 17:42:03 power sudo[421904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:03 power sudo[421904]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:03 power sudo[421908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 17:42:03 power sudo[421908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:03 power sudo[421908]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:03 power sudo[421914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 17:42:03 power sudo[421914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:03 power sudo[421914]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:03 power sudo[421923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 17:42:03 power sudo[421923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:04 power sudo[421923]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:04 power sudo[421927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 17:42:04 power sudo[421927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:04 power sudo[421927]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:04 power sudo[421931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 17:42:04 power sudo[421931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:04 power sudo[421931]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:04 power sudo[421935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 17:42:04 power sudo[421935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:04 power sudo[421935]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:04 power sudo[421940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 17:42:04 power sudo[421940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:04 power sudo[421940]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:04 power sudo[421944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 17:42:04 power sudo[421944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:04 power sudo[421944]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:06 power sudo[421971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 17:42:06 power sudo[421971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:06 power sudo[421971]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:06 power sudo[421979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 17:42:06 power sudo[421979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:06 power sudo[421979]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:06 power sudo[421984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=wineberr user-2=viplastc user-3=mbmehani user-4=workbenc user-5=ismassag user-6=naksorgm user-7=eliksirz user-8=trigemat user-9=electrol user-10=golakkom user-11=solarinv user-12=eurofarm user-13=jaramk user-14=solointe user-15=taktcomm user-16=recorgmk user-17=progress user-18=cleanerm user-19=animatem user-20=atspedco user-21=sssoluti user-22=kaoilmk user-23=biplmk user-24=bbbustou user-25=pelagini user-26=izzomk user-27=jpkomuna user-28=makdrone user-29=tehnodro user-30=fxxcom user-31=peshkai1 user-32=eaptekam user-33=dimpalne user-34=gradbai1 user-35=madzomk user-36=aptekafa user-37=evacommk user-38=bauerin2 user-39=folklore user-40=evberasm user-41=bonitavi user-42=conserva user-43=euronic3 user-44=cupidpro user-45=vegemk1 user-46=versusmk user-47=ambitiou user-48=fiziosmk user-49=starluxm
Sep  8 17:42:06 power sudo[421984]: wp-toolkit : (command continued) user-50=radekrat user-51=fffhpcwr user-52=tcieuroc user-53=solemor1 user-54=mapaspla user-55=onlinesh user-56=nationa2 user-57=v5srybi9dcdx user-58=supremel user-59=aquatech user-60=gorsajmk user-61=zdmgpsor user-62=inkigaic user-63=modernar user-64=taneccom user-65=tehnologija user-66=prizmapl user-67=fnjorgmk user-68=darkogor user-69=dslmk user-70=bozinovm user-71=vacuacti user-72=premiumi user-73=innofabl user-74=pravekom user-75=vtranseu user-76=infopor1 user-77=albuname user-78=glammace user-79=imdskopj user-80=nutrivim user-81=samasped user-82=chemhemc user-83=elektrot user-84=zapovim1 user-85=euromaki user-86=cosmatob user-87=matratze user-88=euronic2 user-89=kardiome user-90=bogdanos user-91=carrent1 user-92=mediasol user-93=apgrupmk user-94=nikolov1 user-95=hausmark user-96=nikimare user-97=aptekazd user-98=forzares user-99=nucktra1 user-100=lblawcom user-101=mediatag user-102=intelek1 user-103=daris
Sep  8 17:42:06 power sudo[421984]: wp-toolkit : (command continued) user-104=butelmk user-105=premiums user-106=nasaidni user-107=karpospo user-108=ideaplus user-109=arturaco user-110=screenme user-111=inotekso user-112=jpparkin user-113=drleomk user-114=cetplatf user-115=dalmacom user-116=kouzonco user-117=premiuma user-118=klimimk user-119=stokovna user-120=sparkupm user-121=custome1 user-122=palenzok user-123=zvskopje user-124=busymard user-125=zampmk user-126=vezilkac user-127=cabinetm user-128=janiboja user-129=itradeco user-130=bovincom user-131=stojano1 user-132=mspmk user-133=infobadi user-134=spdcompu user-135=detskagr user-136=wikicamp user-137=urbanexp user-138=polyeste user-139=vfxnestc user-140=sedcmk user-141=groskome user-142=ivanjord user-143=maleshne user-144=datelcom user-145=bizporta user-146=mpbmk user-147=agrosind user-148=kujnamon user-149=univerz1 user-150=velmk user-151=gogovan1 user-152=datalink user-153=rasmorgm user-154=skyapart user-155=bianasho
Sep  8 17:42:06 power sudo[421984]: wp-toolkit : (command continued) user-156=makoasmk user-157=dhamachi user-158=goartsym user-159=volkanco user-160=mfashion user-161=barececo user-162=simbiome user-163=getaldus user-164=delcevca user-165=workandt user-166=evolvepl user-167=pelagoni user-168=avtogumi user-169=socioloz user-170=levantmk user-171=ekostoc1 user-172=oncolog1 user-173=nefrolog user-174=caramk user-175=hidrommk user-176=frizered user-177=anitermc user-178=youthgua user-179=cajsproc user-180=hotammk user-181=enaspotc user-182=trudovop user-183=viewinn user-184=vmro user-185=oouslave user-186=raremk user-187=bauerbg user-188=uhostmk5 user-189=stojnevi user-190=gocruise user-191=goodnews user-192=mstmmk user-193=dadarmk user-194=proverim user-195=tealmk user-196=holiyayt user-197=rastiraz user-198=pecakome user-199=robustco user-200=stravelm user-201=wondersp user-202=dnevnoin user-203=gjorgeiv user-204=tradeyou user-205=dikimk12 user-206=herbalpl user-207=enochmk
Sep  8 17:42:06 power sudo[421984]: wp-toolkit : (command continued) user-208=sprintst user-209=edomcomm user-210=berbermk user-211=nolimits user-212=kolened1 user-213=centarba user-214=nlpmkorg user-215=seloviro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 17:42:06 power sudo[421984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:06 power sudo[421984]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:06 power sudo[421999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 17:42:06 power sudo[421999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:06 power sudo[421999]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:06 power sudo[422003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ebnXWx2b6cuf7NGr.~
Sep  8 17:42:06 power sudo[422003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:06 power sudo[422003]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:06 power sudo[422007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ebnXWx2b6cuf7NGr.~\''
Sep  8 17:42:06 power sudo[422007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:06 power sudo[422007]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:06 power sudo[422012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ebnXWx2b6cuf7NGr.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 17:42:06 power sudo[422012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:06 power sudo[422012]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:07 power sudo[422016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 17:42:07 power sudo[422016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:07 power sudo[422016]: pam_unix(sudo:session): session closed for user root
Sep  8 17:42:10 power sudo[422518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 17:42:10 power sudo[422518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 17:42:10 power sudo[422518]: pam_unix(sudo:session): session closed for user root
Sep  8 17:45:01 power systemd[425792]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:50:01 power systemd[431241]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 17:55:01 power systemd[435546]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:00:01 power systemd[440782]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:00:01 power systemd[440784]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 18:00:01 power systemd[440785]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 18:00:01 power systemd[440787]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 18:05:01 power systemd[447035]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:06:02 power systemd[447882]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 18:07:01 power systemd[448798]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 18:10:01 power systemd[451394]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:12:01 power systemd[453469]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 18:15:01 power systemd[456356]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:20:01 power systemd[461465]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:25:01 power systemd[465634]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:30:01 power systemd[470303]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:30:01 power systemd[470305]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 18:30:01 power systemd[470306]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 18:30:01 power systemd[470308]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 18:33:01 power systemd[473311]: pam_unix(systemd-user:session): session opened for user edomcomm(uid=1008) by edomcomm(uid=0)
Sep  8 18:35:01 power systemd[475534]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:36:01 power systemd[476419]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 18:37:01 power systemd[477679]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 18:40:01 power systemd[480336]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:42:01 power systemd[482236]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 18:42:03 power sudo[482272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 18:42:03 power sudo[482272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:03 power sudo[482272]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:03 power sudo[482276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 18:42:03 power sudo[482276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:03 power sudo[482276]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:03 power sudo[482280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 18:42:03 power sudo[482280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:03 power sudo[482280]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:03 power sudo[482284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=lhjNwVVmCD'
Sep  8 18:42:03 power sudo[482284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:03 power sudo[482284]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:03 power sudo[482289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 18:42:03 power sudo[482289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:03 power sudo[482289]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:03 power sudo[482293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 18:42:03 power sudo[482293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:03 power sudo[482293]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:03 power sudo[482297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 18:42:03 power sudo[482297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:03 power sudo[482297]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:03 power sudo[482301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 18:42:03 power sudo[482301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:03 power sudo[482301]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:03 power sudo[482309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 18:42:03 power sudo[482309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:04 power sudo[482309]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:04 power sudo[482313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 18:42:04 power sudo[482313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:04 power sudo[482313]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:04 power sudo[482317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 18:42:04 power sudo[482317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:04 power sudo[482317]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:04 power sudo[482321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 18:42:04 power sudo[482321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:04 power sudo[482321]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:04 power sudo[482325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 18:42:04 power sudo[482325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:04 power sudo[482325]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:04 power sudo[482329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 18:42:04 power sudo[482329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:04 power sudo[482329]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:06 power sudo[482403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 18:42:06 power sudo[482403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:06 power sudo[482403]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:06 power sudo[482411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 18:42:06 power sudo[482411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:06 power sudo[482411]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:06 power sudo[482419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bizporta user-2=maleshne user-3=datelcom user-4=ivanjord user-5=groskome user-6=sedcmk user-7=polyeste user-8=vfxnestc user-9=urbanexp user-10=wikicamp user-11=detskagr user-12=spdcompu user-13=mspmk user-14=infobadi user-15=workandt user-16=barececo user-17=delcevca user-18=getaldus user-19=simbiome user-20=mfashion user-21=dhamachi user-22=volkanco user-23=goartsym user-24=skyapart user-25=makoasmk user-26=bianasho user-27=rasmorgm user-28=datalink user-29=kujnamon user-30=univerz1 user-31=gogovan1 user-32=velmk user-33=mpbmk user-34=agrosind user-35=premiuma user-36=kouzonco user-37=dalmacom user-38=cetplatf user-39=drleomk user-40=inotekso user-41=jpparkin user-42=arturaco user-43=screenme user-44=nasaidni user-45=karpospo user-46=ideaplus user-47=daris user-48=butelmk user-49=premiums user-50=stojano1
Sep  8 18:42:06 power sudo[482419]: wp-toolkit : (command continued) user-51=bovincom user-52=itradeco user-53=janiboja user-54=cabinetm user-55=vezilkac user-56=busymard user-57=zampmk user-58=zvskopje user-59=palenzok user-60=custome1 user-61=stokovna user-62=sparkupm user-63=klimimk user-64=tradeyou user-65=gjorgeiv user-66=dnevnoin user-67=robustco user-68=stravelm user-69=wondersp user-70=pecakome user-71=rastiraz user-72=holiyayt user-73=tealmk user-74=proverim user-75=dadarmk user-76=mstmmk user-77=goodnews user-78=gocruise user-79=seloviro user-80=kolened1 user-81=centarba user-82=nlpmkorg user-83=nolimits user-84=berbermk user-85=edomcomm user-86=herbalpl user-87=enochmk user-88=sprintst user-89=dikimk12 user-90=hidrommk user-91=frizered user-92=caramk user-93=oncolog1 user-94=levantmk user-95=ekostoc1 user-96=nefrolog user-97=avtogumi user-98=socioloz user-99=pelagoni user-100=evolvepl user-101=stojnevi user-102=bauerbg user-103=uhostmk5 user-104=oouslave user-105=raremk
Sep  8 18:42:06 power sudo[482419]: wp-toolkit : (command continued) user-106=trudovop user-107=viewinn user-108=vmro user-109=enaspotc user-110=hotammk user-111=cajsproc user-112=anitermc user-113=youthgua user-114=madzomk user-115=aptekafa user-116=evacommk user-117=gradbai1 user-118=dimpalne user-119=eaptekam user-120=fxxcom user-121=peshkai1 user-122=tehnodro user-123=makdrone user-124=jpkomuna user-125=izzomk user-126=cupidpro user-127=vegemk1 user-128=euronic3 user-129=conserva user-130=evberasm user-131=bonitavi user-132=folklore user-133=bauerin2 user-134=eurofarm user-135=solarinv user-136=golakkom user-137=electrol user-138=eliksirz user-139=naksorgm user-140=trigemat user-141=ismassag user-142=workbenc user-143=mbmehani user-144=viplastc user-145=wineberr user-146=pelagini user-147=bbbustou user-148=kaoilmk user-149=biplmk user-150=atspedco user-151=sssoluti user-152=cleanerm user-153=animatem user-154=progress user-155=taktcomm user-156=recorgmk user-157=solointe
Sep  8 18:42:06 power sudo[482419]: wp-toolkit : (command continued) user-158=jaramk user-159=cosmatob user-160=euromaki user-161=elektrot user-162=zapovim1 user-163=chemhemc user-164=samasped user-165=nutrivim user-166=imdskopj user-167=albuname user-168=glammace user-169=infopor1 user-170=vtranseu user-171=pravekom user-172=mediatag user-173=intelek1 user-174=lblawcom user-175=nucktra1 user-176=forzares user-177=nikimare user-178=aptekazd user-179=nikolov1 user-180=hausmark user-181=apgrupmk user-182=carrent1 user-183=bogdanos user-184=mediasol user-185=kardiome user-186=matratze user-187=euronic2 user-188=nationa2 user-189=onlinesh user-190=mapaspla user-191=solemor1 user-192=tcieuroc user-193=fffhpcwr user-194=starluxm user-195=radekrat user-196=fiziosmk user-197=ambitiou user-198=versusmk user-199=vacuacti user-200=premiumi user-201=innofabl user-202=darkogor user-203=fnjorgmk user-204=prizmapl user-205=dslmk user-206=bozinovm user-207=tehnologija user-208=taneccom
Sep  8 18:42:06 power sudo[482419]: wp-toolkit : (command continued) user-209=modernar user-210=inkigaic user-211=zdmgpsor user-212=aquatech user-213=gorsajmk user-214=supremel user-215=v5srybi9dcdx feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 18:42:06 power sudo[482419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:06 power sudo[482419]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:06 power sudo[482430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 18:42:06 power sudo[482430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:06 power sudo[482430]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:06 power sudo[482436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HPmBaN3E6EcuBWCG.~
Sep  8 18:42:06 power sudo[482436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:06 power sudo[482436]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:06 power sudo[482441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HPmBaN3E6EcuBWCG.~\''
Sep  8 18:42:06 power sudo[482441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:06 power sudo[482441]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:06 power sudo[482446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HPmBaN3E6EcuBWCG.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 18:42:06 power sudo[482446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:07 power sudo[482446]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:07 power sudo[482450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 18:42:07 power sudo[482450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:07 power sudo[482450]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:07 power sudo[482455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_licenses --output=json'
Sep  8 18:42:07 power sudo[482455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:07 power sudo[482455]: pam_unix(sudo:session): session closed for user root
Sep  8 18:42:12 power sudo[483457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 18:42:12 power sudo[483457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 18:42:12 power sudo[483457]: pam_unix(sudo:session): session closed for user root
Sep  8 18:45:01 power systemd[486290]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:47:08 power sshd[488054]: Connection closed by 167.94.138.50 port 42196 [preauth]
Sep  8 18:50:01 power systemd[490810]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 18:55:01 power systemd[495561]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:00:01 power systemd[500069]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:00:01 power systemd[500072]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 19:00:01 power systemd[500073]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 19:00:01 power systemd[500075]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 19:05:02 power systemd[505258]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:06:01 power systemd[506175]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 19:07:01 power systemd[507130]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 19:10:01 power systemd[509743]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:12:01 power systemd[511556]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 19:12:32 power sshd[511937]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 19:12:32 power sshd[511937]: Connection closed by 87.236.176.132 port 50603
Sep  8 19:12:32 power sshd[511965]: Connection closed by 87.236.176.132 port 37311 [preauth]
Sep  8 19:15:01 power systemd[514171]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:20:01 power systemd[519149]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:25:01 power systemd[523646]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:30:01 power systemd[528139]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:30:01 power systemd[528141]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 19:30:01 power systemd[528142]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 19:30:01 power systemd[528144]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 19:35:01 power systemd[532888]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:36:01 power systemd[534017]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 19:37:01 power systemd[534993]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 19:40:01 power systemd[537634]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:42:01 power systemd[539365]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 19:42:03 power sudo[539400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 19:42:03 power sudo[539400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:03 power sudo[539400]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:03 power sudo[539405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 19:42:03 power sudo[539405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:03 power sudo[539405]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:03 power sudo[539409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 19:42:03 power sudo[539409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:03 power sudo[539409]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:03 power sudo[539414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=FttOmbHrao'
Sep  8 19:42:03 power sudo[539414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:03 power sudo[539414]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:03 power sudo[539419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 19:42:03 power sudo[539419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:03 power sudo[539419]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:03 power sudo[539423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 19:42:03 power sudo[539423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:03 power sudo[539423]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:03 power sudo[539427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 19:42:03 power sudo[539427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:03 power sudo[539427]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:03 power sudo[539432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 19:42:03 power sudo[539432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:04 power sudo[539432]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:04 power sudo[539437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 19:42:04 power sudo[539437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:04 power sudo[539437]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:04 power sudo[539441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 19:42:04 power sudo[539441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:04 power sudo[539441]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:04 power sudo[539445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 19:42:04 power sudo[539445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:04 power sudo[539445]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:04 power sudo[539449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 19:42:04 power sudo[539449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:04 power sudo[539449]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:04 power sudo[539453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 19:42:04 power sudo[539453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:04 power sudo[539453]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:04 power sudo[539457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 19:42:04 power sudo[539457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:04 power sudo[539457]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:06 power sudo[539493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 19:42:06 power sudo[539493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:06 power sudo[539493]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:06 power sudo[539498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 19:42:06 power sudo[539498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:06 power sudo[539498]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:06 power sudo[539505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=eaptekam user-2=dimpalne user-3=peshkai1 user-4=fxxcom user-5=evacommk user-6=madzomk user-7=aptekafa user-8=gradbai1 user-9=izzomk user-10=jpkomuna user-11=tehnodro user-12=makdrone user-13=bonitavi user-14=evberasm user-15=euronic3 user-16=vegemk1 user-17=cupidpro user-18=conserva user-19=folklore user-20=bauerin2 user-21=golakkom user-22=trigemat user-23=eliksirz user-24=naksorgm user-25=electrol user-26=eurofarm user-27=solarinv user-28=wineberr user-29=viplastc user-30=workbenc user-31=ismassag user-32=mbmehani user-33=biplmk user-34=kaoilmk user-35=bbbustou user-36=pelagini user-37=recorgmk user-38=taktcomm user-39=jaramk user-40=solointe user-41=sssoluti user-42=atspedco user-43=progress user-44=animatem user-45=cleanerm user-46=chemhemc user-47=samasped user-48=nutrivim user-49=cosmatob
Sep  8 19:42:06 power sudo[539505]: wp-toolkit : (command continued) user-50=euromaki user-51=zapovim1 user-52=elektrot user-53=infopor1 user-54=pravekom user-55=vtranseu user-56=imdskopj user-57=glammace user-58=albuname user-59=aptekazd user-60=nikimare user-61=forzares user-62=hausmark user-63=nikolov1 user-64=intelek1 user-65=mediatag user-66=nucktra1 user-67=lblawcom user-68=euronic2 user-69=matratze user-70=mediasol user-71=carrent1 user-72=bogdanos user-73=apgrupmk user-74=kardiome user-75=tcieuroc user-76=onlinesh user-77=nationa2 user-78=solemor1 user-79=mapaspla user-80=ambitiou user-81=fiziosmk user-82=versusmk user-83=fffhpcwr user-84=radekrat user-85=starluxm user-86=modernar user-87=inkigaic user-88=bozinovm user-89=prizmapl user-90=fnjorgmk user-91=darkogor user-92=dslmk user-93=innofabl user-94=premiumi user-95=vacuacti user-96=taneccom user-97=tehnologija user-98=gorsajmk user-99=aquatech user-100=v5srybi9dcdx user-101=supremel user-102=zdmgpsor user-103=sedcmk
Sep  8 19:42:06 power sudo[539505]: wp-toolkit : (command continued) user-104=groskome user-105=ivanjord user-106=vfxnestc user-107=polyeste user-108=bizporta user-109=datelcom user-110=maleshne user-111=spdcompu user-112=detskagr user-113=mspmk user-114=infobadi user-115=wikicamp user-116=urbanexp user-117=makoasmk user-118=bianasho user-119=skyapart user-120=rasmorgm user-121=simbiome user-122=getaldus user-123=delcevca user-124=barececo user-125=workandt user-126=goartsym user-127=volkanco user-128=dhamachi user-129=mfashion user-130=agrosind user-131=mpbmk user-132=datalink user-133=gogovan1 user-134=velmk user-135=kujnamon user-136=univerz1 user-137=kouzonco user-138=premiuma user-139=cetplatf user-140=dalmacom user-141=ideaplus user-142=nasaidni user-143=karpospo user-144=screenme user-145=arturaco user-146=premiums user-147=daris user-148=butelmk user-149=jpparkin user-150=inotekso user-151=drleomk user-152=janiboja user-153=itradeco user-154=vezilkac user-155=cabinetm
Sep  8 19:42:06 power sudo[539505]: wp-toolkit : (command continued) user-156=stojano1 user-157=bovincom user-158=sparkupm user-159=stokovna user-160=klimimk user-161=palenzok user-162=busymard user-163=zampmk user-164=zvskopje user-165=custome1 user-166=pecakome user-167=wondersp user-168=robustco user-169=stravelm user-170=holiyayt user-171=rastiraz user-172=tradeyou user-173=gjorgeiv user-174=dnevnoin user-175=goodnews user-176=mstmmk user-177=gocruise user-178=tealmk user-179=dadarmk user-180=proverim user-181=centarba user-182=nlpmkorg user-183=kolened1 user-184=nolimits user-185=seloviro user-186=dikimk12 user-187=sprintst user-188=herbalpl user-189=enochmk user-190=edomcomm user-191=berbermk user-192=nefrolog user-193=oncolog1 user-194=levantmk user-195=ekostoc1 user-196=frizered user-197=hidrommk user-198=caramk user-199=evolvepl user-200=avtogumi user-201=socioloz user-202=pelagoni user-203=enaspotc user-204=vmro user-205=viewinn user-206=trudovop user-207=stojnevi
Sep  8 19:42:06 power sudo[539505]: wp-toolkit : (command continued) user-208=raremk user-209=oouslave user-210=uhostmk5 user-211=bauerbg user-212=youthgua user-213=anitermc user-214=cajsproc user-215=hotammk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 19:42:06 power sudo[539505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:06 power sudo[539505]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:06 power sudo[539518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 19:42:06 power sudo[539518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:06 power sudo[539518]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:06 power sudo[539525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YJn3AQp5m7L3bzV6.~
Sep  8 19:42:06 power sudo[539525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:06 power sudo[539525]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:06 power sudo[539530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YJn3AQp5m7L3bzV6.~\''
Sep  8 19:42:06 power sudo[539530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:06 power sudo[539530]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:06 power sudo[539536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YJn3AQp5m7L3bzV6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 19:42:06 power sudo[539536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:06 power sudo[539536]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:06 power sudo[539540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 19:42:06 power sudo[539540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:06 power sudo[539540]: pam_unix(sudo:session): session closed for user root
Sep  8 19:42:10 power sudo[539869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 19:42:10 power sudo[539869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 19:42:10 power sudo[539869]: pam_unix(sudo:session): session closed for user root
Sep  8 19:45:01 power systemd[544221]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:50:01 power systemd[549210]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 19:55:01 power systemd[556643]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:00:01 power systemd[562199]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:00:01 power systemd[562209]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 20:00:01 power systemd[562210]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 20:00:01 power systemd[562213]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 20:04:09 power sshd[566747]: error: kex_exchange_identification: banner line contains invalid characters
Sep  8 20:04:09 power sshd[566747]: banner exchange: Connection from 8.211.50.226 port 19882: invalid format
Sep  8 20:04:09 power sshd[566759]: Invalid user  from 8.211.50.226 port 19894
Sep  8 20:04:09 power sshd[566759]: Connection closed by invalid user  8.211.50.226 port 19894 [preauth]
Sep  8 20:05:01 power systemd[567543]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:06:01 power systemd[568512]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 20:07:01 power systemd[569432]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 20:10:01 power systemd[572045]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:12:01 power systemd[573669]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 20:15:01 power systemd[576634]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:20:01 power systemd[581498]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:25:01 power systemd[585704]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:30:01 power systemd[589916]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:30:01 power systemd[589918]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 20:30:01 power systemd[589920]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 20:30:01 power systemd[589921]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 20:35:01 power systemd[594642]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:36:01 power systemd[595417]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 20:37:01 power systemd[596269]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 20:40:02 power systemd[598861]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:42:01 power systemd[600521]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 20:42:03 power sudo[600618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 20:42:03 power sudo[600618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:03 power sudo[600618]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:03 power sudo[600623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 20:42:03 power sudo[600623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:03 power sudo[600623]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:03 power sudo[600630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 20:42:03 power sudo[600630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:03 power sudo[600630]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:03 power sudo[600636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=0v7073oN7n'
Sep  8 20:42:03 power sudo[600636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:03 power sudo[600636]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:03 power sudo[600647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 20:42:03 power sudo[600647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:03 power sudo[600647]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:03 power sudo[600653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 20:42:03 power sudo[600653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:03 power sudo[600653]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:03 power sudo[600658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 20:42:03 power sudo[600658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:03 power sudo[600658]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:03 power sudo[600664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 20:42:03 power sudo[600664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:04 power sudo[600664]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:04 power sudo[600695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 20:42:04 power sudo[600695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:04 power sudo[600695]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:04 power sudo[600700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 20:42:04 power sudo[600700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:04 power sudo[600700]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:04 power sudo[600704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 20:42:04 power sudo[600704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:04 power sudo[600704]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:04 power sudo[600708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 20:42:04 power sudo[600708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:04 power sudo[600708]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:04 power sudo[600712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 20:42:04 power sudo[600712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:04 power sudo[600712]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:04 power sudo[600717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 20:42:04 power sudo[600717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:04 power sudo[600717]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:06 power sudo[600761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 20:42:06 power sudo[600761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:06 power sudo[600761]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:06 power sudo[600780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 20:42:06 power sudo[600780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:06 power sudo[600780]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:06 power sudo[600801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=electrol user-2=naksorgm user-3=eliksirz user-4=trigemat user-5=golakkom user-6=solarinv user-7=eurofarm user-8=viplastc user-9=wineberr user-10=mbmehani user-11=ismassag user-12=workbenc user-13=bbbustou user-14=kaoilmk user-15=biplmk user-16=pelagini user-17=solointe user-18=jaramk user-19=recorgmk user-20=taktcomm user-21=cleanerm user-22=animatem user-23=progress user-24=atspedco user-25=sssoluti user-26=fxxcom user-27=peshkai1 user-28=dimpalne user-29=eaptekam user-30=gradbai1 user-31=aptekafa user-32=madzomk user-33=evacommk user-34=jpkomuna user-35=izzomk user-36=makdrone user-37=tehnodro user-38=evberasm user-39=bonitavi user-40=conserva user-41=cupidpro user-42=vegemk1 user-43=euronic3 user-44=bauerin2 user-45=folklore user-46=tcieuroc user-47=mapaspla user-48=solemor1 user-49=nationa2
Sep  8 20:42:06 power sudo[600801]: wp-toolkit : (command continued) user-50=onlinesh user-51=versusmk user-52=fiziosmk user-53=ambitiou user-54=starluxm user-55=radekrat user-56=fffhpcwr user-57=inkigaic user-58=modernar user-59=tehnologija user-60=taneccom user-61=vacuacti user-62=innofabl user-63=premiumi user-64=prizmapl user-65=darkogor user-66=dslmk user-67=fnjorgmk user-68=bozinovm user-69=supremel user-70=v5srybi9dcdx user-71=aquatech user-72=gorsajmk user-73=zdmgpsor user-74=nutrivim user-75=chemhemc user-76=samasped user-77=elektrot user-78=zapovim1 user-79=euromaki user-80=cosmatob user-81=vtranseu user-82=pravekom user-83=infopor1 user-84=albuname user-85=glammace user-86=imdskopj user-87=hausmark user-88=nikolov1 user-89=forzares user-90=nikimare user-91=aptekazd user-92=lblawcom user-93=nucktra1 user-94=mediatag user-95=intelek1 user-96=matratze user-97=euronic2 user-98=kardiome user-99=apgrupmk user-100=bogdanos user-101=carrent1 user-102=mediasol user-103=dalmacom
Sep  8 20:42:06 power sudo[600801]: wp-toolkit : (command continued) user-104=cetplatf user-105=premiuma user-106=kouzonco user-107=butelmk user-108=daris user-109=premiums user-110=screenme user-111=arturaco user-112=nasaidni user-113=karpospo user-114=ideaplus user-115=drleomk user-116=inotekso user-117=jpparkin user-118=cabinetm user-119=vezilkac user-120=itradeco user-121=janiboja user-122=bovincom user-123=stojano1 user-124=klimimk user-125=stokovna user-126=sparkupm user-127=custome1 user-128=zvskopje user-129=busymard user-130=zampmk user-131=palenzok user-132=polyeste user-133=vfxnestc user-134=groskome user-135=ivanjord user-136=sedcmk user-137=maleshne user-138=datelcom user-139=bizporta user-140=mspmk user-141=infobadi user-142=detskagr user-143=spdcompu user-144=urbanexp user-145=wikicamp user-146=rasmorgm user-147=skyapart user-148=makoasmk user-149=bianasho user-150=mfashion user-151=dhamachi user-152=volkanco user-153=goartsym user-154=workandt user-155=barececo
Sep  8 20:42:06 power sudo[600801]: wp-toolkit : (command continued) user-156=simbiome user-157=getaldus user-158=delcevca user-159=mpbmk user-160=agrosind user-161=kujnamon user-162=univerz1 user-163=gogovan1 user-164=velmk user-165=datalink user-166=ekostoc1 user-167=levantmk user-168=oncolog1 user-169=nefrolog user-170=caramk user-171=hidrommk user-172=frizered user-173=evolvepl user-174=pelagoni user-175=socioloz user-176=avtogumi user-177=viewinn user-178=trudovop user-179=vmro user-180=enaspotc user-181=bauerbg user-182=uhostmk5 user-183=oouslave user-184=raremk user-185=stojnevi user-186=anitermc user-187=youthgua user-188=hotammk user-189=cajsproc user-190=rastiraz user-191=holiyayt user-192=robustco user-193=stravelm user-194=wondersp user-195=pecakome user-196=dnevnoin user-197=tradeyou user-198=gjorgeiv user-199=gocruise user-200=mstmmk user-201=goodnews user-202=proverim user-203=dadarmk user-204=tealmk user-205=nolimits user-206=kolened1 user-207=nlpmkorg
Sep  8 20:42:06 power sudo[600801]: wp-toolkit : (command continued) user-208=centarba user-209=seloviro user-210=herbalpl user-211=enochmk user-212=sprintst user-213=dikimk12 user-214=berbermk user-215=edomcomm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 20:42:06 power sudo[600801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:06 power sudo[600801]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:07 power sudo[600827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 20:42:07 power sudo[600827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:07 power sudo[600827]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:07 power sudo[600831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7sc9myScRQVyGgDi.~
Sep  8 20:42:07 power sudo[600831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:07 power sudo[600831]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:07 power sudo[600835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7sc9myScRQVyGgDi.~\''
Sep  8 20:42:07 power sudo[600835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:07 power sudo[600835]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:07 power sudo[600840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7sc9myScRQVyGgDi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 20:42:07 power sudo[600840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:07 power sudo[600840]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:07 power sudo[600845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 20:42:07 power sudo[600845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:07 power sudo[600845]: pam_unix(sudo:session): session closed for user root
Sep  8 20:42:11 power sudo[601479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 20:42:11 power sudo[601479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 20:42:11 power sudo[601479]: pam_unix(sudo:session): session closed for user root
Sep  8 20:45:01 power systemd[604072]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:50:01 power systemd[609015]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 20:55:01 power systemd[613388]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:00:01 power systemd[617574]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:00:01 power systemd[617575]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 21:00:01 power systemd[617577]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 21:00:01 power systemd[617579]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 21:05:01 power systemd[623147]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:06:01 power systemd[624130]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 21:07:01 power systemd[625015]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 21:10:01 power systemd[627765]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:12:01 power systemd[629379]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 21:15:01 power systemd[631790]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:15:01 power systemd[631791]: pam_unix(systemd-user:session): session opened for user polyeste(uid=1217) by polyeste(uid=0)
Sep  8 21:20:01 power systemd[636508]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:25:01 power systemd[641031]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:30:01 power systemd[645947]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:30:01 power systemd[645950]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 21:30:01 power systemd[645949]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 21:30:01 power systemd[645952]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 21:34:43 power sshd[650493]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 21:34:43 power sshd[650493]: Connection closed by 191.209.37.140 port 53838
Sep  8 21:35:01 power systemd[650792]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:36:01 power systemd[651585]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 21:37:01 power systemd[652491]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 21:40:01 power systemd[655469]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:42:01 power systemd[657174]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 21:42:03 power sudo[657223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 21:42:03 power sudo[657223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:03 power sudo[657223]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:03 power sudo[657228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 21:42:03 power sudo[657228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:03 power sudo[657228]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:03 power sudo[657232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 21:42:03 power sudo[657232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:03 power sudo[657232]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:03 power sudo[657236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=gFVq9ioDO0'
Sep  8 21:42:03 power sudo[657236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:03 power sudo[657236]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:03 power sudo[657241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 21:42:03 power sudo[657241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:03 power sudo[657241]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:03 power sudo[657246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 21:42:03 power sudo[657246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:03 power sudo[657246]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:03 power sudo[657250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 21:42:03 power sudo[657250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:03 power sudo[657250]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:03 power sudo[657254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 21:42:03 power sudo[657254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:04 power sudo[657254]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:04 power sudo[657262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 21:42:04 power sudo[657262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:04 power sudo[657262]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:04 power sudo[657266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 21:42:04 power sudo[657266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:04 power sudo[657266]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:04 power sudo[657271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 21:42:04 power sudo[657271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:04 power sudo[657271]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:04 power sudo[657275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 21:42:04 power sudo[657275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:04 power sudo[657275]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:04 power sudo[657280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 21:42:04 power sudo[657280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:04 power sudo[657280]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:04 power sudo[657285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 21:42:04 power sudo[657285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:04 power sudo[657285]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:06 power sudo[657328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 21:42:06 power sudo[657328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:06 power sudo[657328]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:06 power sudo[657333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 21:42:06 power sudo[657333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:06 power sudo[657333]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:06 power sudo[657340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=agrosind user-2=mpbmk user-3=datalink user-4=gogovan1 user-5=velmk user-6=kujnamon user-7=univerz1 user-8=makoasmk user-9=bianasho user-10=skyapart user-11=rasmorgm user-12=simbiome user-13=getaldus user-14=delcevca user-15=barececo user-16=workandt user-17=goartsym user-18=volkanco user-19=dhamachi user-20=mfashion user-21=spdcompu user-22=detskagr user-23=infobadi user-24=mspmk user-25=wikicamp user-26=urbanexp user-27=sedcmk user-28=groskome user-29=ivanjord user-30=vfxnestc user-31=polyeste user-32=bizporta user-33=datelcom user-34=maleshne user-35=sparkupm user-36=stokovna user-37=klimimk user-38=palenzok user-39=busymard user-40=zampmk user-41=zvskopje user-42=custome1 user-43=janiboja user-44=itradeco user-45=vezilkac user-46=cabinetm user-47=stojano1 user-48=bovincom user-49=ideaplus user-50=karpospo
Sep  8 21:42:06 power sudo[657340]: wp-toolkit : (command continued) user-51=nasaidni user-52=screenme user-53=arturaco user-54=premiums user-55=butelmk user-56=daris user-57=jpparkin user-58=inotekso user-59=drleomk user-60=kouzonco user-61=premiuma user-62=cetplatf user-63=dalmacom user-64=dikimk12 user-65=sprintst user-66=enochmk user-67=herbalpl user-68=edomcomm user-69=berbermk user-70=centarba user-71=nlpmkorg user-72=kolened1 user-73=nolimits user-74=seloviro user-75=goodnews user-76=mstmmk user-77=gocruise user-78=tealmk user-79=dadarmk user-80=proverim user-81=pecakome user-82=wondersp user-83=stravelm user-84=robustco user-85=holiyayt user-86=rastiraz user-87=tradeyou user-88=gjorgeiv user-89=dnevnoin user-90=youthgua user-91=anitermc user-92=cajsproc user-93=hotammk user-94=enaspotc user-95=vmro user-96=viewinn user-97=trudovop user-98=stojnevi user-99=raremk user-100=oouslave user-101=uhostmk5 user-102=bauerbg user-103=evolvepl user-104=socioloz user-105=avtogumi
Sep  8 21:42:06 power sudo[657340]: wp-toolkit : (command continued) user-106=pelagoni user-107=nefrolog user-108=oncolog1 user-109=levantmk user-110=ekostoc1 user-111=frizered user-112=hidrommk user-113=caramk user-114=folklore user-115=bauerin2 user-116=bonitavi user-117=evberasm user-118=euronic3 user-119=vegemk1 user-120=cupidpro user-121=conserva user-122=izzomk user-123=jpkomuna user-124=tehnodro user-125=makdrone user-126=eaptekam user-127=dimpalne user-128=peshkai1 user-129=fxxcom user-130=evacommk user-131=aptekafa user-132=madzomk user-133=gradbai1 user-134=taktcomm user-135=recorgmk user-136=jaramk user-137=solointe user-138=atspedco user-139=sssoluti user-140=progress user-141=animatem user-142=cleanerm user-143=kaoilmk user-144=biplmk user-145=bbbustou user-146=pelagini user-147=wineberr user-148=viplastc user-149=workbenc user-150=ismassag user-151=mbmehani user-152=golakkom user-153=trigemat user-154=eliksirz user-155=naksorgm user-156=electrol user-157=eurofarm
Sep  8 21:42:06 power sudo[657340]: wp-toolkit : (command continued) user-158=solarinv user-159=euronic2 user-160=matratze user-161=mediasol user-162=carrent1 user-163=bogdanos user-164=apgrupmk user-165=kardiome user-166=aptekazd user-167=nikimare user-168=forzares user-169=hausmark user-170=nikolov1 user-171=intelek1 user-172=mediatag user-173=nucktra1 user-174=lblawcom user-175=infopor1 user-176=pravekom user-177=vtranseu user-178=imdskopj user-179=glammace user-180=albuname user-181=samasped user-182=chemhemc user-183=nutrivim user-184=cosmatob user-185=euromaki user-186=elektrot user-187=zapovim1 user-188=gorsajmk user-189=aquatech user-190=v5srybi9dcdx user-191=supremel user-192=zdmgpsor user-193=modernar user-194=inkigaic user-195=bozinovm user-196=darkogor user-197=fnjorgmk user-198=dslmk user-199=prizmapl user-200=innofabl user-201=premiumi user-202=vacuacti user-203=taneccom user-204=tehnologija user-205=ambitiou user-206=fiziosmk user-207=versusmk user-208=fffhpcwr
Sep  8 21:42:06 power sudo[657340]: wp-toolkit : (command continued) user-209=radekrat user-210=starluxm user-211=tcieuroc user-212=onlinesh user-213=nationa2 user-214=solemor1 user-215=mapaspla feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 21:42:06 power sudo[657340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:07 power sudo[657340]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:07 power sudo[657356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 21:42:07 power sudo[657356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:07 power sudo[657356]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:07 power sudo[657364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0nQnuAIPZOTgZcxM.~
Sep  8 21:42:07 power sudo[657364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:07 power sudo[657364]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:07 power sudo[657368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0nQnuAIPZOTgZcxM.~\''
Sep  8 21:42:07 power sudo[657368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:07 power sudo[657368]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:07 power sudo[657374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0nQnuAIPZOTgZcxM.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 21:42:07 power sudo[657374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:07 power sudo[657374]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:07 power sudo[657378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 21:42:07 power sudo[657378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:07 power sudo[657378]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:08 power sudo[658306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 21:42:08 power sudo[658306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 21:42:08 power sudo[658306]: pam_unix(sudo:session): session closed for user root
Sep  8 21:42:53 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 159.242.234.190 has been locked due to Imunify RBL
Sep  8 21:45:01 power systemd[661019]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:48:17 power pam_imunify[3528494]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 159.242.234.190 has been locked due to Imunify RBL
Sep  8 21:50:01 power systemd[666108]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 21:55:01 power systemd[670531]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:00:01 power systemd[674953]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:00:01 power systemd[674958]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 22:00:01 power systemd[674959]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 22:00:01 power systemd[674962]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 22:05:01 power systemd[679625]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:06:01 power systemd[680452]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 22:07:01 power systemd[681225]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 22:09:01 power systemd[683041]: pam_unix(systemd-user:session): session opened for user chemhemc(uid=1006) by chemhemc(uid=0)
Sep  8 22:10:01 power systemd[683995]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:12:01 power systemd[685714]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 22:13:06 power sshd[686848]: error: kex_exchange_identification: banner line contains invalid characters
Sep  8 22:13:06 power sshd[686848]: banner exchange: Connection from 91.231.89.138 port 48437: invalid format
Sep  8 22:13:09 power sshd[686852]: error: kex_exchange_identification: Connection closed by remote host
Sep  8 22:13:09 power sshd[686852]: Connection closed by 91.231.89.138 port 41345
Sep  8 22:15:01 power systemd[688339]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:20:01 power systemd[692832]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:20:06 power sshd[692934]: Connection closed by 91.231.89.246 port 33839 [preauth]
Sep  8 22:25:01 power systemd[697348]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:30:01 power systemd[702050]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:30:01 power systemd[702052]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 22:30:01 power systemd[702053]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 22:30:01 power systemd[702055]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 22:35:01 power systemd[707011]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep  8 22:35:01 power systemd[707014]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:36:01 power systemd[707960]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 22:37:01 power systemd[708778]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 22:40:01 power systemd[711273]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:42:01 power systemd[712878]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 22:42:03 power sudo[712926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 22:42:03 power sudo[712926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:03 power sudo[712926]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:03 power sudo[712930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 22:42:03 power sudo[712930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:03 power sudo[712930]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:03 power sudo[712934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 22:42:03 power sudo[712934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:03 power sudo[712934]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:03 power sudo[712938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=2nXKnDUXnq'
Sep  8 22:42:03 power sudo[712938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:03 power sudo[712938]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:03 power sudo[712943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 22:42:03 power sudo[712943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:03 power sudo[712943]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:03 power sudo[712947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 22:42:03 power sudo[712947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:03 power sudo[712947]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:03 power sudo[712953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 22:42:03 power sudo[712953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:03 power sudo[712953]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:03 power sudo[712957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 22:42:03 power sudo[712957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:04 power sudo[712957]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:04 power sudo[712962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 22:42:04 power sudo[712962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:04 power sudo[712962]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:04 power sudo[712966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 22:42:04 power sudo[712966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:04 power sudo[712966]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:04 power sudo[712972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 22:42:04 power sudo[712972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:04 power sudo[712972]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:04 power sudo[712976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 22:42:04 power sudo[712976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:04 power sudo[712976]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:04 power sudo[712980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 22:42:04 power sudo[712980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:04 power sudo[712980]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:04 power sudo[712984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 22:42:04 power sudo[712984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:04 power sudo[712984]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:06 power sudo[713002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 22:42:06 power sudo[713002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:06 power sudo[713002]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:06 power sudo[713010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 22:42:06 power sudo[713010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:06 power sudo[713010]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:06 power sudo[713016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=janiboja user-2=itradeco user-3=vezilkac user-4=cabinetm user-5=stojano1 user-6=bovincom user-7=sparkupm user-8=stokovna user-9=klimimk user-10=palenzok user-11=busymard user-12=zampmk user-13=zvskopje user-14=custome1 user-15=kouzonco user-16=premiuma user-17=cetplatf user-18=dalmacom user-19=ideaplus user-20=nasaidni user-21=karpospo user-22=screenme user-23=arturaco user-24=premiums user-25=daris user-26=butelmk user-27=jpparkin user-28=inotekso user-29=drleomk user-30=bianasho user-31=makoasmk user-32=skyapart user-33=rasmorgm user-34=delcevca user-35=getaldus user-36=simbiome user-37=barececo user-38=workandt user-39=goartsym user-40=volkanco user-41=dhamachi user-42=mfashion user-43=agrosind user-44=mpbmk user-45=datalink user-46=gogovan1 user-47=velmk user-48=univerz1 user-49=kujnamon user-50=sedcmk
Sep  8 22:42:06 power sudo[713016]: wp-toolkit : (command continued) user-51=groskome user-52=ivanjord user-53=vfxnestc user-54=polyeste user-55=bizporta user-56=datelcom user-57=maleshne user-58=spdcompu user-59=detskagr user-60=mspmk user-61=infobadi user-62=wikicamp user-63=urbanexp user-64=enaspotc user-65=vmro user-66=viewinn user-67=trudovop user-68=stojnevi user-69=raremk user-70=oouslave user-71=uhostmk5 user-72=bauerbg user-73=youthgua user-74=anitermc user-75=cajsproc user-76=hotammk user-77=nefrolog user-78=ekostoc1 user-79=levantmk user-80=oncolog1 user-81=frizered user-82=hidrommk user-83=caramk user-84=evolvepl user-85=avtogumi user-86=socioloz user-87=pelagoni user-88=centarba user-89=nlpmkorg user-90=kolened1 user-91=nolimits user-92=seloviro user-93=dikimk12 user-94=sprintst user-95=enochmk user-96=herbalpl user-97=edomcomm user-98=berbermk user-99=pecakome user-100=wondersp user-101=stravelm user-102=robustco user-103=holiyayt user-104=rastiraz user-105=gjorgeiv
Sep  8 22:42:06 power sudo[713016]: wp-toolkit : (command continued) user-106=tradeyou user-107=dnevnoin user-108=goodnews user-109=mstmmk user-110=gocruise user-111=tealmk user-112=dadarmk user-113=proverim user-114=kaoilmk user-115=biplmk user-116=bbbustou user-117=pelagini user-118=recorgmk user-119=taktcomm user-120=jaramk user-121=solointe user-122=sssoluti user-123=atspedco user-124=progress user-125=animatem user-126=cleanerm user-127=golakkom user-128=trigemat user-129=naksorgm user-130=eliksirz user-131=electrol user-132=eurofarm user-133=solarinv user-134=wineberr user-135=viplastc user-136=workbenc user-137=ismassag user-138=mbmehani user-139=bonitavi user-140=evberasm user-141=euronic3 user-142=vegemk1 user-143=cupidpro user-144=conserva user-145=folklore user-146=bauerin2 user-147=eaptekam user-148=dimpalne user-149=peshkai1 user-150=fxxcom user-151=evacommk user-152=aptekafa user-153=madzomk user-154=gradbai1 user-155=izzomk user-156=jpkomuna user-157=tehnodro
Sep  8 22:42:06 power sudo[713016]: wp-toolkit : (command continued) user-158=makdrone user-159=modernar user-160=inkigaic user-161=bozinovm user-162=fnjorgmk user-163=prizmapl user-164=darkogor user-165=dslmk user-166=innofabl user-167=premiumi user-168=vacuacti user-169=taneccom user-170=tehnologija user-171=gorsajmk user-172=aquatech user-173=v5srybi9dcdx user-174=supremel user-175=zdmgpsor user-176=tcieuroc user-177=onlinesh user-178=nationa2 user-179=solemor1 user-180=mapaspla user-181=ambitiou user-182=fiziosmk user-183=versusmk user-184=fffhpcwr user-185=radekrat user-186=starluxm user-187=aptekazd user-188=nikimare user-189=forzares user-190=hausmark user-191=nikolov1 user-192=intelek1 user-193=mediatag user-194=nucktra1 user-195=lblawcom user-196=euronic2 user-197=matratze user-198=mediasol user-199=carrent1 user-200=bogdanos user-201=apgrupmk user-202=kardiome user-203=chemhemc user-204=samasped user-205=nutrivim user-206=cosmatob user-207=euromaki user-208=zapovim1
Sep  8 22:42:06 power sudo[713016]: wp-toolkit : (command continued) user-209=elektrot user-210=infopor1 user-211=pravekom user-212=vtranseu user-213=imdskopj user-214=glammace user-215=albuname feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 22:42:06 power sudo[713016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:06 power sudo[713016]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:07 power sudo[713023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 22:42:07 power sudo[713023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:07 power sudo[713023]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:07 power sudo[713027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nuGJkP0AFpkCO8Ll.~
Sep  8 22:42:07 power sudo[713027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:07 power sudo[713027]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:07 power sudo[713031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nuGJkP0AFpkCO8Ll.~\''
Sep  8 22:42:07 power sudo[713031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:07 power sudo[713031]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:07 power sudo[713036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nuGJkP0AFpkCO8Ll.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 22:42:07 power sudo[713036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:07 power sudo[713036]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:07 power sudo[713040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 22:42:07 power sudo[713040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:07 power sudo[713040]: pam_unix(sudo:session): session closed for user root
Sep  8 22:42:10 power sudo[713356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 22:42:10 power sudo[713356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 22:42:10 power sudo[713356]: pam_unix(sudo:session): session closed for user root
Sep  8 22:45:01 power systemd[716174]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:50:01 power systemd[720594]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 22:55:01 power systemd[724691]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:00:01 power systemd[728768]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:00:01 power systemd[728771]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 23:00:01 power systemd[728773]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 23:00:01 power systemd[728772]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 23:05:01 power systemd[733501]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:06:01 power systemd[734311]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 23:07:01 power systemd[735109]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 23:10:01 power systemd[737599]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep  8 23:10:01 power systemd[737600]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:12:01 power systemd[739203]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 23:15:01 power systemd[741648]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:20:01 power systemd[745669]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:25:02 power systemd[749787]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:30:01 power systemd[754105]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:30:01 power systemd[754106]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  8 23:30:01 power systemd[754107]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  8 23:30:01 power systemd[754109]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  8 23:35:02 power systemd[758242]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:36:01 power systemd[759042]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  8 23:37:01 power systemd[759935]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 23:40:01 power systemd[762482]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:42:01 power systemd[764062]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  8 23:42:03 power sudo[764100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  8 23:42:03 power sudo[764100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:03 power sudo[764100]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:03 power sudo[764104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  8 23:42:03 power sudo[764104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:03 power sudo[764104]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:03 power sudo[764108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  8 23:42:03 power sudo[764108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:03 power sudo[764108]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:03 power sudo[764112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=BfXW0wmnn4'
Sep  8 23:42:03 power sudo[764112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:03 power sudo[764112]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:03 power sudo[764117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  8 23:42:03 power sudo[764117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:03 power sudo[764117]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:03 power sudo[764121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  8 23:42:03 power sudo[764121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:03 power sudo[764121]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:03 power sudo[764125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  8 23:42:03 power sudo[764125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:03 power sudo[764125]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:03 power sudo[764130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  8 23:42:03 power sudo[764130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:04 power sudo[764130]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:04 power sudo[764135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  8 23:42:04 power sudo[764135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:04 power sudo[764135]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:04 power sudo[764147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  8 23:42:04 power sudo[764147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:04 power sudo[764147]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:04 power sudo[764151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  8 23:42:04 power sudo[764151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:04 power sudo[764151]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:04 power sudo[764155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 23:42:04 power sudo[764155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:04 power sudo[764155]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:04 power sudo[764160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  8 23:42:04 power sudo[764160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:04 power sudo[764160]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:04 power sudo[764165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  8 23:42:04 power sudo[764165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:04 power sudo[764165]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:06 power sudo[764190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  8 23:42:06 power sudo[764190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:06 power sudo[764190]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:06 power sudo[764195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  8 23:42:06 power sudo[764195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:06 power sudo[764195]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:06 power sudo[764204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=evacommk user-2=madzomk user-3=aptekafa user-4=gradbai1 user-5=eaptekam user-6=dimpalne user-7=peshkai1 user-8=fxxcom user-9=tehnodro user-10=makdrone user-11=izzomk user-12=jpkomuna user-13=euronic3 user-14=vegemk1 user-15=cupidpro user-16=conserva user-17=bonitavi user-18=evberasm user-19=folklore user-20=bauerin2 user-21=eurofarm user-22=solarinv user-23=golakkom user-24=trigemat user-25=eliksirz user-26=naksorgm user-27=electrol user-28=workbenc user-29=ismassag user-30=mbmehani user-31=wineberr user-32=viplastc user-33=pelagini user-34=biplmk user-35=kaoilmk user-36=bbbustou user-37=sssoluti user-38=atspedco user-39=progress user-40=animatem user-41=cleanerm user-42=recorgmk user-43=taktcomm user-44=jaramk user-45=solointe user-46=euromaki user-47=cosmatob user-48=elektrot user-49=zapovim1
Sep  8 23:42:06 power sudo[764204]: wp-toolkit : (command continued) user-50=chemhemc user-51=samasped user-52=nutrivim user-53=imdskopj user-54=glammace user-55=albuname user-56=infopor1 user-57=pravekom user-58=vtranseu user-59=intelek1 user-60=mediatag user-61=nucktra1 user-62=lblawcom user-63=aptekazd user-64=nikimare user-65=forzares user-66=hausmark user-67=nikolov1 user-68=mediasol user-69=carrent1 user-70=bogdanos user-71=apgrupmk user-72=kardiome user-73=euronic2 user-74=matratze user-75=onlinesh user-76=nationa2 user-77=solemor1 user-78=mapaspla user-79=tcieuroc user-80=fffhpcwr user-81=radekrat user-82=starluxm user-83=ambitiou user-84=fiziosmk user-85=versusmk user-86=bozinovm user-87=prizmapl user-88=dslmk user-89=fnjorgmk user-90=darkogor user-91=innofabl user-92=premiumi user-93=vacuacti user-94=taneccom user-95=tehnologija user-96=modernar user-97=inkigaic user-98=zdmgpsor user-99=gorsajmk user-100=aquatech user-101=v5srybi9dcdx user-102=supremel user-103=bizporta
Sep  8 23:42:06 power sudo[764204]: wp-toolkit : (command continued) user-104=datelcom user-105=maleshne user-106=sedcmk user-107=groskome user-108=ivanjord user-109=vfxnestc user-110=polyeste user-111=wikicamp user-112=urbanexp user-113=spdcompu user-114=detskagr user-115=mspmk user-116=infobadi user-117=getaldus user-118=delcevca user-119=simbiome user-120=barececo user-121=workandt user-122=volkanco user-123=goartsym user-124=dhamachi user-125=mfashion user-126=makoasmk user-127=bianasho user-128=skyapart user-129=rasmorgm user-130=datalink user-131=velmk user-132=gogovan1 user-133=kujnamon user-134=univerz1 user-135=agrosind user-136=mpbmk user-137=kouzonco user-138=premiuma user-139=cetplatf user-140=dalmacom user-141=jpparkin user-142=inotekso user-143=drleomk user-144=ideaplus user-145=nasaidni user-146=karpospo user-147=arturaco user-148=screenme user-149=premiums user-150=daris user-151=butelmk user-152=stojano1 user-153=bovincom user-154=janiboja user-155=itradeco
Sep  8 23:42:06 power sudo[764204]: wp-toolkit : (command continued) user-156=vezilkac user-157=cabinetm user-158=palenzok user-159=busymard user-160=zampmk user-161=zvskopje user-162=custome1 user-163=sparkupm user-164=stokovna user-165=klimimk user-166=gjorgeiv user-167=tradeyou user-168=dnevnoin user-169=pecakome user-170=wondersp user-171=robustco user-172=stravelm user-173=holiyayt user-174=rastiraz user-175=tealmk user-176=dadarmk user-177=proverim user-178=goodnews user-179=mstmmk user-180=gocruise user-181=seloviro user-182=centarba user-183=nlpmkorg user-184=kolened1 user-185=nolimits user-186=edomcomm user-187=berbermk user-188=dikimk12 user-189=sprintst user-190=enochmk user-191=herbalpl user-192=frizered user-193=hidrommk user-194=caramk user-195=nefrolog user-196=levantmk user-197=ekostoc1 user-198=oncolog1 user-199=avtogumi user-200=socioloz user-201=pelagoni user-202=evolvepl user-203=stojnevi user-204=raremk user-205=oouslave user-206=uhostmk5 user-207=bauerbg
Sep  8 23:42:06 power sudo[764204]: wp-toolkit : (command continued) user-208=enaspotc user-209=vmro user-210=viewinn user-211=trudovop user-212=cajsproc user-213=hotammk user-214=youthgua user-215=anitermc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  8 23:42:06 power sudo[764204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:07 power sudo[764204]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:07 power sudo[764210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 23:42:07 power sudo[764210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:07 power sudo[764210]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:07 power sudo[764214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UZcW1uOT5ztOAUVL.~
Sep  8 23:42:07 power sudo[764214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:07 power sudo[764214]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:07 power sudo[764218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UZcW1uOT5ztOAUVL.~\''
Sep  8 23:42:07 power sudo[764218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:07 power sudo[764218]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:07 power sudo[764223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UZcW1uOT5ztOAUVL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  8 23:42:07 power sudo[764223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:07 power sudo[764223]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:07 power sudo[764227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  8 23:42:07 power sudo[764227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:07 power sudo[764227]: pam_unix(sudo:session): session closed for user root
Sep  8 23:42:11 power sudo[764994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  8 23:42:11 power sudo[764994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  8 23:42:11 power sudo[764994]: pam_unix(sudo:session): session closed for user root
Sep  8 23:45:01 power systemd[767496]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:50:01 power systemd[771794]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  8 23:55:01 power systemd[775625]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:00:01 power systemd[779594]: pam_unix(systemd-user:session): session opened for user fffhpcwr(uid=1010) by fffhpcwr(uid=0)
Sep  9 00:00:01 power systemd[779596]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:00:01 power systemd[779598]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 00:00:01 power systemd[779599]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 00:00:01 power systemd[779601]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 00:00:01 power systemd[779603]: pam_unix(systemd-user:session): session opened for user tcieuroc(uid=1184) by tcieuroc(uid=0)
Sep  9 00:01:28 power sshd[782043]: error: kex_exchange_identification: banner line contains invalid characters
Sep  9 00:01:28 power sshd[782043]: banner exchange: Connection from 91.196.152.35 port 39873: invalid format
Sep  9 00:01:31 power sshd[782088]: error: kex_exchange_identification: Connection closed by remote host
Sep  9 00:01:31 power sshd[782088]: Connection closed by 91.196.152.121 port 36673
Sep  9 00:05:01 power systemd[785012]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:06:01 power systemd[785778]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 00:07:01 power systemd[786527]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 00:09:26 power sshd[788278]: Connection closed by 91.196.152.92 port 58865 [preauth]
Sep  9 00:10:01 power systemd[789127]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:12:01 power systemd[790588]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 00:15:01 power systemd[792861]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:20:02 power systemd[797412]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:25:01 power systemd[801627]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:30:01 power systemd[812585]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:30:01 power systemd[812587]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 00:30:01 power systemd[812589]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 00:30:01 power systemd[812590]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 00:35:01 power systemd[817002]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:36:01 power systemd[817784]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 00:37:01 power systemd[818489]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 00:40:01 power systemd[820871]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:42:01 power systemd[822245]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 00:42:03 power sudo[822277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 00:42:03 power sudo[822277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822277]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 00:42:03 power sudo[822281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822281]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 00:42:03 power sudo[822285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822285]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=vBrY2n4hSN'
Sep  9 00:42:03 power sudo[822289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822289]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 00:42:03 power sudo[822295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822295]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 00:42:03 power sudo[822300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822300]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 00:42:03 power sudo[822306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822306]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 00:42:03 power sudo[822311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822311]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 00:42:03 power sudo[822316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822316]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 00:42:03 power sudo[822320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822320]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 00:42:03 power sudo[822324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822324]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 00:42:03 power sudo[822328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822328]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 00:42:03 power sudo[822332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:03 power sudo[822332]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:03 power sudo[822336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 00:42:03 power sudo[822336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:04 power sudo[822336]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:06 power sudo[822359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 00:42:06 power sudo[822359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:06 power sudo[822359]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:06 power sudo[822365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 00:42:06 power sudo[822365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:06 power sudo[822365]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:06 power sudo[822370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=euronic3 user-2=cupidpro user-3=vegemk1 user-4=conserva user-5=evberasm user-6=bonitavi user-7=folklore user-8=bauerin2 user-9=madzomk user-10=aptekafa user-11=evacommk user-12=gradbai1 user-13=eaptekam user-14=dimpalne user-15=fxxcom user-16=peshkai1 user-17=tehnodro user-18=makdrone user-19=izzomk user-20=jpkomuna user-21=pelagini user-22=kaoilmk user-23=biplmk user-24=bbbustou user-25=atspedco user-26=sssoluti user-27=progress user-28=cleanerm user-29=animatem user-30=recorgmk user-31=taktcomm user-32=jaramk user-33=solointe user-34=eurofarm user-35=solarinv user-36=golakkom user-37=naksorgm user-38=eliksirz user-39=trigemat user-40=electrol user-41=workbenc user-42=ismassag user-43=mbmehani user-44=wineberr user-45=viplastc user-46=mediatag user-47=intelek1 user-48=nucktra1 user-49=lblawcom
Sep  9 00:42:06 power sudo[822370]: wp-toolkit : (command continued) user-50=nikimare user-51=aptekazd user-52=forzares user-53=hausmark user-54=nikolov1 user-55=bogdanos user-56=carrent1 user-57=mediasol user-58=apgrupmk user-59=kardiome user-60=matratze user-61=euronic2 user-62=euromaki user-63=cosmatob user-64=elektrot user-65=zapovim1 user-66=chemhemc user-67=samasped user-68=nutrivim user-69=imdskopj user-70=albuname user-71=glammace user-72=infopor1 user-73=vtranseu user-74=pravekom user-75=prizmapl user-76=fnjorgmk user-77=darkogor user-78=dslmk user-79=bozinovm user-80=vacuacti user-81=innofabl user-82=premiumi user-83=taneccom user-84=tehnologija user-85=modernar user-86=inkigaic user-87=zdmgpsor user-88=aquatech user-89=gorsajmk user-90=v5srybi9dcdx user-91=supremel user-92=onlinesh user-93=nationa2 user-94=solemor1 user-95=mapaspla user-96=tcieuroc user-97=fffhpcwr user-98=starluxm user-99=radekrat user-100=ambitiou user-101=fiziosmk user-102=versusmk user-103=barececo
Sep  9 00:42:06 power sudo[822370]: wp-toolkit : (command continued) user-104=delcevca user-105=getaldus user-106=simbiome user-107=workandt user-108=dhamachi user-109=volkanco user-110=goartsym user-111=mfashion user-112=skyapart user-113=bianasho user-114=makoasmk user-115=rasmorgm user-116=datalink user-117=univerz1 user-118=kujnamon user-119=velmk user-120=gogovan1 user-121=mpbmk user-122=agrosind user-123=bizporta user-124=maleshne user-125=datelcom user-126=sedcmk user-127=ivanjord user-128=groskome user-129=polyeste user-130=vfxnestc user-131=wikicamp user-132=urbanexp user-133=spdcompu user-134=detskagr user-135=mspmk user-136=infobadi user-137=stojano1 user-138=bovincom user-139=janiboja user-140=itradeco user-141=vezilkac user-142=cabinetm user-143=palenzok user-144=zampmk user-145=busymard user-146=zvskopje user-147=custome1 user-148=stokovna user-149=sparkupm user-150=klimimk user-151=kouzonco user-152=premiuma user-153=cetplatf user-154=dalmacom user-155=inotekso
Sep  9 00:42:06 power sudo[822370]: wp-toolkit : (command continued) user-156=jpparkin user-157=drleomk user-158=karpospo user-159=nasaidni user-160=ideaplus user-161=screenme user-162=arturaco user-163=daris user-164=butelmk user-165=premiums user-166=seloviro user-167=kolened1 user-168=nlpmkorg user-169=centarba user-170=nolimits user-171=edomcomm user-172=berbermk user-173=dikimk12 user-174=herbalpl user-175=enochmk user-176=sprintst user-177=gjorgeiv user-178=tradeyou user-179=dnevnoin user-180=pecakome user-181=robustco user-182=stravelm user-183=wondersp user-184=holiyayt user-185=rastiraz user-186=tealmk user-187=dadarmk user-188=proverim user-189=goodnews user-190=mstmmk user-191=gocruise user-192=stojnevi user-193=oouslave user-194=raremk user-195=bauerbg user-196=uhostmk5 user-197=enaspotc user-198=trudovop user-199=viewinn user-200=vmro user-201=cajsproc user-202=hotammk user-203=anitermc user-204=youthgua user-205=hidrommk user-206=frizered user-207=caramk
Sep  9 00:42:06 power sudo[822370]: wp-toolkit : (command continued) user-208=levantmk user-209=oncolog1 user-210=ekostoc1 user-211=nefrolog user-212=socioloz user-213=avtogumi user-214=pelagoni user-215=evolvepl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 00:42:06 power sudo[822370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:06 power sudo[822370]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:06 power sudo[822382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 00:42:06 power sudo[822382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:06 power sudo[822382]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:06 power sudo[822388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pBm4eZainrIwtEks.~
Sep  9 00:42:06 power sudo[822388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:06 power sudo[822388]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:06 power sudo[822393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pBm4eZainrIwtEks.~\''
Sep  9 00:42:06 power sudo[822393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:06 power sudo[822393]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:06 power sudo[822398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pBm4eZainrIwtEks.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 00:42:06 power sudo[822398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:06 power sudo[822398]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:06 power sudo[822402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 00:42:06 power sudo[822402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:06 power sudo[822402]: pam_unix(sudo:session): session closed for user root
Sep  9 00:42:07 power sudo[822859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 00:42:07 power sudo[822859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 00:42:07 power sudo[822859]: pam_unix(sudo:session): session closed for user root
Sep  9 00:45:01 power systemd[825449]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:50:01 power systemd[830791]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 00:55:01 power systemd[834629]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:00:01 power systemd[839146]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:00:01 power systemd[839147]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 01:00:01 power systemd[839152]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 01:00:01 power systemd[839154]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 01:05:02 power systemd[844041]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:06:01 power systemd[844944]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 01:07:01 power systemd[845776]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 01:10:01 power systemd[848490]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:12:01 power systemd[849935]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 01:15:01 power systemd[852154]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:20:02 power systemd[856478]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:25:01 power systemd[860197]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:30:01 power systemd[864171]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:30:01 power systemd[864172]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 01:30:01 power systemd[864173]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 01:30:01 power systemd[864175]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 01:35:01 power systemd[868343]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:36:01 power systemd[869128]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 01:37:01 power systemd[869863]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 01:40:01 power systemd[872359]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:42:01 power systemd[873760]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 01:42:03 power sudo[873795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 01:42:03 power sudo[873795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873795]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 01:42:03 power sudo[873799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873799]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 01:42:03 power sudo[873803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873803]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=4gfL62xGEC'
Sep  9 01:42:03 power sudo[873807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873807]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 01:42:03 power sudo[873813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873813]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 01:42:03 power sudo[873817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873817]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 01:42:03 power sudo[873821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873821]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 01:42:03 power sudo[873825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873825]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 01:42:03 power sudo[873832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873832]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 01:42:03 power sudo[873836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873836]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 01:42:03 power sudo[873840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873840]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 01:42:03 power sudo[873844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873844]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 01:42:03 power sudo[873848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:03 power sudo[873848]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:03 power sudo[873852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 01:42:03 power sudo[873852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:04 power sudo[873852]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:05 power sudo[873877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 01:42:05 power sudo[873877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:05 power sudo[873877]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:06 power sudo[873882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 01:42:06 power sudo[873882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:06 power sudo[873882]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:06 power sudo[873887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=workandt user-2=getaldus user-3=delcevca user-4=simbiome user-5=barececo user-6=mfashion user-7=goartsym user-8=volkanco user-9=dhamachi user-10=bianasho user-11=makoasmk user-12=skyapart user-13=rasmorgm user-14=datalink user-15=velmk user-16=gogovan1 user-17=univerz1 user-18=kujnamon user-19=agrosind user-20=mpbmk user-21=bizporta user-22=datelcom user-23=maleshne user-24=groskome user-25=ivanjord user-26=sedcmk user-27=vfxnestc user-28=polyeste user-29=urbanexp user-30=wikicamp user-31=detskagr user-32=spdcompu user-33=mspmk user-34=infobadi user-35=stojano1 user-36=bovincom user-37=itradeco user-38=janiboja user-39=cabinetm user-40=vezilkac user-41=zvskopje user-42=zampmk user-43=busymard user-44=palenzok user-45=custome1 user-46=sparkupm user-47=stokovna user-48=klimimk user-49=premiuma user-50=kouzonco
Sep  9 01:42:06 power sudo[873887]: wp-toolkit : (command continued) user-51=dalmacom user-52=cetplatf user-53=drleomk user-54=jpparkin user-55=inotekso user-56=screenme user-57=arturaco user-58=ideaplus user-59=nasaidni user-60=karpospo user-61=premiums user-62=daris user-63=butelmk user-64=seloviro user-65=centarba user-66=nlpmkorg user-67=kolened1 user-68=nolimits user-69=berbermk user-70=edomcomm user-71=sprintst user-72=enochmk user-73=herbalpl user-74=dikimk12 user-75=gjorgeiv user-76=tradeyou user-77=dnevnoin user-78=wondersp user-79=stravelm user-80=robustco user-81=pecakome user-82=rastiraz user-83=holiyayt user-84=tealmk user-85=proverim user-86=dadarmk user-87=mstmmk user-88=goodnews user-89=gocruise user-90=stojnevi user-91=uhostmk5 user-92=bauerbg user-93=raremk user-94=oouslave user-95=vmro user-96=trudovop user-97=viewinn user-98=enaspotc user-99=hotammk user-100=cajsproc user-101=youthgua user-102=anitermc user-103=frizered user-104=hidrommk user-105=caramk
Sep  9 01:42:06 power sudo[873887]: wp-toolkit : (command continued) user-106=nefrolog user-107=oncolog1 user-108=levantmk user-109=ekostoc1 user-110=avtogumi user-111=socioloz user-112=pelagoni user-113=evolvepl user-114=vegemk1 user-115=cupidpro user-116=euronic3 user-117=conserva user-118=bonitavi user-119=evberasm user-120=folklore user-121=bauerin2 user-122=evacommk user-123=madzomk user-124=aptekafa user-125=gradbai1 user-126=dimpalne user-127=eaptekam user-128=peshkai1 user-129=fxxcom user-130=tehnodro user-131=makdrone user-132=jpkomuna user-133=izzomk user-134=pelagini user-135=bbbustou user-136=kaoilmk user-137=biplmk user-138=atspedco user-139=sssoluti user-140=animatem user-141=cleanerm user-142=progress user-143=taktcomm user-144=recorgmk user-145=solointe user-146=jaramk user-147=eurofarm user-148=solarinv user-149=golakkom user-150=electrol user-151=trigemat user-152=eliksirz user-153=naksorgm user-154=ismassag user-155=workbenc user-156=mbmehani user-157=viplastc
Sep  9 01:42:06 power sudo[873887]: wp-toolkit : (command continued) user-158=wineberr user-159=intelek1 user-160=mediatag user-161=lblawcom user-162=nucktra1 user-163=forzares user-164=aptekazd user-165=nikimare user-166=hausmark user-167=nikolov1 user-168=apgrupmk user-169=mediasol user-170=bogdanos user-171=carrent1 user-172=kardiome user-173=euronic2 user-174=matratze user-175=euromaki user-176=cosmatob user-177=zapovim1 user-178=elektrot user-179=samasped user-180=chemhemc user-181=nutrivim user-182=imdskopj user-183=glammace user-184=albuname user-185=infopor1 user-186=vtranseu user-187=pravekom user-188=premiumi user-189=innofabl user-190=vacuacti user-191=bozinovm user-192=prizmapl user-193=fnjorgmk user-194=dslmk user-195=darkogor user-196=tehnologija user-197=taneccom user-198=modernar user-199=inkigaic user-200=zdmgpsor user-201=gorsajmk user-202=aquatech user-203=supremel user-204=v5srybi9dcdx user-205=nationa2 user-206=onlinesh user-207=mapaspla user-208=solemor1
Sep  9 01:42:06 power sudo[873887]: wp-toolkit : (command continued) user-209=tcieuroc user-210=fffhpcwr user-211=radekrat user-212=starluxm user-213=fiziosmk user-214=ambitiou user-215=versusmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 01:42:06 power sudo[873887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:06 power sudo[873887]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:06 power sudo[873899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 01:42:06 power sudo[873899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:06 power sudo[873899]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:06 power sudo[873903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-j1jyEx46JuXFv1P9.~
Sep  9 01:42:06 power sudo[873903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:06 power sudo[873903]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:06 power sudo[873907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-j1jyEx46JuXFv1P9.~\''
Sep  9 01:42:06 power sudo[873907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:06 power sudo[873907]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:06 power sudo[873912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-j1jyEx46JuXFv1P9.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 01:42:06 power sudo[873912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:06 power sudo[873912]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:06 power sudo[873916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 01:42:06 power sudo[873916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:06 power sudo[873916]: pam_unix(sudo:session): session closed for user root
Sep  9 01:42:10 power sudo[874635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 01:42:10 power sudo[874635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 01:42:10 power sudo[874635]: pam_unix(sudo:session): session closed for user root
Sep  9 01:45:01 power systemd[877100]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:50:01 power systemd[881794]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 01:55:02 power systemd[886635]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:00:01 power systemd[891133]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:00:01 power systemd[891138]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 02:00:01 power systemd[891141]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 02:00:01 power systemd[891143]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 02:05:01 power systemd[897054]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:06:01 power systemd[898206]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 02:07:02 power systemd[899314]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 02:10:01 power systemd[902986]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:12:01 power systemd[905245]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 02:15:01 power systemd[908228]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:20:01 power systemd[913466]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:25:01 power systemd[918182]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:30:01 power systemd[923040]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 02:30:01 power systemd[923039]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:30:01 power systemd[923042]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 02:30:01 power systemd[923041]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 02:35:01 power systemd[927642]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:36:01 power systemd[928441]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 02:37:01 power systemd[929200]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 02:40:01 power systemd[931674]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:42:01 power systemd[933249]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 02:42:03 power sudo[933287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 02:42:03 power sudo[933287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933287]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 02:42:03 power sudo[933291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933291]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 02:42:03 power sudo[933295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933295]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=N00hLHCQhU'
Sep  9 02:42:03 power sudo[933299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933299]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 02:42:03 power sudo[933304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933304]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 02:42:03 power sudo[933308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933308]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 02:42:03 power sudo[933312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933312]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 02:42:03 power sudo[933317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933317]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 02:42:03 power sudo[933325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933325]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 02:42:03 power sudo[933329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933329]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 02:42:03 power sudo[933333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933333]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:03 power sudo[933337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 02:42:03 power sudo[933337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:03 power sudo[933337]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:04 power sudo[933342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 02:42:04 power sudo[933342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:04 power sudo[933342]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:04 power sudo[933347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 02:42:04 power sudo[933347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:04 power sudo[933347]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:06 power sudo[933381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 02:42:06 power sudo[933381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:06 power sudo[933381]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:06 power sudo[933386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 02:42:06 power sudo[933386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:06 power sudo[933386]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:06 power sudo[933394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=evacommk user-2=aptekafa user-3=madzomk user-4=gradbai1 user-5=eaptekam user-6=dimpalne user-7=peshkai1 user-8=fxxcom user-9=tehnodro user-10=makdrone user-11=izzomk user-12=jpkomuna user-13=euronic3 user-14=vegemk1 user-15=cupidpro user-16=conserva user-17=bonitavi user-18=evberasm user-19=folklore user-20=bauerin2 user-21=eurofarm user-22=solarinv user-23=golakkom user-24=trigemat user-25=naksorgm user-26=eliksirz user-27=electrol user-28=workbenc user-29=ismassag user-30=mbmehani user-31=wineberr user-32=viplastc user-33=pelagini user-34=biplmk user-35=kaoilmk user-36=bbbustou user-37=sssoluti user-38=atspedco user-39=progress user-40=animatem user-41=cleanerm user-42=taktcomm user-43=recorgmk user-44=jaramk user-45=solointe user-46=euromaki user-47=cosmatob user-48=elektrot user-49=zapovim1
Sep  9 02:42:06 power sudo[933394]: wp-toolkit : (command continued) user-50=samasped user-51=chemhemc user-52=nutrivim user-53=imdskopj user-54=glammace user-55=albuname user-56=infopor1 user-57=vtranseu user-58=pravekom user-59=intelek1 user-60=mediatag user-61=nucktra1 user-62=lblawcom user-63=aptekazd user-64=nikimare user-65=forzares user-66=hausmark user-67=nikolov1 user-68=mediasol user-69=carrent1 user-70=bogdanos user-71=apgrupmk user-72=kardiome user-73=euronic2 user-74=matratze user-75=onlinesh user-76=nationa2 user-77=solemor1 user-78=mapaspla user-79=tcieuroc user-80=fffhpcwr user-81=radekrat user-82=starluxm user-83=ambitiou user-84=fiziosmk user-85=versusmk user-86=bozinovm user-87=prizmapl user-88=dslmk user-89=darkogor user-90=fnjorgmk user-91=premiumi user-92=innofabl user-93=vacuacti user-94=taneccom user-95=tehnologija user-96=modernar user-97=inkigaic user-98=zdmgpsor user-99=gorsajmk user-100=aquatech user-101=v5srybi9dcdx user-102=supremel user-103=bizporta
Sep  9 02:42:06 power sudo[933394]: wp-toolkit : (command continued) user-104=datelcom user-105=maleshne user-106=sedcmk user-107=groskome user-108=ivanjord user-109=vfxnestc user-110=polyeste user-111=wikicamp user-112=urbanexp user-113=spdcompu user-114=detskagr user-115=infobadi user-116=mspmk user-117=simbiome user-118=getaldus user-119=delcevca user-120=barececo user-121=workandt user-122=volkanco user-123=goartsym user-124=dhamachi user-125=mfashion user-126=bianasho user-127=makoasmk user-128=skyapart user-129=rasmorgm user-130=datalink user-131=gogovan1 user-132=velmk user-133=univerz1 user-134=kujnamon user-135=agrosind user-136=mpbmk user-137=kouzonco user-138=premiuma user-139=cetplatf user-140=dalmacom user-141=jpparkin user-142=inotekso user-143=drleomk user-144=ideaplus user-145=karpospo user-146=nasaidni user-147=screenme user-148=arturaco user-149=premiums user-150=daris user-151=butelmk user-152=stojano1 user-153=bovincom user-154=janiboja user-155=itradeco
Sep  9 02:42:06 power sudo[933394]: wp-toolkit : (command continued) user-156=vezilkac user-157=cabinetm user-158=palenzok user-159=zampmk user-160=zvskopje user-161=busymard user-162=custome1 user-163=sparkupm user-164=stokovna user-165=klimimk user-166=gjorgeiv user-167=tradeyou user-168=dnevnoin user-169=pecakome user-170=wondersp user-171=robustco user-172=stravelm user-173=holiyayt user-174=rastiraz user-175=tealmk user-176=dadarmk user-177=proverim user-178=goodnews user-179=mstmmk user-180=gocruise user-181=seloviro user-182=nlpmkorg user-183=centarba user-184=kolened1 user-185=nolimits user-186=edomcomm user-187=berbermk user-188=dikimk12 user-189=sprintst user-190=enochmk user-191=herbalpl user-192=frizered user-193=hidrommk user-194=caramk user-195=nefrolog user-196=levantmk user-197=ekostoc1 user-198=oncolog1 user-199=avtogumi user-200=socioloz user-201=pelagoni user-202=evolvepl user-203=stojnevi user-204=raremk user-205=oouslave user-206=uhostmk5 user-207=bauerbg
Sep  9 02:42:06 power sudo[933394]: wp-toolkit : (command continued) user-208=enaspotc user-209=vmro user-210=viewinn user-211=trudovop user-212=cajsproc user-213=hotammk user-214=youthgua user-215=anitermc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 02:42:06 power sudo[933394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:06 power sudo[933394]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:06 power sudo[933403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 02:42:06 power sudo[933403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:06 power sudo[933403]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:06 power sudo[933407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-dilNqEId9MrW2kpn.~
Sep  9 02:42:06 power sudo[933407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:06 power sudo[933407]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:06 power sudo[933411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-dilNqEId9MrW2kpn.~\''
Sep  9 02:42:06 power sudo[933411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:06 power sudo[933411]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:06 power sudo[933416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-dilNqEId9MrW2kpn.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 02:42:06 power sudo[933416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:06 power sudo[933416]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:07 power sudo[933420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 02:42:07 power sudo[933420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:07 power sudo[933420]: pam_unix(sudo:session): session closed for user root
Sep  9 02:42:08 power sudo[934336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 02:42:08 power sudo[934336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 02:42:08 power sudo[934336]: pam_unix(sudo:session): session closed for user root
Sep  9 02:45:01 power systemd[936734]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:50:02 power systemd[941545]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 02:52:25 power sshd[943598]: Connection closed by 45.79.181.251 port 39910 [preauth]
Sep  9 02:52:26 power sshd[943656]: Connection closed by 45.79.181.251 port 39916 [preauth]
Sep  9 02:52:27 power sshd[943671]: Connection closed by 45.79.181.251 port 39932 [preauth]
Sep  9 02:55:01 power systemd[946169]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:00:01 power systemd[950590]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:00:01 power systemd[950592]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 03:00:01 power systemd[950591]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 03:00:01 power systemd[950595]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 03:05:01 power systemd[955801]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:06:01 power systemd[956812]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 03:07:01 power systemd[957934]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 03:10:01 power systemd[961178]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:12:01 power systemd[963053]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 03:15:01 power systemd[966118]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:20:01 power systemd[971177]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:25:01 power systemd[975834]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:27:01 power systemd[977616]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  9 03:30:01 power systemd[980651]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:30:01 power systemd[980652]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 03:30:01 power systemd[980654]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 03:30:01 power systemd[980656]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 03:35:01 power systemd[985641]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:36:01 power systemd[986718]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 03:37:01 power systemd[987622]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 03:40:01 power systemd[991029]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:42:01 power systemd[992871]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 03:42:03 power sudo[992929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 03:42:03 power sudo[992929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992929]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 03:42:03 power sudo[992933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992933]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 03:42:03 power sudo[992937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992937]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=0GSYEim0QF'
Sep  9 03:42:03 power sudo[992942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992942]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 03:42:03 power sudo[992947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992947]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 03:42:03 power sudo[992953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992953]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 03:42:03 power sudo[992957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992957]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 03:42:03 power sudo[992961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992961]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 03:42:03 power sudo[992969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992969]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 03:42:03 power sudo[992974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992974]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:03 power sudo[992979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 03:42:03 power sudo[992979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:03 power sudo[992979]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:04 power sudo[992983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 03:42:04 power sudo[992983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:04 power sudo[992983]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:04 power sudo[992987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 03:42:04 power sudo[992987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:04 power sudo[992987]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:04 power sudo[992991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 03:42:04 power sudo[992991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:04 power sudo[992991]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:08 power sudo[993076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 03:42:08 power sudo[993076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:08 power sudo[993076]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:08 power sudo[993082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 03:42:08 power sudo[993082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:08 power sudo[993082]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:08 power sudo[993087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tradeyou user-2=gjorgeiv user-3=dnevnoin user-4=stravelm user-5=robustco user-6=wondersp user-7=pecakome user-8=rastiraz user-9=holiyayt user-10=tealmk user-11=proverim user-12=dadarmk user-13=mstmmk user-14=goodnews user-15=gocruise user-16=seloviro user-17=kolened1 user-18=centarba user-19=nlpmkorg user-20=nolimits user-21=berbermk user-22=edomcomm user-23=herbalpl user-24=enochmk user-25=sprintst user-26=dikimk12 user-27=hidrommk user-28=frizered user-29=caramk user-30=ekostoc1 user-31=levantmk user-32=oncolog1 user-33=nefrolog user-34=avtogumi user-35=socioloz user-36=pelagoni user-37=evolvepl user-38=stojnevi user-39=bauerbg user-40=uhostmk5 user-41=oouslave user-42=raremk user-43=viewinn user-44=trudovop user-45=vmro user-46=enaspotc user-47=hotammk user-48=cajsproc user-49=anitermc user-50=youthgua
Sep  9 03:42:08 power sudo[993087]: wp-toolkit : (command continued) user-51=bizporta user-52=maleshne user-53=datelcom user-54=ivanjord user-55=groskome user-56=sedcmk user-57=polyeste user-58=vfxnestc user-59=urbanexp user-60=wikicamp user-61=detskagr user-62=spdcompu user-63=infobadi user-64=mspmk user-65=workandt user-66=barececo user-67=simbiome user-68=getaldus user-69=delcevca user-70=mfashion user-71=dhamachi user-72=goartsym user-73=volkanco user-74=skyapart user-75=bianasho user-76=makoasmk user-77=rasmorgm user-78=datalink user-79=univerz1 user-80=kujnamon user-81=gogovan1 user-82=velmk user-83=mpbmk user-84=agrosind user-85=premiuma user-86=kouzonco user-87=dalmacom user-88=cetplatf user-89=drleomk user-90=inotekso user-91=jpparkin user-92=screenme user-93=arturaco user-94=karpospo user-95=nasaidni user-96=ideaplus user-97=butelmk user-98=daris user-99=premiums user-100=stojano1 user-101=bovincom user-102=itradeco user-103=janiboja user-104=cabinetm user-105=vezilkac
Sep  9 03:42:08 power sudo[993087]: wp-toolkit : (command continued) user-106=busymard user-107=zampmk user-108=zvskopje user-109=palenzok user-110=custome1 user-111=stokovna user-112=sparkupm user-113=klimimk user-114=cosmatob user-115=euromaki user-116=zapovim1 user-117=elektrot user-118=chemhemc user-119=samasped user-120=nutrivim user-121=imdskopj user-122=albuname user-123=glammace user-124=infopor1 user-125=vtranseu user-126=pravekom user-127=mediatag user-128=intelek1 user-129=lblawcom user-130=nucktra1 user-131=forzares user-132=nikimare user-133=aptekazd user-134=nikolov1 user-135=hausmark user-136=apgrupmk user-137=bogdanos user-138=carrent1 user-139=mediasol user-140=kardiome user-141=matratze user-142=euronic2 user-143=nationa2 user-144=onlinesh user-145=mapaspla user-146=solemor1 user-147=tcieuroc user-148=fffhpcwr user-149=starluxm user-150=radekrat user-151=fiziosmk user-152=ambitiou user-153=versusmk user-154=vacuacti user-155=innofabl user-156=premiumi
Sep  9 03:42:08 power sudo[993087]: wp-toolkit : (command continued) user-157=prizmapl user-158=darkogor user-159=dslmk user-160=fnjorgmk user-161=bozinovm user-162=tehnologija user-163=taneccom user-164=modernar user-165=inkigaic user-166=zdmgpsor user-167=aquatech user-168=gorsajmk user-169=supremel user-170=v5srybi9dcdx user-171=aptekafa user-172=madzomk user-173=evacommk user-174=gradbai1 user-175=dimpalne user-176=eaptekam user-177=fxxcom user-178=peshkai1 user-179=tehnodro user-180=makdrone user-181=jpkomuna user-182=izzomk user-183=cupidpro user-184=vegemk1 user-185=euronic3 user-186=conserva user-187=evberasm user-188=bonitavi user-189=folklore user-190=bauerin2 user-191=eurofarm user-192=solarinv user-193=golakkom user-194=electrol user-195=naksorgm user-196=eliksirz user-197=trigemat user-198=ismassag user-199=workbenc user-200=mbmehani user-201=viplastc user-202=wineberr user-203=pelagini user-204=bbbustou user-205=kaoilmk user-206=biplmk user-207=sssoluti
Sep  9 03:42:08 power sudo[993087]: wp-toolkit : (command continued) user-208=atspedco user-209=cleanerm user-210=animatem user-211=progress user-212=taktcomm user-213=recorgmk user-214=solointe user-215=jaramk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 03:42:08 power sudo[993087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:08 power sudo[993087]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:09 power sudo[993104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 03:42:09 power sudo[993104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:09 power sudo[993104]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:09 power sudo[993108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9tHMA0gsI4GyBHQY.~
Sep  9 03:42:09 power sudo[993108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:09 power sudo[993108]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:09 power sudo[993112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9tHMA0gsI4GyBHQY.~\''
Sep  9 03:42:09 power sudo[993112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:09 power sudo[993112]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:09 power sudo[993117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9tHMA0gsI4GyBHQY.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 03:42:09 power sudo[993117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:09 power sudo[993117]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:09 power sudo[993121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 03:42:09 power sudo[993121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:09 power sudo[993121]: pam_unix(sudo:session): session closed for user root
Sep  9 03:42:09 power sudo[993313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 03:42:09 power sudo[993313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 03:42:09 power sudo[993313]: pam_unix(sudo:session): session closed for user root
Sep  9 03:45:01 power systemd[997020]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:47:39 power sshd[999678]: Connection closed by 206.168.34.217 port 44444 [preauth]
Sep  9 03:50:02 power systemd[1002906]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 03:55:01 power systemd[1008359]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:00:02 power systemd[1015182]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:00:02 power systemd[1015203]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 04:00:02 power systemd[1015193]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 04:00:02 power systemd[1015204]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 04:05:01 power systemd[1021071]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:06:01 power systemd[1022257]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 04:07:01 power systemd[1023360]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 04:10:01 power systemd[1027247]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:12:01 power systemd[1029361]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 04:15:01 power systemd[1032760]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:20:01 power systemd[1038745]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:25:01 power systemd[1044132]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:30:01 power systemd[1048625]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:30:01 power systemd[1048626]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 04:30:01 power systemd[1048627]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 04:30:01 power systemd[1048628]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 04:30:01 power systemd[1048631]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  9 04:35:02 power systemd[1054453]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:36:01 power systemd[1055563]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 04:37:01 power systemd[1056453]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 04:40:01 power systemd[1059522]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:42:01 power systemd[1061528]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 04:42:03 power sudo[1061588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 04:42:03 power sudo[1061588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:03 power sudo[1061588]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:03 power sudo[1061592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 04:42:03 power sudo[1061592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:03 power sudo[1061592]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:03 power sudo[1061596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 04:42:03 power sudo[1061596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:03 power sudo[1061596]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:03 power sudo[1061600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=cqZymI4rsX'
Sep  9 04:42:03 power sudo[1061600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:03 power sudo[1061600]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:03 power sudo[1061605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 04:42:03 power sudo[1061605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:03 power sudo[1061605]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:03 power sudo[1061609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 04:42:03 power sudo[1061609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:03 power sudo[1061609]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:03 power sudo[1061613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 04:42:03 power sudo[1061613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:03 power sudo[1061613]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:03 power sudo[1061618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 04:42:03 power sudo[1061618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:03 power sudo[1061618]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:03 power sudo[1061626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 04:42:03 power sudo[1061626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:03 power sudo[1061626]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:03 power sudo[1061630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 04:42:04 power sudo[1061630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:04 power sudo[1061630]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:04 power sudo[1061634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 04:42:04 power sudo[1061634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:04 power sudo[1061634]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:04 power sudo[1061638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 04:42:04 power sudo[1061638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:04 power sudo[1061638]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:04 power sudo[1061643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 04:42:04 power sudo[1061643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:04 power sudo[1061643]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:04 power sudo[1061647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 04:42:04 power sudo[1061647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:04 power sudo[1061647]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:06 power sudo[1061685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 04:42:06 power sudo[1061685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:06 power sudo[1061685]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:06 power sudo[1061691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 04:42:06 power sudo[1061691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:06 power sudo[1061691]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:06 power sudo[1061698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=wondersp user-2=robustco user-3=stravelm user-4=pecakome user-5=rastiraz user-6=holiyayt user-7=tradeyou user-8=gjorgeiv user-9=dnevnoin user-10=mstmmk user-11=goodnews user-12=gocruise user-13=tealmk user-14=proverim user-15=dadarmk user-16=nlpmkorg user-17=centarba user-18=kolened1 user-19=nolimits user-20=seloviro user-21=sprintst user-22=herbalpl user-23=enochmk user-24=dikimk12 user-25=berbermk user-26=edomcomm user-27=nefrolog user-28=levantmk user-29=ekostoc1 user-30=oncolog1 user-31=frizered user-32=hidrommk user-33=caramk user-34=evolvepl user-35=socioloz user-36=avtogumi user-37=pelagoni user-38=vmro user-39=viewinn user-40=trudovop user-41=enaspotc user-42=stojnevi user-43=uhostmk5 user-44=bauerbg user-45=raremk user-46=oouslave user-47=youthgua user-48=anitermc user-49=hotammk user-50=cajsproc
Sep  9 04:42:06 power sudo[1061698]: wp-toolkit : (command continued) user-51=groskome user-52=ivanjord user-53=sedcmk user-54=vfxnestc user-55=polyeste user-56=bizporta user-57=datelcom user-58=maleshne user-59=detskagr user-60=spdcompu user-61=infobadi user-62=mspmk user-63=urbanexp user-64=wikicamp user-65=bianasho user-66=makoasmk user-67=skyapart user-68=rasmorgm user-69=workandt user-70=getaldus user-71=delcevca user-72=simbiome user-73=barececo user-74=mfashion user-75=goartsym user-76=volkanco user-77=dhamachi user-78=agrosind user-79=mpbmk user-80=datalink user-81=velmk user-82=gogovan1 user-83=univerz1 user-84=kujnamon user-85=premiuma user-86=kouzonco user-87=dalmacom user-88=cetplatf user-89=arturaco user-90=screenme user-91=ideaplus user-92=karpospo user-93=nasaidni user-94=premiums user-95=butelmk user-96=daris user-97=drleomk user-98=jpparkin user-99=inotekso user-100=itradeco user-101=janiboja user-102=cabinetm user-103=vezilkac user-104=stojano1 user-105=bovincom
Sep  9 04:42:06 power sudo[1061698]: wp-toolkit : (command continued) user-106=sparkupm user-107=stokovna user-108=klimimk user-109=zampmk user-110=busymard user-111=zvskopje user-112=palenzok user-113=custome1 user-114=chemhemc user-115=samasped user-116=nutrivim user-117=cosmatob user-118=euromaki user-119=elektrot user-120=zapovim1 user-121=infopor1 user-122=vtranseu user-123=pravekom user-124=imdskopj user-125=glammace user-126=albuname user-127=forzares user-128=aptekazd user-129=nikimare user-130=nikolov1 user-131=hausmark user-132=intelek1 user-133=mediatag user-134=lblawcom user-135=nucktra1 user-136=euronic2 user-137=matratze user-138=apgrupmk user-139=mediasol user-140=bogdanos user-141=carrent1 user-142=kardiome user-143=tcieuroc user-144=nationa2 user-145=onlinesh user-146=mapaspla user-147=solemor1 user-148=fiziosmk user-149=ambitiou user-150=versusmk user-151=fffhpcwr user-152=radekrat user-153=starluxm user-154=modernar user-155=inkigaic user-156=premiumi
Sep  9 04:42:06 power sudo[1061698]: wp-toolkit : (command continued) user-157=innofabl user-158=vacuacti user-159=bozinovm user-160=fnjorgmk user-161=prizmapl user-162=dslmk user-163=darkogor user-164=tehnologija user-165=taneccom user-166=gorsajmk user-167=aquatech user-168=supremel user-169=v5srybi9dcdx user-170=zdmgpsor user-171=dimpalne user-172=eaptekam user-173=peshkai1 user-174=fxxcom user-175=evacommk user-176=madzomk user-177=aptekafa user-178=gradbai1 user-179=jpkomuna user-180=izzomk user-181=tehnodro user-182=makdrone user-183=bonitavi user-184=evberasm user-185=vegemk1 user-186=cupidpro user-187=euronic3 user-188=conserva user-189=folklore user-190=bauerin2 user-191=golakkom user-192=electrol user-193=trigemat user-194=eliksirz user-195=naksorgm user-196=eurofarm user-197=solarinv user-198=viplastc user-199=wineberr user-200=ismassag user-201=workbenc user-202=mbmehani user-203=bbbustou user-204=biplmk user-205=kaoilmk user-206=pelagini user-207=recorgmk
Sep  9 04:42:06 power sudo[1061698]: wp-toolkit : (command continued) user-208=taktcomm user-209=solointe user-210=jaramk user-211=sssoluti user-212=atspedco user-213=animatem user-214=cleanerm user-215=progress feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 04:42:06 power sudo[1061698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:06 power sudo[1061698]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:06 power sudo[1061720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 04:42:06 power sudo[1061720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:06 power sudo[1061720]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:06 power sudo[1061725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sj7PkFvippEsvoCu.~
Sep  9 04:42:06 power sudo[1061725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:06 power sudo[1061725]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:06 power sudo[1061729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sj7PkFvippEsvoCu.~\''
Sep  9 04:42:06 power sudo[1061729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:06 power sudo[1061729]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:06 power sudo[1061734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sj7PkFvippEsvoCu.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 04:42:06 power sudo[1061734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:06 power sudo[1061734]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:06 power sudo[1061738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 04:42:06 power sudo[1061738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:06 power sudo[1061738]: pam_unix(sudo:session): session closed for user root
Sep  9 04:42:07 power sudo[1062657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 04:42:07 power sudo[1062657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:42:07 power sudo[1062657]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:03 power sudo[1064435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 04:44:03 power sudo[1064435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:03 power sudo[1064435]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:03 power sudo[1064441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 04:44:03 power sudo[1064441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:03 power sudo[1064441]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:03 power sudo[1064448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 04:44:03 power sudo[1064448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:04 power sudo[1064448]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:04 power sudo[1064455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=inkigaic user-2=modernar user-3=taneccom user-4=tehnologija user-5=bozinovm user-6=fnjorgmk user-7=prizmapl user-8=dslmk user-9=darkogor user-10=premiumi user-11=innofabl user-12=vacuacti user-13=v5srybi9dcdx user-14=supremel user-15=gorsajmk user-16=aquatech user-17=zdmgpsor user-18=tcieuroc user-19=solemor1 user-20=mapaspla user-21=onlinesh user-22=nationa2 user-23=versusmk user-24=ambitiou user-25=fiziosmk user-26=radekrat user-27=starluxm user-28=fffhpcwr user-29=nikolov1 user-30=hausmark user-31=aptekazd user-32=nikimare user-33=forzares user-34=nucktra1 user-35=lblawcom user-36=intelek1 user-37=mediatag user-38=euronic2 user-39=matratze user-40=kardiome user-41=mediasol user-42=carrent1 user-43=bogdanos user-44=apgrupmk user-45=nutrivim user-46=chemhemc user-47=samasped user-48=zapovim1
Sep  9 04:44:04 power sudo[1064455]: wp-toolkit : (command continued) user-49=elektrot user-50=cosmatob user-51=euromaki user-52=vtranseu user-53=pravekom user-54=infopor1 user-55=glammace user-56=albuname user-57=imdskopj user-58=kaoilmk user-59=biplmk user-60=bbbustou user-61=pelagini user-62=jaramk user-63=solointe user-64=recorgmk user-65=taktcomm user-66=progress user-67=animatem user-68=cleanerm user-69=atspedco user-70=sssoluti user-71=trigemat user-72=eliksirz user-73=naksorgm user-74=electrol user-75=golakkom user-76=solarinv user-77=eurofarm user-78=wineberr user-79=viplastc user-80=mbmehani user-81=workbenc user-82=ismassag user-83=bonitavi user-84=evberasm user-85=conserva user-86=euronic3 user-87=vegemk1 user-88=cupidpro user-89=bauerin2 user-90=folklore user-91=peshkai1 user-92=fxxcom user-93=eaptekam user-94=dimpalne user-95=gradbai1 user-96=evacommk user-97=madzomk user-98=aptekafa user-99=izzomk user-100=jpkomuna user-101=makdrone user-102=tehnodro
Sep  9 04:44:04 power sudo[1064455]: wp-toolkit : (command continued) user-103=enaspotc user-104=vmro user-105=viewinn user-106=trudovop user-107=raremk user-108=oouslave user-109=uhostmk5 user-110=bauerbg user-111=stojnevi user-112=youthgua user-113=anitermc user-114=cajsproc user-115=hotammk user-116=nefrolog user-117=oncolog1 user-118=levantmk user-119=ekostoc1 user-120=caramk user-121=frizered user-122=hidrommk user-123=evolvepl user-124=pelagoni user-125=socioloz user-126=avtogumi user-127=nolimits user-128=centarba user-129=nlpmkorg user-130=kolened1 user-131=seloviro user-132=dikimk12 user-133=sprintst user-134=herbalpl user-135=enochmk user-136=edomcomm user-137=berbermk user-138=holiyayt user-139=rastiraz user-140=pecakome user-141=wondersp user-142=robustco user-143=stravelm user-144=dnevnoin user-145=tradeyou user-146=gjorgeiv user-147=gocruise user-148=goodnews user-149=mstmmk user-150=dadarmk user-151=proverim user-152=tealmk user-153=vezilkac user-154=cabinetm
Sep  9 04:44:04 power sudo[1064455]: wp-toolkit : (command continued) user-155=janiboja user-156=itradeco user-157=bovincom user-158=stojano1 user-159=klimimk user-160=sparkupm user-161=stokovna user-162=custome1 user-163=palenzok user-164=zvskopje user-165=zampmk user-166=busymard user-167=cetplatf user-168=dalmacom user-169=kouzonco user-170=premiuma user-171=premiums user-172=daris user-173=butelmk user-174=ideaplus user-175=nasaidni user-176=karpospo user-177=screenme user-178=arturaco user-179=jpparkin user-180=inotekso user-181=drleomk user-182=rasmorgm user-183=bianasho user-184=makoasmk user-185=skyapart user-186=volkanco user-187=goartsym user-188=dhamachi user-189=mfashion user-190=getaldus user-191=delcevca user-192=simbiome user-193=barececo user-194=workandt user-195=agrosind user-196=mpbmk user-197=velmk user-198=gogovan1 user-199=kujnamon user-200=univerz1 user-201=datalink user-202=vfxnestc user-203=polyeste user-204=sedcmk user-205=ivanjord user-206=groskome
Sep  9 04:44:04 power sudo[1064455]: wp-toolkit : (command continued) user-207=datelcom user-208=maleshne user-209=bizporta user-210=infobadi user-211=mspmk user-212=spdcompu user-213=detskagr user-214=wikicamp user-215=urbanexp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 04:44:04 power sudo[1064455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:04 power sudo[1064455]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:04 power sudo[1064473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep  9 04:44:04 power sudo[1064473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:04 power sudo[1064473]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:04 power sudo[1064480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vmro --output=json'
Sep  9 04:44:04 power sudo[1064480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:04 power sudo[1064480]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:07 power sudo[1064545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro /bin/sh -c 'cd /home/vmro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:44:07 power sudo[1064545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:07 power sudo[1064545]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:07 power sudo[1064551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vmro --user-current --json'
Sep  9 04:44:07 power sudo[1064551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:07 power sudo[1064551]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:07 power sudo[1064561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro LangPHP php_get_vhost_versions --output=json'
Sep  9 04:44:07 power sudo[1064561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:07 power sudo[1064561]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:07 power sudo[1064567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php83 --output=json'
Sep  9 04:44:07 power sudo[1064567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:08 power sudo[1064567]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:08 power sudo[1064582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:44:08 power sudo[1064582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:08 power sudo[1064582]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:08 power sudo[1064600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DomainInfo single_domain_data domain=vmro-dpmne.org.mk return_https_redirect_status=1 --output=json'
Sep  9 04:44:08 power sudo[1064600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:08 power sudo[1064600]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:08 power sudo[1064607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_vhost_ssl_components --output=json'
Sep  9 04:44:08 power sudo[1064607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:09 power sudo[1064607]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:09 power sudo[1064623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_ssl_vhosts --output=json'
Sep  9 04:44:09 power sudo[1064623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:09 power sudo[1064623]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:09 power sudo[1064631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro Mime list_redirects --output=json'
Sep  9 04:44:09 power sudo[1064631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:09 power sudo[1064631]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:11 power sudo[1064721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DirectoryPrivacy is_directory_protected dir=/home/vmro/public_html --output=json'
Sep  9 04:44:11 power sudo[1064721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:11 power sudo[1064721]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:14 power sudo[1064931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep  9 04:44:14 power sudo[1064931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:15 power sudo[1064931]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:15 power sudo[1064936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dadarmk --output=json'
Sep  9 04:44:15 power sudo[1064936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:15 power sudo[1064936]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:19 power sudo[1065047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/academy.dadar.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:44:19 power sudo[1065047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:19 power sudo[1065047]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:19 power sudo[1065053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep  9 04:44:19 power sudo[1065053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:19 power sudo[1065053]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:19 power sudo[1065063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk LangPHP php_get_vhost_versions --output=json'
Sep  9 04:44:19 power sudo[1065063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:19 power sudo[1065063]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:20 power sudo[1065070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:44:20 power sudo[1065070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:20 power sudo[1065070]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:20 power sudo[1065089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=academy.dadar.mk return_https_redirect_status=1 --output=json'
Sep  9 04:44:20 power sudo[1065089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:20 power sudo[1065089]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:20 power sudo[1065098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk Mime list_redirects --output=json'
Sep  9 04:44:20 power sudo[1065098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:20 power sudo[1065098]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:23 power sudo[1065188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/academy.dadar.mk --output=json'
Sep  9 04:44:23 power sudo[1065188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:23 power sudo[1065188]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:26 power sudo[1065399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep  9 04:44:26 power sudo[1065399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:27 power sudo[1065399]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:27 power sudo[1065411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=agrosind --output=json'
Sep  9 04:44:27 power sudo[1065411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:27 power sudo[1065411]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:33 power sudo[1065577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:44:33 power sudo[1065577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:33 power sudo[1065577]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:33 power sudo[1065583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user agrosind --user-current --json'
Sep  9 04:44:33 power sudo[1065583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:34 power sudo[1065583]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:34 power sudo[1065598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind LangPHP php_get_vhost_versions --output=json'
Sep  9 04:44:34 power sudo[1065598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:34 power sudo[1065598]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:34 power sudo[1065612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php81 --output=json'
Sep  9 04:44:34 power sudo[1065612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:34 power sudo[1065612]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:35 power sudo[1065695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:44:35 power sudo[1065695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:35 power sudo[1065695]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:35 power sudo[1065725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DomainInfo single_domain_data domain=agrosindikat.mk return_https_redirect_status=1 --output=json'
Sep  9 04:44:35 power sudo[1065725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:35 power sudo[1065725]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:35 power sudo[1065734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind Mime list_redirects --output=json'
Sep  9 04:44:35 power sudo[1065734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:35 power sudo[1065734]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:39 power sudo[1065918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DirectoryPrivacy is_directory_protected dir=/home/agrosind/public_html --output=json'
Sep  9 04:44:39 power sudo[1065918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:39 power sudo[1065918]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:40 power sudo[1065995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:44:40 power sudo[1065995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:40 power sudo[1065995]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:40 power sudo[1066000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 04:44:40 power sudo[1066000]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 04:44:40 power sudo[1066000]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 04:44:40 power sudo[1066000]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 04:44:40 power sudo[1066000]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:44:40 power sudo[1066000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:40 power sudo[1066000]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:40 power sudo[1066005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:44:40 power sudo[1066005]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:44:40 power sudo[1066005]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:44:40 power sudo[1066005]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:44:40 power sudo[1066005]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:44:40 power sudo[1066005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:40 power sudo[1066005]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:42 power sudo[1066122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:44:42 power sudo[1066122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:42 power sudo[1066122]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:42 power sudo[1066127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 04:44:42 power sudo[1066127]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 04:44:42 power sudo[1066127]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 04:44:42 power sudo[1066127]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 04:44:42 power sudo[1066127]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:44:42 power sudo[1066127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:42 power sudo[1066127]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:42 power sudo[1066132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:44:42 power sudo[1066132]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:44:42 power sudo[1066132]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:44:42 power sudo[1066132]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:44:42 power sudo[1066132]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:44:42 power sudo[1066132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:42 power sudo[1066132]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:43 power sudo[1066178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep  9 04:44:43 power sudo[1066178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:43 power sudo[1066178]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:43 power sudo[1066183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=fffhpcwr --output=json'
Sep  9 04:44:43 power sudo[1066183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:43 power sudo[1066183]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:48 power sudo[1066334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/al.rsbsp.org.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:44:48 power sudo[1066334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:48 power sudo[1066334]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:48 power sudo[1066341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep  9 04:44:48 power sudo[1066341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:49 power sudo[1066341]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:49 power sudo[1066351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr LangPHP php_get_vhost_versions --output=json'
Sep  9 04:44:49 power sudo[1066351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:49 power sudo[1066351]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:49 power sudo[1066356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:44:49 power sudo[1066356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:49 power sudo[1066356]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:49 power sudo[1066379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=al.rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep  9 04:44:49 power sudo[1066379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:49 power sudo[1066379]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:49 power sudo[1066386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr Mime list_redirects --output=json'
Sep  9 04:44:49 power sudo[1066386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:49 power sudo[1066386]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:52 power sudo[1066483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/al.rsbsp.org.mk --output=json'
Sep  9 04:44:52 power sudo[1066483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:52 power sudo[1066483]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:57 power sudo[1066734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep  9 04:44:57 power sudo[1066734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:57 power sudo[1066734]: pam_unix(sudo:session): session closed for user root
Sep  9 04:44:57 power sudo[1066744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ambitiou --output=json'
Sep  9 04:44:57 power sudo[1066744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:44:57 power sudo[1066744]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:01 power systemd[1066943]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:45:01 power sudo[1066979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/public_html/site && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:45:01 power sudo[1066979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:02 power sudo[1066979]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:02 power sudo[1066988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep  9 04:45:02 power sudo[1066988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:02 power sudo[1066988]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:02 power sudo[1066996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou LangPHP php_get_vhost_versions --output=json'
Sep  9 04:45:02 power sudo[1066996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:02 power sudo[1066996]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:02 power sudo[1067001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep  9 04:45:02 power sudo[1067001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:03 power sudo[1067001]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:03 power sudo[1067011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:45:03 power sudo[1067011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:03 power sudo[1067011]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:03 power sudo[1067053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep  9 04:45:03 power sudo[1067053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:03 power sudo[1067053]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:03 power sudo[1067066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou Mime list_redirects --output=json'
Sep  9 04:45:03 power sudo[1067066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:03 power sudo[1067066]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:07 power sudo[1067182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/public_html/site --output=json'
Sep  9 04:45:07 power sudo[1067182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:07 power sudo[1067182]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:10 power sudo[1067411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep  9 04:45:10 power sudo[1067411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:11 power sudo[1067411]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:11 power sudo[1067426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=animatem --output=json'
Sep  9 04:45:11 power sudo[1067426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:11 power sudo[1067426]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:20 power sudo[1067633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem /bin/sh -c 'cd /home/animatem/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:45:20 power sudo[1067633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:20 power sudo[1067633]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:20 power sudo[1067639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user animatem --user-current --json'
Sep  9 04:45:20 power sudo[1067639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:20 power sudo[1067639]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:20 power sudo[1067653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem LangPHP php_get_vhost_versions --output=json'
Sep  9 04:45:20 power sudo[1067653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:20 power sudo[1067653]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:20 power sudo[1067665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php73 --output=json'
Sep  9 04:45:20 power sudo[1067665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:21 power sudo[1067665]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:21 power sudo[1067676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:45:21 power sudo[1067676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:21 power sudo[1067676]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:21 power sudo[1067695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DomainInfo single_domain_data domain=animate.mk return_https_redirect_status=1 --output=json'
Sep  9 04:45:21 power sudo[1067695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:21 power sudo[1067695]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:21 power sudo[1067704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem Mime list_redirects --output=json'
Sep  9 04:45:21 power sudo[1067704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:21 power sudo[1067704]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:28 power sudo[1067839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DirectoryPrivacy is_directory_protected dir=/home/animatem/public_html --output=json'
Sep  9 04:45:28 power sudo[1067839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:28 power sudo[1067839]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:31 power sudo[1068092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep  9 04:45:31 power sudo[1068092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:31 power sudo[1068092]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:31 power sudo[1068104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=anitermc --output=json'
Sep  9 04:45:31 power sudo[1068104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:31 power sudo[1068104]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:42 power sudo[1068354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc /bin/sh -c 'cd /home/anitermc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:45:42 power sudo[1068354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:42 power sudo[1068354]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:42 power sudo[1068360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user anitermc --user-current --json'
Sep  9 04:45:42 power sudo[1068360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:42 power sudo[1068360]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:42 power sudo[1068370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc LangPHP php_get_vhost_versions --output=json'
Sep  9 04:45:42 power sudo[1068370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:42 power sudo[1068370]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:42 power sudo[1068377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:45:43 power sudo[1068377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:43 power sudo[1068377]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:43 power sudo[1068400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DomainInfo single_domain_data domain=aniterm.com.mk return_https_redirect_status=1 --output=json'
Sep  9 04:45:43 power sudo[1068400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:43 power sudo[1068400]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:43 power sudo[1068407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc Mime list_redirects --output=json'
Sep  9 04:45:43 power sudo[1068407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:43 power sudo[1068407]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:49 power sudo[1068613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DirectoryPrivacy is_directory_protected dir=/home/anitermc/public_html --output=json'
Sep  9 04:45:49 power sudo[1068613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:49 power sudo[1068613]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:53 power sudo[1068845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep  9 04:45:53 power sudo[1068845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:54 power sudo[1068845]: pam_unix(sudo:session): session closed for user root
Sep  9 04:45:54 power sudo[1068855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wineberr --output=json'
Sep  9 04:45:54 power sudo[1068855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:45:54 power sudo[1068855]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:01 power sudo[1068988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/app.wineberry.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:46:01 power sudo[1068988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:01 power sudo[1068988]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:01 power sudo[1068994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep  9 04:46:01 power sudo[1068994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:01 power sudo[1068994]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:01 power sudo[1069003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr LangPHP php_get_vhost_versions --output=json'
Sep  9 04:46:01 power sudo[1069003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:01 power sudo[1069003]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:01 power sudo[1069008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:46:01 power sudo[1069008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:01 power sudo[1069008]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:03 power sudo[1069041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=app.wineberry.mk return_https_redirect_status=1 --output=json'
Sep  9 04:46:03 power sudo[1069041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:03 power sudo[1069041]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:03 power sudo[1069048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr Mime list_redirects --output=json'
Sep  9 04:46:03 power sudo[1069048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:03 power sudo[1069048]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:07 power sudo[1069161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/app.wineberry.mk/bck --output=json'
Sep  9 04:46:07 power sudo[1069161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:07 power sudo[1069161]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:11 power sudo[1069377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep  9 04:46:11 power sudo[1069377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:11 power sudo[1069377]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:11 power sudo[1069384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=aptekazd --output=json'
Sep  9 04:46:11 power sudo[1069384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:11 power sudo[1069384]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:16 power sudo[1069488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:46:16 power sudo[1069488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:16 power sudo[1069488]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:16 power sudo[1069494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user aptekazd --user-current --json'
Sep  9 04:46:16 power sudo[1069494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:17 power sudo[1069494]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:17 power sudo[1069505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd LangPHP php_get_vhost_versions --output=json'
Sep  9 04:46:17 power sudo[1069505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:17 power sudo[1069505]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:17 power sudo[1069512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:46:17 power sudo[1069512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:17 power sudo[1069512]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:17 power sudo[1069532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DomainInfo single_domain_data domain=aptekazdravje.mk return_https_redirect_status=1 --output=json'
Sep  9 04:46:17 power sudo[1069532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:17 power sudo[1069532]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:17 power sudo[1069539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd Mime list_redirects --output=json'
Sep  9 04:46:18 power sudo[1069539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:18 power sudo[1069539]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:21 power sudo[1069634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DirectoryPrivacy is_directory_protected dir=/home/aptekazd/public_html --output=json'
Sep  9 04:46:21 power sudo[1069634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:21 power sudo[1069634]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:22 power sudo[1069695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:46:22 power sudo[1069695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:22 power sudo[1069695]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:22 power sudo[1069700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 04:46:22 power sudo[1069700]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 04:46:22 power sudo[1069700]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 04:46:22 power sudo[1069700]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 04:46:22 power sudo[1069700]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:46:22 power sudo[1069700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:22 power sudo[1069700]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:22 power sudo[1069705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:46:22 power sudo[1069705]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:46:22 power sudo[1069705]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:46:22 power sudo[1069705]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:46:22 power sudo[1069705]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:46:22 power sudo[1069705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:22 power sudo[1069705]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:24 power sudo[1069825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:46:24 power sudo[1069825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:24 power sudo[1069825]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:24 power sudo[1069830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 04:46:24 power sudo[1069830]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 04:46:24 power sudo[1069830]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 04:46:24 power sudo[1069830]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 04:46:24 power sudo[1069830]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:46:24 power sudo[1069830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:24 power sudo[1069830]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:24 power sudo[1069835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:46:24 power sudo[1069835]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:46:24 power sudo[1069835]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:46:24 power sudo[1069835]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:46:24 power sudo[1069835]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:46:24 power sudo[1069835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:24 power sudo[1069835]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:25 power sudo[1069883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep  9 04:46:25 power sudo[1069883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:25 power sudo[1069883]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:25 power sudo[1069888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=progress --output=json'
Sep  9 04:46:25 power sudo[1069888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:25 power sudo[1069888]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:30 power sudo[1070002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress /bin/sh -c 'cd /home/progress/artivo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:46:30 power sudo[1070002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:30 power sudo[1070002]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:30 power sudo[1070009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user progress --user-current --json'
Sep  9 04:46:30 power sudo[1070009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:30 power sudo[1070009]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:30 power sudo[1070016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress LangPHP php_get_vhost_versions --output=json'
Sep  9 04:46:30 power sudo[1070016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:30 power sudo[1070016]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:30 power sudo[1070022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:46:30 power sudo[1070022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:30 power sudo[1070022]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:31 power sudo[1070043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DomainInfo single_domain_data domain=artivo.mk return_https_redirect_status=1 --output=json'
Sep  9 04:46:31 power sudo[1070043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:31 power sudo[1070043]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:31 power sudo[1070049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress Mime list_redirects --output=json'
Sep  9 04:46:31 power sudo[1070049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:31 power sudo[1070049]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:34 power sudo[1070282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DirectoryPrivacy is_directory_protected dir=/home/progress/artivo.mk --output=json'
Sep  9 04:46:34 power sudo[1070282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:34 power sudo[1070282]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:38 power sudo[1070512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep  9 04:46:38 power sudo[1070512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:38 power sudo[1070512]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:38 power sudo[1070518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bbbustou --output=json'
Sep  9 04:46:38 power sudo[1070518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:38 power sudo[1070518]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:45 power sudo[1070684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:46:45 power sudo[1070684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:45 power sudo[1070684]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:45 power sudo[1070694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep  9 04:46:45 power sudo[1070694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:45 power sudo[1070694]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:45 power sudo[1070705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou LangPHP php_get_vhost_versions --output=json'
Sep  9 04:46:45 power sudo[1070705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:45 power sudo[1070705]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:45 power sudo[1070712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php84 --output=json'
Sep  9 04:46:45 power sudo[1070712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:46 power sudo[1070712]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:46 power sudo[1070725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:46:46 power sudo[1070725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:46 power sudo[1070725]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:46 power sudo[1070741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=bbbustours.mk return_https_redirect_status=1 --output=json'
Sep  9 04:46:46 power sudo[1070741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:46 power sudo[1070741]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:46 power sudo[1070747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou Mime list_redirects --output=json'
Sep  9 04:46:46 power sudo[1070747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:46 power sudo[1070747]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:50 power sudo[1070894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/public_html --output=json'
Sep  9 04:46:50 power sudo[1070894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:50 power sudo[1070894]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:54 power sudo[1071145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep  9 04:46:54 power sudo[1071145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:54 power sudo[1071145]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:54 power sudo[1071152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nationa2 --output=json'
Sep  9 04:46:54 power sudo[1071152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:54 power sudo[1071152]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:58 power sudo[1071256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 /bin/sh -c 'cd /home/nationa2/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:46:58 power sudo[1071256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:58 power sudo[1071256]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:58 power sudo[1071262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nationa2 --user-current --json'
Sep  9 04:46:58 power sudo[1071262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:58 power sudo[1071262]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:58 power sudo[1071268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 LangPHP php_get_vhost_versions --output=json'
Sep  9 04:46:58 power sudo[1071268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:58 power sudo[1071268]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:58 power sudo[1071273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php74 --output=json'
Sep  9 04:46:58 power sudo[1071273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:59 power sudo[1071273]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:59 power sudo[1071290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:46:59 power sudo[1071290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:59 power sudo[1071290]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:59 power sudo[1071311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DomainInfo single_domain_data domain=beactiveday.mk return_https_redirect_status=1 --output=json'
Sep  9 04:46:59 power sudo[1071311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:46:59 power sudo[1071311]: pam_unix(sudo:session): session closed for user root
Sep  9 04:46:59 power sudo[1071317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 Mime list_redirects --output=json'
Sep  9 04:46:59 power sudo[1071317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:47:00 power sudo[1071317]: pam_unix(sudo:session): session closed for user root
Sep  9 04:47:02 power sudo[1071417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DirectoryPrivacy is_directory_protected dir=/home/nationa2/public_html --output=json'
Sep  9 04:47:02 power sudo[1071417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:47:02 power sudo[1071417]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:15 power sudo[1073034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep  9 04:48:15 power sudo[1073034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:15 power sudo[1073034]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:15 power sudo[1073040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cetplatf --output=json'
Sep  9 04:48:15 power sudo[1073040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:15 power sudo[1073040]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:20 power sudo[1073135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/beep.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:48:20 power sudo[1073135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:20 power sudo[1073135]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:20 power sudo[1073142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  9 04:48:20 power sudo[1073142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:20 power sudo[1073142]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:20 power sudo[1073150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf LangPHP php_get_vhost_versions --output=json'
Sep  9 04:48:20 power sudo[1073150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:20 power sudo[1073150]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:20 power sudo[1073155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:48:20 power sudo[1073155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:20 power sudo[1073155]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:20 power sudo[1073169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=beep.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 04:48:20 power sudo[1073169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:21 power sudo[1073169]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:21 power sudo[1073175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf Mime list_redirects --output=json'
Sep  9 04:48:21 power sudo[1073175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:21 power sudo[1073175]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:24 power sudo[1073266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/beep.cetplatform.mk --output=json'
Sep  9 04:48:24 power sudo[1073266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:24 power sudo[1073266]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:28 power sudo[1073476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep  9 04:48:28 power sudo[1073476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:28 power sudo[1073476]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:28 power sudo[1073486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bianasho --output=json'
Sep  9 04:48:28 power sudo[1073486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:28 power sudo[1073486]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:35 power sudo[1073617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho /bin/sh -c 'cd /home/bianasho/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:48:35 power sudo[1073617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:35 power sudo[1073617]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:35 power sudo[1073624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bianasho --user-current --json'
Sep  9 04:48:35 power sudo[1073624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:36 power sudo[1073624]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:36 power sudo[1073641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho LangPHP php_get_vhost_versions --output=json'
Sep  9 04:48:36 power sudo[1073641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:36 power sudo[1073641]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:36 power sudo[1073650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:48:36 power sudo[1073650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:36 power sudo[1073650]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:37 power sudo[1073706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DomainInfo single_domain_data domain=bianashoes.mk return_https_redirect_status=1 --output=json'
Sep  9 04:48:37 power sudo[1073706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:37 power sudo[1073706]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:37 power sudo[1073714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho Mime list_redirects --output=json'
Sep  9 04:48:37 power sudo[1073714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:37 power sudo[1073714]: pam_unix(sudo:session): session closed for user root
Sep  9 04:48:43 power sudo[1073840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DirectoryPrivacy is_directory_protected dir=/home/bianasho/public_html --output=json'
Sep  9 04:48:43 power sudo[1073840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:48:43 power sudo[1073840]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:13 power sudo[1074596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep  9 04:49:13 power sudo[1074596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:13 power sudo[1074596]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:13 power sudo[1074601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=velmk --output=json'
Sep  9 04:49:13 power sudo[1074601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:13 power sudo[1074601]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:19 power sudo[1074737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk /bin/sh -c 'cd /home/velmk/blog.vel.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:49:19 power sudo[1074737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:19 power sudo[1074737]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:19 power sudo[1074743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user velmk --user-current --json'
Sep  9 04:49:19 power sudo[1074743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:19 power sudo[1074743]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:19 power sudo[1074758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk LangPHP php_get_vhost_versions --output=json'
Sep  9 04:49:20 power sudo[1074758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:20 power sudo[1074758]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:20 power sudo[1074765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:49:20 power sudo[1074765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:20 power sudo[1074765]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:21 power sudo[1074794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DomainInfo single_domain_data domain=blog.vel.mk return_https_redirect_status=1 --output=json'
Sep  9 04:49:21 power sudo[1074794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:21 power sudo[1074794]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:21 power sudo[1074801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk Mime list_redirects --output=json'
Sep  9 04:49:21 power sudo[1074801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:21 power sudo[1074801]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:24 power sudo[1074912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DirectoryPrivacy is_directory_protected dir=/home/velmk/blog.vel.mk --output=json'
Sep  9 04:49:24 power sudo[1074912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:24 power sudo[1074912]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:28 power sudo[1075128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep  9 04:49:28 power sudo[1075128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:28 power sudo[1075128]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:29 power sudo[1075135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enaspotc --output=json'
Sep  9 04:49:29 power sudo[1075135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:29 power sudo[1075135]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:31 power sudo[1075226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/boiling.pt && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:49:31 power sudo[1075226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:31 power sudo[1075226]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:31 power sudo[1075233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep  9 04:49:31 power sudo[1075233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:32 power sudo[1075233]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:32 power sudo[1075244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc LangPHP php_get_vhost_versions --output=json'
Sep  9 04:49:32 power sudo[1075244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:32 power sudo[1075244]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:32 power sudo[1075253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:49:32 power sudo[1075253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:32 power sudo[1075253]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:32 power sudo[1075278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=boiling.pt return_https_redirect_status=1 --output=json'
Sep  9 04:49:32 power sudo[1075278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:32 power sudo[1075278]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:32 power sudo[1075284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc Mime list_redirects --output=json'
Sep  9 04:49:32 power sudo[1075284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:33 power sudo[1075284]: pam_unix(sudo:session): session closed for user root
Sep  9 04:49:35 power sudo[1075366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/boiling.pt --output=json'
Sep  9 04:49:35 power sudo[1075366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:49:35 power sudo[1075366]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:01 power systemd[1076157]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:50:18 power sudo[1076631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep  9 04:50:18 power sudo[1076631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:18 power sudo[1076631]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:18 power sudo[1076637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bonitavi --output=json'
Sep  9 04:50:18 power sudo[1076637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:18 power sudo[1076637]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:22 power sudo[1076753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi /bin/sh -c 'cd /home/bonitavi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:50:22 power sudo[1076753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:22 power sudo[1076753]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:22 power sudo[1076759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bonitavi --user-current --json'
Sep  9 04:50:22 power sudo[1076759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:22 power sudo[1076759]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:22 power sudo[1076769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi LangPHP php_get_vhost_versions --output=json'
Sep  9 04:50:22 power sudo[1076769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:23 power sudo[1076769]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:23 power sudo[1076774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:50:23 power sudo[1076774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:23 power sudo[1076774]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:23 power sudo[1076788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DomainInfo single_domain_data domain=bonita-vita.com return_https_redirect_status=1 --output=json'
Sep  9 04:50:23 power sudo[1076788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:23 power sudo[1076788]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:23 power sudo[1076796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi Mime list_redirects --output=json'
Sep  9 04:50:23 power sudo[1076796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:23 power sudo[1076796]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:26 power sudo[1076917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DirectoryPrivacy is_directory_protected dir=/home/bonitavi/public_html --output=json'
Sep  9 04:50:26 power sudo[1076917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:26 power sudo[1076917]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:29 power sudo[1077130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep  9 04:50:29 power sudo[1077130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:29 power sudo[1077130]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:29 power sudo[1077141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bovincom --output=json'
Sep  9 04:50:29 power sudo[1077141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:29 power sudo[1077141]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:37 power sudo[1077323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom /bin/sh -c 'cd /home/bovincom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:50:37 power sudo[1077323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:37 power sudo[1077323]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:37 power sudo[1077330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bovincom --user-current --json'
Sep  9 04:50:37 power sudo[1077330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:37 power sudo[1077330]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:37 power sudo[1077346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom LangPHP php_get_vhost_versions --output=json'
Sep  9 04:50:37 power sudo[1077346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:37 power sudo[1077346]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:37 power sudo[1077353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:50:37 power sudo[1077353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:37 power sudo[1077353]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:38 power sudo[1077383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DomainInfo single_domain_data domain=bovin.com.mk return_https_redirect_status=1 --output=json'
Sep  9 04:50:38 power sudo[1077383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:38 power sudo[1077383]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:38 power sudo[1077392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom Mime list_redirects --output=json'
Sep  9 04:50:38 power sudo[1077392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:38 power sudo[1077392]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:43 power sudo[1077534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DirectoryPrivacy is_directory_protected dir=/home/bovincom/public_html --output=json'
Sep  9 04:50:43 power sudo[1077534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:43 power sudo[1077534]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:47 power sudo[1077768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep  9 04:50:47 power sudo[1077768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:47 power sudo[1077768]: pam_unix(sudo:session): session closed for user root
Sep  9 04:50:47 power sudo[1077774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=butelmk --output=json'
Sep  9 04:50:47 power sudo[1077774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:50:47 power sudo[1077774]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:01 power sudo[1078109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk /bin/sh -c 'cd /home/butelmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:51:01 power sudo[1078109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:01 power sudo[1078109]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:01 power sudo[1078119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user butelmk --user-current --json'
Sep  9 04:51:01 power sudo[1078119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:01 power sudo[1078119]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:01 power sudo[1078141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk LangPHP php_get_vhost_versions --output=json'
Sep  9 04:51:01 power sudo[1078141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:01 power sudo[1078141]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:01 power sudo[1078145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  9 04:51:01 power sudo[1078145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:01 power sudo[1078145]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:01 power sudo[1078151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=alt-php73 --output=json'
Sep  9 04:51:01 power sudo[1078151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:02 power sudo[1078151]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:02 power sudo[1078166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:51:02 power sudo[1078166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:02 power sudo[1078166]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:02 power sudo[1078191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DomainInfo single_domain_data domain=butel.mk return_https_redirect_status=1 --output=json'
Sep  9 04:51:02 power sudo[1078191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:02 power sudo[1078191]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:02 power sudo[1078199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk Mime list_redirects --output=json'
Sep  9 04:51:02 power sudo[1078199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:02 power sudo[1078199]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:09 power sudo[1078379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DirectoryPrivacy is_directory_protected dir=/home/butelmk/public_html --output=json'
Sep  9 04:51:09 power sudo[1078379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:09 power sudo[1078379]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:14 power sudo[1078687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep  9 04:51:14 power sudo[1078687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:14 power sudo[1078687]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:14 power sudo[1078693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=izzomk --output=json'
Sep  9 04:51:14 power sudo[1078693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:14 power sudo[1078693]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:21 power sudo[1078854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/caffeizzo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:51:21 power sudo[1078854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:21 power sudo[1078854]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:21 power sudo[1078860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep  9 04:51:21 power sudo[1078860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:22 power sudo[1078860]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:22 power sudo[1078868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk LangPHP php_get_vhost_versions --output=json'
Sep  9 04:51:22 power sudo[1078868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:22 power sudo[1078868]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:22 power sudo[1078874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:51:22 power sudo[1078874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:22 power sudo[1078874]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:22 power sudo[1078909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=caffeizzo.mk return_https_redirect_status=1 --output=json'
Sep  9 04:51:22 power sudo[1078909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:23 power sudo[1078909]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:23 power sudo[1078915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk Mime list_redirects --output=json'
Sep  9 04:51:23 power sudo[1078915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:23 power sudo[1078915]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:27 power sudo[1079047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/caffeizzo.mk --output=json'
Sep  9 04:51:27 power sudo[1079047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:27 power sudo[1079047]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:35 power sudo[1079367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/cateye.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:51:35 power sudo[1079367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:35 power sudo[1079367]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:35 power sudo[1079372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  9 04:51:35 power sudo[1079372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:35 power sudo[1079372]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:35 power sudo[1079383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:51:35 power sudo[1079383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:35 power sudo[1079383]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:36 power sudo[1079402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cateye.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 04:51:36 power sudo[1079402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:36 power sudo[1079402]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:39 power sudo[1079506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/cateye.cetplatform.mk --output=json'
Sep  9 04:51:39 power sudo[1079506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:39 power sudo[1079506]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:47 power sudo[1079856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:51:47 power sudo[1079856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:47 power sudo[1079856]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:47 power sudo[1079862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  9 04:51:48 power sudo[1079862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:48 power sudo[1079862]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:48 power sudo[1079871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:51:48 power sudo[1079871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:48 power sudo[1079871]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:49 power sudo[1079892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 04:51:49 power sudo[1079892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:49 power sudo[1079892]: pam_unix(sudo:session): session closed for user root
Sep  9 04:51:53 power sudo[1080067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/public_html --output=json'
Sep  9 04:51:53 power sudo[1080067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:51:53 power sudo[1080067]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:34 power sudo[1081010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep  9 04:52:34 power sudo[1081010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:34 power sudo[1081010]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:34 power sudo[1081021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=chemhemc --output=json'
Sep  9 04:52:34 power sudo[1081021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:34 power sudo[1081021]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:38 power sudo[1081155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:52:38 power sudo[1081155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:38 power sudo[1081155]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:38 power sudo[1081162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep  9 04:52:38 power sudo[1081162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:38 power sudo[1081162]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:38 power sudo[1081168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc LangPHP php_get_vhost_versions --output=json'
Sep  9 04:52:39 power sudo[1081168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:39 power sudo[1081168]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:39 power sudo[1081178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:52:39 power sudo[1081178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:39 power sudo[1081178]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:39 power sudo[1081194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=chemhem.com return_https_redirect_status=1 --output=json'
Sep  9 04:52:39 power sudo[1081194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:39 power sudo[1081194]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:39 power sudo[1081207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc Mime list_redirects --output=json'
Sep  9 04:52:39 power sudo[1081207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:39 power sudo[1081207]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:41 power sudo[1081313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/public_html --output=json'
Sep  9 04:52:41 power sudo[1081313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:41 power sudo[1081313]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:42 power sudo[1081401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:52:42 power sudo[1081401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:42 power sudo[1081401]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:42 power sudo[1081406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 04:52:42 power sudo[1081406]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 04:52:42 power sudo[1081406]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 04:52:42 power sudo[1081406]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 04:52:42 power sudo[1081406]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:52:42 power sudo[1081406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:42 power sudo[1081406]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:42 power sudo[1081411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:52:42 power sudo[1081411]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:52:42 power sudo[1081411]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:52:42 power sudo[1081411]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:52:42 power sudo[1081411]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:52:42 power sudo[1081411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:42 power sudo[1081411]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:45 power sudo[1081530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:52:45 power sudo[1081530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:45 power sudo[1081530]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:45 power sudo[1081535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 04:52:45 power sudo[1081535]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 04:52:45 power sudo[1081535]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 04:52:45 power sudo[1081535]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 04:52:45 power sudo[1081535]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:52:45 power sudo[1081535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:45 power sudo[1081535]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:45 power sudo[1081540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:52:45 power sudo[1081540]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:52:45 power sudo[1081540]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:52:45 power sudo[1081540]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:52:45 power sudo[1081540]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:52:45 power sudo[1081540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:45 power sudo[1081540]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:45 power sudo[1081585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep  9 04:52:45 power sudo[1081585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:46 power sudo[1081585]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:46 power sudo[1081591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cosmatob --output=json'
Sep  9 04:52:46 power sudo[1081591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:46 power sudo[1081591]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:52 power sudo[1081772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob /bin/sh -c 'cd /home/cosmatob/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:52:52 power sudo[1081772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:52 power sudo[1081772]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:52 power sudo[1081779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cosmatob --user-current --json'
Sep  9 04:52:52 power sudo[1081779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:53 power sudo[1081779]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:53 power sudo[1081785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob LangPHP php_get_vhost_versions --output=json'
Sep  9 04:52:53 power sudo[1081785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:53 power sudo[1081785]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:53 power sudo[1081792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:52:53 power sudo[1081792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:53 power sudo[1081792]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:54 power sudo[1081819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DomainInfo single_domain_data domain=cosmatobacco.mk return_https_redirect_status=1 --output=json'
Sep  9 04:52:54 power sudo[1081819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:54 power sudo[1081819]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:54 power sudo[1081827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob Mime list_redirects --output=json'
Sep  9 04:52:54 power sudo[1081827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:54 power sudo[1081827]: pam_unix(sudo:session): session closed for user root
Sep  9 04:52:58 power sudo[1081951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DirectoryPrivacy is_directory_protected dir=/home/cosmatob/public_html --output=json'
Sep  9 04:52:58 power sudo[1081951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:52:58 power sudo[1081951]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:06 power sudo[1082314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:53:06 power sudo[1082314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:06 power sudo[1082314]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:06 power sudo[1082320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep  9 04:53:06 power sudo[1082320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:06 power sudo[1082320]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:06 power sudo[1082329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:53:06 power sudo[1082329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:06 power sudo[1082329]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:06 power sudo[1082347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=dadar.mk return_https_redirect_status=1 --output=json'
Sep  9 04:53:06 power sudo[1082347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:06 power sudo[1082347]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:08 power sudo[1082435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/public_html --output=json'
Sep  9 04:53:08 power sudo[1082435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:08 power sudo[1082435]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:12 power sudo[1082660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep  9 04:53:12 power sudo[1082660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:12 power sudo[1082660]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:12 power sudo[1082667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=delcevca --output=json'
Sep  9 04:53:12 power sudo[1082667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:12 power sudo[1082667]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:18 power sudo[1082818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:53:18 power sudo[1082818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:18 power sudo[1082818]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:18 power sudo[1082825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user delcevca --user-current --json'
Sep  9 04:53:18 power sudo[1082825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:18 power sudo[1082825]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:18 power sudo[1082831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca LangPHP php_get_vhost_versions --output=json'
Sep  9 04:53:18 power sudo[1082831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:18 power sudo[1082831]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:18 power sudo[1082837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:53:18 power sudo[1082837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:18 power sudo[1082837]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:18 power sudo[1082855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DomainInfo single_domain_data domain=delcevcani.mk return_https_redirect_status=1 --output=json'
Sep  9 04:53:18 power sudo[1082855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:19 power sudo[1082855]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:19 power sudo[1082864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca Mime list_redirects --output=json'
Sep  9 04:53:19 power sudo[1082864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:19 power sudo[1082864]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:22 power sudo[1082977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DirectoryPrivacy is_directory_protected dir=/home/delcevca/public_html --output=json'
Sep  9 04:53:22 power sudo[1082977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:22 power sudo[1082977]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:23 power sudo[1083059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:53:23 power sudo[1083059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:23 power sudo[1083059]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:23 power sudo[1083065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 04:53:23 power sudo[1083065]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 04:53:23 power sudo[1083065]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 04:53:23 power sudo[1083065]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 04:53:23 power sudo[1083065]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:53:23 power sudo[1083065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:23 power sudo[1083065]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:23 power sudo[1083071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:53:23 power sudo[1083071]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:53:23 power sudo[1083071]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:53:23 power sudo[1083071]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:53:23 power sudo[1083071]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:53:23 power sudo[1083071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:23 power sudo[1083071]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:23 power sudo[1083078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:53:23 power sudo[1083078]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:53:23 power sudo[1083078]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:53:23 power sudo[1083078]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:53:23 power sudo[1083078]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:53:23 power sudo[1083078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:23 power sudo[1083078]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:25 power sudo[1083199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:53:25 power sudo[1083199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:25 power sudo[1083199]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:25 power sudo[1083205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 04:53:25 power sudo[1083205]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 04:53:25 power sudo[1083205]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 04:53:25 power sudo[1083205]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 04:53:25 power sudo[1083205]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:53:25 power sudo[1083205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:25 power sudo[1083205]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:25 power sudo[1083210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:53:25 power sudo[1083210]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:53:25 power sudo[1083210]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:53:25 power sudo[1083210]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:53:25 power sudo[1083210]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:53:25 power sudo[1083210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:25 power sudo[1083210]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:25 power sudo[1083218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 04:53:25 power sudo[1083218]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 04:53:25 power sudo[1083218]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 04:53:25 power sudo[1083218]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 04:53:25 power sudo[1083218]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:53:25 power sudo[1083218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:25 power sudo[1083218]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:26 power sudo[1083263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep  9 04:53:26 power sudo[1083263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:26 power sudo[1083263]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:26 power sudo[1083272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=edomcomm --output=json'
Sep  9 04:53:26 power sudo[1083272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:26 power sudo[1083272]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:30 power sudo[1083382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:53:30 power sudo[1083382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:30 power sudo[1083382]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:30 power sudo[1083391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user edomcomm --user-current --json'
Sep  9 04:53:30 power sudo[1083391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:30 power sudo[1083391]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:30 power sudo[1083397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm LangPHP php_get_vhost_versions --output=json'
Sep  9 04:53:30 power sudo[1083397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:30 power sudo[1083397]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:30 power sudo[1083402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:53:30 power sudo[1083402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:30 power sudo[1083402]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:30 power sudo[1083419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=deosol.mk return_https_redirect_status=1 --output=json'
Sep  9 04:53:30 power sudo[1083419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:30 power sudo[1083419]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:30 power sudo[1083424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm Mime list_redirects --output=json'
Sep  9 04:53:30 power sudo[1083424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:31 power sudo[1083424]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:33 power sudo[1083536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/w --output=json'
Sep  9 04:53:33 power sudo[1083536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:33 power sudo[1083536]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:40 power sudo[1083931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/ekobalans.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:53:40 power sudo[1083931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:40 power sudo[1083931]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:40 power sudo[1083948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  9 04:53:40 power sudo[1083948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:40 power sudo[1083948]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:40 power sudo[1083961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:53:40 power sudo[1083961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:40 power sudo[1083961]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:41 power sudo[1083979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=ekobalans.mk return_https_redirect_status=1 --output=json'
Sep  9 04:53:41 power sudo[1083979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:41 power sudo[1083979]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:43 power sudo[1084093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/ekobalans.mk --output=json'
Sep  9 04:53:43 power sudo[1084093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:43 power sudo[1084093]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:51 power sudo[1084554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/moetodete.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:53:51 power sudo[1084554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:51 power sudo[1084554]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:51 power sudo[1084563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  9 04:53:51 power sudo[1084563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:52 power sudo[1084563]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:52 power sudo[1084576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:53:52 power sudo[1084576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:52 power sudo[1084576]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:52 power sudo[1084705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=moetodete.mk return_https_redirect_status=1 --output=json'
Sep  9 04:53:52 power sudo[1084705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:52 power sudo[1084705]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:55 power sudo[1084944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/moetodete.mk --output=json'
Sep  9 04:53:55 power sudo[1084944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:55 power sudo[1084944]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:59 power sudo[1085230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep  9 04:53:59 power sudo[1085230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:59 power sudo[1085230]: pam_unix(sudo:session): session closed for user root
Sep  9 04:53:59 power sudo[1085237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=detskagr --output=json'
Sep  9 04:53:59 power sudo[1085237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:53:59 power sudo[1085237]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:06 power sudo[1085385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:54:06 power sudo[1085385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:06 power sudo[1085385]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:06 power sudo[1085391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user detskagr --user-current --json'
Sep  9 04:54:06 power sudo[1085391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:07 power sudo[1085391]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:07 power sudo[1085409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr LangPHP php_get_vhost_versions --output=json'
Sep  9 04:54:07 power sudo[1085409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:07 power sudo[1085409]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:07 power sudo[1085414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:54:07 power sudo[1085414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:07 power sudo[1085414]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:07 power sudo[1085431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DomainInfo single_domain_data domain=detskagradinka-prolet.mk return_https_redirect_status=1 --output=json'
Sep  9 04:54:07 power sudo[1085431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:07 power sudo[1085431]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:07 power sudo[1085440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr Mime list_redirects --output=json'
Sep  9 04:54:07 power sudo[1085440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:07 power sudo[1085440]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:11 power sudo[1085565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DirectoryPrivacy is_directory_protected dir=/home/detskagr/public_html/wordpress --output=json'
Sep  9 04:54:11 power sudo[1085565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:11 power sudo[1085565]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:12 power sudo[1085641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:54:12 power sudo[1085641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:12 power sudo[1085641]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:12 power sudo[1085646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  9 04:54:12 power sudo[1085646]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  9 04:54:12 power sudo[1085646]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  9 04:54:12 power sudo[1085646]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  9 04:54:12 power sudo[1085646]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:54:12 power sudo[1085646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:12 power sudo[1085646]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:12 power sudo[1085651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  9 04:54:12 power sudo[1085651]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  9 04:54:12 power sudo[1085651]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  9 04:54:12 power sudo[1085651]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  9 04:54:12 power sudo[1085651]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:54:12 power sudo[1085651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:12 power sudo[1085651]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:12 power sudo[1085656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep  9 04:54:12 power sudo[1085656]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep  9 04:54:12 power sudo[1085656]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep  9 04:54:12 power sudo[1085656]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep  9 04:54:12 power sudo[1085656]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:54:12 power sudo[1085656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:12 power sudo[1085656]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:14 power sudo[1085782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:54:14 power sudo[1085782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:14 power sudo[1085782]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:14 power sudo[1085787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  9 04:54:14 power sudo[1085787]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  9 04:54:14 power sudo[1085787]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  9 04:54:14 power sudo[1085787]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  9 04:54:14 power sudo[1085787]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:54:14 power sudo[1085787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:14 power sudo[1085787]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:14 power sudo[1085792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep  9 04:54:14 power sudo[1085792]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep  9 04:54:14 power sudo[1085792]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep  9 04:54:14 power sudo[1085792]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep  9 04:54:14 power sudo[1085792]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:54:14 power sudo[1085792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:14 power sudo[1085792]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:14 power sudo[1085797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep  9 04:54:14 power sudo[1085797]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep  9 04:54:14 power sudo[1085797]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep  9 04:54:14 power sudo[1085797]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep  9 04:54:14 power sudo[1085797]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:54:14 power sudo[1085797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:14 power sudo[1085797]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:15 power sudo[1085841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep  9 04:54:15 power sudo[1085841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:15 power sudo[1085841]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:15 power sudo[1085845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eaptekam --output=json'
Sep  9 04:54:15 power sudo[1085845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:15 power sudo[1085845]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:21 power sudo[1085955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam /bin/sh -c 'cd /home/eaptekam/dev.eapteka.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:54:21 power sudo[1085955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:21 power sudo[1085955]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:21 power sudo[1085962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eaptekam --user-current --json'
Sep  9 04:54:21 power sudo[1085962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:21 power sudo[1085962]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:21 power sudo[1085971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam LangPHP php_get_vhost_versions --output=json'
Sep  9 04:54:21 power sudo[1085971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:22 power sudo[1085971]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:22 power sudo[1085977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:54:22 power sudo[1085977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:22 power sudo[1085977]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:22 power sudo[1086003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DomainInfo single_domain_data domain=dev.eapteka.mk return_https_redirect_status=1 --output=json'
Sep  9 04:54:22 power sudo[1086003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:22 power sudo[1086003]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:22 power sudo[1086009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam Mime list_redirects --output=json'
Sep  9 04:54:22 power sudo[1086009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:22 power sudo[1086009]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:26 power sudo[1086114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DirectoryPrivacy is_directory_protected dir=/home/eaptekam/dev.eapteka.mk --output=json'
Sep  9 04:54:26 power sudo[1086114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:26 power sudo[1086114]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:30 power sudo[1086332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep  9 04:54:30 power sudo[1086332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:30 power sudo[1086332]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:30 power sudo[1086339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dimpalne --output=json'
Sep  9 04:54:30 power sudo[1086339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:30 power sudo[1086339]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:35 power sudo[1086437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne /bin/sh -c 'cd /home/dimpalne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:54:35 power sudo[1086437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:35 power sudo[1086437]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:35 power sudo[1086443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dimpalne --user-current --json'
Sep  9 04:54:35 power sudo[1086443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:35 power sudo[1086443]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:35 power sudo[1086450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne LangPHP php_get_vhost_versions --output=json'
Sep  9 04:54:35 power sudo[1086450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:35 power sudo[1086450]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:35 power sudo[1086455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:54:35 power sudo[1086455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:35 power sudo[1086455]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:36 power sudo[1086474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DomainInfo single_domain_data domain=dimpal.net return_https_redirect_status=1 --output=json'
Sep  9 04:54:36 power sudo[1086474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:36 power sudo[1086474]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:36 power sudo[1086490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne Mime list_redirects --output=json'
Sep  9 04:54:36 power sudo[1086490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:36 power sudo[1086490]: pam_unix(sudo:session): session closed for user root
Sep  9 04:54:39 power sudo[1086673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DirectoryPrivacy is_directory_protected dir=/home/dimpalne/public_html --output=json'
Sep  9 04:54:39 power sudo[1086673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:54:39 power sudo[1086673]: pam_unix(sudo:session): session closed for user root
Sep  9 04:55:01 power systemd[1087417]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 04:56:20 power sudo[1088944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep  9 04:56:20 power sudo[1088944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:56:20 power sudo[1088944]: pam_unix(sudo:session): session closed for user root
Sep  9 04:56:20 power sudo[1088951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dnevnoin --output=json'
Sep  9 04:56:20 power sudo[1088951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:56:20 power sudo[1088951]: pam_unix(sudo:session): session closed for user root
Sep  9 04:56:24 power sudo[1089032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin /bin/sh -c 'cd /home/dnevnoin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:56:24 power sudo[1089032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:56:24 power sudo[1089032]: pam_unix(sudo:session): session closed for user root
Sep  9 04:56:24 power sudo[1089038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dnevnoin --user-current --json'
Sep  9 04:56:24 power sudo[1089038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:56:24 power sudo[1089038]: pam_unix(sudo:session): session closed for user root
Sep  9 04:56:24 power sudo[1089047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin LangPHP php_get_vhost_versions --output=json'
Sep  9 04:56:24 power sudo[1089047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:56:24 power sudo[1089047]: pam_unix(sudo:session): session closed for user root
Sep  9 04:56:24 power sudo[1089052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:56:24 power sudo[1089052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:56:24 power sudo[1089052]: pam_unix(sudo:session): session closed for user root
Sep  9 04:56:25 power sudo[1089077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin DomainInfo single_domain_data domain=dnevnoinfo.mk return_https_redirect_status=1 --output=json'
Sep  9 04:56:25 power sudo[1089077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:56:25 power sudo[1089077]: pam_unix(sudo:session): session closed for user root
Sep  9 04:56:25 power sudo[1089083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin Mime list_redirects --output=json'
Sep  9 04:56:25 power sudo[1089083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:56:25 power sudo[1089083]: pam_unix(sudo:session): session closed for user root
Sep  9 04:56:27 power sudo[1089167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dnevnoin DirectoryPrivacy is_directory_protected dir=/home/dnevnoin/public_html --output=json'
Sep  9 04:56:27 power sudo[1089167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:56:27 power sudo[1089167]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:39 power sudo[1091750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=dreamholidays.bbbustours.mk return_https_redirect_status=1 --output=json'
Sep  9 04:58:39 power sudo[1091750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:39 power sudo[1091750]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:42 power sudo[1091850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/dreamholidays.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:58:42 power sudo[1091850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:42 power sudo[1091850]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:42 power sudo[1091862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep  9 04:58:42 power sudo[1091862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:42 power sudo[1091862]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:42 power sudo[1091870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:58:42 power sudo[1091870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:42 power sudo[1091870]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:45 power sudo[1091991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/dreamholidays.mk --output=json'
Sep  9 04:58:45 power sudo[1091991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:46 power sudo[1091991]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:49 power sudo[1092217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep  9 04:58:49 power sudo[1092217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:50 power sudo[1092217]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:50 power sudo[1092228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=drleomk --output=json'
Sep  9 04:58:50 power sudo[1092228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:50 power sudo[1092228]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:54 power sudo[1092333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk /bin/sh -c 'cd /home/drleomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:58:54 power sudo[1092333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:54 power sudo[1092333]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:54 power sudo[1092339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user drleomk --user-current --json'
Sep  9 04:58:54 power sudo[1092339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:54 power sudo[1092339]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:54 power sudo[1092345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk LangPHP php_get_vhost_versions --output=json'
Sep  9 04:58:54 power sudo[1092345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:54 power sudo[1092345]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:54 power sudo[1092352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:58:54 power sudo[1092352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:54 power sudo[1092352]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:55 power sudo[1092372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DomainInfo single_domain_data domain=drleo.mk return_https_redirect_status=1 --output=json'
Sep  9 04:58:55 power sudo[1092372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:55 power sudo[1092372]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:55 power sudo[1092385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk Mime list_redirects --output=json'
Sep  9 04:58:55 power sudo[1092385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:55 power sudo[1092385]: pam_unix(sudo:session): session closed for user root
Sep  9 04:58:58 power sudo[1092521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DirectoryPrivacy is_directory_protected dir=/home/drleomk/public_html --output=json'
Sep  9 04:58:58 power sudo[1092521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:58:58 power sudo[1092521]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:02 power sudo[1092743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep  9 04:59:02 power sudo[1092743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:02 power sudo[1092743]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:02 power sudo[1092750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=goodnews --output=json'
Sep  9 04:59:02 power sudo[1092750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:02 power sudo[1092750]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:07 power sudo[1092828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:59:07 power sudo[1092828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:07 power sudo[1092828]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:07 power sudo[1092834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  9 04:59:07 power sudo[1092834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:07 power sudo[1092834]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:07 power sudo[1092844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews LangPHP php_get_vhost_versions --output=json'
Sep  9 04:59:07 power sudo[1092844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:07 power sudo[1092844]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:07 power sudo[1092849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:59:07 power sudo[1092849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:07 power sudo[1092849]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:08 power sudo[1092865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=elan.mk return_https_redirect_status=1 --output=json'
Sep  9 04:59:08 power sudo[1092865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:08 power sudo[1092865]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:08 power sudo[1092872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews Mime list_redirects --output=json'
Sep  9 04:59:08 power sudo[1092872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:08 power sudo[1092872]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:11 power sudo[1092981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/elan.mk --output=json'
Sep  9 04:59:11 power sudo[1092981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:11 power sudo[1092981]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:12 power sudo[1093037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:59:12 power sudo[1093037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:12 power sudo[1093037]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:12 power sudo[1093049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 04:59:12 power sudo[1093049]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 04:59:12 power sudo[1093049]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 04:59:12 power sudo[1093049]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 04:59:12 power sudo[1093049]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:59:12 power sudo[1093049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:12 power sudo[1093049]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:12 power sudo[1093055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 04:59:12 power sudo[1093055]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 04:59:12 power sudo[1093055]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 04:59:12 power sudo[1093055]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 04:59:12 power sudo[1093055]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:59:12 power sudo[1093055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:12 power sudo[1093055]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:13 power sudo[1093143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:59:13 power sudo[1093143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:13 power sudo[1093143]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:13 power sudo[1093148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 04:59:13 power sudo[1093148]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 04:59:13 power sudo[1093148]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 04:59:13 power sudo[1093148]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 04:59:13 power sudo[1093148]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:59:13 power sudo[1093148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:13 power sudo[1093148]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:13 power sudo[1093153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 04:59:13 power sudo[1093153]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 04:59:13 power sudo[1093153]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 04:59:13 power sudo[1093153]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 04:59:13 power sudo[1093153]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:59:13 power sudo[1093153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:13 power sudo[1093153]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:14 power sudo[1093182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep  9 04:59:14 power sudo[1093182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:14 power sudo[1093182]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:14 power sudo[1093195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=electrol --output=json'
Sep  9 04:59:14 power sudo[1093195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:14 power sudo[1093195]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:18 power sudo[1093290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol /bin/sh -c 'cd /home/electrol/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:59:18 power sudo[1093290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:18 power sudo[1093290]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:18 power sudo[1093296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user electrol --user-current --json'
Sep  9 04:59:19 power sudo[1093296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:19 power sudo[1093296]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:19 power sudo[1093303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol LangPHP php_get_vhost_versions --output=json'
Sep  9 04:59:19 power sudo[1093303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:19 power sudo[1093303]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:19 power sudo[1093309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:59:19 power sudo[1093309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:19 power sudo[1093309]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:20 power sudo[1093339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DomainInfo single_domain_data domain=electrolight.mk return_https_redirect_status=1 --output=json'
Sep  9 04:59:20 power sudo[1093339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:20 power sudo[1093339]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:20 power sudo[1093350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol Mime list_redirects --output=json'
Sep  9 04:59:20 power sudo[1093350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:20 power sudo[1093350]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:23 power sudo[1093454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DirectoryPrivacy is_directory_protected dir=/home/electrol/public_html --output=json'
Sep  9 04:59:24 power sudo[1093454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:24 power sudo[1093454]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:28 power sudo[1093712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep  9 04:59:28 power sudo[1093712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:28 power sudo[1093712]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:28 power sudo[1093721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=elektrot --output=json'
Sep  9 04:59:28 power sudo[1093721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:28 power sudo[1093721]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:30 power sudo[1093792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot /bin/sh -c 'cd /home/elektrot/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:59:30 power sudo[1093792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:30 power sudo[1093792]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:30 power sudo[1093800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user elektrot --user-current --json'
Sep  9 04:59:30 power sudo[1093800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:31 power sudo[1093800]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:31 power sudo[1093807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot LangPHP php_get_vhost_versions --output=json'
Sep  9 04:59:31 power sudo[1093807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:31 power sudo[1093807]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:31 power sudo[1093812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:59:31 power sudo[1093812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:31 power sudo[1093812]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:31 power sudo[1093828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DomainInfo single_domain_data domain=elektrotehnika-inzinering.mk return_https_redirect_status=1 --output=json'
Sep  9 04:59:31 power sudo[1093828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:31 power sudo[1093828]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:31 power sudo[1093838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot Mime list_redirects --output=json'
Sep  9 04:59:31 power sudo[1093838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:31 power sudo[1093838]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:33 power sudo[1093912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy is_directory_protected dir=/home/elektrot/public_html/wp --output=json'
Sep  9 04:59:33 power sudo[1093912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:33 power sudo[1093912]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:33 power sudo[1093918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy list_users dir=/home/elektrot/public_html/wp --output=json'
Sep  9 04:59:33 power sudo[1093918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:33 power sudo[1093918]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:38 power sudo[1094207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:59:38 power sudo[1094207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:38 power sudo[1094207]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:38 power sudo[1094214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep  9 04:59:38 power sudo[1094214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:38 power sudo[1094214]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:38 power sudo[1094222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:59:38 power sudo[1094222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:38 power sudo[1094222]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:39 power sudo[1094250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=enaspot.com return_https_redirect_status=1 --output=json'
Sep  9 04:59:39 power sudo[1094250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:39 power sudo[1094250]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:42 power sudo[1094414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/public_html --output=json'
Sep  9 04:59:42 power sudo[1094414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:42 power sudo[1094414]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:46 power sudo[1094635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep  9 04:59:46 power sudo[1094635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:46 power sudo[1094635]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:46 power sudo[1094643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enochmk --output=json'
Sep  9 04:59:46 power sudo[1094643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:46 power sudo[1094643]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:52 power sudo[1094793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 04:59:52 power sudo[1094793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:52 power sudo[1094793]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:52 power sudo[1094799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enochmk --user-current --json'
Sep  9 04:59:52 power sudo[1094799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:52 power sudo[1094799]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:52 power sudo[1094809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk LangPHP php_get_vhost_versions --output=json'
Sep  9 04:59:52 power sudo[1094809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:52 power sudo[1094809]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:52 power sudo[1094822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 04:59:52 power sudo[1094822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:52 power sudo[1094822]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:53 power sudo[1094847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DomainInfo single_domain_data domain=enoch.mk return_https_redirect_status=1 --output=json'
Sep  9 04:59:53 power sudo[1094847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:53 power sudo[1094847]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:53 power sudo[1094856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk Mime list_redirects --output=json'
Sep  9 04:59:53 power sudo[1094856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:53 power sudo[1094856]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:57 power sudo[1095017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DirectoryPrivacy is_directory_protected dir=/home/enochmk/public_html --output=json'
Sep  9 04:59:57 power sudo[1095017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:57 power sudo[1095017]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:58 power sudo[1095086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:59:58 power sudo[1095086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:58 power sudo[1095086]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:58 power sudo[1095091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 04:59:58 power sudo[1095091]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 04:59:58 power sudo[1095091]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 04:59:58 power sudo[1095091]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 04:59:58 power sudo[1095091]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:59:58 power sudo[1095091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:58 power sudo[1095091]: pam_unix(sudo:session): session closed for user root
Sep  9 04:59:58 power sudo[1095096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 04:59:58 power sudo[1095096]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 04:59:58 power sudo[1095096]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 04:59:58 power sudo[1095096]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 04:59:58 power sudo[1095096]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 04:59:58 power sudo[1095096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 04:59:58 power sudo[1095096]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:00 power sudo[1095211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:00:00 power sudo[1095211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:00 power sudo[1095211]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:00 power sudo[1095216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 05:00:00 power sudo[1095216]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 05:00:00 power sudo[1095216]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 05:00:00 power sudo[1095216]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 05:00:00 power sudo[1095216]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:00:00 power sudo[1095216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:00 power sudo[1095216]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:00 power sudo[1095221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 05:00:00 power sudo[1095221]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 05:00:00 power sudo[1095221]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 05:00:00 power sudo[1095221]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 05:00:00 power sudo[1095221]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:00:00 power sudo[1095221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:00 power sudo[1095221]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:01 power systemd[1095409]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 05:00:01 power systemd[1095407]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:00:01 power systemd[1095410]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 05:00:01 power systemd[1095412]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 05:00:04 power sudo[1095789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/equip.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:00:04 power sudo[1095789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:04 power sudo[1095789]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:04 power sudo[1095797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  9 05:00:04 power sudo[1095797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:04 power sudo[1095797]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:04 power sudo[1095821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:00:04 power sudo[1095821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:04 power sudo[1095821]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:05 power sudo[1095840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=equip.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 05:00:05 power sudo[1095840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:05 power sudo[1095840]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:07 power sudo[1095956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/equip.cetplatform.mk --output=json'
Sep  9 05:00:07 power sudo[1095956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:07 power sudo[1095956]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:11 power sudo[1096178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep  9 05:00:11 power sudo[1096178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:11 power sudo[1096178]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:11 power sudo[1096184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eurofarm --output=json'
Sep  9 05:00:11 power sudo[1096184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:11 power sudo[1096184]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:25 power sudo[1096540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm /bin/sh -c 'cd /home/eurofarm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:00:25 power sudo[1096540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:25 power sudo[1096540]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:25 power sudo[1096551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eurofarm --user-current --json'
Sep  9 05:00:25 power sudo[1096551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:25 power sudo[1096551]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:25 power sudo[1096557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm LangPHP php_get_vhost_versions --output=json'
Sep  9 05:00:25 power sudo[1096557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:25 power sudo[1096557]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:25 power sudo[1096565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:00:25 power sudo[1096565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:25 power sudo[1096565]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:26 power sudo[1096580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DomainInfo single_domain_data domain=eurofarm.com.mk return_https_redirect_status=1 --output=json'
Sep  9 05:00:26 power sudo[1096580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:26 power sudo[1096580]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:26 power sudo[1096591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm Mime list_redirects --output=json'
Sep  9 05:00:26 power sudo[1096591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:26 power sudo[1096591]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:32 power sudo[1096763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DirectoryPrivacy is_directory_protected dir=/home/eurofarm/public_html --output=json'
Sep  9 05:00:32 power sudo[1096763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:32 power sudo[1096763]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:36 power sudo[1096975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep  9 05:00:36 power sudo[1096975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:36 power sudo[1096975]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:36 power sudo[1096983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=euromaki --output=json'
Sep  9 05:00:36 power sudo[1096983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:36 power sudo[1096983]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:40 power sudo[1097112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki /bin/sh -c 'cd /home/euromaki/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:00:40 power sudo[1097112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:40 power sudo[1097112]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:40 power sudo[1097123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user euromaki --user-current --json'
Sep  9 05:00:40 power sudo[1097123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:40 power sudo[1097123]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:40 power sudo[1097141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki LangPHP php_get_vhost_versions --output=json'
Sep  9 05:00:40 power sudo[1097141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:40 power sudo[1097141]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:40 power sudo[1097152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:00:40 power sudo[1097152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:40 power sudo[1097152]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:41 power sudo[1097168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DomainInfo single_domain_data domain=euromakinsurance.mk return_https_redirect_status=1 --output=json'
Sep  9 05:00:41 power sudo[1097168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:41 power sudo[1097168]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:41 power sudo[1097174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki Mime list_redirects --output=json'
Sep  9 05:00:41 power sudo[1097174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:41 power sudo[1097174]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:45 power sudo[1097283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DirectoryPrivacy is_directory_protected dir=/home/euromaki/public_html --output=json'
Sep  9 05:00:45 power sudo[1097283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:45 power sudo[1097283]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:48 power sudo[1097504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep  9 05:00:48 power sudo[1097504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:48 power sudo[1097504]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:48 power sudo[1097509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evberasm --output=json'
Sep  9 05:00:48 power sudo[1097509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:48 power sudo[1097509]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:55 power sudo[1097664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm /bin/sh -c 'cd /home/evberasm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:00:55 power sudo[1097664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:55 power sudo[1097664]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:55 power sudo[1097670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evberasm --user-current --json'
Sep  9 05:00:55 power sudo[1097670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:56 power sudo[1097670]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:56 power sudo[1097680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm LangPHP php_get_vhost_versions --output=json'
Sep  9 05:00:56 power sudo[1097680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:56 power sudo[1097680]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:56 power sudo[1097686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:00:56 power sudo[1097686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:56 power sudo[1097686]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:56 power sudo[1097702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DomainInfo single_domain_data domain=evberasmusplus.com.mk return_https_redirect_status=1 --output=json'
Sep  9 05:00:56 power sudo[1097702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:56 power sudo[1097702]: pam_unix(sudo:session): session closed for user root
Sep  9 05:00:56 power sudo[1097709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm Mime list_redirects --output=json'
Sep  9 05:00:56 power sudo[1097709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:00:56 power sudo[1097709]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:00 power sudo[1097852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DirectoryPrivacy is_directory_protected dir=/home/evberasm/public_html/wp --output=json'
Sep  9 05:01:00 power sudo[1097852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:00 power sudo[1097852]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:03 power sudo[1098081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep  9 05:01:03 power sudo[1098081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:03 power sudo[1098081]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:03 power sudo[1098089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evolvepl --output=json'
Sep  9 05:01:03 power sudo[1098089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:03 power sudo[1098089]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:08 power sudo[1098221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:01:08 power sudo[1098221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:08 power sudo[1098221]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:08 power sudo[1098228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evolvepl --user-current --json'
Sep  9 05:01:08 power sudo[1098228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:08 power sudo[1098228]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:08 power sudo[1098235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl LangPHP php_get_vhost_versions --output=json'
Sep  9 05:01:08 power sudo[1098235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:09 power sudo[1098235]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:09 power sudo[1098243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:01:09 power sudo[1098243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:09 power sudo[1098243]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:09 power sudo[1098258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DomainInfo single_domain_data domain=evolveplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 05:01:09 power sudo[1098258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:09 power sudo[1098258]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:09 power sudo[1098264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl Mime list_redirects --output=json'
Sep  9 05:01:09 power sudo[1098264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:10 power sudo[1098264]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:12 power sudo[1098366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DirectoryPrivacy is_directory_protected dir=/home/evolvepl/public_html --output=json'
Sep  9 05:01:12 power sudo[1098366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:12 power sudo[1098366]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:13 power sudo[1098438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:13 power sudo[1098438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:13 power sudo[1098438]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:13 power sudo[1098444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:01:13 power sudo[1098444]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:01:13 power sudo[1098444]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:01:13 power sudo[1098444]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:01:13 power sudo[1098444]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:13 power sudo[1098444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:13 power sudo[1098444]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:14 power sudo[1098449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:01:14 power sudo[1098449]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:01:14 power sudo[1098449]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:01:14 power sudo[1098449]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:01:14 power sudo[1098449]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:14 power sudo[1098449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:14 power sudo[1098449]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:14 power sudo[1098460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:01:14 power sudo[1098460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:01:14 power sudo[1098460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:01:14 power sudo[1098460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:01:14 power sudo[1098460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:14 power sudo[1098460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:14 power sudo[1098460]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:16 power sudo[1098571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:16 power sudo[1098571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:16 power sudo[1098571]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:16 power sudo[1098576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:01:16 power sudo[1098576]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:01:16 power sudo[1098576]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:01:16 power sudo[1098576]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:01:16 power sudo[1098576]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:16 power sudo[1098576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:16 power sudo[1098576]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:16 power sudo[1098581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:01:16 power sudo[1098581]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:01:16 power sudo[1098581]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:01:16 power sudo[1098581]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:01:16 power sudo[1098581]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:16 power sudo[1098581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:16 power sudo[1098581]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:16 power sudo[1098587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:01:16 power sudo[1098587]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:01:16 power sudo[1098587]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:01:16 power sudo[1098587]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:01:16 power sudo[1098587]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:16 power sudo[1098587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:16 power sudo[1098587]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:20 power sudo[1098722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/ey.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:01:20 power sudo[1098722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:21 power sudo[1098722]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:21 power sudo[1098729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  9 05:01:21 power sudo[1098729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:21 power sudo[1098729]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:21 power sudo[1098740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:01:21 power sudo[1098740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:21 power sudo[1098740]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:21 power sudo[1098758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=ey.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 05:01:21 power sudo[1098758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:21 power sudo[1098758]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:24 power sudo[1098850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/ey.cetplatform.mk --output=json'
Sep  9 05:01:24 power sudo[1098850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:24 power sudo[1098850]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:27 power sudo[1099062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep  9 05:01:27 power sudo[1099062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:28 power sudo[1099062]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:28 power sudo[1099072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=holiyayt --output=json'
Sep  9 05:01:28 power sudo[1099072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:28 power sudo[1099072]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:30 power sudo[1099141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/fitkit.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:01:30 power sudo[1099141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:30 power sudo[1099141]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:30 power sudo[1099149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep  9 05:01:30 power sudo[1099149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:30 power sudo[1099149]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:30 power sudo[1099154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt LangPHP php_get_vhost_versions --output=json'
Sep  9 05:01:30 power sudo[1099154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:31 power sudo[1099154]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:31 power sudo[1099162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:01:31 power sudo[1099162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:31 power sudo[1099162]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:31 power sudo[1099178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=fitkit.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep  9 05:01:31 power sudo[1099178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:31 power sudo[1099178]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:31 power sudo[1099185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt Mime list_redirects --output=json'
Sep  9 05:01:31 power sudo[1099185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:31 power sudo[1099185]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:32 power sudo[1099277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/fitkit.holiyaytravel.com --output=json'
Sep  9 05:01:32 power sudo[1099277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:32 power sudo[1099277]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:36 power sudo[1099482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep  9 05:01:36 power sudo[1099482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:36 power sudo[1099482]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:36 power sudo[1099490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=v5srybi9dcdx --output=json'
Sep  9 05:01:36 power sudo[1099490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:36 power sudo[1099490]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:40 power sudo[1099599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/flowoptstudio.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:01:40 power sudo[1099599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:40 power sudo[1099599]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:40 power sudo[1099607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep  9 05:01:40 power sudo[1099607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:40 power sudo[1099607]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:40 power sudo[1099624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx LangPHP php_get_vhost_versions --output=json'
Sep  9 05:01:40 power sudo[1099624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:40 power sudo[1099624]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:40 power sudo[1099642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:01:40 power sudo[1099642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:40 power sudo[1099642]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:41 power sudo[1099672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=flowoptstudio.com return_https_redirect_status=1 --output=json'
Sep  9 05:01:41 power sudo[1099672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:41 power sudo[1099672]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:41 power sudo[1099681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx Mime list_redirects --output=json'
Sep  9 05:01:41 power sudo[1099681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:41 power sudo[1099681]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:43 power sudo[1099783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/flowoptstudio.com --output=json'
Sep  9 05:01:43 power sudo[1099783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:43 power sudo[1099783]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:47 power sudo[1100002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep  9 05:01:47 power sudo[1100002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:47 power sudo[1100002]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:47 power sudo[1100008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=folklore --output=json'
Sep  9 05:01:47 power sudo[1100008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:47 power sudo[1100008]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:50 power sudo[1100080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:01:50 power sudo[1100080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:50 power sudo[1100080]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:50 power sudo[1100087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user folklore --user-current --json'
Sep  9 05:01:50 power sudo[1100087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:50 power sudo[1100087]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:50 power sudo[1100094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore LangPHP php_get_vhost_versions --output=json'
Sep  9 05:01:50 power sudo[1100094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:50 power sudo[1100094]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:50 power sudo[1100104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:01:50 power sudo[1100104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:50 power sudo[1100104]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:51 power sudo[1100129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DomainInfo single_domain_data domain=folklorefestivals.com return_https_redirect_status=1 --output=json'
Sep  9 05:01:51 power sudo[1100129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:51 power sudo[1100129]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:51 power sudo[1100136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore Mime list_redirects --output=json'
Sep  9 05:01:51 power sudo[1100136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:51 power sudo[1100136]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:53 power sudo[1100214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DirectoryPrivacy is_directory_protected dir=/home/folklore/public_html --output=json'
Sep  9 05:01:53 power sudo[1100214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:53 power sudo[1100214]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:54 power sudo[1100264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:54 power sudo[1100264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:54 power sudo[1100264]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:54 power sudo[1100270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:01:54 power sudo[1100270]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:01:54 power sudo[1100270]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:01:54 power sudo[1100270]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:01:54 power sudo[1100270]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:54 power sudo[1100270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:54 power sudo[1100270]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:54 power sudo[1100275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:01:54 power sudo[1100275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:01:54 power sudo[1100275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:01:54 power sudo[1100275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:01:54 power sudo[1100275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:54 power sudo[1100275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:54 power sudo[1100275]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:54 power sudo[1100282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:01:54 power sudo[1100282]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:01:54 power sudo[1100282]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:01:54 power sudo[1100282]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:01:54 power sudo[1100282]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:54 power sudo[1100282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:54 power sudo[1100282]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:55 power sudo[1100366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:55 power sudo[1100366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:55 power sudo[1100366]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:55 power sudo[1100371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:01:55 power sudo[1100371]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:01:55 power sudo[1100371]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:01:55 power sudo[1100371]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:01:55 power sudo[1100371]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:55 power sudo[1100371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:55 power sudo[1100371]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:55 power sudo[1100376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:01:55 power sudo[1100376]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:01:55 power sudo[1100376]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:01:55 power sudo[1100376]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:01:55 power sudo[1100376]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:55 power sudo[1100376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:56 power sudo[1100376]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:56 power sudo[1100387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:01:56 power sudo[1100387]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:01:56 power sudo[1100387]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:01:56 power sudo[1100387]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:01:56 power sudo[1100387]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:01:56 power sudo[1100387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:56 power sudo[1100387]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:56 power sudo[1100415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep  9 05:01:56 power sudo[1100415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:56 power sudo[1100415]: pam_unix(sudo:session): session closed for user root
Sep  9 05:01:56 power sudo[1100420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=forzares --output=json'
Sep  9 05:01:56 power sudo[1100420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:01:56 power sudo[1100420]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:02 power sudo[1100589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares /bin/sh -c 'cd /home/forzares/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:02:02 power sudo[1100589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:02 power sudo[1100589]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:02 power sudo[1100598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user forzares --user-current --json'
Sep  9 05:02:02 power sudo[1100598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:02 power sudo[1100598]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:02 power sudo[1100607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares LangPHP php_get_vhost_versions --output=json'
Sep  9 05:02:02 power sudo[1100607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:02 power sudo[1100607]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:02 power sudo[1100612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:02:02 power sudo[1100612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:02 power sudo[1100612]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:03 power sudo[1100631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DomainInfo single_domain_data domain=forzarestaurant.com.mk return_https_redirect_status=1 --output=json'
Sep  9 05:02:03 power sudo[1100631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:03 power sudo[1100631]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:03 power sudo[1100643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares Mime list_redirects --output=json'
Sep  9 05:02:03 power sudo[1100643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:03 power sudo[1100643]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:06 power sudo[1100758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DirectoryPrivacy is_directory_protected dir=/home/forzares/public_html --output=json'
Sep  9 05:02:06 power sudo[1100758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:06 power sudo[1100758]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:09 power sudo[1100989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep  9 05:02:09 power sudo[1100989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:09 power sudo[1100989]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:09 power sudo[1100996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=getaldus --output=json'
Sep  9 05:02:10 power sudo[1100996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:10 power sudo[1100996]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:12 power sudo[1101077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus /bin/sh -c 'cd /home/getaldus/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:02:12 power sudo[1101077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:12 power sudo[1101077]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:12 power sudo[1101083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user getaldus --user-current --json'
Sep  9 05:02:12 power sudo[1101083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:12 power sudo[1101083]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:12 power sudo[1101098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus LangPHP php_get_vhost_versions --output=json'
Sep  9 05:02:12 power sudo[1101098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:12 power sudo[1101098]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:12 power sudo[1101104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:02:12 power sudo[1101104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:12 power sudo[1101104]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:13 power sudo[1101122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DomainInfo single_domain_data domain=getaldus.mk return_https_redirect_status=1 --output=json'
Sep  9 05:02:13 power sudo[1101122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:13 power sudo[1101122]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:13 power sudo[1101131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus Mime list_redirects --output=json'
Sep  9 05:02:13 power sudo[1101131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:13 power sudo[1101131]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:15 power sudo[1101214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DirectoryPrivacy is_directory_protected dir=/home/getaldus/public_html --output=json'
Sep  9 05:02:15 power sudo[1101214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:15 power sudo[1101214]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:18 power sudo[1101451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep  9 05:02:18 power sudo[1101451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:19 power sudo[1101451]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:19 power sudo[1101459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gocruise --output=json'
Sep  9 05:02:19 power sudo[1101459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:19 power sudo[1101459]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:23 power sudo[1101597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise /bin/sh -c 'cd /home/gocruise/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:02:23 power sudo[1101597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:23 power sudo[1101597]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:23 power sudo[1101603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gocruise --user-current --json'
Sep  9 05:02:23 power sudo[1101603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:24 power sudo[1101603]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:24 power sudo[1101618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise LangPHP php_get_vhost_versions --output=json'
Sep  9 05:02:24 power sudo[1101618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:24 power sudo[1101618]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:24 power sudo[1101623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:02:24 power sudo[1101623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:24 power sudo[1101623]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:24 power sudo[1101641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DomainInfo single_domain_data domain=gocruise.mk return_https_redirect_status=1 --output=json'
Sep  9 05:02:24 power sudo[1101641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:25 power sudo[1101641]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:25 power sudo[1101648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise Mime list_redirects --output=json'
Sep  9 05:02:25 power sudo[1101648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:25 power sudo[1101648]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:28 power sudo[1101758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DirectoryPrivacy is_directory_protected dir=/home/gocruise/public_html --output=json'
Sep  9 05:02:28 power sudo[1101758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:28 power sudo[1101758]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:31 power sudo[1101968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep  9 05:02:31 power sudo[1101968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:32 power sudo[1101968]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:32 power sudo[1101975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gogovan1 --output=json'
Sep  9 05:02:32 power sudo[1101975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:32 power sudo[1101975]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:35 power sudo[1102082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 /bin/sh -c 'cd /home/gogovan1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:02:35 power sudo[1102082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:36 power sudo[1102082]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:36 power sudo[1102090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gogovan1 --user-current --json'
Sep  9 05:02:36 power sudo[1102090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:36 power sudo[1102090]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:36 power sudo[1102106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 LangPHP php_get_vhost_versions --output=json'
Sep  9 05:02:36 power sudo[1102106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:36 power sudo[1102106]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:36 power sudo[1102112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:02:36 power sudo[1102112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:36 power sudo[1102112]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:36 power sudo[1102135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DomainInfo single_domain_data domain=gogovan.mk return_https_redirect_status=1 --output=json'
Sep  9 05:02:36 power sudo[1102135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:36 power sudo[1102135]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:36 power sudo[1102145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 Mime list_redirects --output=json'
Sep  9 05:02:37 power sudo[1102145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:37 power sudo[1102145]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:39 power sudo[1102271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DirectoryPrivacy is_directory_protected dir=/home/gogovan1/public_html --output=json'
Sep  9 05:02:39 power sudo[1102271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:39 power sudo[1102271]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:43 power sudo[1102525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep  9 05:02:43 power sudo[1102525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:43 power sudo[1102525]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:43 power sudo[1102531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=golakkom --output=json'
Sep  9 05:02:43 power sudo[1102531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:43 power sudo[1102531]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:51 power sudo[1102677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:02:51 power sudo[1102677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:51 power sudo[1102677]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:51 power sudo[1102686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user golakkom --user-current --json'
Sep  9 05:02:51 power sudo[1102686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:51 power sudo[1102686]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:51 power sudo[1102701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom LangPHP php_get_vhost_versions --output=json'
Sep  9 05:02:51 power sudo[1102701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:51 power sudo[1102701]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:51 power sudo[1102708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:02:51 power sudo[1102708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:51 power sudo[1102708]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:52 power sudo[1102733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DomainInfo single_domain_data domain=golak-komerc.mk return_https_redirect_status=1 --output=json'
Sep  9 05:02:52 power sudo[1102733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:52 power sudo[1102733]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:52 power sudo[1102743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom Mime list_redirects --output=json'
Sep  9 05:02:52 power sudo[1102743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:52 power sudo[1102743]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:56 power sudo[1102884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DirectoryPrivacy is_directory_protected dir=/home/golakkom/public_html --output=json'
Sep  9 05:02:56 power sudo[1102884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:56 power sudo[1102884]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:57 power sudo[1102940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:02:57 power sudo[1102940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:57 power sudo[1102940]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:57 power sudo[1102946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:02:57 power sudo[1102946]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:02:57 power sudo[1102946]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:02:57 power sudo[1102946]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:02:57 power sudo[1102946]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:02:57 power sudo[1102946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:57 power sudo[1102946]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:57 power sudo[1102951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:02:57 power sudo[1102951]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:02:57 power sudo[1102951]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:02:57 power sudo[1102951]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:02:57 power sudo[1102951]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:02:57 power sudo[1102951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:58 power sudo[1102951]: pam_unix(sudo:session): session closed for user root
Sep  9 05:02:58 power sudo[1102960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:02:58 power sudo[1102960]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:02:58 power sudo[1102960]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:02:58 power sudo[1102960]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:02:58 power sudo[1102960]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:02:58 power sudo[1102960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:02:58 power sudo[1102960]: pam_unix(sudo:session): session closed for user root
Sep  9 05:03:55 power sudo[1104061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:03:55 power sudo[1104061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:03:55 power sudo[1104061]: pam_unix(sudo:session): session closed for user root
Sep  9 05:03:55 power sudo[1104069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  9 05:03:55 power sudo[1104069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:03:55 power sudo[1104069]: pam_unix(sudo:session): session closed for user root
Sep  9 05:03:55 power sudo[1104076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:03:56 power sudo[1104076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:03:56 power sudo[1104076]: pam_unix(sudo:session): session closed for user root
Sep  9 05:03:56 power sudo[1104099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=goodnews.mk return_https_redirect_status=1 --output=json'
Sep  9 05:03:56 power sudo[1104099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:03:56 power sudo[1104099]: pam_unix(sudo:session): session closed for user root
Sep  9 05:03:59 power sudo[1104252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/public_html --output=json'
Sep  9 05:03:59 power sudo[1104252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:00 power sudo[1104252]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:04 power sudo[1104509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep  9 05:04:04 power sudo[1104509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:04 power sudo[1104509]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:04 power sudo[1104523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=herbalpl --output=json'
Sep  9 05:04:04 power sudo[1104523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:04 power sudo[1104523]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:11 power sudo[1104645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl /bin/sh -c 'cd /home/herbalpl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:04:11 power sudo[1104645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:11 power sudo[1104645]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:11 power sudo[1104651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user herbalpl --user-current --json'
Sep  9 05:04:11 power sudo[1104651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:11 power sudo[1104651]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:11 power sudo[1104656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl LangPHP php_get_vhost_versions --output=json'
Sep  9 05:04:11 power sudo[1104656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:11 power sudo[1104656]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:11 power sudo[1104661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:04:11 power sudo[1104661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:11 power sudo[1104661]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:12 power sudo[1104683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DomainInfo single_domain_data domain=herbalplus.mk return_https_redirect_status=1 --output=json'
Sep  9 05:04:12 power sudo[1104683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:12 power sudo[1104683]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:12 power sudo[1104689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl Mime list_redirects --output=json'
Sep  9 05:04:12 power sudo[1104689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:12 power sudo[1104689]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:16 power sudo[1104791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DirectoryPrivacy is_directory_protected dir=/home/herbalpl/public_html --output=json'
Sep  9 05:04:16 power sudo[1104791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:16 power sudo[1104791]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:24 power sudo[1105124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/hero.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:04:24 power sudo[1105124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:25 power sudo[1105124]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:25 power sudo[1105130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  9 05:04:25 power sudo[1105130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:25 power sudo[1105130]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:25 power sudo[1105139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:04:25 power sudo[1105139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:25 power sudo[1105139]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:25 power sudo[1105154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=hero.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 05:04:25 power sudo[1105154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:25 power sudo[1105154]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:28 power sudo[1105268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/hero.cetplatform.mk --output=json'
Sep  9 05:04:28 power sudo[1105268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:28 power sudo[1105268]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:35 power sudo[1105550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:04:35 power sudo[1105550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:35 power sudo[1105550]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:35 power sudo[1105556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep  9 05:04:35 power sudo[1105556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:35 power sudo[1105556]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:35 power sudo[1105564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:04:35 power sudo[1105564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:35 power sudo[1105564]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:36 power sudo[1105596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep  9 05:04:36 power sudo[1105596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:36 power sudo[1105596]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:39 power sudo[1105786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/public_html --output=json'
Sep  9 05:04:39 power sudo[1105786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:39 power sudo[1105786]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:40 power sudo[1105838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:04:40 power sudo[1105838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:40 power sudo[1105838]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:40 power sudo[1105843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:04:40 power sudo[1105843]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:04:40 power sudo[1105843]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:04:40 power sudo[1105843]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:04:40 power sudo[1105843]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:04:40 power sudo[1105843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:40 power sudo[1105843]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:40 power sudo[1105850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:04:40 power sudo[1105850]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:04:40 power sudo[1105850]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:04:40 power sudo[1105850]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:04:40 power sudo[1105850]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:04:40 power sudo[1105850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:41 power sudo[1105850]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:41 power sudo[1105883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:04:41 power sudo[1105883]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:04:41 power sudo[1105883]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:04:41 power sudo[1105883]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:04:41 power sudo[1105883]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:04:41 power sudo[1105883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:41 power sudo[1105883]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:42 power sudo[1106020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:04:42 power sudo[1106020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:42 power sudo[1106020]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:42 power sudo[1106025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:04:42 power sudo[1106025]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:04:42 power sudo[1106025]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:04:42 power sudo[1106025]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:04:42 power sudo[1106025]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:04:42 power sudo[1106025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:42 power sudo[1106025]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:42 power sudo[1106030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:04:42 power sudo[1106030]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:04:42 power sudo[1106030]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:04:42 power sudo[1106030]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:04:42 power sudo[1106030]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:04:42 power sudo[1106030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:43 power sudo[1106030]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:43 power sudo[1106037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:04:43 power sudo[1106037]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:04:43 power sudo[1106037]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:04:43 power sudo[1106037]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:04:43 power sudo[1106037]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:04:43 power sudo[1106037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:43 power sudo[1106037]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:43 power sudo[1106068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep  9 05:04:43 power sudo[1106068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:43 power sudo[1106068]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:43 power sudo[1106075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vezilkac --output=json'
Sep  9 05:04:43 power sudo[1106075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:43 power sudo[1106075]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:48 power sudo[1106201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/vezden.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:04:48 power sudo[1106201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:48 power sudo[1106201]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:48 power sudo[1106207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  9 05:04:48 power sudo[1106207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:48 power sudo[1106207]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:48 power sudo[1106215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac LangPHP php_get_vhost_versions --output=json'
Sep  9 05:04:48 power sudo[1106215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:48 power sudo[1106215]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:48 power sudo[1106220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:04:48 power sudo[1106220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:48 power sudo[1106220]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:49 power sudo[1106234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezden.mk return_https_redirect_status=1 --output=json'
Sep  9 05:04:49 power sudo[1106234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:49 power sudo[1106234]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:49 power sudo[1106244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Mime list_redirects --output=json'
Sep  9 05:04:49 power sudo[1106244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:49 power sudo[1106244]: pam_unix(sudo:session): session closed for user root
Sep  9 05:04:51 power sudo[1106335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/vezden.mk --output=json'
Sep  9 05:04:51 power sudo[1106335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:04:51 power sudo[1106335]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:01 power systemd[1106843]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:05:08 power sudo[1106990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/metatet && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:05:08 power sudo[1106990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:08 power sudo[1106990]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:08 power sudo[1106997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  9 05:05:08 power sudo[1106997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:08 power sudo[1106997]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:08 power sudo[1107007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:05:08 power sudo[1107007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:08 power sudo[1107007]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:08 power sudo[1107022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=metatet.com return_https_redirect_status=1 --output=json'
Sep  9 05:05:08 power sudo[1107022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:08 power sudo[1107022]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:13 power sudo[1107170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/metatet --output=json'
Sep  9 05:05:14 power sudo[1107170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:14 power sudo[1107170]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:30 power sudo[1107657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:05:30 power sudo[1107657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:30 power sudo[1107657]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:30 power sudo[1107663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  9 05:05:30 power sudo[1107663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:30 power sudo[1107663]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:30 power sudo[1107670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:05:30 power sudo[1107670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:30 power sudo[1107670]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:31 power sudo[1107690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezilka.com return_https_redirect_status=1 --output=json'
Sep  9 05:05:31 power sudo[1107690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:31 power sudo[1107690]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:37 power sudo[1107864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html --output=json'
Sep  9 05:05:37 power sudo[1107864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:37 power sudo[1107864]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:45 power sudo[1108172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/sorabotnici && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:05:45 power sudo[1108172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:45 power sudo[1108172]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:45 power sudo[1108178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  9 05:05:45 power sudo[1108178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:46 power sudo[1108178]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:46 power sudo[1108184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:05:46 power sudo[1108184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:46 power sudo[1108184]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:46 power sudo[1108198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=sorabotnici.vezilka.com return_https_redirect_status=1 --output=json'
Sep  9 05:05:46 power sudo[1108198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:46 power sudo[1108198]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:48 power sudo[1108291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/sorabotnici --output=json'
Sep  9 05:05:48 power sudo[1108291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:48 power sudo[1108291]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:55 power sudo[1108634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/pp && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:05:55 power sudo[1108634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:55 power sudo[1108634]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:55 power sudo[1108640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep  9 05:05:55 power sudo[1108640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:56 power sudo[1108640]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:56 power sudo[1108647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:05:56 power sudo[1108647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:56 power sudo[1108647]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:56 power sudo[1108660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=pp.denicija.mk return_https_redirect_status=1 --output=json'
Sep  9 05:05:56 power sudo[1108660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:56 power sudo[1108660]: pam_unix(sudo:session): session closed for user root
Sep  9 05:05:58 power sudo[1108758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/pp --output=json'
Sep  9 05:05:58 power sudo[1108758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:05:58 power sudo[1108758]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:01 power sudo[1109030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep  9 05:06:01 power sudo[1109030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:01 power sudo[1109030]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:01 power sudo[1109036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=madzomk --output=json'
Sep  9 05:06:01 power sudo[1109036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:01 power sudo[1109036]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:01 power systemd[1109063]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 05:06:07 power sudo[1109208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk /bin/sh -c 'cd /home/madzomk/hotelcitypark.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:06:07 power sudo[1109208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:07 power sudo[1109208]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:07 power sudo[1109215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user madzomk --user-current --json'
Sep  9 05:06:07 power sudo[1109215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:07 power sudo[1109215]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:07 power sudo[1109224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk LangPHP php_get_vhost_versions --output=json'
Sep  9 05:06:07 power sudo[1109224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:07 power sudo[1109224]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:07 power sudo[1109231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:06:07 power sudo[1109231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:07 power sudo[1109231]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:07 power sudo[1109247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DomainInfo single_domain_data domain=hotelcitypark.mk return_https_redirect_status=1 --output=json'
Sep  9 05:06:08 power sudo[1109247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:08 power sudo[1109247]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:08 power sudo[1109253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk Mime list_redirects --output=json'
Sep  9 05:06:08 power sudo[1109253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:08 power sudo[1109253]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:11 power sudo[1109387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DirectoryPrivacy is_directory_protected dir=/home/madzomk/hotelcitypark.mk --output=json'
Sep  9 05:06:11 power sudo[1109387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:11 power sudo[1109387]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:15 power sudo[1109623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep  9 05:06:15 power sudo[1109623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:15 power sudo[1109623]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:15 power sudo[1109631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=imdskopj --output=json'
Sep  9 05:06:15 power sudo[1109631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:15 power sudo[1109631]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:18 power sudo[1109706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj /bin/sh -c 'cd /home/imdskopj/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:06:18 power sudo[1109706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:18 power sudo[1109706]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:18 power sudo[1109712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user imdskopj --user-current --json'
Sep  9 05:06:18 power sudo[1109712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:18 power sudo[1109712]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:18 power sudo[1109724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj LangPHP php_get_vhost_versions --output=json'
Sep  9 05:06:18 power sudo[1109724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:18 power sudo[1109724]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:18 power sudo[1109730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:06:18 power sudo[1109730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:18 power sudo[1109730]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:18 power sudo[1109744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DomainInfo single_domain_data domain=imdskopje.mk return_https_redirect_status=1 --output=json'
Sep  9 05:06:18 power sudo[1109744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:18 power sudo[1109744]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:19 power sudo[1109750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj Mime list_redirects --output=json'
Sep  9 05:06:19 power sudo[1109750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:19 power sudo[1109750]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:21 power sudo[1109861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DirectoryPrivacy is_directory_protected dir=/home/imdskopj/public_html --output=json'
Sep  9 05:06:21 power sudo[1109861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:21 power sudo[1109861]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:24 power sudo[1110097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep  9 05:06:24 power sudo[1110097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:25 power sudo[1110097]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:25 power sudo[1110103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=infopor1 --output=json'
Sep  9 05:06:25 power sudo[1110103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:25 power sudo[1110103]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:29 power sudo[1110203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:06:29 power sudo[1110203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:29 power sudo[1110203]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:29 power sudo[1110212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user infopor1 --user-current --json'
Sep  9 05:06:29 power sudo[1110212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:29 power sudo[1110212]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:29 power sudo[1110219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 LangPHP php_get_vhost_versions --output=json'
Sep  9 05:06:29 power sudo[1110219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:29 power sudo[1110219]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:29 power sudo[1110224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:06:29 power sudo[1110224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:29 power sudo[1110224]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:30 power sudo[1110244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DomainInfo single_domain_data domain=infoportal.mk return_https_redirect_status=1 --output=json'
Sep  9 05:06:30 power sudo[1110244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:30 power sudo[1110244]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:30 power sudo[1110253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 Mime list_redirects --output=json'
Sep  9 05:06:30 power sudo[1110253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:30 power sudo[1110253]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:33 power sudo[1110397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DirectoryPrivacy is_directory_protected dir=/home/infopor1/public_html --output=json'
Sep  9 05:06:33 power sudo[1110397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:33 power sudo[1110397]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:34 power sudo[1110466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:34 power sudo[1110466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:34 power sudo[1110466]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:34 power sudo[1110471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:06:34 power sudo[1110471]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:06:34 power sudo[1110471]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:06:34 power sudo[1110471]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:06:34 power sudo[1110471]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:34 power sudo[1110471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:34 power sudo[1110471]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:34 power sudo[1110476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:06:34 power sudo[1110476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:06:34 power sudo[1110476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:06:34 power sudo[1110476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:06:34 power sudo[1110476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:34 power sudo[1110476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:34 power sudo[1110476]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:34 power sudo[1110484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:06:34 power sudo[1110484]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:06:34 power sudo[1110484]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:06:34 power sudo[1110484]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:06:34 power sudo[1110484]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:34 power sudo[1110484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:34 power sudo[1110484]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:36 power sudo[1110614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:36 power sudo[1110614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:36 power sudo[1110614]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:36 power sudo[1110619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:06:36 power sudo[1110619]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:06:36 power sudo[1110619]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:06:36 power sudo[1110619]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:06:36 power sudo[1110619]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:36 power sudo[1110619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:36 power sudo[1110619]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:36 power sudo[1110624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:06:36 power sudo[1110624]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:06:36 power sudo[1110624]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:06:36 power sudo[1110624]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:06:36 power sudo[1110624]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:36 power sudo[1110624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:36 power sudo[1110624]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:36 power sudo[1110629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:06:36 power sudo[1110629]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:06:36 power sudo[1110629]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:06:36 power sudo[1110629]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:06:36 power sudo[1110629]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:36 power sudo[1110629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:36 power sudo[1110629]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:37 power sudo[1110681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep  9 05:06:37 power sudo[1110681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:37 power sudo[1110681]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:37 power sudo[1110689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=intelek1 --output=json'
Sep  9 05:06:37 power sudo[1110689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:37 power sudo[1110689]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:42 power sudo[1110826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:06:42 power sudo[1110826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:42 power sudo[1110826]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:42 power sudo[1110833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user intelek1 --user-current --json'
Sep  9 05:06:42 power sudo[1110833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:42 power sudo[1110833]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:42 power sudo[1110841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 LangPHP php_get_vhost_versions --output=json'
Sep  9 05:06:42 power sudo[1110841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:42 power sudo[1110841]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:42 power sudo[1110846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:06:42 power sudo[1110846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:42 power sudo[1110846]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:43 power sudo[1110862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DomainInfo single_domain_data domain=intelekt-bb.com return_https_redirect_status=1 --output=json'
Sep  9 05:06:43 power sudo[1110862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:43 power sudo[1110862]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:43 power sudo[1110868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 Mime list_redirects --output=json'
Sep  9 05:06:43 power sudo[1110868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:43 power sudo[1110868]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:46 power sudo[1110963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DirectoryPrivacy is_directory_protected dir=/home/intelek1/public_html --output=json'
Sep  9 05:06:46 power sudo[1110963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:46 power sudo[1110963]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:47 power sudo[1111031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:47 power sudo[1111031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:47 power sudo[1111031]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:47 power sudo[1111036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:06:47 power sudo[1111036]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:06:47 power sudo[1111036]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:06:47 power sudo[1111036]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:06:47 power sudo[1111036]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:47 power sudo[1111036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:47 power sudo[1111036]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:47 power sudo[1111041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:06:47 power sudo[1111041]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:06:47 power sudo[1111041]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:06:47 power sudo[1111041]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:06:47 power sudo[1111041]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:47 power sudo[1111041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:47 power sudo[1111041]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:47 power sudo[1111046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:06:47 power sudo[1111046]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:06:47 power sudo[1111046]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:06:47 power sudo[1111046]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:06:47 power sudo[1111046]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:47 power sudo[1111046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:47 power sudo[1111046]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:49 power sudo[1111173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:49 power sudo[1111173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:49 power sudo[1111173]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:49 power sudo[1111178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:06:49 power sudo[1111178]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:06:49 power sudo[1111178]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:06:49 power sudo[1111178]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:06:49 power sudo[1111178]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:49 power sudo[1111178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:49 power sudo[1111178]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:49 power sudo[1111183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:06:49 power sudo[1111183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:06:49 power sudo[1111183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:06:49 power sudo[1111183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:06:49 power sudo[1111183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:49 power sudo[1111183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:49 power sudo[1111183]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:49 power sudo[1111187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:06:49 power sudo[1111187]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:06:49 power sudo[1111187]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:06:49 power sudo[1111187]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:06:49 power sudo[1111187]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:06:49 power sudo[1111187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:49 power sudo[1111187]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:51 power sudo[1111273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=invoices.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep  9 05:06:51 power sudo[1111273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:51 power sudo[1111273]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:52 power sudo[1111320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/invoices.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:06:52 power sudo[1111320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:52 power sudo[1111320]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:52 power sudo[1111327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep  9 05:06:52 power sudo[1111327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:53 power sudo[1111327]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:53 power sudo[1111334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:06:53 power sudo[1111334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:53 power sudo[1111334]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:55 power sudo[1111427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/invoices.holiyaytravel.com --output=json'
Sep  9 05:06:55 power sudo[1111427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:55 power sudo[1111427]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:58 power sudo[1111650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep  9 05:06:58 power sudo[1111650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:59 power sudo[1111650]: pam_unix(sudo:session): session closed for user root
Sep  9 05:06:59 power sudo[1111657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jpparkin --output=json'
Sep  9 05:06:59 power sudo[1111657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:06:59 power sudo[1111657]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:01 power systemd[1111794]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 05:07:02 power sudo[1111834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin /bin/sh -c 'cd /home/jpparkin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:07:02 power sudo[1111834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:02 power sudo[1111834]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:02 power sudo[1111840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jpparkin --user-current --json'
Sep  9 05:07:02 power sudo[1111840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:03 power sudo[1111840]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:03 power sudo[1111851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin LangPHP php_get_vhost_versions --output=json'
Sep  9 05:07:03 power sudo[1111851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:03 power sudo[1111851]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:03 power sudo[1111858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:07:03 power sudo[1111858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:03 power sudo[1111858]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:03 power sudo[1111879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DomainInfo single_domain_data domain=jpparkinzinegotino.mk return_https_redirect_status=1 --output=json'
Sep  9 05:07:03 power sudo[1111879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:03 power sudo[1111879]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:03 power sudo[1111887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin Mime list_redirects --output=json'
Sep  9 05:07:03 power sudo[1111887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:03 power sudo[1111887]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:05 power sudo[1111973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DirectoryPrivacy is_directory_protected dir=/home/jpparkin/public_html --output=json'
Sep  9 05:07:05 power sudo[1111973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:05 power sudo[1111973]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:08 power sudo[1112181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep  9 05:07:09 power sudo[1112181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:09 power sudo[1112181]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:09 power sudo[1112189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=karpospo --output=json'
Sep  9 05:07:09 power sudo[1112189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:09 power sudo[1112189]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:13 power sudo[1112302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo /bin/sh -c 'cd /home/karpospo/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:07:13 power sudo[1112302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:13 power sudo[1112302]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:13 power sudo[1112308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user karpospo --user-current --json'
Sep  9 05:07:13 power sudo[1112308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:13 power sudo[1112308]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:13 power sudo[1112319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo LangPHP php_get_vhost_versions --output=json'
Sep  9 05:07:13 power sudo[1112319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:13 power sudo[1112319]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:13 power sudo[1112324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:07:13 power sudo[1112324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:13 power sudo[1112324]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:14 power sudo[1112338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DomainInfo single_domain_data domain=karpospoliklinika.com.mk return_https_redirect_status=1 --output=json'
Sep  9 05:07:14 power sudo[1112338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:14 power sudo[1112338]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:14 power sudo[1112345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo Mime list_redirects --output=json'
Sep  9 05:07:14 power sudo[1112345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:14 power sudo[1112345]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:17 power sudo[1112466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DirectoryPrivacy is_directory_protected dir=/home/karpospo/public_html --output=json'
Sep  9 05:07:17 power sudo[1112466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:17 power sudo[1112466]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:24 power sudo[1112769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:07:24 power sudo[1112769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:24 power sudo[1112769]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:24 power sudo[1112775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  9 05:07:24 power sudo[1112775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:24 power sudo[1112775]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:24 power sudo[1112782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:07:24 power sudo[1112782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:24 power sudo[1112782]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:24 power sudo[1112801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=kaysharov.com return_https_redirect_status=1 --output=json'
Sep  9 05:07:24 power sudo[1112801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:24 power sudo[1112801]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:27 power sudo[1112881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com --output=json'
Sep  9 05:07:27 power sudo[1112881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:27 power sudo[1112881]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:36 power sudo[1113221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:07:36 power sudo[1113221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:36 power sudo[1113221]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:36 power sudo[1113227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep  9 05:07:36 power sudo[1113227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:36 power sudo[1113227]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:36 power sudo[1113240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:07:36 power sudo[1113240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:36 power sudo[1113240]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:39 power sudo[1113359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com/test --output=json'
Sep  9 05:07:39 power sudo[1113359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:39 power sudo[1113359]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:44 power sudo[1113607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep  9 05:07:44 power sudo[1113607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:44 power sudo[1113607]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:44 power sudo[1113613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kolened1 --output=json'
Sep  9 05:07:44 power sudo[1113613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:44 power sudo[1113613]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:56 power sudo[1113883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:07:56 power sudo[1113883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:56 power sudo[1113883]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:56 power sudo[1113890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kolened1 --user-current --json'
Sep  9 05:07:56 power sudo[1113890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:57 power sudo[1113890]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:57 power sudo[1113900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 LangPHP php_get_vhost_versions --output=json'
Sep  9 05:07:57 power sudo[1113900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:57 power sudo[1113900]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:57 power sudo[1113909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:07:57 power sudo[1113909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:57 power sudo[1113909]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:57 power sudo[1113928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DomainInfo single_domain_data domain=kolenedelkovski.edu.mk return_https_redirect_status=1 --output=json'
Sep  9 05:07:57 power sudo[1113928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:57 power sudo[1113928]: pam_unix(sudo:session): session closed for user root
Sep  9 05:07:57 power sudo[1113937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 Mime list_redirects --output=json'
Sep  9 05:07:57 power sudo[1113937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:07:57 power sudo[1113937]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:03 power sudo[1114166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DirectoryPrivacy is_directory_protected dir=/home/kolened1/public_html --output=json'
Sep  9 05:08:03 power sudo[1114166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:03 power sudo[1114166]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:04 power sudo[1114231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:08:04 power sudo[1114231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:04 power sudo[1114231]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:04 power sudo[1114236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:08:04 power sudo[1114236]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:08:04 power sudo[1114236]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:08:04 power sudo[1114236]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:08:04 power sudo[1114236]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:08:04 power sudo[1114236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:04 power sudo[1114236]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:04 power sudo[1114241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:08:04 power sudo[1114241]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:08:04 power sudo[1114241]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:08:04 power sudo[1114241]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:08:04 power sudo[1114241]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:08:04 power sudo[1114241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:05 power sudo[1114241]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:42 power sudo[1114952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:08:42 power sudo[1114952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:42 power sudo[1114952]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:42 power sudo[1114957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:08:42 power sudo[1114957]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:08:42 power sudo[1114957]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:08:42 power sudo[1114957]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:08:42 power sudo[1114957]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:08:42 power sudo[1114957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:42 power sudo[1114957]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:42 power sudo[1114965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:08:42 power sudo[1114965]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:08:42 power sudo[1114965]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:08:42 power sudo[1114965]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:08:42 power sudo[1114965]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:08:42 power sudo[1114965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:42 power sudo[1114965]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:42 power sudo[1115005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep  9 05:08:42 power sudo[1115005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:43 power sudo[1115005]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:43 power sudo[1115014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kouzonco --output=json'
Sep  9 05:08:43 power sudo[1115014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:43 power sudo[1115014]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:46 power sudo[1115082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco /bin/sh -c 'cd /home/kouzonco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:08:46 power sudo[1115082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:46 power sudo[1115082]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:46 power sudo[1115088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kouzonco --user-current --json'
Sep  9 05:08:46 power sudo[1115088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:46 power sudo[1115088]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:46 power sudo[1115093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco LangPHP php_get_vhost_versions --output=json'
Sep  9 05:08:46 power sudo[1115093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:46 power sudo[1115093]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:46 power sudo[1115101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:08:46 power sudo[1115101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:46 power sudo[1115101]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:47 power sudo[1115120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DomainInfo single_domain_data domain=kouzon.com.hn return_https_redirect_status=1 --output=json'
Sep  9 05:08:47 power sudo[1115120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:47 power sudo[1115120]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:47 power sudo[1115126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco Mime list_redirects --output=json'
Sep  9 05:08:47 power sudo[1115126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:47 power sudo[1115126]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:49 power sudo[1115226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DirectoryPrivacy is_directory_protected dir=/home/kouzonco/public_html --output=json'
Sep  9 05:08:49 power sudo[1115226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:49 power sudo[1115226]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:53 power sudo[1115481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep  9 05:08:53 power sudo[1115481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:53 power sudo[1115481]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:53 power sudo[1115488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sprintst --output=json'
Sep  9 05:08:53 power sudo[1115488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:53 power sudo[1115488]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:58 power sudo[1115585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst /bin/sh -c 'cd /home/sprintst/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:08:58 power sudo[1115585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:58 power sudo[1115585]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:58 power sudo[1115591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sprintst --user-current --json'
Sep  9 05:08:58 power sudo[1115591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:58 power sudo[1115591]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:58 power sudo[1115598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst LangPHP php_get_vhost_versions --output=json'
Sep  9 05:08:58 power sudo[1115598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:58 power sudo[1115598]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:58 power sudo[1115606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:08:58 power sudo[1115606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:58 power sudo[1115606]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:59 power sudo[1115625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DomainInfo single_domain_data domain=kritiki.mk return_https_redirect_status=1 --output=json'
Sep  9 05:08:59 power sudo[1115625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:59 power sudo[1115625]: pam_unix(sudo:session): session closed for user root
Sep  9 05:08:59 power sudo[1115631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst Mime list_redirects --output=json'
Sep  9 05:08:59 power sudo[1115631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:08:59 power sudo[1115631]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:02 power sudo[1115750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DirectoryPrivacy is_directory_protected dir=/home/sprintst/public_html --output=json'
Sep  9 05:09:02 power sudo[1115750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:02 power sudo[1115750]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:06 power sudo[1116016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep  9 05:09:06 power sudo[1116016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:06 power sudo[1116016]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:06 power sudo[1116023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kujnamon --output=json'
Sep  9 05:09:06 power sudo[1116023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:06 power sudo[1116023]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:11 power sudo[1116149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon /bin/sh -c 'cd /home/kujnamon/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:09:11 power sudo[1116149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:11 power sudo[1116149]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:11 power sudo[1116155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kujnamon --user-current --json'
Sep  9 05:09:11 power sudo[1116155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:11 power sudo[1116155]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:11 power sudo[1116161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon LangPHP php_get_vhost_versions --output=json'
Sep  9 05:09:11 power sudo[1116161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:11 power sudo[1116161]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:11 power sudo[1116166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:09:11 power sudo[1116166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:11 power sudo[1116166]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:11 power sudo[1116182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DomainInfo single_domain_data domain=kujnamoni.mk return_https_redirect_status=1 --output=json'
Sep  9 05:09:12 power sudo[1116182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:12 power sudo[1116182]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:12 power sudo[1116192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon Mime list_redirects --output=json'
Sep  9 05:09:12 power sudo[1116192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:12 power sudo[1116192]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:14 power sudo[1116285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DirectoryPrivacy is_directory_protected dir=/home/kujnamon/public_html --output=json'
Sep  9 05:09:14 power sudo[1116285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:15 power sudo[1116285]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:22 power sudo[1116590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/love.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:09:22 power sudo[1116590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:22 power sudo[1116590]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:22 power sudo[1116598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  9 05:09:22 power sudo[1116598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:22 power sudo[1116598]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:22 power sudo[1116613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:09:22 power sudo[1116613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:22 power sudo[1116613]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:23 power sudo[1116636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=love.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 05:09:23 power sudo[1116636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:23 power sudo[1116636]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:26 power sudo[1116757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/love.cetplatform.mk --output=json'
Sep  9 05:09:26 power sudo[1116757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:26 power sudo[1116757]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:30 power sudo[1117003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep  9 05:09:30 power sudo[1117003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:30 power sudo[1117003]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:30 power sudo[1117015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makdrone --output=json'
Sep  9 05:09:30 power sudo[1117015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:30 power sudo[1117015]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:34 power sudo[1117118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:09:34 power sudo[1117118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:34 power sudo[1117118]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:34 power sudo[1117125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makdrone --user-current --json'
Sep  9 05:09:34 power sudo[1117125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:35 power sudo[1117125]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:35 power sudo[1117138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone LangPHP php_get_vhost_versions --output=json'
Sep  9 05:09:35 power sudo[1117138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:35 power sudo[1117138]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:35 power sudo[1117144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:09:35 power sudo[1117144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:35 power sudo[1117144]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:35 power sudo[1117161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DomainInfo single_domain_data domain=makdrone.mk return_https_redirect_status=1 --output=json'
Sep  9 05:09:35 power sudo[1117161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:35 power sudo[1117161]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:35 power sudo[1117168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone Mime list_redirects --output=json'
Sep  9 05:09:35 power sudo[1117168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:35 power sudo[1117168]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:38 power sudo[1117273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DirectoryPrivacy is_directory_protected dir=/home/makdrone/public_html --output=json'
Sep  9 05:09:38 power sudo[1117273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:38 power sudo[1117273]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:39 power sudo[1117388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:09:39 power sudo[1117388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:39 power sudo[1117388]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:39 power sudo[1117396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:09:39 power sudo[1117396]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:09:39 power sudo[1117396]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:09:39 power sudo[1117396]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:09:39 power sudo[1117396]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:09:39 power sudo[1117396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:39 power sudo[1117396]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:39 power sudo[1117403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:09:39 power sudo[1117403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:09:39 power sudo[1117403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:09:39 power sudo[1117403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:09:39 power sudo[1117403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:09:39 power sudo[1117403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:39 power sudo[1117403]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:39 power sudo[1117414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:09:39 power sudo[1117414]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:09:39 power sudo[1117414]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:09:39 power sudo[1117414]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:09:39 power sudo[1117414]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:09:39 power sudo[1117414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:39 power sudo[1117414]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:41 power sudo[1117579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:09:41 power sudo[1117579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:41 power sudo[1117579]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:41 power sudo[1117586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:09:41 power sudo[1117586]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:09:41 power sudo[1117586]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:09:41 power sudo[1117586]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:09:41 power sudo[1117586]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:09:41 power sudo[1117586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:42 power sudo[1117586]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:42 power sudo[1117591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:09:42 power sudo[1117591]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:09:42 power sudo[1117591]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:09:42 power sudo[1117591]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:09:42 power sudo[1117591]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:09:42 power sudo[1117591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:42 power sudo[1117591]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:42 power sudo[1117599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:09:42 power sudo[1117599]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:09:42 power sudo[1117599]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:09:42 power sudo[1117599]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:09:42 power sudo[1117599]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:09:42 power sudo[1117599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:42 power sudo[1117599]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:42 power sudo[1117688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep  9 05:09:42 power sudo[1117688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:43 power sudo[1117688]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:43 power sudo[1117702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makoasmk --output=json'
Sep  9 05:09:43 power sudo[1117702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:43 power sudo[1117702]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:48 power sudo[1117809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk /bin/sh -c 'cd /home/makoasmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:09:48 power sudo[1117809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:48 power sudo[1117809]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:48 power sudo[1117816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makoasmk --user-current --json'
Sep  9 05:09:48 power sudo[1117816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:48 power sudo[1117816]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:48 power sudo[1117828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk LangPHP php_get_vhost_versions --output=json'
Sep  9 05:09:48 power sudo[1117828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:48 power sudo[1117828]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:48 power sudo[1117835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:09:48 power sudo[1117835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:48 power sudo[1117835]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:48 power sudo[1117851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DomainInfo single_domain_data domain=makoas.mk return_https_redirect_status=1 --output=json'
Sep  9 05:09:48 power sudo[1117851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:48 power sudo[1117851]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:48 power sudo[1117857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk Mime list_redirects --output=json'
Sep  9 05:09:48 power sudo[1117857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:48 power sudo[1117857]: pam_unix(sudo:session): session closed for user root
Sep  9 05:09:53 power sudo[1117979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DirectoryPrivacy is_directory_protected dir=/home/makoasmk/public_html --output=json'
Sep  9 05:09:53 power sudo[1117979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:09:53 power sudo[1117979]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:01 power sudo[1118291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/mango.ambitioussolutions.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:10:01 power sudo[1118291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:01 power sudo[1118291]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:01 power sudo[1118299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep  9 05:10:01 power sudo[1118299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:01 power sudo[1118299]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:01 power sudo[1118395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:10:01 power sudo[1118395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:01 power systemd[1118401]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:10:01 power sudo[1118395]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:02 power sudo[1118467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=mango.ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep  9 05:10:02 power sudo[1118467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:02 power sudo[1118467]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:06 power sudo[1118613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/mango.ambitioussolutions.mk --output=json'
Sep  9 05:10:06 power sudo[1118613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:06 power sudo[1118613]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:15 power sudo[1118981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/mkvesti.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:10:15 power sudo[1118981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:15 power sudo[1118981]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:15 power sudo[1118990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep  9 05:10:15 power sudo[1118990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:15 power sudo[1118990]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:15 power sudo[1118995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:10:15 power sudo[1118995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:15 power sudo[1118995]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:15 power sudo[1119013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=mkvesti.mk return_https_redirect_status=1 --output=json'
Sep  9 05:10:15 power sudo[1119013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:16 power sudo[1119013]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:19 power sudo[1119135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/mkvesti.mk --output=json'
Sep  9 05:10:19 power sudo[1119135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:19 power sudo[1119135]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:25 power sudo[1119454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep  9 05:10:25 power sudo[1119454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:26 power sudo[1119454]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:26 power sudo[1119465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=modernar --output=json'
Sep  9 05:10:26 power sudo[1119465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:26 power sudo[1119465]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:30 power sudo[1119557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:10:30 power sudo[1119557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:30 power sudo[1119557]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:30 power sudo[1119563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user modernar --user-current --json'
Sep  9 05:10:30 power sudo[1119563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:30 power sudo[1119563]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:30 power sudo[1119571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar LangPHP php_get_vhost_versions --output=json'
Sep  9 05:10:30 power sudo[1119571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:30 power sudo[1119571]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:30 power sudo[1119577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:10:30 power sudo[1119577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:30 power sudo[1119577]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:31 power sudo[1119604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DomainInfo single_domain_data domain=modernart.mk return_https_redirect_status=1 --output=json'
Sep  9 05:10:31 power sudo[1119604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:31 power sudo[1119604]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:31 power sudo[1119609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar Mime list_redirects --output=json'
Sep  9 05:10:31 power sudo[1119609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:31 power sudo[1119609]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:34 power sudo[1119706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DirectoryPrivacy is_directory_protected dir=/home/modernar/public_html --output=json'
Sep  9 05:10:34 power sudo[1119706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:34 power sudo[1119706]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:35 power sudo[1119775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:10:35 power sudo[1119775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:35 power sudo[1119775]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:35 power sudo[1119780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:10:35 power sudo[1119780]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:10:35 power sudo[1119780]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:10:35 power sudo[1119780]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:10:35 power sudo[1119780]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:10:35 power sudo[1119780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:35 power sudo[1119780]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:35 power sudo[1119786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:10:35 power sudo[1119786]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:10:35 power sudo[1119786]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:10:35 power sudo[1119786]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:10:35 power sudo[1119786]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:10:35 power sudo[1119786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:35 power sudo[1119786]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:35 power sudo[1119792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:10:35 power sudo[1119792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:10:35 power sudo[1119792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:10:35 power sudo[1119792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:10:35 power sudo[1119792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:10:35 power sudo[1119792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:35 power sudo[1119792]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:37 power sudo[1119938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:10:37 power sudo[1119938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:37 power sudo[1119938]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:37 power sudo[1119944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:10:37 power sudo[1119944]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:10:37 power sudo[1119944]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:10:37 power sudo[1119944]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:10:37 power sudo[1119944]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:10:37 power sudo[1119944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:37 power sudo[1119944]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:37 power sudo[1119949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:10:37 power sudo[1119949]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:10:37 power sudo[1119949]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:10:37 power sudo[1119949]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:10:37 power sudo[1119949]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:10:37 power sudo[1119949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:37 power sudo[1119949]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:37 power sudo[1119954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:10:37 power sudo[1119954]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:10:37 power sudo[1119954]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:10:37 power sudo[1119954]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:10:37 power sudo[1119954]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:10:37 power sudo[1119954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:37 power sudo[1119954]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:41 power sudo[1120122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:10:41 power sudo[1120122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:42 power sudo[1120122]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:42 power sudo[1120129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep  9 05:10:42 power sudo[1120129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:42 power sudo[1120129]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:42 power sudo[1120141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:10:42 power sudo[1120141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:42 power sudo[1120141]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:42 power sudo[1120160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=momcurls.com return_https_redirect_status=1 --output=json'
Sep  9 05:10:42 power sudo[1120160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:42 power sudo[1120160]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:44 power sudo[1120245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/public_html --output=json'
Sep  9 05:10:44 power sudo[1120245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:44 power sudo[1120245]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:49 power sudo[1120499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep  9 05:10:49 power sudo[1120499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:49 power sudo[1120499]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:49 power sudo[1120508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mpbmk --output=json'
Sep  9 05:10:49 power sudo[1120508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:49 power sudo[1120508]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:51 power sudo[1120570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk /bin/sh -c 'cd /home/mpbmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:10:51 power sudo[1120570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:51 power sudo[1120570]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:51 power sudo[1120585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mpbmk --user-current --json'
Sep  9 05:10:51 power sudo[1120585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:51 power sudo[1120585]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:51 power sudo[1120592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk LangPHP php_get_vhost_versions --output=json'
Sep  9 05:10:51 power sudo[1120592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:51 power sudo[1120592]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:51 power sudo[1120601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:10:51 power sudo[1120601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:51 power sudo[1120601]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:51 power sudo[1120616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DomainInfo single_domain_data domain=mpb.mk return_https_redirect_status=1 --output=json'
Sep  9 05:10:51 power sudo[1120616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:52 power sudo[1120616]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:52 power sudo[1120623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk Mime list_redirects --output=json'
Sep  9 05:10:52 power sudo[1120623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:52 power sudo[1120623]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:53 power sudo[1120729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DirectoryPrivacy is_directory_protected dir=/home/mpbmk/public_html --output=json'
Sep  9 05:10:53 power sudo[1120729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:53 power sudo[1120729]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:56 power sudo[1120944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep  9 05:10:56 power sudo[1120944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:56 power sudo[1120944]: pam_unix(sudo:session): session closed for user root
Sep  9 05:10:56 power sudo[1120949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mspmk --output=json'
Sep  9 05:10:56 power sudo[1120949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:10:56 power sudo[1120949]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:02 power sudo[1121073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk /bin/sh -c 'cd /home/mspmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:11:02 power sudo[1121073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:02 power sudo[1121073]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:02 power sudo[1121080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mspmk --user-current --json'
Sep  9 05:11:02 power sudo[1121080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:02 power sudo[1121080]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:02 power sudo[1121093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk LangPHP php_get_vhost_versions --output=json'
Sep  9 05:11:02 power sudo[1121093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:03 power sudo[1121093]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:03 power sudo[1121099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:11:03 power sudo[1121099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:03 power sudo[1121099]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:03 power sudo[1121118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DomainInfo single_domain_data domain=msp.mk return_https_redirect_status=1 --output=json'
Sep  9 05:11:03 power sudo[1121118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:03 power sudo[1121118]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:03 power sudo[1121125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk Mime list_redirects --output=json'
Sep  9 05:11:03 power sudo[1121125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:03 power sudo[1121125]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:07 power sudo[1121273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DirectoryPrivacy is_directory_protected dir=/home/mspmk/public_html --output=json'
Sep  9 05:11:07 power sudo[1121273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:07 power sudo[1121273]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:11 power sudo[1121532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep  9 05:11:11 power sudo[1121532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:11 power sudo[1121532]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:11 power sudo[1121540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mstmmk --output=json'
Sep  9 05:11:11 power sudo[1121540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:11 power sudo[1121540]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:15 power sudo[1121628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk /bin/sh -c 'cd /home/mstmmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:11:15 power sudo[1121628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:15 power sudo[1121628]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:15 power sudo[1121635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mstmmk --user-current --json'
Sep  9 05:11:15 power sudo[1121635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:15 power sudo[1121635]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:15 power sudo[1121640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk LangPHP php_get_vhost_versions --output=json'
Sep  9 05:11:15 power sudo[1121640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:15 power sudo[1121640]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:15 power sudo[1121646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:11:15 power sudo[1121646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:15 power sudo[1121646]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:16 power sudo[1121670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DomainInfo single_domain_data domain=mstm.mk return_https_redirect_status=1 --output=json'
Sep  9 05:11:16 power sudo[1121670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:16 power sudo[1121670]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:16 power sudo[1121677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk Mime list_redirects --output=json'
Sep  9 05:11:16 power sudo[1121677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:16 power sudo[1121677]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:19 power sudo[1121785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DirectoryPrivacy is_directory_protected dir=/home/mstmmk/public_html --output=json'
Sep  9 05:11:19 power sudo[1121785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:19 power sudo[1121785]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:22 power sudo[1121986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep  9 05:11:22 power sudo[1121986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:22 power sudo[1121986]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:22 power sudo[1121991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=naksorgm --output=json'
Sep  9 05:11:22 power sudo[1121991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:22 power sudo[1121991]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:30 power sudo[1122138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm /bin/sh -c 'cd /home/naksorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:11:30 power sudo[1122138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:30 power sudo[1122138]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:30 power sudo[1122145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user naksorgm --user-current --json'
Sep  9 05:11:30 power sudo[1122145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:30 power sudo[1122145]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:30 power sudo[1122153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm LangPHP php_get_vhost_versions --output=json'
Sep  9 05:11:30 power sudo[1122153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:30 power sudo[1122153]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:30 power sudo[1122160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:11:30 power sudo[1122160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:30 power sudo[1122160]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:30 power sudo[1122176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DomainInfo single_domain_data domain=naks.org.mk return_https_redirect_status=1 --output=json'
Sep  9 05:11:31 power sudo[1122176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:31 power sudo[1122176]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:31 power sudo[1122184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm Mime list_redirects --output=json'
Sep  9 05:11:31 power sudo[1122184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:31 power sudo[1122184]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:35 power sudo[1122345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DirectoryPrivacy is_directory_protected dir=/home/naksorgm/public_html --output=json'
Sep  9 05:11:35 power sudo[1122345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:35 power sudo[1122345]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:39 power sudo[1122560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep  9 05:11:39 power sudo[1122560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:39 power sudo[1122560]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:39 power sudo[1122568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nasaidni --output=json'
Sep  9 05:11:39 power sudo[1122568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:39 power sudo[1122568]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:42 power sudo[1122677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html/test.nasaidnina.com.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:11:42 power sudo[1122677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:42 power sudo[1122677]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:42 power sudo[1122683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep  9 05:11:43 power sudo[1122683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:43 power sudo[1122683]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:43 power sudo[1122692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni LangPHP php_get_vhost_versions --output=json'
Sep  9 05:11:43 power sudo[1122692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:43 power sudo[1122692]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:43 power sudo[1122697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:11:43 power sudo[1122697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:43 power sudo[1122697]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:43 power sudo[1122715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=test.nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep  9 05:11:43 power sudo[1122715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:43 power sudo[1122715]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:43 power sudo[1122722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni Mime list_redirects --output=json'
Sep  9 05:11:43 power sudo[1122722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:43 power sudo[1122722]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:46 power sudo[1122823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html/test.nasaidnina.com.mk/wp --output=json'
Sep  9 05:11:46 power sudo[1122823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:47 power sudo[1122823]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:53 power sudo[1123126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:11:53 power sudo[1123126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:53 power sudo[1123126]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:53 power sudo[1123140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep  9 05:11:53 power sudo[1123140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:53 power sudo[1123140]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:53 power sudo[1123149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:11:53 power sudo[1123149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:53 power sudo[1123149]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:53 power sudo[1123163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep  9 05:11:53 power sudo[1123163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:53 power sudo[1123163]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:56 power sudo[1123266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html --output=json'
Sep  9 05:11:56 power sudo[1123266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:11:56 power sudo[1123266]: pam_unix(sudo:session): session closed for user root
Sep  9 05:11:59 power sudo[1123477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep  9 05:11:59 power sudo[1123477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:00 power sudo[1123477]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:00 power sudo[1123487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ismassag --output=json'
Sep  9 05:12:00 power sudo[1123487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:00 power sudo[1123487]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:01 power systemd[1123550]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 05:12:07 power sudo[1123738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag /bin/sh -c 'cd /home/ismassag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:12:07 power sudo[1123738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:07 power sudo[1123738]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:07 power sudo[1123744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ismassag --user-current --json'
Sep  9 05:12:07 power sudo[1123744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:07 power sudo[1123744]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:07 power sudo[1123755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag LangPHP php_get_vhost_versions --output=json'
Sep  9 05:12:07 power sudo[1123755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:08 power sudo[1123755]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:08 power sudo[1123760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:12:08 power sudo[1123760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:08 power sudo[1123760]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:08 power sudo[1123781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DomainInfo single_domain_data domain=needmassagetherapy.co.uk return_https_redirect_status=1 --output=json'
Sep  9 05:12:08 power sudo[1123781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:08 power sudo[1123781]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:08 power sudo[1123788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag Mime list_redirects --output=json'
Sep  9 05:12:08 power sudo[1123788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:08 power sudo[1123788]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:12 power sudo[1123931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DirectoryPrivacy is_directory_protected dir=/home/ismassag/public_html --output=json'
Sep  9 05:12:12 power sudo[1123931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:12 power sudo[1123931]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:20 power sudo[1124443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:12:20 power sudo[1124443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:20 power sudo[1124443]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:20 power sudo[1124450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep  9 05:12:20 power sudo[1124450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:20 power sudo[1124450]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:20 power sudo[1124457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:12:20 power sudo[1124457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:20 power sudo[1124457]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:21 power sudo[1124481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=new.chemhem.com return_https_redirect_status=1 --output=json'
Sep  9 05:12:21 power sudo[1124481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:21 power sudo[1124481]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:23 power sudo[1124580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/new.chemhem.com --output=json'
Sep  9 05:12:23 power sudo[1124580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:23 power sudo[1124580]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:24 power sudo[1124652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:24 power sudo[1124652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:24 power sudo[1124652]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:24 power sudo[1124657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  9 05:12:24 power sudo[1124657]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  9 05:12:24 power sudo[1124657]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  9 05:12:24 power sudo[1124657]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  9 05:12:24 power sudo[1124657]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:24 power sudo[1124657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:24 power sudo[1124657]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:24 power sudo[1124663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  9 05:12:24 power sudo[1124663]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  9 05:12:24 power sudo[1124663]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  9 05:12:24 power sudo[1124663]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  9 05:12:24 power sudo[1124663]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:24 power sudo[1124663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:24 power sudo[1124663]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:24 power sudo[1124668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep  9 05:12:24 power sudo[1124668]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep  9 05:12:24 power sudo[1124668]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep  9 05:12:24 power sudo[1124668]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep  9 05:12:24 power sudo[1124668]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:24 power sudo[1124668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:24 power sudo[1124668]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:26 power sudo[1124789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:26 power sudo[1124789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:26 power sudo[1124789]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:26 power sudo[1124794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  9 05:12:26 power sudo[1124794]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  9 05:12:26 power sudo[1124794]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  9 05:12:26 power sudo[1124794]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  9 05:12:26 power sudo[1124794]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:27 power sudo[1124794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:27 power sudo[1124794]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:27 power sudo[1124799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  9 05:12:27 power sudo[1124799]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  9 05:12:27 power sudo[1124799]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  9 05:12:27 power sudo[1124799]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  9 05:12:27 power sudo[1124799]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:27 power sudo[1124799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:27 power sudo[1124799]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:27 power sudo[1124806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep  9 05:12:27 power sudo[1124806]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep  9 05:12:27 power sudo[1124806]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep  9 05:12:27 power sudo[1124806]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep  9 05:12:27 power sudo[1124806]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:27 power sudo[1124806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:27 power sudo[1124806]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:27 power sudo[1124851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep  9 05:12:27 power sudo[1124851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:28 power sudo[1124851]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:28 power sudo[1124860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikolov1 --output=json'
Sep  9 05:12:28 power sudo[1124860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:28 power sudo[1124860]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:32 power sudo[1124972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:12:32 power sudo[1124972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:32 power sudo[1124972]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:32 power sudo[1124979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikolov1 --user-current --json'
Sep  9 05:12:32 power sudo[1124979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:32 power sudo[1124979]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:32 power sudo[1124988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 LangPHP php_get_vhost_versions --output=json'
Sep  9 05:12:32 power sudo[1124988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:32 power sudo[1124988]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:32 power sudo[1124994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:12:32 power sudo[1124994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:32 power sudo[1124994]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:33 power sudo[1125008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DomainInfo single_domain_data domain=nikolovproduction.com return_https_redirect_status=1 --output=json'
Sep  9 05:12:33 power sudo[1125008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:33 power sudo[1125008]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:33 power sudo[1125014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 Mime list_redirects --output=json'
Sep  9 05:12:33 power sudo[1125014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:33 power sudo[1125014]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:35 power sudo[1125112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DirectoryPrivacy is_directory_protected dir=/home/nikolov1/public_html --output=json'
Sep  9 05:12:35 power sudo[1125112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:35 power sudo[1125112]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:36 power sudo[1125173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:36 power sudo[1125173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:36 power sudo[1125173]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:36 power sudo[1125178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:12:36 power sudo[1125178]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:12:36 power sudo[1125178]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:12:36 power sudo[1125178]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:12:36 power sudo[1125178]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:36 power sudo[1125178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:36 power sudo[1125178]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:36 power sudo[1125183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:12:36 power sudo[1125183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:12:36 power sudo[1125183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:12:36 power sudo[1125183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:12:36 power sudo[1125183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:36 power sudo[1125183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:36 power sudo[1125183]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:36 power sudo[1125188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:12:36 power sudo[1125188]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:12:36 power sudo[1125188]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:12:36 power sudo[1125188]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:12:36 power sudo[1125188]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:36 power sudo[1125188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:36 power sudo[1125188]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:38 power sudo[1125308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:38 power sudo[1125308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:38 power sudo[1125308]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:38 power sudo[1125313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:12:38 power sudo[1125313]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:12:38 power sudo[1125313]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:12:38 power sudo[1125313]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:12:38 power sudo[1125313]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:38 power sudo[1125313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:38 power sudo[1125313]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:38 power sudo[1125318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:12:38 power sudo[1125318]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:12:38 power sudo[1125318]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:12:38 power sudo[1125318]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:12:38 power sudo[1125318]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:38 power sudo[1125318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:38 power sudo[1125318]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:38 power sudo[1125323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:12:38 power sudo[1125323]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:12:38 power sudo[1125323]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:12:38 power sudo[1125323]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:12:38 power sudo[1125323]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:12:38 power sudo[1125323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:39 power sudo[1125323]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:39 power sudo[1125371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep  9 05:12:39 power sudo[1125371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:39 power sudo[1125371]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:39 power sudo[1125381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nolimits --output=json'
Sep  9 05:12:39 power sudo[1125381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:40 power sudo[1125381]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:44 power sudo[1125506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits /bin/sh -c 'cd /home/nolimits/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:12:44 power sudo[1125506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:44 power sudo[1125506]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:44 power sudo[1125514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nolimits --user-current --json'
Sep  9 05:12:44 power sudo[1125514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:44 power sudo[1125514]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:44 power sudo[1125536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits LangPHP php_get_vhost_versions --output=json'
Sep  9 05:12:44 power sudo[1125536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:45 power sudo[1125536]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:45 power sudo[1125549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:12:45 power sudo[1125549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:45 power sudo[1125549]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:45 power sudo[1125572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DomainInfo single_domain_data domain=nolimits.mk return_https_redirect_status=1 --output=json'
Sep  9 05:12:45 power sudo[1125572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:45 power sudo[1125572]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:45 power sudo[1125581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits Mime list_redirects --output=json'
Sep  9 05:12:45 power sudo[1125581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:45 power sudo[1125581]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:47 power sudo[1125684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DirectoryPrivacy is_directory_protected dir=/home/nolimits/public_html/tru-find --output=json'
Sep  9 05:12:47 power sudo[1125684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:47 power sudo[1125684]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:50 power sudo[1125898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep  9 05:12:50 power sudo[1125898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:51 power sudo[1125898]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:51 power sudo[1125904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=onlinesh --output=json'
Sep  9 05:12:51 power sudo[1125904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:51 power sudo[1125904]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:54 power sudo[1126008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh /bin/sh -c 'cd /home/onlinesh/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:12:54 power sudo[1126008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:54 power sudo[1126008]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:54 power sudo[1126018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user onlinesh --user-current --json'
Sep  9 05:12:54 power sudo[1126018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:54 power sudo[1126018]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:54 power sudo[1126023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh LangPHP php_get_vhost_versions --output=json'
Sep  9 05:12:54 power sudo[1126023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:54 power sudo[1126023]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:54 power sudo[1126029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:12:54 power sudo[1126029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:54 power sudo[1126029]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:55 power sudo[1126045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DomainInfo single_domain_data domain=onlineshop.com.mk return_https_redirect_status=1 --output=json'
Sep  9 05:12:55 power sudo[1126045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:55 power sudo[1126045]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:55 power sudo[1126051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh Mime list_redirects --output=json'
Sep  9 05:12:55 power sudo[1126051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:55 power sudo[1126051]: pam_unix(sudo:session): session closed for user root
Sep  9 05:12:57 power sudo[1126138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DirectoryPrivacy is_directory_protected dir=/home/onlinesh/public_html --output=json'
Sep  9 05:12:57 power sudo[1126138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:12:57 power sudo[1126138]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:01 power sudo[1126365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep  9 05:13:01 power sudo[1126365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:01 power sudo[1126365]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:01 power sudo[1126375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=palenzok --output=json'
Sep  9 05:13:01 power sudo[1126375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:01 power sudo[1126375]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:05 power sudo[1126478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok /bin/sh -c 'cd /home/palenzok/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:13:05 power sudo[1126478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:05 power sudo[1126478]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:05 power sudo[1126488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user palenzok --user-current --json'
Sep  9 05:13:05 power sudo[1126488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:05 power sudo[1126488]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:05 power sudo[1126499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok LangPHP php_get_vhost_versions --output=json'
Sep  9 05:13:05 power sudo[1126499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:05 power sudo[1126499]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:05 power sudo[1126506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:13:05 power sudo[1126506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:05 power sudo[1126506]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:06 power sudo[1126568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DomainInfo single_domain_data domain=palenzokompani.mk return_https_redirect_status=1 --output=json'
Sep  9 05:13:06 power sudo[1126568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:06 power sudo[1126568]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:06 power sudo[1126578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok Mime list_redirects --output=json'
Sep  9 05:13:06 power sudo[1126578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:06 power sudo[1126578]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:09 power sudo[1126699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DirectoryPrivacy is_directory_protected dir=/home/palenzok/public_html --output=json'
Sep  9 05:13:09 power sudo[1126699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:09 power sudo[1126699]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:12 power sudo[1126949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep  9 05:13:12 power sudo[1126949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:13 power sudo[1126949]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:13 power sudo[1126957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pelagoni --output=json'
Sep  9 05:13:13 power sudo[1126957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:13 power sudo[1126957]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:17 power sudo[1127084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni /bin/sh -c 'cd /home/pelagoni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:13:17 power sudo[1127084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:17 power sudo[1127084]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:17 power sudo[1127090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pelagoni --user-current --json'
Sep  9 05:13:17 power sudo[1127090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:18 power sudo[1127090]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:18 power sudo[1127099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni LangPHP php_get_vhost_versions --output=json'
Sep  9 05:13:18 power sudo[1127099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:18 power sudo[1127099]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:18 power sudo[1127106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:13:18 power sudo[1127106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:18 power sudo[1127106]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:19 power sudo[1127135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DomainInfo single_domain_data domain=pelagonijaregion.mk return_https_redirect_status=1 --output=json'
Sep  9 05:13:19 power sudo[1127135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:19 power sudo[1127135]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:19 power sudo[1127143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni Mime list_redirects --output=json'
Sep  9 05:13:19 power sudo[1127143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:19 power sudo[1127143]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:22 power sudo[1127254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DirectoryPrivacy is_directory_protected dir=/home/pelagoni/public_html/p --output=json'
Sep  9 05:13:22 power sudo[1127254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:22 power sudo[1127254]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:26 power sudo[1127474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep  9 05:13:26 power sudo[1127474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:26 power sudo[1127474]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:26 power sudo[1127481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=biplmk --output=json'
Sep  9 05:13:26 power sudo[1127481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:26 power sudo[1127481]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:30 power sudo[1127571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk /bin/sh -c 'cd /home/biplmk/petstop.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:13:30 power sudo[1127571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:30 power sudo[1127571]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:30 power sudo[1127577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user biplmk --user-current --json'
Sep  9 05:13:30 power sudo[1127577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:30 power sudo[1127577]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:30 power sudo[1127590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk LangPHP php_get_vhost_versions --output=json'
Sep  9 05:13:30 power sudo[1127590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:30 power sudo[1127590]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:30 power sudo[1127594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:13:30 power sudo[1127594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:30 power sudo[1127594]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:30 power sudo[1127616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DomainInfo single_domain_data domain=petstop.mk return_https_redirect_status=1 --output=json'
Sep  9 05:13:30 power sudo[1127616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:30 power sudo[1127616]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:31 power sudo[1127623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk Mime list_redirects --output=json'
Sep  9 05:13:31 power sudo[1127623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:31 power sudo[1127623]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:33 power sudo[1127713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DirectoryPrivacy is_directory_protected dir=/home/biplmk/petstop.mk/wp --output=json'
Sep  9 05:13:33 power sudo[1127713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:34 power sudo[1127713]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:36 power sudo[1127942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep  9 05:13:37 power sudo[1127942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:37 power sudo[1127942]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:37 power sudo[1127949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=premiumi --output=json'
Sep  9 05:13:37 power sudo[1127949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:37 power sudo[1127949]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:40 power sudo[1128058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:13:40 power sudo[1128058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:40 power sudo[1128058]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:40 power sudo[1128064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user premiumi --user-current --json'
Sep  9 05:13:40 power sudo[1128064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:41 power sudo[1128064]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:41 power sudo[1128071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi LangPHP php_get_vhost_versions --output=json'
Sep  9 05:13:41 power sudo[1128071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:41 power sudo[1128071]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:41 power sudo[1128077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:13:41 power sudo[1128077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:41 power sudo[1128077]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:41 power sudo[1128096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DomainInfo single_domain_data domain=premiuminsurance.mk return_https_redirect_status=1 --output=json'
Sep  9 05:13:41 power sudo[1128096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:41 power sudo[1128096]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:41 power sudo[1128103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi Mime list_redirects --output=json'
Sep  9 05:13:41 power sudo[1128103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:41 power sudo[1128103]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:44 power sudo[1128202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DirectoryPrivacy is_directory_protected dir=/home/premiumi/public_html --output=json'
Sep  9 05:13:44 power sudo[1128202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:44 power sudo[1128202]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:44 power sudo[1128247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:13:44 power sudo[1128247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:44 power sudo[1128247]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:44 power sudo[1128252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:13:44 power sudo[1128252]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:13:44 power sudo[1128252]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:13:44 power sudo[1128252]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:13:44 power sudo[1128252]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:13:44 power sudo[1128252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:44 power sudo[1128252]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:44 power sudo[1128258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:13:44 power sudo[1128258]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:13:44 power sudo[1128258]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:13:44 power sudo[1128258]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:13:44 power sudo[1128258]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:13:44 power sudo[1128258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:44 power sudo[1128258]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:44 power sudo[1128263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:13:44 power sudo[1128263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:13:44 power sudo[1128263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:13:44 power sudo[1128263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:13:44 power sudo[1128263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:13:44 power sudo[1128263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:44 power sudo[1128263]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:47 power sudo[1128408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:13:47 power sudo[1128408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:47 power sudo[1128408]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:47 power sudo[1128413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:13:47 power sudo[1128413]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:13:47 power sudo[1128413]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:13:47 power sudo[1128413]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:13:47 power sudo[1128413]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:13:47 power sudo[1128413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:47 power sudo[1128413]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:47 power sudo[1128418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:13:47 power sudo[1128418]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:13:47 power sudo[1128418]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:13:47 power sudo[1128418]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:13:47 power sudo[1128418]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:13:47 power sudo[1128418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:47 power sudo[1128418]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:47 power sudo[1128428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:13:47 power sudo[1128428]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:13:47 power sudo[1128428]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:13:47 power sudo[1128428]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:13:47 power sudo[1128428]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:13:47 power sudo[1128428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:47 power sudo[1128428]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:52 power sudo[1128562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:13:52 power sudo[1128562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:52 power sudo[1128562]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:52 power sudo[1128568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep  9 05:13:52 power sudo[1128568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:52 power sudo[1128568]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:52 power sudo[1128574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:13:52 power sudo[1128574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:52 power sudo[1128574]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:53 power sudo[1128597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep  9 05:13:53 power sudo[1128597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:53 power sudo[1128597]: pam_unix(sudo:session): session closed for user root
Sep  9 05:13:56 power sudo[1128694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/public_html --output=json'
Sep  9 05:13:56 power sudo[1128694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:13:56 power sudo[1128694]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:00 power sudo[1128934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep  9 05:14:01 power sudo[1128934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:01 power sudo[1128934]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:01 power sudo[1128940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=radekrat --output=json'
Sep  9 05:14:01 power sudo[1128940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:01 power sudo[1128940]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:07 power sudo[1129129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:14:07 power sudo[1129129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:07 power sudo[1129129]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:07 power sudo[1129140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user radekrat --user-current --json'
Sep  9 05:14:07 power sudo[1129140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:07 power sudo[1129140]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:07 power sudo[1129154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat LangPHP php_get_vhost_versions --output=json'
Sep  9 05:14:07 power sudo[1129154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:07 power sudo[1129154]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:07 power sudo[1129159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:14:07 power sudo[1129159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:07 power sudo[1129159]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:07 power sudo[1129177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DomainInfo single_domain_data domain=radekratovce.edu.mk return_https_redirect_status=1 --output=json'
Sep  9 05:14:07 power sudo[1129177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:07 power sudo[1129177]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:07 power sudo[1129183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat Mime list_redirects --output=json'
Sep  9 05:14:08 power sudo[1129183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:08 power sudo[1129183]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:11 power sudo[1129307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DirectoryPrivacy is_directory_protected dir=/home/radekrat/public_html/wp --output=json'
Sep  9 05:14:11 power sudo[1129307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:11 power sudo[1129307]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:12 power sudo[1129355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:14:12 power sudo[1129355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:12 power sudo[1129355]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:12 power sudo[1129361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:14:12 power sudo[1129361]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:14:12 power sudo[1129361]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:14:12 power sudo[1129361]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:14:12 power sudo[1129361]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:14:12 power sudo[1129361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:12 power sudo[1129361]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:12 power sudo[1129366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  9 05:14:12 power sudo[1129366]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  9 05:14:12 power sudo[1129366]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  9 05:14:12 power sudo[1129366]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  9 05:14:12 power sudo[1129366]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:14:12 power sudo[1129366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:12 power sudo[1129366]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:12 power sudo[1129374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep  9 05:14:12 power sudo[1129374]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep  9 05:14:12 power sudo[1129374]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep  9 05:14:12 power sudo[1129374]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep  9 05:14:12 power sudo[1129374]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:14:12 power sudo[1129374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:12 power sudo[1129374]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:17 power sudo[1129592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep  9 05:14:17 power sudo[1129592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:17 power sudo[1129592]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:18 power sudo[1129598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rasmorgm --output=json'
Sep  9 05:14:18 power sudo[1129598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:18 power sudo[1129598]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:25 power sudo[1129776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm /bin/sh -c 'cd /home/rasmorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:14:25 power sudo[1129776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:25 power sudo[1129776]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:25 power sudo[1129783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rasmorgm --user-current --json'
Sep  9 05:14:25 power sudo[1129783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:25 power sudo[1129783]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:25 power sudo[1129790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm LangPHP php_get_vhost_versions --output=json'
Sep  9 05:14:25 power sudo[1129790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:25 power sudo[1129790]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:25 power sudo[1129797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:14:25 power sudo[1129797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:25 power sudo[1129797]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:26 power sudo[1129813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DomainInfo single_domain_data domain=rasm.org.mk return_https_redirect_status=1 --output=json'
Sep  9 05:14:26 power sudo[1129813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:26 power sudo[1129813]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:26 power sudo[1129820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm Mime list_redirects --output=json'
Sep  9 05:14:26 power sudo[1129820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:26 power sudo[1129820]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:29 power sudo[1129946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DirectoryPrivacy is_directory_protected dir=/home/rasmorgm/public_html --output=json'
Sep  9 05:14:29 power sudo[1129946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:29 power sudo[1129946]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:33 power sudo[1130173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep  9 05:14:33 power sudo[1130173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:33 power sudo[1130173]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:33 power sudo[1130182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=recorgmk --output=json'
Sep  9 05:14:33 power sudo[1130182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:33 power sudo[1130182]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:40 power sudo[1130403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk /bin/sh -c 'cd /home/recorgmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:14:40 power sudo[1130403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:40 power sudo[1130403]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:40 power sudo[1130410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user recorgmk --user-current --json'
Sep  9 05:14:40 power sudo[1130410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:40 power sudo[1130410]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:40 power sudo[1130421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk LangPHP php_get_vhost_versions --output=json'
Sep  9 05:14:40 power sudo[1130421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:40 power sudo[1130421]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:40 power sudo[1130443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:14:40 power sudo[1130443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:40 power sudo[1130443]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:40 power sudo[1130519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DomainInfo single_domain_data domain=rec.org.mk return_https_redirect_status=1 --output=json'
Sep  9 05:14:40 power sudo[1130519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:41 power sudo[1130519]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:41 power sudo[1130540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk Mime list_redirects --output=json'
Sep  9 05:14:41 power sudo[1130540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:41 power sudo[1130540]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:44 power sudo[1130726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DirectoryPrivacy is_directory_protected dir=/home/recorgmk/public_html --output=json'
Sep  9 05:14:44 power sudo[1130726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:44 power sudo[1130726]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:48 power sudo[1130951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep  9 05:14:48 power sudo[1130951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:48 power sudo[1130951]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:48 power sudo[1130960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stravelm --output=json'
Sep  9 05:14:48 power sudo[1130960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:48 power sudo[1130960]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:52 power sudo[1131038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm /bin/sh -c 'cd /home/stravelm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:14:52 power sudo[1131038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:52 power sudo[1131038]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:52 power sudo[1131045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stravelm --user-current --json'
Sep  9 05:14:52 power sudo[1131045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:52 power sudo[1131045]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:52 power sudo[1131053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm LangPHP php_get_vhost_versions --output=json'
Sep  9 05:14:52 power sudo[1131053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:52 power sudo[1131053]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:52 power sudo[1131059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:14:52 power sudo[1131059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:52 power sudo[1131059]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:53 power sudo[1131089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DomainInfo single_domain_data domain=s-travel.mk return_https_redirect_status=1 --output=json'
Sep  9 05:14:53 power sudo[1131089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:54 power sudo[1131089]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:54 power sudo[1131096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm Mime list_redirects --output=json'
Sep  9 05:14:54 power sudo[1131096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:54 power sudo[1131096]: pam_unix(sudo:session): session closed for user root
Sep  9 05:14:56 power sudo[1131187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DirectoryPrivacy is_directory_protected dir=/home/stravelm/public_html --output=json'
Sep  9 05:14:56 power sudo[1131187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:14:56 power sudo[1131187]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:01 power systemd[1131431]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:15:23 power sudo[1132060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep  9 05:15:23 power sudo[1132060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:24 power sudo[1132060]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:24 power sudo[1132066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=simbiome --output=json'
Sep  9 05:15:24 power sudo[1132066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:24 power sudo[1132066]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:29 power sudo[1132215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome /bin/sh -c 'cd /home/simbiome/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:15:29 power sudo[1132215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:29 power sudo[1132215]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:29 power sudo[1132222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user simbiome --user-current --json'
Sep  9 05:15:29 power sudo[1132222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:29 power sudo[1132222]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:29 power sudo[1132228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome LangPHP php_get_vhost_versions --output=json'
Sep  9 05:15:29 power sudo[1132228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:29 power sudo[1132228]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:29 power sudo[1132234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:15:30 power sudo[1132234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:30 power sudo[1132234]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:30 power sudo[1132262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DomainInfo single_domain_data domain=simbiomedic.mk return_https_redirect_status=1 --output=json'
Sep  9 05:15:30 power sudo[1132262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:30 power sudo[1132262]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:30 power sudo[1132270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome Mime list_redirects --output=json'
Sep  9 05:15:30 power sudo[1132270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:30 power sudo[1132270]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:34 power sudo[1132373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DirectoryPrivacy is_directory_protected dir=/home/simbiome/public_html --output=json'
Sep  9 05:15:34 power sudo[1132373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:34 power sudo[1132373]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:43 power sudo[1132797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/sk.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:15:43 power sudo[1132797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:43 power sudo[1132797]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:43 power sudo[1132803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  9 05:15:43 power sudo[1132803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:44 power sudo[1132803]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:44 power sudo[1132811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:15:44 power sudo[1132811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:44 power sudo[1132811]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:44 power sudo[1132834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=sk.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 05:15:44 power sudo[1132834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:44 power sudo[1132834]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:47 power sudo[1132955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/sk.cetplatform.mk --output=json'
Sep  9 05:15:48 power sudo[1132955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:48 power sudo[1132955]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:51 power sudo[1133174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep  9 05:15:51 power sudo[1133174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:51 power sudo[1133174]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:51 power sudo[1133181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=solemor1 --output=json'
Sep  9 05:15:51 power sudo[1133181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:52 power sudo[1133181]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:54 power sudo[1133325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:15:54 power sudo[1133325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:54 power sudo[1133325]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:54 power sudo[1133332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep  9 05:15:54 power sudo[1133332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:54 power sudo[1133332]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:54 power sudo[1133339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 LangPHP php_get_vhost_versions --output=json'
Sep  9 05:15:54 power sudo[1133339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:55 power sudo[1133339]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:55 power sudo[1133345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:15:55 power sudo[1133345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:55 power sudo[1133345]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:55 power sudo[1133364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=solem.org.mk return_https_redirect_status=1 --output=json'
Sep  9 05:15:55 power sudo[1133364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:55 power sudo[1133364]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:55 power sudo[1133371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 Mime list_redirects --output=json'
Sep  9 05:15:55 power sudo[1133371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:55 power sudo[1133371]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:57 power sudo[1133454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html --output=json'
Sep  9 05:15:57 power sudo[1133454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:57 power sudo[1133454]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:58 power sudo[1133520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:15:58 power sudo[1133520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:58 power sudo[1133520]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:58 power sudo[1133525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:15:58 power sudo[1133525]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:15:58 power sudo[1133525]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:15:58 power sudo[1133525]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:15:58 power sudo[1133525]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:15:58 power sudo[1133525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:58 power sudo[1133525]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:58 power sudo[1133531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:15:58 power sudo[1133531]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:15:58 power sudo[1133531]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:15:58 power sudo[1133531]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:15:58 power sudo[1133531]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:15:58 power sudo[1133531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:59 power sudo[1133531]: pam_unix(sudo:session): session closed for user root
Sep  9 05:15:59 power sudo[1133537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:15:59 power sudo[1133537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:15:59 power sudo[1133537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:15:59 power sudo[1133537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:15:59 power sudo[1133537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:15:59 power sudo[1133537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:15:59 power sudo[1133537]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:01 power sudo[1133662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:16:01 power sudo[1133662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:01 power sudo[1133662]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:01 power sudo[1133667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:16:01 power sudo[1133667]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:16:01 power sudo[1133667]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:16:01 power sudo[1133667]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:16:01 power sudo[1133667]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:16:01 power sudo[1133667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:01 power sudo[1133667]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:01 power sudo[1133672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:16:01 power sudo[1133672]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:16:01 power sudo[1133672]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:16:01 power sudo[1133672]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:16:01 power sudo[1133672]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:16:01 power sudo[1133672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:01 power sudo[1133672]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:01 power sudo[1133678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:16:01 power sudo[1133678]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:16:01 power sudo[1133678]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:16:01 power sudo[1133678]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:16:01 power sudo[1133678]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:16:01 power sudo[1133678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:01 power sudo[1133678]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:07 power sudo[1133863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html/vedi && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:16:07 power sudo[1133863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:07 power sudo[1133863]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:07 power sudo[1133870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep  9 05:16:07 power sudo[1133870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:07 power sudo[1133870]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:07 power sudo[1133876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:16:07 power sudo[1133876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:07 power sudo[1133876]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:07 power sudo[1133895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=vedi.mk return_https_redirect_status=1 --output=json'
Sep  9 05:16:07 power sudo[1133895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:07 power sudo[1133895]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:09 power sudo[1134015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html/vedi --output=json'
Sep  9 05:16:09 power sudo[1134015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:09 power sudo[1134015]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:13 power sudo[1134240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep  9 05:16:13 power sudo[1134240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:13 power sudo[1134240]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:13 power sudo[1134247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sssoluti --output=json'
Sep  9 05:16:13 power sudo[1134247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:13 power sudo[1134247]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:18 power sudo[1134365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti /bin/sh -c 'cd /home/sssoluti/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:16:18 power sudo[1134365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:18 power sudo[1134365]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:18 power sudo[1134371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sssoluti --user-current --json'
Sep  9 05:16:18 power sudo[1134371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:19 power sudo[1134371]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:19 power sudo[1134384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti LangPHP php_get_vhost_versions --output=json'
Sep  9 05:16:19 power sudo[1134384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:19 power sudo[1134384]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:19 power sudo[1134389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:16:19 power sudo[1134389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:19 power sudo[1134389]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:19 power sudo[1134405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DomainInfo single_domain_data domain=sssolutions.mk return_https_redirect_status=1 --output=json'
Sep  9 05:16:19 power sudo[1134405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:19 power sudo[1134405]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:19 power sudo[1134413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti Mime list_redirects --output=json'
Sep  9 05:16:19 power sudo[1134413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:19 power sudo[1134413]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:22 power sudo[1134519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DirectoryPrivacy is_directory_protected dir=/home/sssoluti/public_html --output=json'
Sep  9 05:16:22 power sudo[1134519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:22 power sudo[1134519]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:26 power sudo[1134728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep  9 05:16:26 power sudo[1134728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:26 power sudo[1134728]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:26 power sudo[1134737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=supremel --output=json'
Sep  9 05:16:26 power sudo[1134737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:26 power sudo[1134737]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:55 power sudo[1135277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:16:55 power sudo[1135277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:55 power sudo[1135277]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:55 power sudo[1135286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep  9 05:16:55 power sudo[1135286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:55 power sudo[1135286]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:55 power sudo[1135295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel LangPHP php_get_vhost_versions --output=json'
Sep  9 05:16:55 power sudo[1135295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:55 power sudo[1135295]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:55 power sudo[1135302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:16:55 power sudo[1135302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:55 power sudo[1135302]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:56 power sudo[1135320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=supremeleader.eu return_https_redirect_status=1 --output=json'
Sep  9 05:16:56 power sudo[1135320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:56 power sudo[1135320]: pam_unix(sudo:session): session closed for user root
Sep  9 05:16:56 power sudo[1135328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel Mime list_redirects --output=json'
Sep  9 05:16:56 power sudo[1135328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:16:56 power sudo[1135328]: pam_unix(sudo:session): session closed for user root
Sep  9 05:17:00 power sudo[1135439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/public_html --output=json'
Sep  9 05:17:00 power sudo[1135439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:17:00 power sudo[1135439]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:04 power sudo[1137827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep  9 05:19:04 power sudo[1137827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:04 power sudo[1137827]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:04 power sudo[1137832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=tehnodro --output=json'
Sep  9 05:19:04 power sudo[1137832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:04 power sudo[1137832]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:09 power sudo[1137965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:19:09 power sudo[1137965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:09 power sudo[1137965]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:09 power sudo[1137972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user tehnodro --user-current --json'
Sep  9 05:19:09 power sudo[1137972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:10 power sudo[1137972]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:10 power sudo[1138001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro LangPHP php_get_vhost_versions --output=json'
Sep  9 05:19:10 power sudo[1138001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:10 power sudo[1138001]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:10 power sudo[1138015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:19:10 power sudo[1138015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:10 power sudo[1138015]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:11 power sudo[1138068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DomainInfo single_domain_data domain=tehnodrom.mk return_https_redirect_status=1 --output=json'
Sep  9 05:19:11 power sudo[1138068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:11 power sudo[1138068]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:11 power sudo[1138075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro Mime list_redirects --output=json'
Sep  9 05:19:11 power sudo[1138075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:11 power sudo[1138075]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:14 power sudo[1138165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DirectoryPrivacy is_directory_protected dir=/home/tehnodro/public_html --output=json'
Sep  9 05:19:14 power sudo[1138165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:14 power sudo[1138165]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:15 power sudo[1138225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:19:15 power sudo[1138225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:15 power sudo[1138225]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:15 power sudo[1138230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:19:15 power sudo[1138230]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:19:15 power sudo[1138230]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:19:15 power sudo[1138230]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:19:15 power sudo[1138230]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:19:15 power sudo[1138230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:15 power sudo[1138230]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:15 power sudo[1138235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:19:15 power sudo[1138235]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:19:15 power sudo[1138235]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:19:15 power sudo[1138235]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:19:15 power sudo[1138235]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:19:15 power sudo[1138235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:15 power sudo[1138235]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:15 power sudo[1138241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:19:15 power sudo[1138241]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:19:15 power sudo[1138241]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:19:15 power sudo[1138241]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:19:15 power sudo[1138241]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:19:15 power sudo[1138241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:15 power sudo[1138241]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:17 power sudo[1138348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:19:17 power sudo[1138348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:17 power sudo[1138348]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:17 power sudo[1138353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:19:17 power sudo[1138353]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:19:17 power sudo[1138353]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:19:17 power sudo[1138353]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:19:17 power sudo[1138353]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:19:17 power sudo[1138353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:17 power sudo[1138353]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:17 power sudo[1138358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:19:17 power sudo[1138358]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:19:17 power sudo[1138358]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:19:17 power sudo[1138358]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:19:17 power sudo[1138358]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:19:17 power sudo[1138358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:17 power sudo[1138358]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:17 power sudo[1138363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:19:17 power sudo[1138363]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:19:17 power sudo[1138363]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:19:17 power sudo[1138363]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:19:17 power sudo[1138363]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:19:17 power sudo[1138363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:17 power sudo[1138363]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:24 power sudo[1138484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/theuniversalgroup.net && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:19:24 power sudo[1138484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:24 power sudo[1138484]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:24 power sudo[1138490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep  9 05:19:24 power sudo[1138490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:24 power sudo[1138490]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:24 power sudo[1138502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:19:24 power sudo[1138502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:24 power sudo[1138502]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:24 power sudo[1138519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=theuniversalgroup.net return_https_redirect_status=1 --output=json'
Sep  9 05:19:24 power sudo[1138519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:24 power sudo[1138519]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:27 power sudo[1138607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/theuniversalgroup.net --output=json'
Sep  9 05:19:27 power sudo[1138607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:27 power sudo[1138607]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:30 power sudo[1138804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep  9 05:19:30 power sudo[1138804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:31 power sudo[1138804]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:31 power sudo[1138810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=viewinn --output=json'
Sep  9 05:19:31 power sudo[1138810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:31 power sudo[1138810]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:33 power sudo[1138894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn /bin/sh -c 'cd /home/viewinn/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:19:33 power sudo[1138894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:33 power sudo[1138894]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:33 power sudo[1138900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user viewinn --user-current --json'
Sep  9 05:19:33 power sudo[1138900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:33 power sudo[1138900]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:33 power sudo[1138909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn LangPHP php_get_vhost_versions --output=json'
Sep  9 05:19:33 power sudo[1138909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:34 power sudo[1138909]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:34 power sudo[1138914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:19:34 power sudo[1138914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:34 power sudo[1138914]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:34 power sudo[1138930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DomainInfo single_domain_data domain=viewinn.mk return_https_redirect_status=1 --output=json'
Sep  9 05:19:34 power sudo[1138930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:34 power sudo[1138930]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:34 power sudo[1138936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn Mime list_redirects --output=json'
Sep  9 05:19:34 power sudo[1138936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:34 power sudo[1138936]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:36 power sudo[1139030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DirectoryPrivacy is_directory_protected dir=/home/viewinn/public_html --output=json'
Sep  9 05:19:36 power sudo[1139030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:36 power sudo[1139030]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:39 power sudo[1139262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep  9 05:19:39 power sudo[1139262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:39 power sudo[1139262]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:39 power sudo[1139273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wikicamp --output=json'
Sep  9 05:19:39 power sudo[1139273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:39 power sudo[1139273]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:47 power sudo[1139588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp /bin/sh -c 'cd /home/wikicamp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:19:47 power sudo[1139588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:47 power sudo[1139588]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:47 power sudo[1139595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wikicamp --user-current --json'
Sep  9 05:19:47 power sudo[1139595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:48 power sudo[1139595]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:48 power sudo[1139604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp LangPHP php_get_vhost_versions --output=json'
Sep  9 05:19:48 power sudo[1139604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:48 power sudo[1139604]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:48 power sudo[1139611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:19:48 power sudo[1139611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:48 power sudo[1139611]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:48 power sudo[1139630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DomainInfo single_domain_data domain=wikicamp.mk return_https_redirect_status=1 --output=json'
Sep  9 05:19:48 power sudo[1139630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:48 power sudo[1139630]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:48 power sudo[1139636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp Mime list_redirects --output=json'
Sep  9 05:19:48 power sudo[1139636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:48 power sudo[1139636]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:52 power sudo[1139739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DirectoryPrivacy is_directory_protected dir=/home/wikicamp/public_html --output=json'
Sep  9 05:19:52 power sudo[1139739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:52 power sudo[1139739]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:55 power sudo[1139976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep  9 05:19:56 power sudo[1139976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:56 power sudo[1139976]: pam_unix(sudo:session): session closed for user root
Sep  9 05:19:56 power sudo[1139983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workandt --output=json'
Sep  9 05:19:56 power sudo[1139983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:19:56 power sudo[1139983]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:01 power sudo[1140110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt /bin/sh -c 'cd /home/workandt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:20:01 power sudo[1140110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:01 power systemd[1140217]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:20:01 power sudo[1140110]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:01 power sudo[1140227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workandt --user-current --json'
Sep  9 05:20:01 power sudo[1140227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:02 power sudo[1140227]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:02 power sudo[1140265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt LangPHP php_get_vhost_versions --output=json'
Sep  9 05:20:02 power sudo[1140265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:02 power sudo[1140265]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:02 power sudo[1140275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:20:02 power sudo[1140275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:02 power sudo[1140275]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:02 power sudo[1140300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DomainInfo single_domain_data domain=workandtravel.mk return_https_redirect_status=1 --output=json'
Sep  9 05:20:02 power sudo[1140300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:02 power sudo[1140300]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:02 power sudo[1140307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt Mime list_redirects --output=json'
Sep  9 05:20:02 power sudo[1140307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:02 power sudo[1140307]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:06 power sudo[1140395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DirectoryPrivacy is_directory_protected dir=/home/workandt/public_html --output=json'
Sep  9 05:20:06 power sudo[1140395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:06 power sudo[1140395]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:14 power sudo[1140792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/yoe.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:20:14 power sudo[1140792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:14 power sudo[1140792]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:14 power sudo[1140800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep  9 05:20:14 power sudo[1140800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:14 power sudo[1140800]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:14 power sudo[1140810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:20:14 power sudo[1140810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:14 power sudo[1140810]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:14 power sudo[1140829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=yoe.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep  9 05:20:14 power sudo[1140829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:15 power sudo[1140829]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:17 power sudo[1140926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/yoe.cetplatform.mk --output=json'
Sep  9 05:20:17 power sudo[1140926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:17 power sudo[1140926]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:21 power sudo[1141147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep  9 05:20:21 power sudo[1141147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:21 power sudo[1141147]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:21 power sudo[1141160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=youthgua --output=json'
Sep  9 05:20:21 power sudo[1141160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:21 power sudo[1141160]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:26 power sudo[1141276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua /bin/sh -c 'cd /home/youthgua/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:20:26 power sudo[1141276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:26 power sudo[1141276]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:26 power sudo[1141286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user youthgua --user-current --json'
Sep  9 05:20:26 power sudo[1141286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:26 power sudo[1141286]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:26 power sudo[1141293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua LangPHP php_get_vhost_versions --output=json'
Sep  9 05:20:26 power sudo[1141293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:26 power sudo[1141293]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:26 power sudo[1141298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:20:26 power sudo[1141298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:26 power sudo[1141298]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:27 power sudo[1141313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DomainInfo single_domain_data domain=youthguarantee-wb.eu return_https_redirect_status=1 --output=json'
Sep  9 05:20:27 power sudo[1141313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:27 power sudo[1141313]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:27 power sudo[1141322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua Mime list_redirects --output=json'
Sep  9 05:20:27 power sudo[1141322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:27 power sudo[1141322]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:30 power sudo[1141419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DirectoryPrivacy is_directory_protected dir=/home/youthgua/public_html --output=json'
Sep  9 05:20:30 power sudo[1141419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:30 power sudo[1141419]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:33 power sudo[1141631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep  9 05:20:33 power sudo[1141631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:33 power sudo[1141631]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:33 power sudo[1141641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=zampmk --output=json'
Sep  9 05:20:33 power sudo[1141641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:33 power sudo[1141641]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:37 power sudo[1141730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk /bin/sh -c 'cd /home/zampmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:20:37 power sudo[1141730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:37 power sudo[1141730]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:37 power sudo[1141737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user zampmk --user-current --json'
Sep  9 05:20:37 power sudo[1141737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:37 power sudo[1141737]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:37 power sudo[1141744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk LangPHP php_get_vhost_versions --output=json'
Sep  9 05:20:37 power sudo[1141744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:38 power sudo[1141744]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:38 power sudo[1141750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:20:38 power sudo[1141750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:38 power sudo[1141750]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:38 power sudo[1141772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DomainInfo single_domain_data domain=zamp.mk return_https_redirect_status=1 --output=json'
Sep  9 05:20:38 power sudo[1141772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:38 power sudo[1141772]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:38 power sudo[1141780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk Mime list_redirects --output=json'
Sep  9 05:20:38 power sudo[1141780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:38 power sudo[1141780]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:41 power sudo[1141899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DirectoryPrivacy is_directory_protected dir=/home/zampmk/public_html --output=json'
Sep  9 05:20:41 power sudo[1141899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:41 power sudo[1141899]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:45 power sudo[1142127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep  9 05:20:45 power sudo[1142127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:45 power sudo[1142127]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:45 power sudo[1142135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ivanjord --output=json'
Sep  9 05:20:45 power sudo[1142135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:45 power sudo[1142135]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:55 power sudo[1142317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord /bin/sh -c 'cd /home/ivanjord/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:20:55 power sudo[1142317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:55 power sudo[1142317]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:55 power sudo[1142326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ivanjord --user-current --json'
Sep  9 05:20:55 power sudo[1142326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:55 power sudo[1142326]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:55 power sudo[1142334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord LangPHP php_get_vhost_versions --output=json'
Sep  9 05:20:55 power sudo[1142334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:55 power sudo[1142334]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:55 power sudo[1142340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:20:55 power sudo[1142340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:55 power sudo[1142340]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:56 power sudo[1142361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DomainInfo single_domain_data domain=novaidninazastip.mk return_https_redirect_status=1 --output=json'
Sep  9 05:20:56 power sudo[1142361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:56 power sudo[1142361]: pam_unix(sudo:session): session closed for user root
Sep  9 05:20:56 power sudo[1142368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord Mime list_redirects --output=json'
Sep  9 05:20:56 power sudo[1142368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:20:56 power sudo[1142368]: pam_unix(sudo:session): session closed for user root
Sep  9 05:21:01 power sudo[1142518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DirectoryPrivacy is_directory_protected dir=/home/ivanjord/public_html --output=json'
Sep  9 05:21:01 power sudo[1142518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:21:01 power sudo[1142518]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:14 power sudo[1143936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:22:14 power sudo[1143936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:14 power sudo[1143936]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:14 power sudo[1143945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep  9 05:22:14 power sudo[1143945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:14 power sudo[1143945]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:14 power sudo[1143962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:22:14 power sudo[1143962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:14 power sudo[1143962]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:14 power sudo[1143980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=izzo.mk return_https_redirect_status=1 --output=json'
Sep  9 05:22:14 power sudo[1143980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:15 power sudo[1143980]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:17 power sudo[1144084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/public_html/wp --output=json'
Sep  9 05:22:17 power sudo[1144084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:17 power sudo[1144084]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:21 power sudo[1144311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep  9 05:22:21 power sudo[1144311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:21 power sudo[1144311]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:21 power sudo[1144322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=janiboja --output=json'
Sep  9 05:22:21 power sudo[1144322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:21 power sudo[1144322]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:24 power sudo[1144415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:22:24 power sudo[1144415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:24 power sudo[1144415]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:24 power sudo[1144421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user janiboja --user-current --json'
Sep  9 05:22:24 power sudo[1144421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:24 power sudo[1144421]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:24 power sudo[1144430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja LangPHP php_get_vhost_versions --output=json'
Sep  9 05:22:24 power sudo[1144430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:24 power sudo[1144430]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:24 power sudo[1144437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:22:24 power sudo[1144437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:24 power sudo[1144437]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:25 power sudo[1144454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DomainInfo single_domain_data domain=janibojadzi.com return_https_redirect_status=1 --output=json'
Sep  9 05:22:25 power sudo[1144454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:25 power sudo[1144454]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:25 power sudo[1144463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja Mime list_redirects --output=json'
Sep  9 05:22:25 power sudo[1144463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:25 power sudo[1144463]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:27 power sudo[1144534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DirectoryPrivacy is_directory_protected dir=/home/janiboja/public_html --output=json'
Sep  9 05:22:27 power sudo[1144534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:27 power sudo[1144534]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:28 power sudo[1144606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:28 power sudo[1144606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:28 power sudo[1144606]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:28 power sudo[1144611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:22:28 power sudo[1144611]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:22:28 power sudo[1144611]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:22:28 power sudo[1144611]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:22:28 power sudo[1144611]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:28 power sudo[1144611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:28 power sudo[1144611]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:28 power sudo[1144620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:22:28 power sudo[1144620]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:22:28 power sudo[1144620]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:22:28 power sudo[1144620]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:22:28 power sudo[1144620]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:28 power sudo[1144620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:28 power sudo[1144620]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:28 power sudo[1144626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:22:28 power sudo[1144626]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:22:28 power sudo[1144626]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:22:28 power sudo[1144626]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:22:28 power sudo[1144626]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:28 power sudo[1144626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:28 power sudo[1144626]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:30 power sudo[1144729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:30 power sudo[1144729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:30 power sudo[1144729]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:30 power sudo[1144734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:22:30 power sudo[1144734]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:22:30 power sudo[1144734]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:22:30 power sudo[1144734]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:22:30 power sudo[1144734]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:30 power sudo[1144734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:30 power sudo[1144734]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:30 power sudo[1144739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:22:30 power sudo[1144739]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:22:30 power sudo[1144739]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:22:30 power sudo[1144739]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:22:30 power sudo[1144739]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:30 power sudo[1144739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:30 power sudo[1144739]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:30 power sudo[1144747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:22:30 power sudo[1144747]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:22:30 power sudo[1144747]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:22:30 power sudo[1144747]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:22:30 power sudo[1144747]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:30 power sudo[1144747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:30 power sudo[1144747]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:31 power sudo[1144784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep  9 05:22:31 power sudo[1144784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:31 power sudo[1144784]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:31 power sudo[1144790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jaramk --output=json'
Sep  9 05:22:31 power sudo[1144790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:31 power sudo[1144790]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:36 power sudo[1144891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:22:36 power sudo[1144891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:36 power sudo[1144891]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:36 power sudo[1144897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jaramk --user-current --json'
Sep  9 05:22:36 power sudo[1144897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:36 power sudo[1144897]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:36 power sudo[1144910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk LangPHP php_get_vhost_versions --output=json'
Sep  9 05:22:36 power sudo[1144910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:36 power sudo[1144910]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:36 power sudo[1144917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:22:36 power sudo[1144917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:36 power sudo[1144917]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:37 power sudo[1144934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DomainInfo single_domain_data domain=jara.mk return_https_redirect_status=1 --output=json'
Sep  9 05:22:37 power sudo[1144934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:37 power sudo[1144934]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:37 power sudo[1144943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk Mime list_redirects --output=json'
Sep  9 05:22:37 power sudo[1144943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:37 power sudo[1144943]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:40 power sudo[1145068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DirectoryPrivacy is_directory_protected dir=/home/jaramk/public_html --output=json'
Sep  9 05:22:40 power sudo[1145068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:40 power sudo[1145068]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:41 power sudo[1145150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:41 power sudo[1145150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:41 power sudo[1145150]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:41 power sudo[1145155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep  9 05:22:41 power sudo[1145155]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep  9 05:22:41 power sudo[1145155]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep  9 05:22:41 power sudo[1145155]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep  9 05:22:41 power sudo[1145155]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:41 power sudo[1145155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:41 power sudo[1145155]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:41 power sudo[1145160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 05:22:41 power sudo[1145160]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 05:22:41 power sudo[1145160]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 05:22:41 power sudo[1145160]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 05:22:41 power sudo[1145160]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:41 power sudo[1145160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:41 power sudo[1145160]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:41 power sudo[1145167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 05:22:41 power sudo[1145167]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 05:22:41 power sudo[1145167]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 05:22:41 power sudo[1145167]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 05:22:41 power sudo[1145167]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:41 power sudo[1145167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:41 power sudo[1145167]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:43 power sudo[1145290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:43 power sudo[1145290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:43 power sudo[1145290]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:43 power sudo[1145295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep  9 05:22:43 power sudo[1145295]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep  9 05:22:43 power sudo[1145295]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep  9 05:22:43 power sudo[1145295]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep  9 05:22:43 power sudo[1145295]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:43 power sudo[1145295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:43 power sudo[1145295]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:43 power sudo[1145301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 05:22:43 power sudo[1145301]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 05:22:43 power sudo[1145301]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 05:22:43 power sudo[1145301]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 05:22:43 power sudo[1145301]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:43 power sudo[1145301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:43 power sudo[1145301]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:43 power sudo[1145306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep  9 05:22:43 power sudo[1145306]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep  9 05:22:43 power sudo[1145306]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep  9 05:22:43 power sudo[1145306]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep  9 05:22:43 power sudo[1145306]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:22:43 power sudo[1145306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:43 power sudo[1145306]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:44 power sudo[1145348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep  9 05:22:44 power sudo[1145348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:44 power sudo[1145348]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:44 power sudo[1145354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=innofabl --output=json'
Sep  9 05:22:44 power sudo[1145354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:44 power sudo[1145354]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:58 power sudo[1145608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/kupireciklirano.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:22:58 power sudo[1145608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:58 power sudo[1145608]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:58 power sudo[1145617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep  9 05:22:58 power sudo[1145617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:58 power sudo[1145617]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:58 power sudo[1145627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl LangPHP php_get_vhost_versions --output=json'
Sep  9 05:22:58 power sudo[1145627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:58 power sudo[1145627]: pam_unix(sudo:session): session closed for user root
Sep  9 05:22:58 power sudo[1145634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:22:58 power sudo[1145634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:22:58 power sudo[1145634]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:01 power sudo[1145666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=kupireciklirano.mk return_https_redirect_status=1 --output=json'
Sep  9 05:23:01 power sudo[1145666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:01 power sudo[1145666]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:01 power sudo[1145672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl Mime list_redirects --output=json'
Sep  9 05:23:01 power sudo[1145672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:01 power sudo[1145672]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:09 power sudo[1145900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/kupireciklirano.mk --output=json'
Sep  9 05:23:09 power sudo[1145900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:10 power sudo[1145900]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:13 power sudo[1146172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep  9 05:23:13 power sudo[1146172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:13 power sudo[1146172]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:13 power sudo[1146178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mapaspla --output=json'
Sep  9 05:23:14 power sudo[1146178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:14 power sudo[1146178]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:17 power sudo[1146276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:23:17 power sudo[1146276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:17 power sudo[1146276]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:17 power sudo[1146286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep  9 05:23:17 power sudo[1146286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:17 power sudo[1146286]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:17 power sudo[1146296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla LangPHP php_get_vhost_versions --output=json'
Sep  9 05:23:17 power sudo[1146296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:17 power sudo[1146296]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:17 power sudo[1146303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:23:17 power sudo[1146303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:17 power sudo[1146303]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:18 power sudo[1146326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DomainInfo single_domain_data domain=mapasplastik.com return_https_redirect_status=1 --output=json'
Sep  9 05:23:18 power sudo[1146326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:18 power sudo[1146326]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:18 power sudo[1146334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla Mime list_redirects --output=json'
Sep  9 05:23:18 power sudo[1146334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:18 power sudo[1146334]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:21 power sudo[1146417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html/eng --output=json'
Sep  9 05:23:21 power sudo[1146417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:21 power sudo[1146417]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:37 power sudo[1146992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:23:37 power sudo[1146992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:37 power sudo[1146992]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:37 power sudo[1146998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep  9 05:23:37 power sudo[1146998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:37 power sudo[1146998]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:37 power sudo[1147010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:23:37 power sudo[1147010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:37 power sudo[1147010]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:41 power sudo[1147151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html --output=json'
Sep  9 05:23:41 power sudo[1147151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:41 power sudo[1147151]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:46 power sudo[1147379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep  9 05:23:46 power sudo[1147379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:47 power sudo[1147379]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:47 power sudo[1147387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mediatag --output=json'
Sep  9 05:23:47 power sudo[1147387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:47 power sudo[1147387]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:52 power sudo[1147511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag /bin/sh -c 'cd /home/mediatag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:23:52 power sudo[1147511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:52 power sudo[1147511]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:52 power sudo[1147517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mediatag --user-current --json'
Sep  9 05:23:52 power sudo[1147517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:52 power sudo[1147517]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:52 power sudo[1147525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag LangPHP php_get_vhost_versions --output=json'
Sep  9 05:23:52 power sudo[1147525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:52 power sudo[1147525]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:52 power sudo[1147532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:23:52 power sudo[1147532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:52 power sudo[1147532]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:53 power sudo[1147557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DomainInfo single_domain_data domain=mediatag.mk return_https_redirect_status=1 --output=json'
Sep  9 05:23:53 power sudo[1147557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:53 power sudo[1147557]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:53 power sudo[1147564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag Mime list_redirects --output=json'
Sep  9 05:23:53 power sudo[1147564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:53 power sudo[1147564]: pam_unix(sudo:session): session closed for user root
Sep  9 05:23:57 power sudo[1147699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DirectoryPrivacy is_directory_protected dir=/home/mediatag/public_html --output=json'
Sep  9 05:23:57 power sudo[1147699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:23:58 power sudo[1147699]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:08 power sudo[1148091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/mulprotex.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:24:08 power sudo[1148091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:08 power sudo[1148091]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:08 power sudo[1148100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep  9 05:24:08 power sudo[1148100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:09 power sudo[1148100]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:09 power sudo[1148116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:24:09 power sudo[1148116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:09 power sudo[1148116]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:09 power sudo[1148139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=mulprotex.com return_https_redirect_status=1 --output=json'
Sep  9 05:24:09 power sudo[1148139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:09 power sudo[1148139]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:13 power sudo[1148327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/mulprotex.com --output=json'
Sep  9 05:24:13 power sudo[1148327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:14 power sudo[1148327]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:17 power sudo[1148544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep  9 05:24:17 power sudo[1148544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:17 power sudo[1148544]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:17 power sudo[1148550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nefrolog --output=json'
Sep  9 05:24:17 power sudo[1148550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:17 power sudo[1148550]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:21 power sudo[1148657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog /bin/sh -c 'cd /home/nefrolog/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:24:21 power sudo[1148657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:21 power sudo[1148657]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:21 power sudo[1148664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nefrolog --user-current --json'
Sep  9 05:24:21 power sudo[1148664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:21 power sudo[1148664]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:21 power sudo[1148676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog LangPHP php_get_vhost_versions --output=json'
Sep  9 05:24:21 power sudo[1148676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:21 power sudo[1148676]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:21 power sudo[1148682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:24:21 power sudo[1148682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:21 power sudo[1148682]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:22 power sudo[1148714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DomainInfo single_domain_data domain=nefrologija.mk return_https_redirect_status=1 --output=json'
Sep  9 05:24:22 power sudo[1148714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:22 power sudo[1148714]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:22 power sudo[1148723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog Mime list_redirects --output=json'
Sep  9 05:24:22 power sudo[1148723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:22 power sudo[1148723]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:25 power sudo[1148829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DirectoryPrivacy is_directory_protected dir=/home/nefrolog/public_html --output=json'
Sep  9 05:24:25 power sudo[1148829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:25 power sudo[1148829]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:28 power sudo[1149012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep  9 05:24:28 power sudo[1149012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:29 power sudo[1149012]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:29 power sudo[1149020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikimare --output=json'
Sep  9 05:24:29 power sudo[1149020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:29 power sudo[1149020]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:36 power sudo[1149178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:24:36 power sudo[1149178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:36 power sudo[1149178]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:36 power sudo[1149185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep  9 05:24:36 power sudo[1149185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:36 power sudo[1149185]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:36 power sudo[1149194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare LangPHP php_get_vhost_versions --output=json'
Sep  9 05:24:36 power sudo[1149194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:36 power sudo[1149194]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:36 power sudo[1149202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:24:36 power sudo[1149202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:36 power sudo[1149202]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:37 power sudo[1149227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DomainInfo single_domain_data domain=niki-mare.com return_https_redirect_status=1 --output=json'
Sep  9 05:24:37 power sudo[1149227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:37 power sudo[1149227]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:37 power sudo[1149234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare Mime list_redirects --output=json'
Sep  9 05:24:37 power sudo[1149234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:37 power sudo[1149234]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:41 power sudo[1149358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html/wp --output=json'
Sep  9 05:24:41 power sudo[1149358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:41 power sudo[1149358]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:51 power sudo[1149853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:24:51 power sudo[1149853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:51 power sudo[1149853]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:51 power sudo[1149859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep  9 05:24:51 power sudo[1149859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:52 power sudo[1149859]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:52 power sudo[1149872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:24:52 power sudo[1149872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:52 power sudo[1149872]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:56 power sudo[1150012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html --output=json'
Sep  9 05:24:56 power sudo[1150012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:24:56 power sudo[1150012]: pam_unix(sudo:session): session closed for user root
Sep  9 05:24:59 power sudo[1150215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep  9 05:24:59 power sudo[1150215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:00 power sudo[1150215]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:00 power sudo[1150224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nucktra1 --output=json'
Sep  9 05:25:00 power sudo[1150224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:00 power sudo[1150224]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:02 power systemd[1150347]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:25:04 power sudo[1150431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:25:04 power sudo[1150431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:04 power sudo[1150431]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:04 power sudo[1150437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep  9 05:25:04 power sudo[1150437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:04 power sudo[1150437]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:04 power sudo[1150446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 LangPHP php_get_vhost_versions --output=json'
Sep  9 05:25:04 power sudo[1150446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:05 power sudo[1150446]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:05 power sudo[1150451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php56 --output=json'
Sep  9 05:25:05 power sudo[1150451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:05 power sudo[1150451]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:05 power sudo[1150464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:25:05 power sudo[1150464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:05 power sudo[1150464]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:06 power sudo[1150484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep  9 05:25:06 power sudo[1150484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:06 power sudo[1150484]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:06 power sudo[1150490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 Mime list_redirects --output=json'
Sep  9 05:25:06 power sudo[1150490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:06 power sudo[1150490]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:10 power sudo[1150603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/public_html --output=json'
Sep  9 05:25:10 power sudo[1150603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:10 power sudo[1150603]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:16 power sudo[1150931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep  9 05:25:16 power sudo[1150931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:16 power sudo[1150931]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:16 power sudo[1150938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pravekom --output=json'
Sep  9 05:25:16 power sudo[1150938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:16 power sudo[1150938]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:26 power sudo[1151135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom /bin/sh -c 'cd /home/pravekom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:25:26 power sudo[1151135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:26 power sudo[1151135]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:26 power sudo[1151141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pravekom --user-current --json'
Sep  9 05:25:26 power sudo[1151141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:27 power sudo[1151141]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:27 power sudo[1151154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom LangPHP php_get_vhost_versions --output=json'
Sep  9 05:25:27 power sudo[1151154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:27 power sudo[1151154]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:27 power sudo[1151161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:25:27 power sudo[1151161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:27 power sudo[1151161]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:27 power sudo[1151176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DomainInfo single_domain_data domain=praveko.mk return_https_redirect_status=1 --output=json'
Sep  9 05:25:27 power sudo[1151176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:27 power sudo[1151176]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:27 power sudo[1151184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom Mime list_redirects --output=json'
Sep  9 05:25:27 power sudo[1151184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:27 power sudo[1151184]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:33 power sudo[1151337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DirectoryPrivacy is_directory_protected dir=/home/pravekom/public_html --output=json'
Sep  9 05:25:33 power sudo[1151337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:33 power sudo[1151337]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:37 power sudo[1151547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep  9 05:25:37 power sudo[1151547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:37 power sudo[1151547]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:37 power sudo[1151553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=proverim --output=json'
Sep  9 05:25:37 power sudo[1151553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:37 power sudo[1151553]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:43 power sudo[1151692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:25:43 power sudo[1151692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:43 power sudo[1151692]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:43 power sudo[1151698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user proverim --user-current --json'
Sep  9 05:25:43 power sudo[1151698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:43 power sudo[1151698]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:43 power sudo[1151708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim LangPHP php_get_vhost_versions --output=json'
Sep  9 05:25:43 power sudo[1151708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:43 power sudo[1151708]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:43 power sudo[1151717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:25:43 power sudo[1151717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:43 power sudo[1151717]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:44 power sudo[1151735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DomainInfo single_domain_data domain=proveri.mk return_https_redirect_status=1 --output=json'
Sep  9 05:25:44 power sudo[1151735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:44 power sudo[1151735]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:44 power sudo[1151742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim Mime list_redirects --output=json'
Sep  9 05:25:44 power sudo[1151742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:44 power sudo[1151742]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:46 power sudo[1151830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DirectoryPrivacy is_directory_protected dir=/home/proverim/public_html --output=json'
Sep  9 05:25:46 power sudo[1151830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:47 power sudo[1151830]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:47 power sudo[1151904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:47 power sudo[1151904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:48 power sudo[1151904]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:48 power sudo[1151909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:25:48 power sudo[1151909]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:25:48 power sudo[1151909]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:25:48 power sudo[1151909]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:25:48 power sudo[1151909]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:48 power sudo[1151909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:48 power sudo[1151909]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:48 power sudo[1151915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:25:48 power sudo[1151915]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:25:48 power sudo[1151915]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:25:48 power sudo[1151915]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:25:48 power sudo[1151915]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:48 power sudo[1151915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:48 power sudo[1151915]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:48 power sudo[1151924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:25:48 power sudo[1151924]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:25:48 power sudo[1151924]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:25:48 power sudo[1151924]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:25:48 power sudo[1151924]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:48 power sudo[1151924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:48 power sudo[1151924]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:50 power sudo[1152049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:50 power sudo[1152049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:50 power sudo[1152049]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:50 power sudo[1152054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:25:50 power sudo[1152054]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:25:50 power sudo[1152054]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:25:50 power sudo[1152054]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:25:50 power sudo[1152054]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:50 power sudo[1152054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:50 power sudo[1152054]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:50 power sudo[1152059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:25:50 power sudo[1152059]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:25:50 power sudo[1152059]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:25:50 power sudo[1152059]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:25:50 power sudo[1152059]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:50 power sudo[1152059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:50 power sudo[1152059]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:50 power sudo[1152063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:25:50 power sudo[1152063]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:25:50 power sudo[1152063]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:25:50 power sudo[1152063]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:25:50 power sudo[1152063]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:50 power sudo[1152063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:50 power sudo[1152063]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:50 power sudo[1152104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep  9 05:25:50 power sudo[1152104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:51 power sudo[1152104]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:51 power sudo[1152113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rastiraz --output=json'
Sep  9 05:25:51 power sudo[1152113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:51 power sudo[1152113]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:54 power sudo[1152216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:25:54 power sudo[1152216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:54 power sudo[1152216]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:54 power sudo[1152222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rastiraz --user-current --json'
Sep  9 05:25:54 power sudo[1152222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:54 power sudo[1152222]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:54 power sudo[1152231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz LangPHP php_get_vhost_versions --output=json'
Sep  9 05:25:54 power sudo[1152231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:54 power sudo[1152231]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:54 power sudo[1152237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:25:54 power sudo[1152237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:54 power sudo[1152237]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:55 power sudo[1152251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DomainInfo single_domain_data domain=rastirazvoj.mk return_https_redirect_status=1 --output=json'
Sep  9 05:25:55 power sudo[1152251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:55 power sudo[1152251]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:55 power sudo[1152262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz Mime list_redirects --output=json'
Sep  9 05:25:55 power sudo[1152262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:55 power sudo[1152262]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:57 power sudo[1152334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DirectoryPrivacy is_directory_protected dir=/home/rastiraz/public_html --output=json'
Sep  9 05:25:57 power sudo[1152334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:57 power sudo[1152334]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:58 power sudo[1152400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:58 power sudo[1152400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:58 power sudo[1152400]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:58 power sudo[1152405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:25:58 power sudo[1152405]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:25:58 power sudo[1152405]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:25:58 power sudo[1152405]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:25:58 power sudo[1152405]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:58 power sudo[1152405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:58 power sudo[1152405]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:58 power sudo[1152410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:25:58 power sudo[1152410]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:25:58 power sudo[1152410]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:25:58 power sudo[1152410]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:25:58 power sudo[1152410]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:58 power sudo[1152410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:58 power sudo[1152410]: pam_unix(sudo:session): session closed for user root
Sep  9 05:25:58 power sudo[1152415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:25:58 power sudo[1152415]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:25:58 power sudo[1152415]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:25:58 power sudo[1152415]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:25:58 power sudo[1152415]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:25:58 power sudo[1152415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:25:58 power sudo[1152415]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:00 power sudo[1152519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:00 power sudo[1152519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:00 power sudo[1152519]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:00 power sudo[1152527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:26:00 power sudo[1152527]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:26:00 power sudo[1152527]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:26:00 power sudo[1152527]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:26:00 power sudo[1152527]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:00 power sudo[1152527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:00 power sudo[1152527]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:00 power sudo[1152532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:26:00 power sudo[1152532]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:26:00 power sudo[1152532]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:26:00 power sudo[1152532]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:26:00 power sudo[1152532]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:00 power sudo[1152532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:00 power sudo[1152532]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:00 power sudo[1152537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:26:00 power sudo[1152537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:26:00 power sudo[1152537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:26:00 power sudo[1152537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:26:00 power sudo[1152537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:00 power sudo[1152537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:00 power sudo[1152537]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:00 power sudo[1152576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep  9 05:26:00 power sudo[1152576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:01 power sudo[1152576]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:01 power sudo[1152585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=conserva --output=json'
Sep  9 05:26:01 power sudo[1152585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:01 power sudo[1152585]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:05 power sudo[1152687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva /bin/sh -c 'cd /home/conserva/RebornMacedonia.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:26:05 power sudo[1152687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:05 power sudo[1152687]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:05 power sudo[1152696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user conserva --user-current --json'
Sep  9 05:26:05 power sudo[1152696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:05 power sudo[1152696]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:05 power sudo[1152706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva LangPHP php_get_vhost_versions --output=json'
Sep  9 05:26:05 power sudo[1152706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:05 power sudo[1152706]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:05 power sudo[1152711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:26:05 power sudo[1152711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:05 power sudo[1152711]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:05 power sudo[1152729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DomainInfo single_domain_data domain=rebornmacedonia.com return_https_redirect_status=1 --output=json'
Sep  9 05:26:05 power sudo[1152729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:06 power sudo[1152729]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:06 power sudo[1152737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva Mime list_redirects --output=json'
Sep  9 05:26:06 power sudo[1152737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:06 power sudo[1152737]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:09 power sudo[1152836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DirectoryPrivacy is_directory_protected dir=/home/conserva/RebornMacedonia.com --output=json'
Sep  9 05:26:09 power sudo[1152836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:09 power sudo[1152836]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:12 power sudo[1153067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep  9 05:26:12 power sudo[1153067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:12 power sudo[1153067]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:12 power sudo[1153076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=maleshne --output=json'
Sep  9 05:26:12 power sudo[1153076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:12 power sudo[1153076]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:16 power sudo[1153234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:26:16 power sudo[1153234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:16 power sudo[1153234]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:16 power sudo[1153242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user maleshne --user-current --json'
Sep  9 05:26:16 power sudo[1153242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:16 power sudo[1153242]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:16 power sudo[1153251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne LangPHP php_get_vhost_versions --output=json'
Sep  9 05:26:16 power sudo[1153251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:16 power sudo[1153251]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:16 power sudo[1153261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:26:16 power sudo[1153261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:16 power sudo[1153261]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:17 power sudo[1153286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DomainInfo single_domain_data domain=restoranmrs.mk return_https_redirect_status=1 --output=json'
Sep  9 05:26:17 power sudo[1153286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:17 power sudo[1153286]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:17 power sudo[1153293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne Mime list_redirects --output=json'
Sep  9 05:26:17 power sudo[1153293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:17 power sudo[1153293]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:19 power sudo[1153402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DirectoryPrivacy is_directory_protected dir=/home/maleshne/public_html --output=json'
Sep  9 05:26:19 power sudo[1153402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:19 power sudo[1153402]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:20 power sudo[1153470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:20 power sudo[1153470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:20 power sudo[1153470]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:20 power sudo[1153475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:26:20 power sudo[1153475]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:26:20 power sudo[1153475]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:26:20 power sudo[1153475]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:26:20 power sudo[1153475]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:20 power sudo[1153475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:20 power sudo[1153475]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:20 power sudo[1153480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:26:20 power sudo[1153480]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:26:20 power sudo[1153480]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:26:20 power sudo[1153480]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:26:20 power sudo[1153480]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:20 power sudo[1153480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:20 power sudo[1153480]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:23 power sudo[1153629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:23 power sudo[1153629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:23 power sudo[1153629]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:23 power sudo[1153634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:26:23 power sudo[1153634]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:26:23 power sudo[1153634]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:26:23 power sudo[1153634]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:26:23 power sudo[1153634]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:23 power sudo[1153634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:23 power sudo[1153634]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:23 power sudo[1153639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:26:23 power sudo[1153639]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:26:23 power sudo[1153639]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:26:23 power sudo[1153639]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:26:23 power sudo[1153639]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:23 power sudo[1153639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:23 power sudo[1153639]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:23 power sudo[1153675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep  9 05:26:23 power sudo[1153675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:24 power sudo[1153675]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:24 power sudo[1153685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=samasped --output=json'
Sep  9 05:26:24 power sudo[1153685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:24 power sudo[1153685]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:31 power sudo[1153844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped /bin/sh -c 'cd /home/samasped/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:26:31 power sudo[1153844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:31 power sudo[1153844]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:31 power sudo[1153850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user samasped --user-current --json'
Sep  9 05:26:31 power sudo[1153850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:32 power sudo[1153850]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:32 power sudo[1153864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped LangPHP php_get_vhost_versions --output=json'
Sep  9 05:26:32 power sudo[1153864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:32 power sudo[1153864]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:32 power sudo[1153872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:26:32 power sudo[1153872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:32 power sudo[1153872]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:32 power sudo[1153887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DomainInfo single_domain_data domain=samasped.mk return_https_redirect_status=1 --output=json'
Sep  9 05:26:32 power sudo[1153887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:32 power sudo[1153887]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:32 power sudo[1153894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped Mime list_redirects --output=json'
Sep  9 05:26:32 power sudo[1153894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:32 power sudo[1153894]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:36 power sudo[1154042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DirectoryPrivacy is_directory_protected dir=/home/samasped/public_html --output=json'
Sep  9 05:26:36 power sudo[1154042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:36 power sudo[1154042]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:39 power sudo[1154277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep  9 05:26:39 power sudo[1154277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:40 power sudo[1154277]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:40 power sudo[1154285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=seloviro --output=json'
Sep  9 05:26:40 power sudo[1154285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:40 power sudo[1154285]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:46 power sudo[1154415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:26:46 power sudo[1154415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:46 power sudo[1154415]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:46 power sudo[1154421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user seloviro --user-current --json'
Sep  9 05:26:46 power sudo[1154421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:46 power sudo[1154421]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:46 power sudo[1154428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro LangPHP php_get_vhost_versions --output=json'
Sep  9 05:26:46 power sudo[1154428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:46 power sudo[1154428]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:46 power sudo[1154433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:26:46 power sudo[1154433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:46 power sudo[1154433]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:47 power sudo[1154453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DomainInfo single_domain_data domain=selovirovo.mk return_https_redirect_status=1 --output=json'
Sep  9 05:26:47 power sudo[1154453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:47 power sudo[1154453]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:47 power sudo[1154463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro Mime list_redirects --output=json'
Sep  9 05:26:47 power sudo[1154463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:47 power sudo[1154463]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:50 power sudo[1154556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DirectoryPrivacy is_directory_protected dir=/home/seloviro/public_html --output=json'
Sep  9 05:26:50 power sudo[1154556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:50 power sudo[1154556]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:51 power sudo[1154625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:51 power sudo[1154625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:51 power sudo[1154625]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:51 power sudo[1154630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:26:51 power sudo[1154630]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:26:51 power sudo[1154630]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:26:51 power sudo[1154630]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:26:51 power sudo[1154630]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:51 power sudo[1154630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:51 power sudo[1154630]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:51 power sudo[1154635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:26:51 power sudo[1154635]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:26:51 power sudo[1154635]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:26:51 power sudo[1154635]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:26:51 power sudo[1154635]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:51 power sudo[1154635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:51 power sudo[1154635]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:51 power sudo[1154641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:26:51 power sudo[1154641]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:26:51 power sudo[1154641]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:26:51 power sudo[1154641]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:26:51 power sudo[1154641]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:51 power sudo[1154641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:51 power sudo[1154641]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:54 power sudo[1154758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:54 power sudo[1154758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:54 power sudo[1154758]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:54 power sudo[1154763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:26:54 power sudo[1154763]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:26:54 power sudo[1154763]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:26:54 power sudo[1154763]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:26:54 power sudo[1154763]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:54 power sudo[1154763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:54 power sudo[1154763]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:54 power sudo[1154769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:26:54 power sudo[1154769]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:26:54 power sudo[1154769]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:26:54 power sudo[1154769]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:26:54 power sudo[1154769]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:54 power sudo[1154769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:54 power sudo[1154769]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:54 power sudo[1154774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:26:54 power sudo[1154774]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:26:54 power sudo[1154774]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:26:54 power sudo[1154774]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:26:54 power sudo[1154774]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:26:54 power sudo[1154774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:54 power sudo[1154774]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:54 power sudo[1154811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep  9 05:26:54 power sudo[1154811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:55 power sudo[1154811]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:55 power sudo[1154817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=skyapart --output=json'
Sep  9 05:26:55 power sudo[1154817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:55 power sudo[1154817]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:57 power sudo[1154881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart /bin/sh -c 'cd /home/skyapart/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:26:57 power sudo[1154881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:57 power sudo[1154881]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:57 power sudo[1154887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user skyapart --user-current --json'
Sep  9 05:26:57 power sudo[1154887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:57 power sudo[1154887]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:57 power sudo[1154895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart LangPHP php_get_vhost_versions --output=json'
Sep  9 05:26:57 power sudo[1154895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:57 power sudo[1154895]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:57 power sudo[1154900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:26:57 power sudo[1154900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:57 power sudo[1154900]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:58 power sudo[1154917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DomainInfo single_domain_data domain=skyapartments.mk return_https_redirect_status=1 --output=json'
Sep  9 05:26:58 power sudo[1154917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:58 power sudo[1154917]: pam_unix(sudo:session): session closed for user root
Sep  9 05:26:58 power sudo[1154924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart Mime list_redirects --output=json'
Sep  9 05:26:58 power sudo[1154924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:26:58 power sudo[1154924]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:00 power sudo[1155005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DirectoryPrivacy is_directory_protected dir=/home/skyapart/public_html --output=json'
Sep  9 05:27:00 power sudo[1155005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:00 power sudo[1155005]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:03 power sudo[1155243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep  9 05:27:04 power sudo[1155243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:04 power sudo[1155243]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:04 power sudo[1155251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=socioloz --output=json'
Sep  9 05:27:04 power sudo[1155251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:04 power sudo[1155251]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:17 power sudo[1155542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz /bin/sh -c 'cd /home/socioloz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:27:17 power sudo[1155542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:17 power sudo[1155542]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:17 power sudo[1155551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user socioloz --user-current --json'
Sep  9 05:27:17 power sudo[1155551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:17 power sudo[1155551]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:17 power sudo[1155559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz LangPHP php_get_vhost_versions --output=json'
Sep  9 05:27:17 power sudo[1155559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:17 power sudo[1155559]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:17 power sudo[1155564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:27:17 power sudo[1155564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:17 power sudo[1155564]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:17 power sudo[1155578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DomainInfo single_domain_data domain=sociolozi.org.mk return_https_redirect_status=1 --output=json'
Sep  9 05:27:17 power sudo[1155578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:18 power sudo[1155578]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:18 power sudo[1155591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz Mime list_redirects --output=json'
Sep  9 05:27:18 power sudo[1155591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:18 power sudo[1155591]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:24 power sudo[1155780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DirectoryPrivacy is_directory_protected dir=/home/socioloz/public_html --output=json'
Sep  9 05:27:24 power sudo[1155780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:24 power sudo[1155780]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:29 power sudo[1156011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep  9 05:27:29 power sudo[1156011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:29 power sudo[1156011]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:29 power sudo[1156018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stojnevi --output=json'
Sep  9 05:27:29 power sudo[1156018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:29 power sudo[1156018]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:32 power sudo[1156116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi /bin/sh -c 'cd /home/stojnevi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:27:32 power sudo[1156116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:32 power sudo[1156116]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:32 power sudo[1156124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stojnevi --user-current --json'
Sep  9 05:27:32 power sudo[1156124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:32 power sudo[1156124]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:32 power sudo[1156141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi LangPHP php_get_vhost_versions --output=json'
Sep  9 05:27:32 power sudo[1156141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:32 power sudo[1156141]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:32 power sudo[1156146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:27:32 power sudo[1156146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:32 power sudo[1156146]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:33 power sudo[1156166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DomainInfo single_domain_data domain=stojnevi.mk return_https_redirect_status=1 --output=json'
Sep  9 05:27:33 power sudo[1156166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:33 power sudo[1156166]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:33 power sudo[1156174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi Mime list_redirects --output=json'
Sep  9 05:27:33 power sudo[1156174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:33 power sudo[1156174]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:36 power sudo[1156291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DirectoryPrivacy is_directory_protected dir=/home/stojnevi/public_html --output=json'
Sep  9 05:27:36 power sudo[1156291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:36 power sudo[1156291]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:46 power sudo[1156684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/teatar.nucktrajkoprokopiev.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:27:46 power sudo[1156684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:46 power sudo[1156684]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:46 power sudo[1156690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep  9 05:27:46 power sudo[1156690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:46 power sudo[1156690]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:46 power sudo[1156699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:27:46 power sudo[1156699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:46 power sudo[1156699]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:47 power sudo[1156714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=teatar.nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep  9 05:27:47 power sudo[1156714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:47 power sudo[1156714]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:50 power sudo[1156823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/teatar.nucktrajkoprokopiev.mk/mk --output=json'
Sep  9 05:27:50 power sudo[1156823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:50 power sudo[1156823]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:54 power sudo[1157035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep  9 05:27:54 power sudo[1157035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:54 power sudo[1157035]: pam_unix(sudo:session): session closed for user root
Sep  9 05:27:54 power sudo[1157043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=trudovop --output=json'
Sep  9 05:27:54 power sudo[1157043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:27:54 power sudo[1157043]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:02 power sudo[1157198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop /bin/sh -c 'cd /home/trudovop/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:28:02 power sudo[1157198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:02 power sudo[1157198]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:02 power sudo[1157205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user trudovop --user-current --json'
Sep  9 05:28:02 power sudo[1157205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:02 power sudo[1157205]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:02 power sudo[1157214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop LangPHP php_get_vhost_versions --output=json'
Sep  9 05:28:02 power sudo[1157214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:02 power sudo[1157214]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:02 power sudo[1157221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:28:02 power sudo[1157221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:02 power sudo[1157221]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:03 power sudo[1157243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DomainInfo single_domain_data domain=trudovopravo.mk return_https_redirect_status=1 --output=json'
Sep  9 05:28:03 power sudo[1157243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:03 power sudo[1157243]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:03 power sudo[1157255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop Mime list_redirects --output=json'
Sep  9 05:28:03 power sudo[1157255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:03 power sudo[1157255]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:08 power sudo[1157375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DirectoryPrivacy is_directory_protected dir=/home/trudovop/public_html --output=json'
Sep  9 05:28:08 power sudo[1157375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:08 power sudo[1157375]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:12 power sudo[1157581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep  9 05:28:12 power sudo[1157581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:12 power sudo[1157581]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:12 power sudo[1157591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=urbanexp --output=json'
Sep  9 05:28:12 power sudo[1157591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:12 power sudo[1157591]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:18 power sudo[1157794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp /bin/sh -c 'cd /home/urbanexp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:28:18 power sudo[1157794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:18 power sudo[1157794]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:18 power sudo[1157801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user urbanexp --user-current --json'
Sep  9 05:28:18 power sudo[1157801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:19 power sudo[1157801]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:19 power sudo[1157807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp LangPHP php_get_vhost_versions --output=json'
Sep  9 05:28:19 power sudo[1157807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:19 power sudo[1157807]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:19 power sudo[1157812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:28:19 power sudo[1157812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:19 power sudo[1157812]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:19 power sudo[1157832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DomainInfo single_domain_data domain=urbanexpert.mk return_https_redirect_status=1 --output=json'
Sep  9 05:28:19 power sudo[1157832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:19 power sudo[1157832]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:19 power sudo[1157840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp Mime list_redirects --output=json'
Sep  9 05:28:19 power sudo[1157840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:19 power sudo[1157840]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:22 power sudo[1157943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DirectoryPrivacy is_directory_protected dir=/home/urbanexp/public_html --output=json'
Sep  9 05:28:22 power sudo[1157943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:22 power sudo[1157943]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:26 power sudo[1158144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep  9 05:28:26 power sudo[1158144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:26 power sudo[1158144]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:26 power sudo[1158153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vfxnestc --output=json'
Sep  9 05:28:26 power sudo[1158153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:26 power sudo[1158153]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:32 power sudo[1158291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc /bin/sh -c 'cd /home/vfxnestc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:28:32 power sudo[1158291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:32 power sudo[1158291]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:32 power sudo[1158297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vfxnestc --user-current --json'
Sep  9 05:28:32 power sudo[1158297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:32 power sudo[1158297]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:32 power sudo[1158305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc LangPHP php_get_vhost_versions --output=json'
Sep  9 05:28:32 power sudo[1158305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:32 power sudo[1158305]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:32 power sudo[1158313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:28:32 power sudo[1158313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:32 power sudo[1158313]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:33 power sudo[1158335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DomainInfo single_domain_data domain=vfxnest.com return_https_redirect_status=1 --output=json'
Sep  9 05:28:33 power sudo[1158335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:33 power sudo[1158335]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:33 power sudo[1158342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc Mime list_redirects --output=json'
Sep  9 05:28:33 power sudo[1158342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:33 power sudo[1158342]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:37 power sudo[1158466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DirectoryPrivacy is_directory_protected dir=/home/vfxnestc/public_html --output=json'
Sep  9 05:28:37 power sudo[1158466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:37 power sudo[1158466]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:42 power sudo[1158760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep  9 05:28:42 power sudo[1158760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:43 power sudo[1158760]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:43 power sudo[1158766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=volkanco --output=json'
Sep  9 05:28:43 power sudo[1158766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:43 power sudo[1158766]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:47 power sudo[1158860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:28:47 power sudo[1158860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:47 power sudo[1158860]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:47 power sudo[1158866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep  9 05:28:47 power sudo[1158866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:47 power sudo[1158866]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:47 power sudo[1158877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco LangPHP php_get_vhost_versions --output=json'
Sep  9 05:28:47 power sudo[1158877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:47 power sudo[1158877]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:47 power sudo[1158882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:28:47 power sudo[1158882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:47 power sudo[1158882]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:47 power sudo[1158898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DomainInfo single_domain_data domain=volkan.com.mk return_https_redirect_status=1 --output=json'
Sep  9 05:28:47 power sudo[1158898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:48 power sudo[1158898]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:48 power sudo[1158903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mime list_redirects --output=json'
Sep  9 05:28:48 power sudo[1158903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:48 power sudo[1158903]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:50 power sudo[1158990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DirectoryPrivacy is_directory_protected dir=/home/volkanco/public_html --output=json'
Sep  9 05:28:50 power sudo[1158990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:50 power sudo[1158990]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:51 power sudo[1159059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:28:51 power sudo[1159059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:51 power sudo[1159059]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:51 power sudo[1159064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:28:51 power sudo[1159064]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:28:51 power sudo[1159064]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:28:51 power sudo[1159064]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:28:51 power sudo[1159064]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:28:51 power sudo[1159064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:51 power sudo[1159064]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:51 power sudo[1159069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:28:51 power sudo[1159069]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:28:51 power sudo[1159069]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:28:51 power sudo[1159069]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:28:51 power sudo[1159069]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:28:51 power sudo[1159069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:51 power sudo[1159069]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:51 power sudo[1159076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:28:51 power sudo[1159076]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:28:51 power sudo[1159076]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:28:51 power sudo[1159076]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:28:51 power sudo[1159076]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:28:51 power sudo[1159076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:51 power sudo[1159076]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:53 power sudo[1159195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:28:53 power sudo[1159195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:53 power sudo[1159195]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:53 power sudo[1159200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep  9 05:28:53 power sudo[1159200]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep  9 05:28:53 power sudo[1159200]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep  9 05:28:53 power sudo[1159200]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep  9 05:28:53 power sudo[1159200]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:28:53 power sudo[1159200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:53 power sudo[1159200]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:54 power sudo[1159205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:28:54 power sudo[1159205]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:28:54 power sudo[1159205]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:28:54 power sudo[1159205]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:28:54 power sudo[1159205]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:28:54 power sudo[1159205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:54 power sudo[1159205]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:54 power sudo[1159211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep  9 05:28:54 power sudo[1159211]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep  9 05:28:54 power sudo[1159211]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep  9 05:28:54 power sudo[1159211]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep  9 05:28:54 power sudo[1159211]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep  9 05:28:54 power sudo[1159211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:54 power sudo[1159211]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:54 power sudo[1159252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep  9 05:28:54 power sudo[1159252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:55 power sudo[1159252]: pam_unix(sudo:session): session closed for user root
Sep  9 05:28:55 power sudo[1159257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=glammace --output=json'
Sep  9 05:28:55 power sudo[1159257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:28:55 power sudo[1159257]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:05 power sudo[1159464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace /bin/sh -c 'cd /home/glammace/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:29:05 power sudo[1159464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:06 power sudo[1159464]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:06 power sudo[1159471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user glammace --user-current --json'
Sep  9 05:29:06 power sudo[1159471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:06 power sudo[1159471]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:06 power sudo[1159481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace LangPHP php_get_vhost_versions --output=json'
Sep  9 05:29:06 power sudo[1159481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:06 power sudo[1159481]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:06 power sudo[1159490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:29:06 power sudo[1159490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:06 power sudo[1159490]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:06 power sudo[1159506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DomainInfo single_domain_data domain=wikimedia.mk return_https_redirect_status=1 --output=json'
Sep  9 05:29:06 power sudo[1159506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:06 power sudo[1159506]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:06 power sudo[1159513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace Mime list_redirects --output=json'
Sep  9 05:29:06 power sudo[1159513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:06 power sudo[1159513]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:12 power sudo[1159684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DirectoryPrivacy is_directory_protected dir=/home/glammace/public_html --output=json'
Sep  9 05:29:12 power sudo[1159684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:12 power sudo[1159684]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:23 power sudo[1160130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:29:23 power sudo[1160130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:23 power sudo[1160130]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:23 power sudo[1160136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep  9 05:29:23 power sudo[1160136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:24 power sudo[1160136]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:24 power sudo[1160143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:29:24 power sudo[1160143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:24 power sudo[1160143]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:24 power sudo[1160168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=wineberry.mk return_https_redirect_status=1 --output=json'
Sep  9 05:29:24 power sudo[1160168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:24 power sudo[1160168]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:29 power sudo[1160309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/public_html --output=json'
Sep  9 05:29:29 power sudo[1160309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:29 power sudo[1160309]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:32 power sudo[1160539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep  9 05:29:32 power sudo[1160539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:33 power sudo[1160539]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:33 power sudo[1160547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workbenc --output=json'
Sep  9 05:29:33 power sudo[1160547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:33 power sudo[1160547]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:35 power sudo[1160630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc /bin/sh -c 'cd /home/workbenc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep  9 05:29:35 power sudo[1160630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:35 power sudo[1160630]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:35 power sudo[1160637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workbenc --user-current --json'
Sep  9 05:29:36 power sudo[1160637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:36 power sudo[1160637]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:36 power sudo[1160646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc LangPHP php_get_vhost_versions --output=json'
Sep  9 05:29:36 power sudo[1160646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:36 power sudo[1160646]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:36 power sudo[1160655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep  9 05:29:36 power sudo[1160655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:36 power sudo[1160655]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:36 power sudo[1160669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DomainInfo single_domain_data domain=workbench-ent.com return_https_redirect_status=1 --output=json'
Sep  9 05:29:36 power sudo[1160669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:36 power sudo[1160669]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:36 power sudo[1160676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc Mime list_redirects --output=json'
Sep  9 05:29:37 power sudo[1160676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:37 power sudo[1160676]: pam_unix(sudo:session): session closed for user root
Sep  9 05:29:38 power sudo[1160760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DirectoryPrivacy is_directory_protected dir=/home/workbenc/public_html --output=json'
Sep  9 05:29:38 power sudo[1160760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:29:38 power sudo[1160760]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:02 power systemd[1163054]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:30:02 power systemd[1163056]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 05:30:02 power systemd[1163058]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 05:30:02 power systemd[1163059]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 05:30:47 power sudo[1165509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/hooks
Sep  9 05:30:47 power sudo[1165509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165509]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep  9 05:30:47 power sudo[1165518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165518]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165522]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165526]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165530]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165534]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165538]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165542]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165546]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165550]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165554]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165558]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165562]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165567]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165571]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165575]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165579]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165585]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165589]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165593]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165597]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165601]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/animatem/animate.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165605]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/animatem/animate.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165610]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165615]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165619]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165625]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165629]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165633]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165637]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  9 05:30:47 power sudo[1165641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:47 power sudo[1165641]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:47 power sudo[1165646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165646]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165650]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165654]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165658]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165663]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165667]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165671]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165675]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165679]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165683]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165687]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165691]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165695]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165699]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165703]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165707]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165711]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165715]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165720]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165725]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165729]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165733]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165737]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165741]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165745]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165749]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165753]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165757]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165762]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165766]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165770]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165774]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165778]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165785]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165789]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165793]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165797]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165802]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165806]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165811]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165815]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165819]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165823]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165827]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165831]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165835]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165839]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165844]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165848]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165852]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165856]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165860]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165864]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165868]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165872]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165876]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165880]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165884]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165888]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165892]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165896]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165900]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165904]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165908]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165912]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165916]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165920]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165924]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:48 power sudo[1165928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  9 05:30:48 power sudo[1165928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:48 power sudo[1165928]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165936]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165940]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165945]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165950]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165954]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165958]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165962]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165967]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165971]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165975]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165980]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165984]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165989]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165993]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1165998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1165998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1165998]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166002]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166007]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166012]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166016]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166020]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166025]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166029]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166033]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166037]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166041]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166045]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166049]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166053]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166057]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166064]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166068]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166072]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166076]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166080]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166084]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166088]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166092]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166096]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166102]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166106]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166110]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166114]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166118]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166122]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166126]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166130]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166134]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166138]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166142]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166146]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166150]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166154]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166158]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166162]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166166]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166170]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166175]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166179]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166183]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166187]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166191]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166197]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166201]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  9 05:30:49 power sudo[1166206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:49 power sudo[1166206]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:49 power sudo[1166210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166210]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166215]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166219]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166223]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166227]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166231]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166235]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166239]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166243]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166247]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166251]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166255]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166259]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166263]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166267]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166271]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166276]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166280]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166284]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166288]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166293]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166297]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166301]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166305]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166309]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166314]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166320]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166325]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166329]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166336]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166340]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166344]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166348]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166353]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166357]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166361]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166365]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166369]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166373]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166377]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166381]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166385]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166390]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166394]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166398]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166402]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166406]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166410]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166414]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166418]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166423]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166428]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166433]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166437]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166442]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166446]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166450]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166454]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166458]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166462]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166466]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166470]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166474]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  9 05:30:50 power sudo[1166478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:50 power sudo[1166478]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:50 power sudo[1166482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166482]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166486]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166490]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166494]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166498]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166502]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166506]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166510]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166514]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166518]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166522]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166526]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166530]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166538]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166543]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166547]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166551]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166555]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166559]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166563]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166567]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166573]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166577]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166584]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166588]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166592]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166596]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166600]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166604]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166609]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166617]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166621]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166625]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166629]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166634]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166638]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166642]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166647]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166652]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166656]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166660]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166664]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166669]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166673]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166678]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166683]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166687]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166691]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166695]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166699]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166705]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166709]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166713]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166717]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166721]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166725]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166729]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166733]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166737]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166741]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166746]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:51 power sudo[1166751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:51 power sudo[1166751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:51 power sudo[1166751]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166755]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166759]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166763]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166767]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166772]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166776]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166780]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166784]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166788]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166792]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166796]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166800]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166804]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166808]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166812]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166816]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166820]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166824]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166828]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166832]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166836]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166841]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166845]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166850]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166854]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166859]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166863]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166867]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166872]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166876]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166880]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166887]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166892]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166896]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166900]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166905]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166909]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166913]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166918]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166922]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166926]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166930]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166934]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166938]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166942]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166946]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166950]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166954]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166958]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166962]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166966]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166970]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166974]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166979]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166983]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166987]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166992]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1166997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1166997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1166997]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1167002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1167002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1167002]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1167006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1167006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1167006]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1167010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1167010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1167010]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1167014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1167014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1167014]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1167018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1167018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1167018]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1167022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1167022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1167022]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1167026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1167026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1167026]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1167030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:52 power sudo[1167030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:52 power sudo[1167030]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:52 power sudo[1167034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167034]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167038]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167042]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167046]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167050]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167055]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167059]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167063]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167067]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167071]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167075]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167079]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167083]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167087]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167091]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167095]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167100]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167104]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167108]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167112]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167116]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167120]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167124]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167128]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167132]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167136]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167140]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167144]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167148]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167152]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167156]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167160]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167171]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167175]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167181]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167185]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167189]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167193]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167197]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167202]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167206]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167210]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167214]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167219]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167223]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167227]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167231]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167235]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167240]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167244]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167248]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167252]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167256]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep  9 05:30:53 power sudo[1167260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:53 power sudo[1167260]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:53 power sudo[1167264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep  9 05:30:53 power sudo[1167264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167264]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167272]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167276]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167280]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167285]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167290]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167294]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167298]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167302]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167306]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167310]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167314]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167318]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167322]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167326]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167330]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167334]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167338]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167342]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167347]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167351]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167355]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167359]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167363]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167370]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167374]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167378]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167382]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167386]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167390]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167394]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167398]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167402]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167406]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167410]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167415]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167419]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167423]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167427]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167431]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167437]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167441]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167445]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167450]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167454]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167459]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167463]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167467]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167472]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167476]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167480]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167485]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167489]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167493]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167497]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167501]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:54 power sudo[1167505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:54 power sudo[1167505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:54 power sudo[1167505]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167509]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167513]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167517]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167521]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167525]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167529]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167533]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167537]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167541]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167545]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167549]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167553]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167557]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167561]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167565]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167569]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167573]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167578]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167583]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167587]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167591]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167595]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167599]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167603]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167607]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167611]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167615]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167619]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167623]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167627]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167631]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167635]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167639]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167646]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167650]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167654]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167658]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167662]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167666]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167670]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167678]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167682]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167686]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167690]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167695]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167699]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167703]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167707]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167711]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167715]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167719]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167724]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167728]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167732]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167737]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167742]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167747]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167751]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167755]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167759]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167763]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167767]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167772]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167776]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167780]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167784]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167788]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:55 power sudo[1167792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep  9 05:30:55 power sudo[1167792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:55 power sudo[1167792]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167796]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167800]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167805]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167809]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167813]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167817]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167821]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167825]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167829]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167833]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167837]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167841]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167845]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167849]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167853]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167857]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167861]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167865]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167869]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167873]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167877]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167881]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167885]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167890]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167894]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167898]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167902]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167906]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167910]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167914]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167919]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167923]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167930]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167934]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167938]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167942]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167947]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167951]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167955]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167959]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167963]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167967]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167971]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167975]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167979]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167983]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167987]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167991]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167995]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1167999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1167999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1167999]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168003]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168007]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168011]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168015]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168019]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168023]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168028]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168032]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168036]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168040]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168044]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168048]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168052]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168056]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168061]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168065]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168069]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:56 power sudo[1168074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep  9 05:30:56 power sudo[1168074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:56 power sudo[1168074]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168078]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168082]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168086]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168090]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168094]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168098]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168102]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168106]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168110]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168114]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168118]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168122]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168126]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168130]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168135]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168139]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168143]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168148]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168152]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168156]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168160]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168164]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168168]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168172]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168176]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168180]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168184]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168188]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168192]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168196]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168200]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168204]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168208]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168212]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168219]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168223]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168227]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168231]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168235]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168239]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168243]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168247]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168251]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168255]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168260]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168264]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168268]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168272]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168276]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168280]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168284]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168288]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168292]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168296]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168300]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168304]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168308]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168312]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168316]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168320]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168324]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168328]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168332]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168336]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168340]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168344]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168348]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168352]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:57 power sudo[1168356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  9 05:30:57 power sudo[1168356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:57 power sudo[1168356]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168360]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168364]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168368]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168373]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168377]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168381]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168385]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168389]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168394]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168398]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168402]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168406]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168410]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168414]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168418]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168422]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168426]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168430]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168434]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168438]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168442]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168446]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168450]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168454]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168458]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168462]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168466]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168470]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168474]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168478]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168482]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168487]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168491]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168495]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168502]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168506]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168510]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168514]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168519]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168523]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168527]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168531]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168535]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168539]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168543]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168547]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168551]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168555]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168559]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168563]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168567]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168572]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168576]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168580]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168584]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168588]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168592]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168596]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168600]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168604]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168609]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168614]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168618]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168622]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168626]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168630]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168634]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168638]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168642]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:58 power sudo[1168646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  9 05:30:58 power sudo[1168646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:58 power sudo[1168646]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168650]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168654]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168658]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168662]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168666]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168670]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168674]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168678]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168682]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168686]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168690]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168694]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168698]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168702]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168706]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168711]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168715]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168720]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168725]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168729]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168734]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168738]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168742]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168746]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168750]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168754]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168758]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168762]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168766]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168770]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168775]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168779]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168786]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168790]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168794]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168798]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168802]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168806]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168810]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168814]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168818]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168822]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168830]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168835]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168839]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168843]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168847]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168851]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168855]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168859]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168863]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168867]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168871]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168875]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168879]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168883]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168887]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168891]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168895]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168899]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168903]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168907]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168911]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168915]: pam_unix(sudo:session): session closed for user root
Sep  9 05:30:59 power sudo[1168919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep  9 05:30:59 power sudo[1168919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:30:59 power sudo[1168919]: pam_unix(sudo:session): session closed for user root
Sep  9 05:35:01 power systemd[1173432]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:35:07 power systemd[1173559]: pam_unix(systemd-user:session): session opened for user ambitiou(uid=1032) by ambitiou(uid=0)
Sep  9 05:35:08 power su[1173555]: pam_unix(su:session): session opened for user ambitiou(uid=1032) by (uid=0)
Sep  9 05:35:08 power su[1173555]: pam_unix(su:session): session closed for user ambitiou
Sep  9 05:36:01 power systemd[1174409]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 05:37:01 power systemd[1175333]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 05:40:01 power systemd[1178121]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:42:01 power systemd[1179870]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 05:42:05 power sudo[1179938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 05:42:05 power sudo[1179938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:05 power sudo[1179938]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:05 power sudo[1179942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 05:42:05 power sudo[1179942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:05 power sudo[1179942]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:05 power sudo[1179946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 05:42:05 power sudo[1179946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:05 power sudo[1179946]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:05 power sudo[1179950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=moMrOW5EfA'
Sep  9 05:42:05 power sudo[1179950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:05 power sudo[1179950]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:05 power sudo[1179955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 05:42:05 power sudo[1179955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:05 power sudo[1179955]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:05 power sudo[1179959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 05:42:05 power sudo[1179959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:05 power sudo[1179959]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:05 power sudo[1179965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 05:42:05 power sudo[1179965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:05 power sudo[1179965]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:05 power sudo[1179969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 05:42:06 power sudo[1179969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:06 power sudo[1179969]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:06 power sudo[1179980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 05:42:06 power sudo[1179980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:06 power sudo[1179980]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:06 power sudo[1179984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 05:42:06 power sudo[1179984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:06 power sudo[1179984]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:06 power sudo[1179988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 05:42:06 power sudo[1179988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:06 power sudo[1179988]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:06 power sudo[1179994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 05:42:06 power sudo[1179994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:06 power sudo[1179994]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:06 power sudo[1180000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 05:42:06 power sudo[1180000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:06 power sudo[1180000]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:06 power sudo[1180004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 05:42:06 power sudo[1180004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:06 power sudo[1180004]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:08 power sudo[1180045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 05:42:08 power sudo[1180045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:08 power sudo[1180045]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:08 power sudo[1180051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 05:42:08 power sudo[1180051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:08 power sudo[1180051]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:08 power sudo[1180059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pelagini user-2=bbbustou user-3=biplmk user-4=kaoilmk user-5=sssoluti user-6=atspedco user-7=animatem user-8=cleanerm user-9=progress user-10=taktcomm user-11=recorgmk user-12=solointe user-13=jaramk user-14=eurofarm user-15=solarinv user-16=golakkom user-17=electrol user-18=trigemat user-19=eliksirz user-20=naksorgm user-21=ismassag user-22=workbenc user-23=mbmehani user-24=viplastc user-25=wineberr user-26=vegemk1 user-27=cupidpro user-28=euronic3 user-29=conserva user-30=bonitavi user-31=evberasm user-32=folklore user-33=bauerin2 user-34=evacommk user-35=aptekafa user-36=madzomk user-37=gradbai1 user-38=dimpalne user-39=eaptekam user-40=peshkai1 user-41=fxxcom user-42=tehnodro user-43=makdrone user-44=jpkomuna user-45=izzomk user-46=premiumi user-47=innofabl user-48=vacuacti user-49=bozinovm user-50=dslmk
Sep  9 05:42:08 power sudo[1180059]: wp-toolkit : (command continued) user-51=fnjorgmk user-52=prizmapl user-53=darkogor user-54=tehnologija user-55=taneccom user-56=modernar user-57=inkigaic user-58=zdmgpsor user-59=gorsajmk user-60=aquatech user-61=supremel user-62=v5srybi9dcdx user-63=nationa2 user-64=onlinesh user-65=mapaspla user-66=solemor1 user-67=tcieuroc user-68=fffhpcwr user-69=radekrat user-70=starluxm user-71=fiziosmk user-72=ambitiou user-73=versusmk user-74=intelek1 user-75=mediatag user-76=lblawcom user-77=nucktra1 user-78=forzares user-79=aptekazd user-80=nikimare user-81=hausmark user-82=nikolov1 user-83=apgrupmk user-84=mediasol user-85=bogdanos user-86=carrent1 user-87=kardiome user-88=euronic2 user-89=matratze user-90=cosmatob user-91=euromaki user-92=elektrot user-93=zapovim1 user-94=chemhemc user-95=samasped user-96=nutrivim user-97=imdskopj user-98=glammace user-99=albuname user-100=infopor1 user-101=vtranseu user-102=pravekom user-103=stojano1
Sep  9 05:42:08 power sudo[1180059]: wp-toolkit : (command continued) user-104=bovincom user-105=itradeco user-106=janiboja user-107=cabinetm user-108=vezilkac user-109=zampmk user-110=busymard user-111=zvskopje user-112=palenzok user-113=custome1 user-114=sparkupm user-115=stokovna user-116=klimimk user-117=premiuma user-118=kouzonco user-119=dalmacom user-120=cetplatf user-121=drleomk user-122=jpparkin user-123=inotekso user-124=screenme user-125=arturaco user-126=ideaplus user-127=karpospo user-128=nasaidni user-129=premiums user-130=daris user-131=butelmk user-132=workandt user-133=getaldus user-134=simbiome user-135=delcevca user-136=barececo user-137=mfashion user-138=goartsym user-139=volkanco user-140=dhamachi user-141=bianasho user-142=makoasmk user-143=skyapart user-144=rasmorgm user-145=datalink user-146=velmk user-147=gogovan1 user-148=univerz1 user-149=kujnamon user-150=agrosind user-151=mpbmk user-152=bizporta user-153=datelcom user-154=maleshne user-155=groskome
Sep  9 05:42:08 power sudo[1180059]: wp-toolkit : (command continued) user-156=ivanjord user-157=sedcmk user-158=vfxnestc user-159=polyeste user-160=urbanexp user-161=wikicamp user-162=detskagr user-163=spdcompu user-164=mspmk user-165=infobadi user-166=stojnevi user-167=uhostmk5 user-168=bauerbg user-169=raremk user-170=oouslave user-171=vmro user-172=trudovop user-173=viewinn user-174=enaspotc user-175=hotammk user-176=cajsproc user-177=youthgua user-178=anitermc user-179=frizered user-180=hidrommk user-181=caramk user-182=nefrolog user-183=oncolog1 user-184=levantmk user-185=ekostoc1 user-186=socioloz user-187=avtogumi user-188=pelagoni user-189=evolvepl user-190=seloviro user-191=nlpmkorg user-192=centarba user-193=kolened1 user-194=nolimits user-195=berbermk user-196=edomcomm user-197=sprintst user-198=herbalpl user-199=enochmk user-200=dikimk12 user-201=tradeyou user-202=gjorgeiv user-203=dnevnoin user-204=wondersp user-205=stravelm user-206=robustco user-207=pecakome
Sep  9 05:42:08 power sudo[1180059]: wp-toolkit : (command continued) user-208=rastiraz user-209=holiyayt user-210=tealmk user-211=proverim user-212=dadarmk user-213=mstmmk user-214=goodnews user-215=gocruise feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 05:42:08 power sudo[1180059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:08 power sudo[1180059]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:08 power sudo[1180070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 05:42:08 power sudo[1180070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:08 power sudo[1180070]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:08 power sudo[1180074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XeN3VrzUKS8724Vl.~
Sep  9 05:42:08 power sudo[1180074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:08 power sudo[1180074]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:09 power sudo[1180078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XeN3VrzUKS8724Vl.~\''
Sep  9 05:42:09 power sudo[1180078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:09 power sudo[1180078]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:09 power sudo[1180083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XeN3VrzUKS8724Vl.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 05:42:09 power sudo[1180083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:09 power sudo[1180083]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:09 power sudo[1180087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 05:42:09 power sudo[1180087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:09 power sudo[1180087]: pam_unix(sudo:session): session closed for user root
Sep  9 05:42:10 power sudo[1181008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 05:42:10 power sudo[1181008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 05:42:10 power sudo[1181008]: pam_unix(sudo:session): session closed for user root
Sep  9 05:45:01 power systemd[1183897]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:50:01 power systemd[1188523]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 05:55:02 power systemd[1193241]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:00:01 power systemd[1197580]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:00:01 power systemd[1197582]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 06:00:01 power systemd[1197583]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 06:00:01 power systemd[1197585]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 06:05:01 power systemd[1203154]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:06:01 power systemd[1204279]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 06:07:01 power systemd[1205119]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 06:10:01 power systemd[1208440]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:12:01 power systemd[1210309]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 06:15:02 power systemd[1213592]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:20:01 power systemd[1218653]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:25:01 power systemd[1223163]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:30:01 power systemd[1227720]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 06:30:01 power systemd[1227718]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:30:01 power systemd[1227721]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 06:30:01 power systemd[1227723]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 06:35:01 power systemd[1232162]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:36:01 power systemd[1233201]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 06:37:01 power systemd[1234048]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 06:40:01 power systemd[1236262]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:42:01 power systemd[1237981]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 06:42:05 power sudo[1238048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 06:42:05 power sudo[1238048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:05 power sudo[1238048]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:05 power sudo[1238052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 06:42:05 power sudo[1238052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:05 power sudo[1238052]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:05 power sudo[1238056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 06:42:05 power sudo[1238056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:05 power sudo[1238056]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:05 power sudo[1238060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=GipnnqIaAC'
Sep  9 06:42:05 power sudo[1238060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:05 power sudo[1238060]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:05 power sudo[1238065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 06:42:05 power sudo[1238065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:05 power sudo[1238065]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:05 power sudo[1238069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 06:42:05 power sudo[1238069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:05 power sudo[1238069]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:05 power sudo[1238073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 06:42:05 power sudo[1238073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:05 power sudo[1238073]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:05 power sudo[1238077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 06:42:05 power sudo[1238077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:06 power sudo[1238077]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:06 power sudo[1238092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 06:42:06 power sudo[1238092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:06 power sudo[1238092]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:06 power sudo[1238096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 06:42:06 power sudo[1238096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:06 power sudo[1238096]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:06 power sudo[1238101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 06:42:06 power sudo[1238101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:06 power sudo[1238101]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:06 power sudo[1238106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 06:42:06 power sudo[1238106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:06 power sudo[1238106]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:06 power sudo[1238110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 06:42:06 power sudo[1238110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:06 power sudo[1238110]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:06 power sudo[1238114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 06:42:06 power sudo[1238114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:06 power sudo[1238114]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:08 power sudo[1238175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 06:42:08 power sudo[1238175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:08 power sudo[1238175]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:08 power sudo[1238188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 06:42:08 power sudo[1238188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:08 power sudo[1238188]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:08 power sudo[1238205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=stojano1 user-2=bovincom user-3=itradeco user-4=janiboja user-5=cabinetm user-6=vezilkac user-7=busymard user-8=zampmk user-9=zvskopje user-10=palenzok user-11=custome1 user-12=sparkupm user-13=stokovna user-14=klimimk user-15=premiuma user-16=kouzonco user-17=dalmacom user-18=cetplatf user-19=drleomk user-20=jpparkin user-21=inotekso user-22=screenme user-23=arturaco user-24=ideaplus user-25=nasaidni user-26=karpospo user-27=premiums user-28=butelmk user-29=daris user-30=workandt user-31=delcevca user-32=getaldus user-33=simbiome user-34=barececo user-35=mfashion user-36=goartsym user-37=volkanco user-38=dhamachi user-39=bianasho user-40=makoasmk user-41=skyapart user-42=rasmorgm user-43=datalink user-44=velmk user-45=gogovan1 user-46=univerz1 user-47=kujnamon user-48=agrosind user-49=mpbmk user-50=bizporta
Sep  9 06:42:08 power sudo[1238205]: wp-toolkit : (command continued) user-51=datelcom user-52=maleshne user-53=groskome user-54=ivanjord user-55=sedcmk user-56=vfxnestc user-57=polyeste user-58=urbanexp user-59=wikicamp user-60=detskagr user-61=spdcompu user-62=infobadi user-63=mspmk user-64=stojnevi user-65=uhostmk5 user-66=bauerbg user-67=raremk user-68=oouslave user-69=vmro user-70=trudovop user-71=viewinn user-72=enaspotc user-73=hotammk user-74=cajsproc user-75=youthgua user-76=anitermc user-77=frizered user-78=hidrommk user-79=caramk user-80=nefrolog user-81=ekostoc1 user-82=levantmk user-83=oncolog1 user-84=avtogumi user-85=socioloz user-86=pelagoni user-87=evolvepl user-88=seloviro user-89=nlpmkorg user-90=centarba user-91=kolened1 user-92=nolimits user-93=berbermk user-94=edomcomm user-95=sprintst user-96=enochmk user-97=herbalpl user-98=dikimk12 user-99=gjorgeiv user-100=tradeyou user-101=dnevnoin user-102=wondersp user-103=stravelm user-104=robustco user-105=pecakome
Sep  9 06:42:08 power sudo[1238205]: wp-toolkit : (command continued) user-106=rastiraz user-107=holiyayt user-108=tealmk user-109=proverim user-110=dadarmk user-111=mstmmk user-112=goodnews user-113=gocruise user-114=pelagini user-115=bbbustou user-116=biplmk user-117=kaoilmk user-118=sssoluti user-119=atspedco user-120=animatem user-121=cleanerm user-122=progress user-123=recorgmk user-124=taktcomm user-125=solointe user-126=jaramk user-127=eurofarm user-128=solarinv user-129=golakkom user-130=electrol user-131=trigemat user-132=naksorgm user-133=eliksirz user-134=ismassag user-135=workbenc user-136=mbmehani user-137=viplastc user-138=wineberr user-139=vegemk1 user-140=cupidpro user-141=euronic3 user-142=conserva user-143=bonitavi user-144=evberasm user-145=folklore user-146=bauerin2 user-147=evacommk user-148=madzomk user-149=aptekafa user-150=gradbai1 user-151=dimpalne user-152=eaptekam user-153=peshkai1 user-154=fxxcom user-155=tehnodro user-156=makdrone user-157=jpkomuna
Sep  9 06:42:08 power sudo[1238205]: wp-toolkit : (command continued) user-158=izzomk user-159=premiumi user-160=innofabl user-161=vacuacti user-162=bozinovm user-163=fnjorgmk user-164=prizmapl user-165=darkogor user-166=dslmk user-167=tehnologija user-168=taneccom user-169=modernar user-170=inkigaic user-171=zdmgpsor user-172=gorsajmk user-173=aquatech user-174=supremel user-175=v5srybi9dcdx user-176=nationa2 user-177=onlinesh user-178=mapaspla user-179=solemor1 user-180=tcieuroc user-181=fffhpcwr user-182=radekrat user-183=starluxm user-184=fiziosmk user-185=ambitiou user-186=versusmk user-187=intelek1 user-188=mediatag user-189=lblawcom user-190=nucktra1 user-191=forzares user-192=aptekazd user-193=nikimare user-194=nikolov1 user-195=hausmark user-196=apgrupmk user-197=mediasol user-198=bogdanos user-199=carrent1 user-200=kardiome user-201=euronic2 user-202=matratze user-203=cosmatob user-204=euromaki user-205=zapovim1 user-206=elektrot user-207=samasped user-208=chemhemc
Sep  9 06:42:08 power sudo[1238205]: wp-toolkit : (command continued) user-209=nutrivim user-210=imdskopj user-211=glammace user-212=albuname user-213=infopor1 user-214=vtranseu user-215=pravekom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 06:42:08 power sudo[1238205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:09 power sudo[1238205]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:09 power sudo[1238217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 06:42:09 power sudo[1238217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:09 power sudo[1238217]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:09 power sudo[1238222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9Y62u61YrU1miYVt.~
Sep  9 06:42:09 power sudo[1238222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:09 power sudo[1238222]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:09 power sudo[1238226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9Y62u61YrU1miYVt.~\''
Sep  9 06:42:09 power sudo[1238226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:09 power sudo[1238226]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:09 power sudo[1238231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9Y62u61YrU1miYVt.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 06:42:09 power sudo[1238231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:09 power sudo[1238231]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:09 power sudo[1238235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 06:42:09 power sudo[1238235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:09 power sudo[1238235]: pam_unix(sudo:session): session closed for user root
Sep  9 06:42:13 power sudo[1239202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 06:42:13 power sudo[1239202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 06:42:13 power sudo[1239202]: pam_unix(sudo:session): session closed for user root
Sep  9 06:45:01 power systemd[1242027]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:50:01 power systemd[1246899]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 06:55:01 power systemd[1251652]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:00:01 power systemd[1256169]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:00:01 power systemd[1256171]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 07:00:01 power systemd[1256172]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 07:00:01 power systemd[1256174]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 07:05:01 power systemd[1262079]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:06:01 power systemd[1263192]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 07:07:01 power systemd[1264044]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 07:10:01 power systemd[1266509]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:12:02 power systemd[1268322]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 07:14:52 power sshd[1270706]: error: kex_exchange_identification: Connection closed by remote host
Sep  9 07:14:52 power sshd[1270706]: Connection closed by 185.247.137.35 port 41735
Sep  9 07:14:53 power sshd[1270723]: Connection closed by 185.247.137.35 port 48619 [preauth]
Sep  9 07:15:01 power systemd[1270898]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:20:01 power systemd[1275054]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:21:23 power sudo[1276358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 07:21:23 power sudo[1276358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:23 power sudo[1276358]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:23 power sudo[1276364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bauerbg'
Sep  9 07:21:23 power sudo[1276364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:24 power sudo[1276364]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:33 power sudo[1276540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 07:21:33 power sudo[1276540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:33 power sudo[1276540]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:33 power sudo[1276547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep  9 07:21:33 power sudo[1276547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:33 power sudo[1276547]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:33 power sudo[1276554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou Mime list_redirects --output=json'
Sep  9 07:21:33 power sudo[1276554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:33 power sudo[1276554]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:49 power sudo[1276787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 07:21:49 power sudo[1276787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:49 power sudo[1276787]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:49 power sudo[1276792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep  9 07:21:49 power sudo[1276792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:49 power sudo[1276792]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:50 power sudo[1276797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm Mime list_redirects --output=json'
Sep  9 07:21:50 power sudo[1276797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:50 power sudo[1276797]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:50 power sudo[1276811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 07:21:50 power sudo[1276811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:50 power sudo[1276811]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:50 power sudo[1276819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep  9 07:21:50 power sudo[1276819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:50 power sudo[1276819]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:50 power sudo[1276826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm Mime list_redirects --output=json'
Sep  9 07:21:50 power sudo[1276826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:50 power sudo[1276826]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:58 power sudo[1276938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 07:21:58 power sudo[1276938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:58 power sudo[1276938]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:58 power sudo[1276944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep  9 07:21:58 power sudo[1276944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:59 power sudo[1276944]: pam_unix(sudo:session): session closed for user root
Sep  9 07:21:59 power sudo[1276954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot Mime list_redirects --output=json'
Sep  9 07:21:59 power sudo[1276954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:21:59 power sudo[1276954]: pam_unix(sudo:session): session closed for user root
Sep  9 07:22:20 power sudo[1277247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 07:22:20 power sudo[1277247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:22:20 power sudo[1277247]: pam_unix(sudo:session): session closed for user root
Sep  9 07:22:20 power sudo[1277253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep  9 07:22:20 power sudo[1277253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:22:20 power sudo[1277253]: pam_unix(sudo:session): session closed for user root
Sep  9 07:22:20 power sudo[1277259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews Mime list_redirects --output=json'
Sep  9 07:22:20 power sudo[1277259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:22:20 power sudo[1277259]: pam_unix(sudo:session): session closed for user root
Sep  9 07:22:27 power sudo[1277392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 07:22:27 power sudo[1277392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:22:27 power sudo[1277392]: pam_unix(sudo:session): session closed for user root
Sep  9 07:22:27 power sudo[1277397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status polyeste'
Sep  9 07:22:27 power sudo[1277397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:22:28 power sudo[1277397]: pam_unix(sudo:session): session closed for user root
Sep  9 07:25:01 power systemd[1280063]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:30:01 power systemd[1284679]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:30:01 power systemd[1284681]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 07:30:01 power systemd[1284682]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 07:30:01 power systemd[1284684]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 07:35:01 power systemd[1289500]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:36:01 power systemd[1290694]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 07:37:01 power systemd[1291639]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 07:40:01 power systemd[1294394]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:42:01 power systemd[1296203]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 07:42:05 power sudo[1296285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 07:42:05 power sudo[1296285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:05 power sudo[1296285]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:05 power sudo[1296293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 07:42:05 power sudo[1296293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:05 power sudo[1296293]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:05 power sudo[1296297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 07:42:05 power sudo[1296297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:05 power sudo[1296297]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:05 power sudo[1296301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=We50OiQUzs'
Sep  9 07:42:05 power sudo[1296301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:05 power sudo[1296301]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:05 power sudo[1296306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 07:42:05 power sudo[1296306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:05 power sudo[1296306]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:05 power sudo[1296311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 07:42:05 power sudo[1296311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:05 power sudo[1296311]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:05 power sudo[1296315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 07:42:05 power sudo[1296315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:05 power sudo[1296315]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:06 power sudo[1296319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 07:42:06 power sudo[1296319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:06 power sudo[1296319]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:06 power sudo[1296331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 07:42:06 power sudo[1296331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:06 power sudo[1296331]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:06 power sudo[1296335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 07:42:06 power sudo[1296335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:06 power sudo[1296335]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:06 power sudo[1296339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 07:42:06 power sudo[1296339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:06 power sudo[1296339]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:06 power sudo[1296343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 07:42:06 power sudo[1296343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:06 power sudo[1296343]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:06 power sudo[1296348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 07:42:06 power sudo[1296348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:06 power sudo[1296348]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:06 power sudo[1296352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 07:42:06 power sudo[1296352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:06 power sudo[1296352]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:08 power sudo[1296417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 07:42:08 power sudo[1296417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:08 power sudo[1296417]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:08 power sudo[1296422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 07:42:08 power sudo[1296422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:08 power sudo[1296422]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:08 power sudo[1296429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=zdmgpsor user-2=supremel user-3=v5srybi9dcdx user-4=aquatech user-5=gorsajmk user-6=tehnologija user-7=taneccom user-8=vacuacti user-9=innofabl user-10=premiumi user-11=prizmapl user-12=fnjorgmk user-13=dslmk user-14=darkogor user-15=bozinovm user-16=inkigaic user-17=modernar user-18=starluxm user-19=radekrat user-20=fffhpcwr user-21=versusmk user-22=fiziosmk user-23=ambitiou user-24=mapaspla user-25=solemor1 user-26=nationa2 user-27=onlinesh user-28=tcieuroc user-29=kardiome user-30=apgrupmk user-31=carrent1 user-32=bogdanos user-33=mediasol user-34=matratze user-35=euronic2 user-36=lblawcom user-37=nucktra1 user-38=mediatag user-39=intelek1 user-40=hausmark user-41=nikolov1 user-42=forzares user-43=nikimare user-44=aptekazd user-45=albuname user-46=glammace user-47=imdskopj user-48=pravekom
Sep  9 07:42:08 power sudo[1296429]: wp-toolkit : (command continued) user-49=vtranseu user-50=infopor1 user-51=elektrot user-52=zapovim1 user-53=euromaki user-54=cosmatob user-55=nutrivim user-56=samasped user-57=chemhemc user-58=cleanerm user-59=animatem user-60=progress user-61=sssoluti user-62=atspedco user-63=solointe user-64=jaramk user-65=taktcomm user-66=recorgmk user-67=pelagini user-68=bbbustou user-69=kaoilmk user-70=biplmk user-71=mbmehani user-72=ismassag user-73=workbenc user-74=viplastc user-75=wineberr user-76=solarinv user-77=eurofarm user-78=electrol user-79=eliksirz user-80=naksorgm user-81=trigemat user-82=golakkom user-83=bauerin2 user-84=folklore user-85=conserva user-86=cupidpro user-87=vegemk1 user-88=euronic3 user-89=evberasm user-90=bonitavi user-91=makdrone user-92=tehnodro user-93=jpkomuna user-94=izzomk user-95=gradbai1 user-96=aptekafa user-97=madzomk user-98=evacommk user-99=fxxcom user-100=peshkai1 user-101=dimpalne user-102=eaptekam user-103=hotammk
Sep  9 07:42:08 power sudo[1296429]: wp-toolkit : (command continued) user-104=cajsproc user-105=anitermc user-106=youthgua user-107=bauerbg user-108=uhostmk5 user-109=oouslave user-110=raremk user-111=stojnevi user-112=viewinn user-113=trudovop user-114=vmro user-115=enaspotc user-116=pelagoni user-117=avtogumi user-118=socioloz user-119=evolvepl user-120=caramk user-121=hidrommk user-122=frizered user-123=oncolog1 user-124=ekostoc1 user-125=levantmk user-126=nefrolog user-127=berbermk user-128=edomcomm user-129=herbalpl user-130=enochmk user-131=sprintst user-132=dikimk12 user-133=seloviro user-134=nolimits user-135=kolened1 user-136=centarba user-137=nlpmkorg user-138=proverim user-139=dadarmk user-140=tealmk user-141=gocruise user-142=mstmmk user-143=goodnews user-144=dnevnoin user-145=gjorgeiv user-146=tradeyou user-147=rastiraz user-148=holiyayt user-149=stravelm user-150=robustco user-151=wondersp user-152=pecakome user-153=custome1 user-154=busymard user-155=zampmk
Sep  9 07:42:08 power sudo[1296429]: wp-toolkit : (command continued) user-156=zvskopje user-157=palenzok user-158=klimimk user-159=stokovna user-160=sparkupm user-161=bovincom user-162=stojano1 user-163=cabinetm user-164=vezilkac user-165=itradeco user-166=janiboja user-167=drleomk user-168=inotekso user-169=jpparkin user-170=butelmk user-171=daris user-172=premiums user-173=arturaco user-174=screenme user-175=karpospo user-176=nasaidni user-177=ideaplus user-178=dalmacom user-179=cetplatf user-180=premiuma user-181=kouzonco user-182=kujnamon user-183=univerz1 user-184=gogovan1 user-185=velmk user-186=datalink user-187=mpbmk user-188=agrosind user-189=mfashion user-190=dhamachi user-191=volkanco user-192=goartsym user-193=workandt user-194=barececo user-195=getaldus user-196=simbiome user-197=delcevca user-198=rasmorgm user-199=skyapart user-200=makoasmk user-201=bianasho user-202=urbanexp user-203=wikicamp user-204=mspmk user-205=infobadi user-206=detskagr user-207=spdcompu
Sep  9 07:42:08 power sudo[1296429]: wp-toolkit : (command continued) user-208=maleshne user-209=datelcom user-210=bizporta user-211=polyeste user-212=vfxnestc user-213=ivanjord user-214=groskome user-215=sedcmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 07:42:08 power sudo[1296429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:08 power sudo[1296429]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:08 power sudo[1296436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 07:42:08 power sudo[1296436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:08 power sudo[1296436]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:08 power sudo[1296440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V4blzFhZpq3qKnTS.~
Sep  9 07:42:08 power sudo[1296440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:08 power sudo[1296440]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:08 power sudo[1296444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V4blzFhZpq3qKnTS.~\''
Sep  9 07:42:08 power sudo[1296444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:08 power sudo[1296444]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:08 power sudo[1296449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V4blzFhZpq3qKnTS.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 07:42:08 power sudo[1296449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:08 power sudo[1296449]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:08 power sudo[1296453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 07:42:09 power sudo[1296453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:09 power sudo[1296453]: pam_unix(sudo:session): session closed for user root
Sep  9 07:42:09 power sudo[1297382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 07:42:09 power sudo[1297382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 07:42:09 power sudo[1297382]: pam_unix(sudo:session): session closed for user root
Sep  9 07:45:01 power systemd[1300106]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:50:01 power systemd[1304343]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 07:55:01 power systemd[1308452]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:00:01 power systemd[1313121]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:00:01 power systemd[1313123]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 08:00:01 power systemd[1313125]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 08:00:01 power systemd[1313127]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 08:00:01 power systemd[1313129]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  9 08:05:01 power systemd[1319286]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:06:01 power systemd[1320316]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 08:07:01 power systemd[1321640]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 08:10:01 power systemd[1324387]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:12:01 power systemd[1326283]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 08:15:01 power systemd[1329191]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:20:01 power systemd[1334556]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:25:01 power systemd[1339847]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:30:01 power systemd[1345062]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:30:01 power systemd[1345063]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 08:30:01 power systemd[1345064]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 08:30:01 power systemd[1345067]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 08:35:01 power systemd[1350729]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:36:01 power systemd[1351877]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 08:37:01 power systemd[1352966]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 08:40:01 power systemd[1355979]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:42:01 power systemd[1357845]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 08:42:05 power sudo[1357916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 08:42:05 power sudo[1357916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:05 power sudo[1357916]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:05 power sudo[1357920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 08:42:05 power sudo[1357920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:05 power sudo[1357920]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:05 power sudo[1357924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 08:42:05 power sudo[1357924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:05 power sudo[1357924]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:05 power sudo[1357928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=mXNhTE9U6d'
Sep  9 08:42:05 power sudo[1357928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:05 power sudo[1357928]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:05 power sudo[1357934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 08:42:06 power sudo[1357934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357934]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:06 power sudo[1357939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 08:42:06 power sudo[1357939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357939]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:06 power sudo[1357944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 08:42:06 power sudo[1357944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357944]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:06 power sudo[1357948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 08:42:06 power sudo[1357948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357948]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:06 power sudo[1357957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 08:42:06 power sudo[1357957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357957]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:06 power sudo[1357961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 08:42:06 power sudo[1357961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357961]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:06 power sudo[1357965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 08:42:06 power sudo[1357965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357965]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:06 power sudo[1357969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 08:42:06 power sudo[1357969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357969]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:06 power sudo[1357973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 08:42:06 power sudo[1357973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357973]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:06 power sudo[1357977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 08:42:06 power sudo[1357977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:06 power sudo[1357977]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:08 power sudo[1358021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 08:42:08 power sudo[1358021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:08 power sudo[1358021]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:08 power sudo[1358036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 08:42:08 power sudo[1358036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:08 power sudo[1358036]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:08 power sudo[1358046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=seloviro user-2=nolimits user-3=kolened1 user-4=nlpmkorg user-5=centarba user-6=edomcomm user-7=berbermk user-8=dikimk12 user-9=enochmk user-10=herbalpl user-11=sprintst user-12=dnevnoin user-13=gjorgeiv user-14=tradeyou user-15=holiyayt user-16=rastiraz user-17=pecakome user-18=stravelm user-19=robustco user-20=wondersp user-21=dadarmk user-22=proverim user-23=tealmk user-24=gocruise user-25=goodnews user-26=mstmmk user-27=oouslave user-28=raremk user-29=bauerbg user-30=uhostmk5 user-31=stojnevi user-32=enaspotc user-33=viewinn user-34=trudovop user-35=vmro user-36=cajsproc user-37=hotammk user-38=anitermc user-39=youthgua user-40=caramk user-41=hidrommk user-42=frizered user-43=ekostoc1 user-44=oncolog1 user-45=levantmk user-46=nefrolog user-47=pelagoni user-48=avtogumi user-49=socioloz user-50=evolvepl
Sep  9 08:42:08 power sudo[1358046]: wp-toolkit : (command continued) user-51=dhamachi user-52=volkanco user-53=goartsym user-54=mfashion user-55=barececo user-56=getaldus user-57=simbiome user-58=delcevca user-59=workandt user-60=rasmorgm user-61=skyapart user-62=bianasho user-63=makoasmk user-64=kujnamon user-65=univerz1 user-66=gogovan1 user-67=velmk user-68=datalink user-69=mpbmk user-70=agrosind user-71=maleshne user-72=datelcom user-73=bizporta user-74=polyeste user-75=vfxnestc user-76=sedcmk user-77=groskome user-78=ivanjord user-79=wikicamp user-80=urbanexp user-81=infobadi user-82=mspmk user-83=spdcompu user-84=detskagr user-85=bovincom user-86=stojano1 user-87=vezilkac user-88=cabinetm user-89=janiboja user-90=itradeco user-91=custome1 user-92=palenzok user-93=zampmk user-94=busymard user-95=zvskopje user-96=klimimk user-97=stokovna user-98=sparkupm user-99=cetplatf user-100=dalmacom user-101=kouzonco user-102=premiuma user-103=inotekso user-104=jpparkin user-105=drleomk
Sep  9 08:42:08 power sudo[1358046]: wp-toolkit : (command continued) user-106=butelmk user-107=daris user-108=premiums user-109=karpospo user-110=nasaidni user-111=ideaplus user-112=screenme user-113=arturaco user-114=nucktra1 user-115=lblawcom user-116=mediatag user-117=intelek1 user-118=nikolov1 user-119=hausmark user-120=nikimare user-121=aptekazd user-122=forzares user-123=kardiome user-124=bogdanos user-125=carrent1 user-126=mediasol user-127=apgrupmk user-128=matratze user-129=euronic2 user-130=zapovim1 user-131=elektrot user-132=euromaki user-133=cosmatob user-134=nutrivim user-135=chemhemc user-136=samasped user-137=albuname user-138=glammace user-139=imdskopj user-140=pravekom user-141=vtranseu user-142=infopor1 user-143=taneccom user-144=tehnologija user-145=prizmapl user-146=fnjorgmk user-147=darkogor user-148=dslmk user-149=bozinovm user-150=vacuacti user-151=innofabl user-152=premiumi user-153=inkigaic user-154=modernar user-155=zdmgpsor user-156=v5srybi9dcdx
Sep  9 08:42:08 power sudo[1358046]: wp-toolkit : (command continued) user-157=supremel user-158=aquatech user-159=gorsajmk user-160=solemor1 user-161=mapaspla user-162=onlinesh user-163=nationa2 user-164=tcieuroc user-165=starluxm user-166=radekrat user-167=fffhpcwr user-168=versusmk user-169=ambitiou user-170=fiziosmk user-171=conserva user-172=euronic3 user-173=cupidpro user-174=vegemk1 user-175=evberasm user-176=bonitavi user-177=bauerin2 user-178=folklore user-179=gradbai1 user-180=aptekafa user-181=madzomk user-182=evacommk user-183=fxxcom user-184=peshkai1 user-185=eaptekam user-186=dimpalne user-187=makdrone user-188=tehnodro user-189=izzomk user-190=jpkomuna user-191=pelagini user-192=biplmk user-193=kaoilmk user-194=bbbustou user-195=progress user-196=cleanerm user-197=animatem user-198=sssoluti user-199=atspedco user-200=jaramk user-201=solointe user-202=recorgmk user-203=taktcomm user-204=solarinv user-205=eurofarm user-206=eliksirz user-207=naksorgm user-208=trigemat
Sep  9 08:42:08 power sudo[1358046]: wp-toolkit : (command continued) user-209=electrol user-210=golakkom user-211=mbmehani user-212=workbenc user-213=ismassag user-214=wineberr user-215=viplastc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 08:42:08 power sudo[1358046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:09 power sudo[1358046]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:09 power sudo[1358061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 08:42:09 power sudo[1358061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:09 power sudo[1358061]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:09 power sudo[1358065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IDrltx1lpFqNikqQ.~
Sep  9 08:42:09 power sudo[1358065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:09 power sudo[1358065]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:09 power sudo[1358069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IDrltx1lpFqNikqQ.~\''
Sep  9 08:42:09 power sudo[1358069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:09 power sudo[1358069]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:09 power sudo[1358074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IDrltx1lpFqNikqQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 08:42:09 power sudo[1358074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:09 power sudo[1358074]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:09 power sudo[1358079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 08:42:09 power sudo[1358079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:09 power sudo[1358079]: pam_unix(sudo:session): session closed for user root
Sep  9 08:42:10 power sudo[1359006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 08:42:10 power sudo[1359006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 08:42:10 power sudo[1359006]: pam_unix(sudo:session): session closed for user root
Sep  9 08:45:01 power systemd[1361505]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:50:01 power systemd[1366775]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 08:55:01 power systemd[1371278]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:00:01 power systemd[1375876]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:00:01 power systemd[1375877]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 09:00:01 power systemd[1375878]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 09:00:01 power systemd[1375879]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 09:00:01 power systemd[1375881]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  9 09:05:02 power systemd[1383229]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:06:01 power systemd[1384389]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 09:07:01 power systemd[1385323]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 09:10:01 power systemd[1388555]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:12:01 power systemd[1390876]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 09:15:01 power systemd[1393864]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:20:01 power systemd[1399599]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:25:02 power systemd[1405497]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:27:31 power sshd[1408831]: Connection closed by 206.168.34.66 port 46898 [preauth]
Sep  9 09:30:01 power systemd[1412148]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 09:30:01 power systemd[1412147]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:30:01 power systemd[1412149]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 09:30:01 power systemd[1412156]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 09:35:01 power systemd[1418725]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:36:01 power systemd[1420098]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 09:37:01 power systemd[1421151]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 09:40:01 power systemd[1424656]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:42:01 power systemd[1427131]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 09:42:05 power sudo[1427246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 09:42:05 power sudo[1427246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:05 power sudo[1427246]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:05 power sudo[1427251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 09:42:05 power sudo[1427251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:05 power sudo[1427251]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:05 power sudo[1427255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 09:42:05 power sudo[1427255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:05 power sudo[1427255]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:05 power sudo[1427259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=TvfNx7HyHe'
Sep  9 09:42:05 power sudo[1427259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:05 power sudo[1427259]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 09:42:06 power sudo[1427264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427264]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 09:42:06 power sudo[1427269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427269]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 09:42:06 power sudo[1427273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427273]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 09:42:06 power sudo[1427277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427277]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 09:42:06 power sudo[1427290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427290]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 09:42:06 power sudo[1427295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427295]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 09:42:06 power sudo[1427299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427299]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 09:42:06 power sudo[1427303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427303]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 09:42:06 power sudo[1427307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427307]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:06 power sudo[1427311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 09:42:06 power sudo[1427311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:06 power sudo[1427311]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:08 power sudo[1427347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 09:42:08 power sudo[1427347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:08 power sudo[1427347]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:08 power sudo[1427352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 09:42:08 power sudo[1427352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:08 power sudo[1427352]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:08 power sudo[1427357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=berbermk user-2=edomcomm user-3=enochmk user-4=herbalpl user-5=sprintst user-6=dikimk12 user-7=seloviro user-8=kolened1 user-9=centarba user-10=nlpmkorg user-11=nolimits user-12=tealmk user-13=proverim user-14=dadarmk user-15=mstmmk user-16=goodnews user-17=gocruise user-18=gjorgeiv user-19=tradeyou user-20=dnevnoin user-21=stravelm user-22=robustco user-23=wondersp user-24=pecakome user-25=rastiraz user-26=holiyayt user-27=hotammk user-28=cajsproc user-29=anitermc user-30=youthgua user-31=stojnevi user-32=bauerbg user-33=uhostmk5 user-34=oouslave user-35=raremk user-36=viewinn user-37=trudovop user-38=vmro user-39=enaspotc user-40=avtogumi user-41=socioloz user-42=pelagoni user-43=evolvepl user-44=hidrommk user-45=frizered user-46=caramk user-47=ekostoc1 user-48=oncolog1 user-49=levantmk user-50=nefrolog
Sep  9 09:42:08 power sudo[1427357]: wp-toolkit : (command continued) user-51=datalink user-52=univerz1 user-53=kujnamon user-54=gogovan1 user-55=velmk user-56=mpbmk user-57=agrosind user-58=workandt user-59=barececo user-60=getaldus user-61=delcevca user-62=simbiome user-63=mfashion user-64=dhamachi user-65=goartsym user-66=volkanco user-67=skyapart user-68=bianasho user-69=makoasmk user-70=rasmorgm user-71=urbanexp user-72=wikicamp user-73=detskagr user-74=spdcompu user-75=mspmk user-76=infobadi user-77=bizporta user-78=maleshne user-79=datelcom user-80=ivanjord user-81=groskome user-82=sedcmk user-83=polyeste user-84=vfxnestc user-85=zampmk user-86=busymard user-87=zvskopje user-88=palenzok user-89=custome1 user-90=stokovna user-91=sparkupm user-92=klimimk user-93=stojano1 user-94=bovincom user-95=itradeco user-96=janiboja user-97=cabinetm user-98=vezilkac user-99=drleomk user-100=inotekso user-101=jpparkin user-102=arturaco user-103=screenme user-104=nasaidni user-105=karpospo
Sep  9 09:42:08 power sudo[1427357]: wp-toolkit : (command continued) user-106=ideaplus user-107=daris user-108=butelmk user-109=premiums user-110=premiuma user-111=kouzonco user-112=dalmacom user-113=cetplatf user-114=apgrupmk user-115=bogdanos user-116=carrent1 user-117=mediasol user-118=kardiome user-119=matratze user-120=euronic2 user-121=mediatag user-122=intelek1 user-123=lblawcom user-124=nucktra1 user-125=forzares user-126=nikimare user-127=aptekazd user-128=nikolov1 user-129=hausmark user-130=imdskopj user-131=albuname user-132=glammace user-133=infopor1 user-134=pravekom user-135=vtranseu user-136=euromaki user-137=cosmatob user-138=elektrot user-139=zapovim1 user-140=chemhemc user-141=samasped user-142=nutrivim user-143=zdmgpsor user-144=aquatech user-145=gorsajmk user-146=supremel user-147=v5srybi9dcdx user-148=vacuacti user-149=premiumi user-150=innofabl user-151=fnjorgmk user-152=dslmk user-153=prizmapl user-154=darkogor user-155=bozinovm user-156=tehnologija
Sep  9 09:42:08 power sudo[1427357]: wp-toolkit : (command continued) user-157=taneccom user-158=modernar user-159=inkigaic user-160=fffhpcwr user-161=starluxm user-162=radekrat user-163=fiziosmk user-164=ambitiou user-165=versusmk user-166=nationa2 user-167=onlinesh user-168=mapaspla user-169=solemor1 user-170=tcieuroc user-171=folklore user-172=bauerin2 user-173=cupidpro user-174=vegemk1 user-175=euronic3 user-176=conserva user-177=evberasm user-178=bonitavi user-179=tehnodro user-180=makdrone user-181=jpkomuna user-182=izzomk user-183=aptekafa user-184=madzomk user-185=evacommk user-186=gradbai1 user-187=dimpalne user-188=eaptekam user-189=fxxcom user-190=peshkai1 user-191=sssoluti user-192=atspedco user-193=cleanerm user-194=animatem user-195=progress user-196=recorgmk user-197=taktcomm user-198=solointe user-199=jaramk user-200=pelagini user-201=bbbustou user-202=biplmk user-203=kaoilmk user-204=ismassag user-205=workbenc user-206=mbmehani user-207=viplastc user-208=wineberr
Sep  9 09:42:08 power sudo[1427357]: wp-toolkit : (command continued) user-209=eurofarm user-210=solarinv user-211=golakkom user-212=electrol user-213=naksorgm user-214=eliksirz user-215=trigemat feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 09:42:08 power sudo[1427357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:09 power sudo[1427357]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:09 power sudo[1427382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 09:42:09 power sudo[1427382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:09 power sudo[1427382]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:09 power sudo[1427390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-RGnBeWBczd3wNz00.~
Sep  9 09:42:09 power sudo[1427390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:09 power sudo[1427390]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:09 power sudo[1427394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-RGnBeWBczd3wNz00.~\''
Sep  9 09:42:09 power sudo[1427394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:09 power sudo[1427394]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:09 power sudo[1427399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-RGnBeWBczd3wNz00.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 09:42:09 power sudo[1427399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:09 power sudo[1427399]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:09 power sudo[1427403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 09:42:09 power sudo[1427403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:09 power sudo[1427403]: pam_unix(sudo:session): session closed for user root
Sep  9 09:42:13 power sudo[1427902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 09:42:13 power sudo[1427902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 09:42:13 power sudo[1427902]: pam_unix(sudo:session): session closed for user root
Sep  9 09:45:01 power systemd[1431866]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:50:01 power systemd[1437555]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 09:55:01 power systemd[1444028]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:00:01 power systemd[1449829]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:00:01 power systemd[1449837]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 10:00:01 power systemd[1449838]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 10:00:01 power systemd[1449841]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 10:05:01 power systemd[1456487]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:06:01 power systemd[1457921]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 10:07:01 power systemd[1459182]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 10:10:02 power systemd[1463311]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:12:01 power systemd[1465868]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 10:15:01 power systemd[1469872]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:20:01 power systemd[1477029]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:25:01 power systemd[1483741]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:30:01 power systemd[1489063]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 10:30:01 power systemd[1489062]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:30:01 power systemd[1489064]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 10:30:01 power systemd[1489065]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 10:35:01 power systemd[1495394]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:36:01 power systemd[1496799]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 10:37:01 power systemd[1498075]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 10:40:01 power systemd[1501802]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:42:01 power systemd[1504433]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 10:42:05 power sudo[1504524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 10:42:05 power sudo[1504524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:05 power sudo[1504524]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:05 power sudo[1504528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 10:42:05 power sudo[1504528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:05 power sudo[1504528]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 10:42:06 power sudo[1504533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504533]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=vnnmz7fs5r'
Sep  9 10:42:06 power sudo[1504538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504538]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 10:42:06 power sudo[1504544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504544]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 10:42:06 power sudo[1504548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504548]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 10:42:06 power sudo[1504552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504552]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 10:42:06 power sudo[1504556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504556]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 10:42:06 power sudo[1504564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504564]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 10:42:06 power sudo[1504568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504568]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 10:42:06 power sudo[1504572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504572]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 10:42:06 power sudo[1504576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504576]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 10:42:06 power sudo[1504582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:06 power sudo[1504582]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:06 power sudo[1504587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 10:42:06 power sudo[1504587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:07 power sudo[1504587]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:08 power sudo[1504651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 10:42:08 power sudo[1504651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:08 power sudo[1504651]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:08 power sudo[1504656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 10:42:08 power sudo[1504656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:08 power sudo[1504656]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:08 power sudo[1504664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=spdcompu user-2=detskagr user-3=infobadi user-4=mspmk user-5=wikicamp user-6=urbanexp user-7=sedcmk user-8=ivanjord user-9=groskome user-10=vfxnestc user-11=polyeste user-12=bizporta user-13=datelcom user-14=maleshne user-15=agrosind user-16=mpbmk user-17=datalink user-18=gogovan1 user-19=velmk user-20=univerz1 user-21=kujnamon user-22=bianasho user-23=makoasmk user-24=skyapart user-25=rasmorgm user-26=getaldus user-27=simbiome user-28=delcevca user-29=barececo user-30=workandt user-31=goartsym user-32=volkanco user-33=dhamachi user-34=mfashion user-35=ideaplus user-36=nasaidni user-37=karpospo user-38=screenme user-39=arturaco user-40=premiums user-41=butelmk user-42=daris user-43=jpparkin user-44=inotekso user-45=drleomk user-46=kouzonco user-47=premiuma user-48=cetplatf user-49=dalmacom user-50=sparkupm
Sep  9 10:42:08 power sudo[1504664]: wp-toolkit : (command continued) user-51=stokovna user-52=klimimk user-53=palenzok user-54=busymard user-55=zampmk user-56=zvskopje user-57=custome1 user-58=janiboja user-59=itradeco user-60=vezilkac user-61=cabinetm user-62=stojano1 user-63=bovincom user-64=goodnews user-65=mstmmk user-66=gocruise user-67=tealmk user-68=dadarmk user-69=proverim user-70=pecakome user-71=wondersp user-72=robustco user-73=stravelm user-74=holiyayt user-75=rastiraz user-76=tradeyou user-77=gjorgeiv user-78=dnevnoin user-79=dikimk12 user-80=sprintst user-81=enochmk user-82=herbalpl user-83=edomcomm user-84=berbermk user-85=centarba user-86=nlpmkorg user-87=kolened1 user-88=nolimits user-89=seloviro user-90=evolvepl user-91=avtogumi user-92=socioloz user-93=pelagoni user-94=nefrolog user-95=levantmk user-96=ekostoc1 user-97=oncolog1 user-98=frizered user-99=hidrommk user-100=caramk user-101=youthgua user-102=anitermc user-103=cajsproc user-104=hotammk
Sep  9 10:42:08 power sudo[1504664]: wp-toolkit : (command continued) user-105=enaspotc user-106=vmro user-107=viewinn user-108=trudovop user-109=stojnevi user-110=raremk user-111=oouslave user-112=uhostmk5 user-113=bauerbg user-114=izzomk user-115=jpkomuna user-116=tehnodro user-117=makdrone user-118=eaptekam user-119=dimpalne user-120=peshkai1 user-121=fxxcom user-122=evacommk user-123=madzomk user-124=aptekafa user-125=gradbai1 user-126=folklore user-127=bauerin2 user-128=bonitavi user-129=evberasm user-130=euronic3 user-131=vegemk1 user-132=cupidpro user-133=conserva user-134=wineberr user-135=viplastc user-136=workbenc user-137=ismassag user-138=mbmehani user-139=golakkom user-140=trigemat user-141=eliksirz user-142=naksorgm user-143=electrol user-144=eurofarm user-145=solarinv user-146=taktcomm user-147=recorgmk user-148=jaramk user-149=solointe user-150=sssoluti user-151=atspedco user-152=progress user-153=animatem user-154=cleanerm user-155=kaoilmk user-156=biplmk
Sep  9 10:42:08 power sudo[1504664]: wp-toolkit : (command continued) user-157=bbbustou user-158=pelagini user-159=infopor1 user-160=pravekom user-161=vtranseu user-162=imdskopj user-163=glammace user-164=albuname user-165=chemhemc user-166=samasped user-167=nutrivim user-168=cosmatob user-169=euromaki user-170=zapovim1 user-171=elektrot user-172=euronic2 user-173=matratze user-174=mediasol user-175=bogdanos user-176=carrent1 user-177=apgrupmk user-178=kardiome user-179=aptekazd user-180=nikimare user-181=forzares user-182=nikolov1 user-183=hausmark user-184=intelek1 user-185=mediatag user-186=nucktra1 user-187=lblawcom user-188=ambitiou user-189=fiziosmk user-190=versusmk user-191=fffhpcwr user-192=radekrat user-193=starluxm user-194=tcieuroc user-195=onlinesh user-196=nationa2 user-197=solemor1 user-198=mapaspla user-199=gorsajmk user-200=aquatech user-201=v5srybi9dcdx user-202=supremel user-203=zdmgpsor user-204=modernar user-205=inkigaic user-206=bozinovm user-207=fnjorgmk
Sep  9 10:42:08 power sudo[1504664]: wp-toolkit : (command continued) user-208=prizmapl user-209=darkogor user-210=dslmk user-211=premiumi user-212=innofabl user-213=vacuacti user-214=taneccom user-215=tehnologija feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 10:42:08 power sudo[1504664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:09 power sudo[1504664]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:09 power sudo[1504684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 10:42:09 power sudo[1504684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:09 power sudo[1504684]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:09 power sudo[1504692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4a3T2KbhTgeQ375Z.~
Sep  9 10:42:09 power sudo[1504692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:09 power sudo[1504692]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:09 power sudo[1504696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4a3T2KbhTgeQ375Z.~\''
Sep  9 10:42:09 power sudo[1504696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:09 power sudo[1504696]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:09 power sudo[1504703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4a3T2KbhTgeQ375Z.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 10:42:09 power sudo[1504703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:09 power sudo[1504703]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:09 power sudo[1504707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 10:42:09 power sudo[1504707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:09 power sudo[1504707]: pam_unix(sudo:session): session closed for user root
Sep  9 10:42:14 power sudo[1505621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 10:42:14 power sudo[1505621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 10:42:14 power sudo[1505621]: pam_unix(sudo:session): session closed for user root
Sep  9 10:45:01 power systemd[1509141]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:50:01 power systemd[1516319]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 10:55:01 power systemd[1521906]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:00:02 power systemd[1528258]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:00:02 power systemd[1528259]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 11:00:02 power systemd[1528260]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 11:00:02 power systemd[1528262]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 11:05:01 power systemd[1535550]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:06:01 power systemd[1536942]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 11:07:01 power systemd[1538266]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 11:10:01 power systemd[1541665]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:12:01 power systemd[1544157]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 11:15:01 power systemd[1547724]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:20:01 power systemd[1554199]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:25:01 power systemd[1559846]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:30:01 power systemd[1565449]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:30:01 power systemd[1565450]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 11:30:01 power systemd[1565454]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 11:30:01 power systemd[1565456]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 11:35:01 power systemd[1572097]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:36:01 power systemd[1573551]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 11:37:01 power systemd[1574875]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 11:40:01 power systemd[1578576]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:42:01 power systemd[1581494]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 11:42:06 power sudo[1581679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 11:42:06 power sudo[1581679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581679]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 11:42:06 power sudo[1581687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581687]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 11:42:06 power sudo[1581693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581693]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=O1Z9l09J6q'
Sep  9 11:42:06 power sudo[1581697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581697]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 11:42:06 power sudo[1581704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581704]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 11:42:06 power sudo[1581708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581708]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 11:42:06 power sudo[1581714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581714]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 11:42:06 power sudo[1581719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581719]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 11:42:06 power sudo[1581738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581738]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 11:42:06 power sudo[1581743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581743]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 11:42:06 power sudo[1581747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581747]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 11:42:06 power sudo[1581754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581754]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 11:42:06 power sudo[1581758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:06 power sudo[1581758]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:06 power sudo[1581762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 11:42:06 power sudo[1581762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:07 power sudo[1581762]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:08 power sudo[1581853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 11:42:08 power sudo[1581853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:08 power sudo[1581853]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:08 power sudo[1581864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 11:42:08 power sudo[1581864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:09 power sudo[1581864]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:09 power sudo[1581872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pecakome user-2=stravelm user-3=robustco user-4=wondersp user-5=holiyayt user-6=rastiraz user-7=gjorgeiv user-8=tradeyou user-9=dnevnoin user-10=goodnews user-11=mstmmk user-12=gocruise user-13=tealmk user-14=dadarmk user-15=proverim user-16=kolened1 user-17=nlpmkorg user-18=centarba user-19=nolimits user-20=seloviro user-21=dikimk12 user-22=herbalpl user-23=enochmk user-24=sprintst user-25=edomcomm user-26=berbermk user-27=oncolog1 user-28=levantmk user-29=ekostoc1 user-30=nefrolog user-31=hidrommk user-32=frizered user-33=caramk user-34=evolvepl user-35=socioloz user-36=avtogumi user-37=pelagoni user-38=enaspotc user-39=viewinn user-40=trudovop user-41=vmro user-42=stojnevi user-43=oouslave user-44=raremk user-45=bauerbg user-46=uhostmk5 user-47=anitermc user-48=youthgua user-49=cajsproc user-50=hotammk
Sep  9 11:42:09 power sudo[1581872]: wp-toolkit : (command continued) user-51=sedcmk user-52=ivanjord user-53=groskome user-54=polyeste user-55=vfxnestc user-56=bizporta user-57=maleshne user-58=datelcom user-59=spdcompu user-60=detskagr user-61=mspmk user-62=infobadi user-63=wikicamp user-64=urbanexp user-65=skyapart user-66=bianasho user-67=makoasmk user-68=rasmorgm user-69=barececo user-70=simbiome user-71=getaldus user-72=delcevca user-73=workandt user-74=dhamachi user-75=volkanco user-76=goartsym user-77=mfashion user-78=mpbmk user-79=agrosind user-80=datalink user-81=kujnamon user-82=univerz1 user-83=gogovan1 user-84=velmk user-85=kouzonco user-86=premiuma user-87=cetplatf user-88=dalmacom user-89=karpospo user-90=nasaidni user-91=ideaplus user-92=arturaco user-93=screenme user-94=butelmk user-95=daris user-96=premiums user-97=inotekso user-98=jpparkin user-99=drleomk user-100=janiboja user-101=itradeco user-102=vezilkac user-103=cabinetm user-104=stojano1 user-105=bovincom
Sep  9 11:42:09 power sudo[1581872]: wp-toolkit : (command continued) user-106=stokovna user-107=sparkupm user-108=klimimk user-109=palenzok user-110=busymard user-111=zampmk user-112=zvskopje user-113=custome1 user-114=samasped user-115=chemhemc user-116=nutrivim user-117=cosmatob user-118=euromaki user-119=zapovim1 user-120=elektrot user-121=infopor1 user-122=vtranseu user-123=pravekom user-124=imdskopj user-125=albuname user-126=glammace user-127=nikimare user-128=aptekazd user-129=forzares user-130=hausmark user-131=nikolov1 user-132=mediatag user-133=intelek1 user-134=nucktra1 user-135=lblawcom user-136=matratze user-137=euronic2 user-138=bogdanos user-139=carrent1 user-140=mediasol user-141=apgrupmk user-142=kardiome user-143=tcieuroc user-144=onlinesh user-145=nationa2 user-146=solemor1 user-147=mapaspla user-148=ambitiou user-149=fiziosmk user-150=versusmk user-151=fffhpcwr user-152=starluxm user-153=radekrat user-154=modernar user-155=inkigaic user-156=fnjorgmk
Sep  9 11:42:09 power sudo[1581872]: wp-toolkit : (command continued) user-157=darkogor user-158=prizmapl user-159=dslmk user-160=bozinovm user-161=vacuacti user-162=premiumi user-163=innofabl user-164=taneccom user-165=tehnologija user-166=aquatech user-167=gorsajmk user-168=v5srybi9dcdx user-169=supremel user-170=zdmgpsor user-171=eaptekam user-172=dimpalne user-173=fxxcom user-174=peshkai1 user-175=madzomk user-176=aptekafa user-177=evacommk user-178=gradbai1 user-179=izzomk user-180=jpkomuna user-181=tehnodro user-182=makdrone user-183=evberasm user-184=bonitavi user-185=euronic3 user-186=cupidpro user-187=vegemk1 user-188=conserva user-189=folklore user-190=bauerin2 user-191=golakkom user-192=naksorgm user-193=eliksirz user-194=trigemat user-195=electrol user-196=eurofarm user-197=solarinv user-198=wineberr user-199=viplastc user-200=workbenc user-201=ismassag user-202=mbmehani user-203=kaoilmk user-204=biplmk user-205=bbbustou user-206=pelagini user-207=recorgmk
Sep  9 11:42:09 power sudo[1581872]: wp-toolkit : (command continued) user-208=taktcomm user-209=jaramk user-210=solointe user-211=sssoluti user-212=atspedco user-213=progress user-214=cleanerm user-215=animatem feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 11:42:09 power sudo[1581872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:09 power sudo[1581872]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:09 power sudo[1581905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 11:42:09 power sudo[1581905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:09 power sudo[1581905]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:09 power sudo[1581909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8rH2CzOgGwhUAlji.~
Sep  9 11:42:09 power sudo[1581909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:09 power sudo[1581909]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:09 power sudo[1581913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8rH2CzOgGwhUAlji.~\''
Sep  9 11:42:09 power sudo[1581913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:09 power sudo[1581913]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:09 power sudo[1581920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8rH2CzOgGwhUAlji.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 11:42:09 power sudo[1581920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:09 power sudo[1581920]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:09 power sudo[1581925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 11:42:09 power sudo[1581925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:09 power sudo[1581925]: pam_unix(sudo:session): session closed for user root
Sep  9 11:42:14 power sudo[1582960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 11:42:14 power sudo[1582960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 11:42:14 power sudo[1582960]: pam_unix(sudo:session): session closed for user root
Sep  9 11:45:01 power systemd[1586732]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:50:02 power systemd[1594291]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 11:55:01 power systemd[1602055]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:00:02 power systemd[1628197]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:00:02 power systemd[1628203]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 12:00:02 power systemd[1628204]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 12:00:02 power systemd[1628211]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep  9 12:00:02 power systemd[1628208]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 12:05:01 power systemd[1636780]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:06:01 power systemd[1638377]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 12:07:01 power systemd[1640018]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 12:10:01 power systemd[1644600]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:11:18 power sshd[1646595]: error: kex_exchange_identification: banner line contains invalid characters
Sep  9 12:11:18 power sshd[1646595]: banner exchange: Connection from 91.231.89.111 port 45607: invalid format
Sep  9 12:11:23 power sshd[1646887]: error: kex_exchange_identification: Connection closed by remote host
Sep  9 12:11:23 power sshd[1646887]: Connection closed by 91.231.89.6 port 56807
Sep  9 12:12:01 power systemd[1647997]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 12:15:01 power systemd[1652521]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:19:17 power sshd[1659237]: Connection closed by 91.231.89.105 port 43943 [preauth]
Sep  9 12:20:01 power systemd[1660284]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:25:01 power systemd[1667479]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:30:01 power systemd[1674917]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:30:01 power systemd[1674918]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 12:30:01 power systemd[1674920]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 12:30:01 power systemd[1674921]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 12:31:24 power sshd[1677189]: error: kex_exchange_identification: banner line contains invalid characters
Sep  9 12:31:24 power sshd[1677189]: banner exchange: Connection from 152.32.198.210 port 55996: invalid format
Sep  9 12:31:42 power sshd[1677193]: error: kex_exchange_identification: Connection closed by remote host
Sep  9 12:31:42 power sshd[1677193]: Connection closed by 152.32.198.210 port 56010
Sep  9 12:31:42 power sshd[1677798]: Connection closed by 152.32.198.210 port 50778 [preauth]
Sep  9 12:31:42 power sshd[1677800]: error: Protocol major versions differ: 2 vs. 1
Sep  9 12:31:42 power sshd[1677800]: banner exchange: Connection from 152.32.198.210 port 50782: could not read protocol version
Sep  9 12:35:01 power systemd[1682625]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:36:01 power systemd[1684088]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 12:37:01 power systemd[1685566]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 12:40:01 power systemd[1689621]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:42:02 power systemd[1692510]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 12:42:05 power sudo[1692644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 12:42:06 power sudo[1692644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692644]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 12:42:06 power sudo[1692649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692649]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 12:42:06 power sudo[1692653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692653]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=skLTcKbYLa'
Sep  9 12:42:06 power sudo[1692657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692657]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 12:42:06 power sudo[1692662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692662]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 12:42:06 power sudo[1692666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692666]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 12:42:06 power sudo[1692670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692670]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 12:42:06 power sudo[1692674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692674]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 12:42:06 power sudo[1692684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692684]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 12:42:06 power sudo[1692689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692689]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 12:42:06 power sudo[1692694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692694]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 12:42:06 power sudo[1692698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692698]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 12:42:06 power sudo[1692702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:06 power sudo[1692702]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:06 power sudo[1692707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 12:42:06 power sudo[1692707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:07 power sudo[1692707]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:08 power sudo[1692785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 12:42:08 power sudo[1692785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:08 power sudo[1692785]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:08 power sudo[1692792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 12:42:08 power sudo[1692792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:08 power sudo[1692792]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:08 power sudo[1692800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=vmro user-2=trudovop user-3=viewinn user-4=enaspotc user-5=uhostmk5 user-6=bauerbg user-7=raremk user-8=oouslave user-9=stojnevi user-10=youthgua user-11=anitermc user-12=hotammk user-13=cajsproc user-14=nefrolog user-15=ekostoc1 user-16=oncolog1 user-17=levantmk user-18=caramk user-19=frizered user-20=hidrommk user-21=evolvepl user-22=pelagoni user-23=avtogumi user-24=socioloz user-25=nolimits user-26=nlpmkorg user-27=centarba user-28=kolened1 user-29=seloviro user-30=sprintst user-31=enochmk user-32=herbalpl user-33=dikimk12 user-34=berbermk user-35=edomcomm user-36=rastiraz user-37=holiyayt user-38=wondersp user-39=stravelm user-40=robustco user-41=pecakome user-42=dnevnoin user-43=tradeyou user-44=gjorgeiv user-45=gocruise user-46=mstmmk user-47=goodnews user-48=proverim user-49=dadarmk user-50=tealmk
Sep  9 12:42:08 power sudo[1692800]: wp-toolkit : (command continued) user-51=cabinetm user-52=vezilkac user-53=itradeco user-54=janiboja user-55=bovincom user-56=stojano1 user-57=klimimk user-58=sparkupm user-59=stokovna user-60=custome1 user-61=zvskopje user-62=zampmk user-63=busymard user-64=palenzok user-65=dalmacom user-66=cetplatf user-67=premiuma user-68=kouzonco user-69=premiums user-70=daris user-71=butelmk user-72=screenme user-73=arturaco user-74=ideaplus user-75=nasaidni user-76=karpospo user-77=drleomk user-78=jpparkin user-79=inotekso user-80=rasmorgm user-81=makoasmk user-82=bianasho user-83=skyapart user-84=mfashion user-85=volkanco user-86=goartsym user-87=dhamachi user-88=workandt user-89=getaldus user-90=delcevca user-91=simbiome user-92=barececo user-93=agrosind user-94=mpbmk user-95=velmk user-96=gogovan1 user-97=kujnamon user-98=univerz1 user-99=datalink user-100=vfxnestc user-101=polyeste user-102=ivanjord user-103=groskome user-104=sedcmk user-105=datelcom
Sep  9 12:42:08 power sudo[1692800]: wp-toolkit : (command continued) user-106=maleshne user-107=bizporta user-108=infobadi user-109=mspmk user-110=detskagr user-111=spdcompu user-112=urbanexp user-113=wikicamp user-114=inkigaic user-115=modernar user-116=tehnologija user-117=taneccom user-118=premiumi user-119=innofabl user-120=vacuacti user-121=bozinovm user-122=prizmapl user-123=darkogor user-124=fnjorgmk user-125=dslmk user-126=supremel user-127=v5srybi9dcdx user-128=gorsajmk user-129=aquatech user-130=zdmgpsor user-131=tcieuroc user-132=mapaspla user-133=solemor1 user-134=nationa2 user-135=onlinesh user-136=versusmk user-137=fiziosmk user-138=ambitiou user-139=radekrat user-140=starluxm user-141=fffhpcwr user-142=hausmark user-143=nikolov1 user-144=forzares user-145=aptekazd user-146=nikimare user-147=lblawcom user-148=nucktra1 user-149=intelek1 user-150=mediatag user-151=euronic2 user-152=matratze user-153=kardiome user-154=apgrupmk user-155=mediasol user-156=carrent1
Sep  9 12:42:08 power sudo[1692800]: wp-toolkit : (command continued) user-157=bogdanos user-158=nutrivim user-159=samasped user-160=chemhemc user-161=zapovim1 user-162=elektrot user-163=euromaki user-164=cosmatob user-165=vtranseu user-166=pravekom user-167=infopor1 user-168=glammace user-169=albuname user-170=imdskopj user-171=bbbustou user-172=biplmk user-173=kaoilmk user-174=pelagini user-175=solointe user-176=jaramk user-177=taktcomm user-178=recorgmk user-179=animatem user-180=cleanerm user-181=progress user-182=atspedco user-183=sssoluti user-184=electrol user-185=trigemat user-186=eliksirz user-187=naksorgm user-188=golakkom user-189=solarinv user-190=eurofarm user-191=viplastc user-192=wineberr user-193=mbmehani user-194=ismassag user-195=workbenc user-196=bonitavi user-197=evberasm user-198=conserva user-199=vegemk1 user-200=cupidpro user-201=euronic3 user-202=bauerin2 user-203=folklore user-204=peshkai1 user-205=fxxcom user-206=dimpalne user-207=eaptekam
Sep  9 12:42:08 power sudo[1692800]: wp-toolkit : (command continued) user-208=gradbai1 user-209=evacommk user-210=aptekafa user-211=madzomk user-212=jpkomuna user-213=izzomk user-214=makdrone user-215=tehnodro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 12:42:08 power sudo[1692800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:09 power sudo[1692800]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:09 power sudo[1692830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 12:42:09 power sudo[1692830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:09 power sudo[1692830]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:09 power sudo[1692835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-t8V2z004HWuLeEB9.~
Sep  9 12:42:09 power sudo[1692835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:09 power sudo[1692835]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:09 power sudo[1692839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-t8V2z004HWuLeEB9.~\''
Sep  9 12:42:09 power sudo[1692839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:09 power sudo[1692839]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:09 power sudo[1692844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-t8V2z004HWuLeEB9.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 12:42:09 power sudo[1692844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:09 power sudo[1692844]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:09 power sudo[1692848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 12:42:09 power sudo[1692848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:09 power sudo[1692848]: pam_unix(sudo:session): session closed for user root
Sep  9 12:42:13 power sudo[1693580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 12:42:13 power sudo[1693580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 12:42:13 power sudo[1693580]: pam_unix(sudo:session): session closed for user root
Sep  9 12:43:57 power sshd[1696548]: Connection closed by 89.248.168.227 port 52598 [preauth]
Sep  9 12:45:01 power systemd[1698201]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:50:02 power systemd[1705763]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:55:01 power systemd[1713895]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 12:56:00 power sshd[1715200]: error: kex_exchange_identification: read: Connection reset by peer
Sep  9 12:56:00 power sshd[1715200]: Connection reset by 199.45.155.87 port 57150
Sep  9 12:56:20 power sshd[1715381]: Connection closed by 199.45.155.87 port 46870 [preauth]
Sep  9 13:00:02 power systemd[1721120]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:00:02 power systemd[1721124]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 13:00:02 power systemd[1721125]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 13:00:02 power systemd[1721128]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 13:05:01 power systemd[1729498]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:06:01 power systemd[1731257]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 13:07:01 power systemd[1733017]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 13:10:01 power systemd[1739330]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:12:01 power systemd[1743100]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 13:15:01 power systemd[1762979]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:20:01 power systemd[1770524]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:25:01 power systemd[1777731]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:30:01 power systemd[1785157]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:30:01 power systemd[1785158]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 13:30:01 power systemd[1785159]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 13:30:01 power systemd[1785161]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 13:35:01 power systemd[1792976]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:36:01 power systemd[1794470]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 13:37:01 power systemd[1796064]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 13:40:01 power systemd[1800636]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:42:01 power systemd[1803772]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 13:42:06 power sudo[1803923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 13:42:06 power sudo[1803923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803923]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 13:42:06 power sudo[1803927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803927]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 13:42:06 power sudo[1803931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803931]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=plI6k7WL5M'
Sep  9 13:42:06 power sudo[1803935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803935]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 13:42:06 power sudo[1803941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803941]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 13:42:06 power sudo[1803945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803945]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 13:42:06 power sudo[1803949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803949]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 13:42:06 power sudo[1803953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803953]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 13:42:06 power sudo[1803975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803975]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 13:42:06 power sudo[1803979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803979]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 13:42:06 power sudo[1803984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803984]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 13:42:06 power sudo[1803988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803988]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 13:42:06 power sudo[1803992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:06 power sudo[1803992]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:06 power sudo[1803997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 13:42:06 power sudo[1803997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:07 power sudo[1803997]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:08 power sudo[1804046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 13:42:08 power sudo[1804046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:08 power sudo[1804046]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:08 power sudo[1804055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 13:42:08 power sudo[1804055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:08 power sudo[1804055]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:08 power sudo[1804068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=vezilkac user-2=cabinetm user-3=janiboja user-4=itradeco user-5=bovincom user-6=stojano1 user-7=klimimk user-8=stokovna user-9=sparkupm user-10=custome1 user-11=palenzok user-12=busymard user-13=zampmk user-14=zvskopje user-15=cetplatf user-16=dalmacom user-17=kouzonco user-18=premiuma user-19=butelmk user-20=daris user-21=premiums user-22=karpospo user-23=nasaidni user-24=ideaplus user-25=screenme user-26=arturaco user-27=inotekso user-28=jpparkin user-29=drleomk user-30=rasmorgm user-31=skyapart user-32=makoasmk user-33=bianasho user-34=dhamachi user-35=volkanco user-36=goartsym user-37=mfashion user-38=barececo user-39=delcevca user-40=getaldus user-41=simbiome user-42=workandt user-43=mpbmk user-44=agrosind user-45=univerz1 user-46=kujnamon user-47=velmk user-48=gogovan1 user-49=datalink user-50=polyeste
Sep  9 13:42:08 power sudo[1804068]: wp-toolkit : (command continued) user-51=vfxnestc user-52=sedcmk user-53=groskome user-54=ivanjord user-55=maleshne user-56=datelcom user-57=bizporta user-58=mspmk user-59=infobadi user-60=spdcompu user-61=detskagr user-62=wikicamp user-63=urbanexp user-64=enaspotc user-65=trudovop user-66=viewinn user-67=vmro user-68=oouslave user-69=raremk user-70=bauerbg user-71=uhostmk5 user-72=stojnevi user-73=anitermc user-74=youthgua user-75=cajsproc user-76=hotammk user-77=ekostoc1 user-78=levantmk user-79=oncolog1 user-80=nefrolog user-81=caramk user-82=hidrommk user-83=frizered user-84=evolvepl user-85=pelagoni user-86=socioloz user-87=avtogumi user-88=nolimits user-89=kolened1 user-90=nlpmkorg user-91=centarba user-92=seloviro user-93=dikimk12 user-94=herbalpl user-95=enochmk user-96=sprintst user-97=edomcomm user-98=berbermk user-99=holiyayt user-100=rastiraz user-101=pecakome user-102=robustco user-103=stravelm user-104=wondersp user-105=dnevnoin
Sep  9 13:42:08 power sudo[1804068]: wp-toolkit : (command continued) user-106=tradeyou user-107=gjorgeiv user-108=gocruise user-109=goodnews user-110=mstmmk user-111=dadarmk user-112=proverim user-113=tealmk user-114=kaoilmk user-115=biplmk user-116=bbbustou user-117=pelagini user-118=jaramk user-119=solointe user-120=recorgmk user-121=taktcomm user-122=progress user-123=cleanerm user-124=animatem user-125=sssoluti user-126=atspedco user-127=eliksirz user-128=naksorgm user-129=trigemat user-130=electrol user-131=golakkom user-132=solarinv user-133=eurofarm user-134=wineberr user-135=viplastc user-136=mbmehani user-137=workbenc user-138=ismassag user-139=evberasm user-140=bonitavi user-141=conserva user-142=euronic3 user-143=cupidpro user-144=vegemk1 user-145=bauerin2 user-146=folklore user-147=fxxcom user-148=peshkai1 user-149=eaptekam user-150=dimpalne user-151=gradbai1 user-152=madzomk user-153=aptekafa user-154=evacommk user-155=izzomk user-156=jpkomuna user-157=makdrone
Sep  9 13:42:08 power sudo[1804068]: wp-toolkit : (command continued) user-158=tehnodro user-159=inkigaic user-160=modernar user-161=taneccom user-162=tehnologija user-163=prizmapl user-164=fnjorgmk user-165=darkogor user-166=dslmk user-167=bozinovm user-168=vacuacti user-169=innofabl user-170=premiumi user-171=v5srybi9dcdx user-172=supremel user-173=aquatech user-174=gorsajmk user-175=zdmgpsor user-176=tcieuroc user-177=solemor1 user-178=mapaspla user-179=onlinesh user-180=nationa2 user-181=versusmk user-182=ambitiou user-183=fiziosmk user-184=starluxm user-185=radekrat user-186=fffhpcwr user-187=nikolov1 user-188=hausmark user-189=nikimare user-190=aptekazd user-191=forzares user-192=nucktra1 user-193=lblawcom user-194=mediatag user-195=intelek1 user-196=matratze user-197=euronic2 user-198=kardiome user-199=carrent1 user-200=bogdanos user-201=mediasol user-202=apgrupmk user-203=nutrivim user-204=chemhemc user-205=samasped user-206=elektrot user-207=zapovim1 user-208=euromaki
Sep  9 13:42:08 power sudo[1804068]: wp-toolkit : (command continued) user-209=cosmatob user-210=pravekom user-211=vtranseu user-212=infopor1 user-213=albuname user-214=glammace user-215=imdskopj feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 13:42:08 power sudo[1804068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:09 power sudo[1804068]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:09 power sudo[1804097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 13:42:09 power sudo[1804097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:09 power sudo[1804097]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:09 power sudo[1804101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GmuEkwfsVLfFjaL3.~
Sep  9 13:42:09 power sudo[1804101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:09 power sudo[1804101]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:09 power sudo[1804107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GmuEkwfsVLfFjaL3.~\''
Sep  9 13:42:09 power sudo[1804107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:09 power sudo[1804107]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:09 power sudo[1804113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GmuEkwfsVLfFjaL3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 13:42:09 power sudo[1804113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:09 power sudo[1804113]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:09 power sudo[1804118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 13:42:09 power sudo[1804118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:09 power sudo[1804118]: pam_unix(sudo:session): session closed for user root
Sep  9 13:42:14 power sudo[1805213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 13:42:14 power sudo[1805213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 13:42:14 power sudo[1805213]: pam_unix(sudo:session): session closed for user root
Sep  9 13:45:01 power systemd[1809665]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:50:01 power systemd[1818365]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 13:55:01 power systemd[1824652]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:00:01 power systemd[1842729]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:00:01 power systemd[1842752]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 14:00:01 power systemd[1842750]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 14:00:01 power systemd[1842753]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 14:05:01 power systemd[1854140]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:06:01 power systemd[1855504]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 14:07:01 power systemd[1857137]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 14:10:01 power systemd[1868032]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:12:01 power systemd[1871225]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 14:15:01 power systemd[1875646]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:20:01 power systemd[1883362]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:25:01 power systemd[1890017]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:30:01 power systemd[1903056]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:30:01 power systemd[1903058]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 14:30:01 power systemd[1903059]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 14:30:01 power systemd[1903061]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 14:35:01 power systemd[1940476]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:36:01 power systemd[1947934]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 14:37:01 power systemd[1959107]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 14:40:01 power systemd[1989084]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:42:01 power systemd[1998083]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 14:42:06 power sudo[1998171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 14:42:06 power sudo[1998171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998171]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 14:42:06 power sudo[1998175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998175]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 14:42:06 power sudo[1998179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998179]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=3gdULFI33G'
Sep  9 14:42:06 power sudo[1998186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998186]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 14:42:06 power sudo[1998192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998192]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 14:42:06 power sudo[1998197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998197]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 14:42:06 power sudo[1998201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998201]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 14:42:06 power sudo[1998205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998205]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 14:42:06 power sudo[1998210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998210]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 14:42:06 power sudo[1998216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998216]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 14:42:06 power sudo[1998220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998220]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 14:42:06 power sudo[1998224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998224]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 14:42:06 power sudo[1998228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:06 power sudo[1998228]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:06 power sudo[1998233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 14:42:06 power sudo[1998233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:07 power sudo[1998233]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:08 power sudo[1998297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 14:42:08 power sudo[1998297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:08 power sudo[1998297]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:08 power sudo[1998304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 14:42:08 power sudo[1998304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:08 power sudo[1998304]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:08 power sudo[1998316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=agrosind user-2=mpbmk user-3=gogovan1 user-4=velmk user-5=univerz1 user-6=kujnamon user-7=datalink user-8=rasmorgm user-9=makoasmk user-10=bianasho user-11=skyapart user-12=mfashion user-13=goartsym user-14=volkanco user-15=dhamachi user-16=workandt user-17=getaldus user-18=delcevca user-19=simbiome user-20=barececo user-21=infobadi user-22=mspmk user-23=detskagr user-24=spdcompu user-25=urbanexp user-26=wikicamp user-27=vfxnestc user-28=polyeste user-29=groskome user-30=ivanjord user-31=sedcmk user-32=datelcom user-33=maleshne user-34=bizporta user-35=klimimk user-36=sparkupm user-37=stokovna user-38=custome1 user-39=zampmk user-40=zvskopje user-41=busymard user-42=palenzok user-43=cabinetm user-44=vezilkac user-45=itradeco user-46=janiboja user-47=bovincom user-48=stojano1 user-49=premiums user-50=butelmk
Sep  9 14:42:08 power sudo[1998316]: wp-toolkit : (command continued) user-51=daris user-52=arturaco user-53=screenme user-54=ideaplus user-55=nasaidni user-56=karpospo user-57=drleomk user-58=jpparkin user-59=inotekso user-60=dalmacom user-61=cetplatf user-62=premiuma user-63=kouzonco user-64=sprintst user-65=herbalpl user-66=enochmk user-67=dikimk12 user-68=berbermk user-69=edomcomm user-70=nolimits user-71=nlpmkorg user-72=centarba user-73=kolened1 user-74=seloviro user-75=gocruise user-76=mstmmk user-77=goodnews user-78=proverim user-79=dadarmk user-80=tealmk user-81=rastiraz user-82=holiyayt user-83=wondersp user-84=robustco user-85=stravelm user-86=pecakome user-87=dnevnoin user-88=gjorgeiv user-89=tradeyou user-90=youthgua user-91=anitermc user-92=hotammk user-93=cajsproc user-94=vmro user-95=viewinn user-96=trudovop user-97=enaspotc user-98=uhostmk5 user-99=bauerbg user-100=raremk user-101=oouslave user-102=stojnevi user-103=evolvepl user-104=pelagoni user-105=avtogumi
Sep  9 14:42:08 power sudo[1998316]: wp-toolkit : (command continued) user-106=socioloz user-107=nefrolog user-108=oncolog1 user-109=levantmk user-110=ekostoc1 user-111=caramk user-112=frizered user-113=hidrommk user-114=bauerin2 user-115=folklore user-116=bonitavi user-117=evberasm user-118=conserva user-119=vegemk1 user-120=cupidpro user-121=euronic3 user-122=jpkomuna user-123=izzomk user-124=makdrone user-125=tehnodro user-126=peshkai1 user-127=fxxcom user-128=dimpalne user-129=eaptekam user-130=gradbai1 user-131=evacommk user-132=aptekafa user-133=madzomk user-134=solointe user-135=jaramk user-136=taktcomm user-137=recorgmk user-138=animatem user-139=cleanerm user-140=progress user-141=sssoluti user-142=atspedco user-143=bbbustou user-144=kaoilmk user-145=biplmk user-146=pelagini user-147=viplastc user-148=wineberr user-149=mbmehani user-150=ismassag user-151=workbenc user-152=electrol user-153=trigemat user-154=naksorgm user-155=eliksirz user-156=golakkom user-157=solarinv
Sep  9 14:42:08 power sudo[1998316]: wp-toolkit : (command continued) user-158=eurofarm user-159=euronic2 user-160=matratze user-161=kardiome user-162=apgrupmk user-163=mediasol user-164=carrent1 user-165=bogdanos user-166=hausmark user-167=nikolov1 user-168=forzares user-169=aptekazd user-170=nikimare user-171=lblawcom user-172=nucktra1 user-173=intelek1 user-174=mediatag user-175=vtranseu user-176=pravekom user-177=infopor1 user-178=glammace user-179=albuname user-180=imdskopj user-181=nutrivim user-182=samasped user-183=chemhemc user-184=elektrot user-185=zapovim1 user-186=euromaki user-187=cosmatob user-188=supremel user-189=v5srybi9dcdx user-190=gorsajmk user-191=aquatech user-192=zdmgpsor user-193=inkigaic user-194=modernar user-195=tehnologija user-196=taneccom user-197=premiumi user-198=innofabl user-199=vacuacti user-200=bozinovm user-201=darkogor user-202=prizmapl user-203=fnjorgmk user-204=dslmk user-205=versusmk user-206=fiziosmk user-207=ambitiou user-208=radekrat
Sep  9 14:42:08 power sudo[1998316]: wp-toolkit : (command continued) user-209=starluxm user-210=fffhpcwr user-211=tcieuroc user-212=mapaspla user-213=solemor1 user-214=nationa2 user-215=onlinesh feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 14:42:08 power sudo[1998316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:09 power sudo[1998316]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:09 power sudo[1998336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep  9 14:42:09 power sudo[1998336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:09 power sudo[1998336]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:09 power sudo[1998345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro test -e /home/vmro/wordpress-backups
Sep  9 14:42:09 power sudo[1998345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:09 power sudo[1998345]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:09 power sudo[1998357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep  9 14:42:09 power sudo[1998357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:09 power sudo[1998357]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:09 power sudo[1998370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep  9 14:42:09 power sudo[1998370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:09 power sudo[1998370]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:09 power sudo[1998384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep  9 14:42:09 power sudo[1998384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:10 power sudo[1998384]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:10 power sudo[1998393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind test -e /home/agrosind/wordpress-backups
Sep  9 14:42:10 power sudo[1998393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:10 power sudo[1998393]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:10 power sudo[1998404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep  9 14:42:10 power sudo[1998404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:10 power sudo[1998404]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:10 power sudo[1998414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep  9 14:42:10 power sudo[1998414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:10 power sudo[1998414]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:10 power sudo[1998426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep  9 14:42:10 power sudo[1998426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:10 power sudo[1998426]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:10 power sudo[1998447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep  9 14:42:10 power sudo[1998447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:10 power sudo[1998447]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:10 power sudo[1998458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep  9 14:42:10 power sudo[1998458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:10 power sudo[1998458]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:10 power sudo[1998468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem test -e /home/animatem/wordpress-backups
Sep  9 14:42:11 power sudo[1998468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:11 power sudo[1998468]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:11 power sudo[1998480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep  9 14:42:11 power sudo[1998480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:11 power sudo[1998480]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:11 power sudo[1998491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc test -e /home/anitermc/wordpress-backups
Sep  9 14:42:11 power sudo[1998491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:11 power sudo[1998491]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:11 power sudo[1998502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep  9 14:42:11 power sudo[1998502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:11 power sudo[1998502]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:11 power sudo[1998510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep  9 14:42:11 power sudo[1998510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:11 power sudo[1998510]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:11 power sudo[1998521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep  9 14:42:11 power sudo[1998521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:11 power sudo[1998521]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:11 power sudo[1998530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd test -e /home/aptekazd/wordpress-backups
Sep  9 14:42:11 power sudo[1998530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:11 power sudo[1998530]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:11 power sudo[1998541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep  9 14:42:11 power sudo[1998541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:11 power sudo[1998541]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:12 power sudo[1998551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress test -e /home/progress/wordpress-backups
Sep  9 14:42:12 power sudo[1998551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:12 power sudo[1998551]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:12 power sudo[1998562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep  9 14:42:12 power sudo[1998562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:12 power sudo[1998562]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:12 power sudo[1998580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep  9 14:42:12 power sudo[1998580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:12 power sudo[1998580]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:12 power sudo[1998591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep  9 14:42:12 power sudo[1998591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:12 power sudo[1998591]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:12 power sudo[1998604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 test -e /home/nationa2/wordpress-backups
Sep  9 14:42:12 power sudo[1998604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:12 power sudo[1998604]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:12 power sudo[1998615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep  9 14:42:12 power sudo[1998615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:12 power sudo[1998615]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:12 power sudo[1998629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  9 14:42:12 power sudo[1998629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:12 power sudo[1998629]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:12 power sudo[1998642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep  9 14:42:12 power sudo[1998642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:13 power sudo[1998642]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:13 power sudo[1998649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho test -e /home/bianasho/wordpress-backups
Sep  9 14:42:13 power sudo[1998649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:13 power sudo[1998649]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:13 power sudo[1998663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep  9 14:42:13 power sudo[1998663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:13 power sudo[1998663]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:13 power sudo[1998674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk test -e /home/velmk/wordpress-backups
Sep  9 14:42:13 power sudo[1998674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:13 power sudo[1998674]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:13 power sudo[1998685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep  9 14:42:13 power sudo[1998685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:13 power sudo[1998685]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:13 power sudo[1998690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep  9 14:42:13 power sudo[1998690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:13 power sudo[1998690]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:13 power sudo[1998703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep  9 14:42:13 power sudo[1998703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:13 power sudo[1998703]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:13 power sudo[1998713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi test -e /home/bonitavi/wordpress-backups
Sep  9 14:42:13 power sudo[1998713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:13 power sudo[1998713]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:13 power sudo[1998725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep  9 14:42:13 power sudo[1998725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998725]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom test -e /home/bovincom/wordpress-backups
Sep  9 14:42:14 power sudo[1998732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998732]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep  9 14:42:14 power sudo[1998747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998747]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk test -e /home/butelmk/wordpress-backups
Sep  9 14:42:14 power sudo[1998756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998756]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep  9 14:42:14 power sudo[1998767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998767]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep  9 14:42:14 power sudo[1998774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998774]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  9 14:42:14 power sudo[1998785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998785]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  9 14:42:14 power sudo[1998796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998796]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep  9 14:42:14 power sudo[1998807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998807]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep  9 14:42:14 power sudo[1998815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:14 power sudo[1998815]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:14 power sudo[1998826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep  9 14:42:14 power sudo[1998826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:15 power sudo[1998826]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:15 power sudo[1998834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob test -e /home/cosmatob/wordpress-backups
Sep  9 14:42:15 power sudo[1998834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:15 power sudo[1998834]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:15 power sudo[1998845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep  9 14:42:15 power sudo[1998845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:15 power sudo[1998845]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:15 power sudo[1998856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep  9 14:42:15 power sudo[1998856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:15 power sudo[1998856]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:15 power sudo[1998866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca test -e /home/delcevca/wordpress-backups
Sep  9 14:42:15 power sudo[1998866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:15 power sudo[1998866]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:15 power sudo[1998878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep  9 14:42:15 power sudo[1998878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:15 power sudo[1998878]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:15 power sudo[1998885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  9 14:42:15 power sudo[1998885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:15 power sudo[1998885]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:15 power sudo[1998897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  9 14:42:15 power sudo[1998897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:15 power sudo[1998897]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:15 power sudo[1998908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  9 14:42:15 power sudo[1998908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:15 power sudo[1998908]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:15 power sudo[1998919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep  9 14:42:15 power sudo[1998919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:16 power sudo[1998919]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:16 power sudo[1998925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr test -e /home/detskagr/wordpress-backups
Sep  9 14:42:16 power sudo[1998925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:16 power sudo[1998925]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:16 power sudo[1998937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep  9 14:42:16 power sudo[1998937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:16 power sudo[1998937]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:16 power sudo[1998945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam test -e /home/eaptekam/wordpress-backups
Sep  9 14:42:16 power sudo[1998945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:16 power sudo[1998945]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:16 power sudo[1998956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep  9 14:42:16 power sudo[1998956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:16 power sudo[1998956]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:16 power sudo[1998961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne test -e /home/dimpalne/wordpress-backups
Sep  9 14:42:16 power sudo[1998961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:16 power sudo[1998961]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:16 power sudo[1998973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep  9 14:42:16 power sudo[1998973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:16 power sudo[1998973]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:16 power sudo[1998981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin test -e /home/dnevnoin/wordpress-backups
Sep  9 14:42:16 power sudo[1998981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:16 power sudo[1998981]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:16 power sudo[1998993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep  9 14:42:16 power sudo[1998993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:16 power sudo[1998993]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:16 power sudo[1999005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep  9 14:42:16 power sudo[1999005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:17 power sudo[1999005]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:17 power sudo[1999015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk test -e /home/drleomk/wordpress-backups
Sep  9 14:42:17 power sudo[1999015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:17 power sudo[1999015]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:17 power sudo[1999029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep  9 14:42:17 power sudo[1999029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:17 power sudo[1999029]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:17 power sudo[1999044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  9 14:42:17 power sudo[1999044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:17 power sudo[1999044]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:17 power sudo[1999055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep  9 14:42:17 power sudo[1999055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:17 power sudo[1999055]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:17 power sudo[1999065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol test -e /home/electrol/wordpress-backups
Sep  9 14:42:17 power sudo[1999065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:17 power sudo[1999065]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:17 power sudo[1999080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep  9 14:42:17 power sudo[1999080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:17 power sudo[1999080]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:17 power sudo[1999085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot test -e /home/elektrot/wordpress-backups
Sep  9 14:42:17 power sudo[1999085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:17 power sudo[1999085]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:17 power sudo[1999096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep  9 14:42:17 power sudo[1999096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:17 power sudo[1999096]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:17 power sudo[1999107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep  9 14:42:17 power sudo[1999107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:18 power sudo[1999107]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:18 power sudo[1999116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk test -e /home/enochmk/wordpress-backups
Sep  9 14:42:18 power sudo[1999116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:18 power sudo[1999116]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:18 power sudo[1999128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  9 14:42:18 power sudo[1999128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:18 power sudo[1999128]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:18 power sudo[1999139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep  9 14:42:18 power sudo[1999139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:18 power sudo[1999139]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:18 power sudo[1999145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm test -e /home/eurofarm/wordpress-backups
Sep  9 14:42:18 power sudo[1999145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:18 power sudo[1999145]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:18 power sudo[1999160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep  9 14:42:18 power sudo[1999160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:18 power sudo[1999160]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:18 power sudo[1999179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki test -e /home/euromaki/wordpress-backups
Sep  9 14:42:18 power sudo[1999179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:18 power sudo[1999179]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:18 power sudo[1999266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep  9 14:42:18 power sudo[1999266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:18 power sudo[1999266]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:18 power sudo[1999272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm test -e /home/evberasm/wordpress-backups
Sep  9 14:42:19 power sudo[1999272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:19 power sudo[1999272]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:19 power sudo[1999284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep  9 14:42:19 power sudo[1999284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:19 power sudo[1999284]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:19 power sudo[1999293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl test -e /home/evolvepl/wordpress-backups
Sep  9 14:42:19 power sudo[1999293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:19 power sudo[1999293]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:19 power sudo[1999304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  9 14:42:19 power sudo[1999304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:19 power sudo[1999304]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:19 power sudo[1999315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep  9 14:42:19 power sudo[1999315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:19 power sudo[1999315]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:19 power sudo[1999320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep  9 14:42:19 power sudo[1999320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:19 power sudo[1999320]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:19 power sudo[1999331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep  9 14:42:19 power sudo[1999331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:19 power sudo[1999331]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:19 power sudo[1999340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep  9 14:42:19 power sudo[1999340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:19 power sudo[1999340]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:19 power sudo[1999352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep  9 14:42:19 power sudo[1999352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:20 power sudo[1999352]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:20 power sudo[1999365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore test -e /home/folklore/wordpress-backups
Sep  9 14:42:20 power sudo[1999365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:20 power sudo[1999365]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:20 power sudo[1999377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep  9 14:42:20 power sudo[1999377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:20 power sudo[1999377]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:20 power sudo[1999390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares test -e /home/forzares/wordpress-backups
Sep  9 14:42:20 power sudo[1999390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:20 power sudo[1999390]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:20 power sudo[1999402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep  9 14:42:20 power sudo[1999402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:20 power sudo[1999402]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:20 power sudo[1999410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus test -e /home/getaldus/wordpress-backups
Sep  9 14:42:20 power sudo[1999410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:20 power sudo[1999410]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:20 power sudo[1999422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep  9 14:42:20 power sudo[1999422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:20 power sudo[1999422]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:20 power sudo[1999463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise test -e /home/gocruise/wordpress-backups
Sep  9 14:42:20 power sudo[1999463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:20 power sudo[1999463]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:20 power sudo[1999477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep  9 14:42:20 power sudo[1999477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999477]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:21 power sudo[1999488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 test -e /home/gogovan1/wordpress-backups
Sep  9 14:42:21 power sudo[1999488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999488]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:21 power sudo[1999499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep  9 14:42:21 power sudo[1999499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999499]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:21 power sudo[1999507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom test -e /home/golakkom/wordpress-backups
Sep  9 14:42:21 power sudo[1999507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999507]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:21 power sudo[1999521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  9 14:42:21 power sudo[1999521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999521]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:21 power sudo[1999532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep  9 14:42:21 power sudo[1999532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999532]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:21 power sudo[1999544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl test -e /home/herbalpl/wordpress-backups
Sep  9 14:42:21 power sudo[1999544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999544]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:21 power sudo[1999555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  9 14:42:21 power sudo[1999555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999555]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:21 power sudo[1999568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep  9 14:42:21 power sudo[1999568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999568]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:21 power sudo[1999601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep  9 14:42:21 power sudo[1999601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:21 power sudo[1999601]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  9 14:42:22 power sudo[1999610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999610]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  9 14:42:22 power sudo[1999626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999626]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  9 14:42:22 power sudo[1999638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999638]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  9 14:42:22 power sudo[1999649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999649]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep  9 14:42:22 power sudo[1999664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999664]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep  9 14:42:22 power sudo[1999675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999675]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk test -e /home/madzomk/wordpress-backups
Sep  9 14:42:22 power sudo[1999682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999682]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep  9 14:42:22 power sudo[1999693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999693]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj test -e /home/imdskopj/wordpress-backups
Sep  9 14:42:22 power sudo[1999706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999706]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep  9 14:42:22 power sudo[1999717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999717]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 test -e /home/infopor1/wordpress-backups
Sep  9 14:42:22 power sudo[1999750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:22 power sudo[1999750]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:22 power sudo[1999761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep  9 14:42:22 power sudo[1999761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999761]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user inkigaic test -e /home/inkigaic/wordpress-backups
Sep  9 14:42:23 power sudo[1999773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999773]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep  9 14:42:23 power sudo[1999784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999784]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 test -e /home/intelek1/wordpress-backups
Sep  9 14:42:23 power sudo[1999791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999791]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep  9 14:42:23 power sudo[1999805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999805]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep  9 14:42:23 power sudo[1999817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999817]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin test -e /home/jpparkin/wordpress-backups
Sep  9 14:42:23 power sudo[1999824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999824]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep  9 14:42:23 power sudo[1999837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999837]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo test -e /home/karpospo/wordpress-backups
Sep  9 14:42:23 power sudo[1999871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999871]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  9 14:42:23 power sudo[1999882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:23 power sudo[1999882]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:23 power sudo[1999893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep  9 14:42:23 power sudo[1999893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:24 power sudo[1999893]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:24 power sudo[1999904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep  9 14:42:24 power sudo[1999904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:24 power sudo[1999904]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:24 power sudo[1999913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 test -e /home/kolened1/wordpress-backups
Sep  9 14:42:24 power sudo[1999913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:24 power sudo[1999913]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:24 power sudo[1999924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep  9 14:42:24 power sudo[1999924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:24 power sudo[1999924]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:24 power sudo[1999941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco test -e /home/kouzonco/wordpress-backups
Sep  9 14:42:24 power sudo[1999941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:24 power sudo[1999941]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:24 power sudo[1999952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep  9 14:42:24 power sudo[1999952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:24 power sudo[1999952]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:24 power sudo[1999961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst test -e /home/sprintst/wordpress-backups
Sep  9 14:42:24 power sudo[1999961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:24 power sudo[1999961]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:24 power sudo[1999972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep  9 14:42:24 power sudo[1999972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:24 power sudo[1999972]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:24 power sudo[1999979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon test -e /home/kujnamon/wordpress-backups
Sep  9 14:42:25 power sudo[1999979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[1999979]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[1999990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  9 14:42:25 power sudo[1999990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[1999990]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep  9 14:42:25 power sudo[2000001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[2000001]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone test -e /home/makdrone/wordpress-backups
Sep  9 14:42:25 power sudo[2000015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[2000015]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep  9 14:42:25 power sudo[2000026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[2000026]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk test -e /home/makoasmk/wordpress-backups
Sep  9 14:42:25 power sudo[2000033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[2000033]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep  9 14:42:25 power sudo[2000045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[2000045]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep  9 14:42:25 power sudo[2000056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[2000056]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep  9 14:42:25 power sudo[2000067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[2000067]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar test -e /home/modernar/wordpress-backups
Sep  9 14:42:25 power sudo[2000104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[2000104]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep  9 14:42:25 power sudo[2000116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:25 power sudo[2000116]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:25 power sudo[2000127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep  9 14:42:25 power sudo[2000127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:26 power sudo[2000127]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:26 power sudo[2000140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk test -e /home/mpbmk/wordpress-backups
Sep  9 14:42:26 power sudo[2000140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:26 power sudo[2000140]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:26 power sudo[2000151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep  9 14:42:26 power sudo[2000151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:26 power sudo[2000151]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:26 power sudo[2000166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk test -e /home/mspmk/wordpress-backups
Sep  9 14:42:26 power sudo[2000166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:26 power sudo[2000166]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:28 power sudo[2000234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep  9 14:42:28 power sudo[2000234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000234]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk test -e /home/mstmmk/wordpress-backups
Sep  9 14:42:29 power sudo[2000243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000243]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep  9 14:42:29 power sudo[2000257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000257]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm test -e /home/naksorgm/wordpress-backups
Sep  9 14:42:29 power sudo[2000267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000267]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep  9 14:42:29 power sudo[2000278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000278]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep  9 14:42:29 power sudo[2000288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000288]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep  9 14:42:29 power sudo[2000300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000300]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep  9 14:42:29 power sudo[2000311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000311]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag test -e /home/ismassag/wordpress-backups
Sep  9 14:42:29 power sudo[2000320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000320]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep  9 14:42:29 power sudo[2000331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:29 power sudo[2000331]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:29 power sudo[2000342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep  9 14:42:29 power sudo[2000342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:30 power sudo[2000342]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:30 power sudo[2000353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 test -e /home/nikolov1/wordpress-backups
Sep  9 14:42:30 power sudo[2000353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:30 power sudo[2000353]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:30 power sudo[2000364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep  9 14:42:30 power sudo[2000364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:30 power sudo[2000364]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:30 power sudo[2000371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits test -e /home/nolimits/wordpress-backups
Sep  9 14:42:30 power sudo[2000371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:30 power sudo[2000371]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:30 power sudo[2000382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep  9 14:42:30 power sudo[2000382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:30 power sudo[2000382]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:30 power sudo[2000390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh test -e /home/onlinesh/wordpress-backups
Sep  9 14:42:30 power sudo[2000390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:30 power sudo[2000390]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:30 power sudo[2000401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep  9 14:42:30 power sudo[2000401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:30 power sudo[2000401]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:30 power sudo[2000409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok test -e /home/palenzok/wordpress-backups
Sep  9 14:42:30 power sudo[2000409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:30 power sudo[2000409]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:30 power sudo[2000420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep  9 14:42:30 power sudo[2000420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:31 power sudo[2000420]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:31 power sudo[2000430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni test -e /home/pelagoni/wordpress-backups
Sep  9 14:42:31 power sudo[2000430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:31 power sudo[2000430]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:31 power sudo[2000442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep  9 14:42:31 power sudo[2000442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:31 power sudo[2000442]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:31 power sudo[2000448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk test -e /home/biplmk/wordpress-backups
Sep  9 14:42:31 power sudo[2000448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:31 power sudo[2000448]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:31 power sudo[2000459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep  9 14:42:31 power sudo[2000459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:31 power sudo[2000459]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:31 power sudo[2000471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi test -e /home/premiumi/wordpress-backups
Sep  9 14:42:31 power sudo[2000471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:31 power sudo[2000471]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:31 power sudo[2000482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep  9 14:42:31 power sudo[2000482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:31 power sudo[2000482]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:31 power sudo[2000493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep  9 14:42:31 power sudo[2000493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:31 power sudo[2000493]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:31 power sudo[2000505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat test -e /home/radekrat/wordpress-backups
Sep  9 14:42:31 power sudo[2000505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:31 power sudo[2000505]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:32 power sudo[2000518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep  9 14:42:32 power sudo[2000518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:32 power sudo[2000518]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:32 power sudo[2000530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm test -e /home/rasmorgm/wordpress-backups
Sep  9 14:42:32 power sudo[2000530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:32 power sudo[2000530]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:32 power sudo[2000541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep  9 14:42:32 power sudo[2000541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:32 power sudo[2000541]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:32 power sudo[2000549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk test -e /home/recorgmk/wordpress-backups
Sep  9 14:42:32 power sudo[2000549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:32 power sudo[2000549]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:32 power sudo[2000560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep  9 14:42:32 power sudo[2000560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:32 power sudo[2000560]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:32 power sudo[2000564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm test -e /home/stravelm/wordpress-backups
Sep  9 14:42:32 power sudo[2000564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:32 power sudo[2000564]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:32 power sudo[2000581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep  9 14:42:32 power sudo[2000581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:32 power sudo[2000581]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:32 power sudo[2000588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome test -e /home/simbiome/wordpress-backups
Sep  9 14:42:32 power sudo[2000588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:32 power sudo[2000588]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:33 power sudo[2000600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  9 14:42:33 power sudo[2000600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:33 power sudo[2000600]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:33 power sudo[2000612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep  9 14:42:33 power sudo[2000612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:33 power sudo[2000612]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:33 power sudo[2000621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep  9 14:42:33 power sudo[2000621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:33 power sudo[2000621]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:33 power sudo[2000632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep  9 14:42:33 power sudo[2000632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:33 power sudo[2000632]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:33 power sudo[2000644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep  9 14:42:33 power sudo[2000644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:33 power sudo[2000644]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:33 power sudo[2000653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti test -e /home/sssoluti/wordpress-backups
Sep  9 14:42:33 power sudo[2000653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:33 power sudo[2000653]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:33 power sudo[2000664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep  9 14:42:33 power sudo[2000664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:33 power sudo[2000664]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:33 power sudo[2000675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep  9 14:42:33 power sudo[2000675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:33 power sudo[2000675]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:33 power sudo[2000686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep  9 14:42:33 power sudo[2000686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000686]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro test -e /home/tehnodro/wordpress-backups
Sep  9 14:42:34 power sudo[2000697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000697]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep  9 14:42:34 power sudo[2000708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000708]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep  9 14:42:34 power sudo[2000721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000721]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn test -e /home/viewinn/wordpress-backups
Sep  9 14:42:34 power sudo[2000735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000735]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep  9 14:42:34 power sudo[2000747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000747]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp test -e /home/wikicamp/wordpress-backups
Sep  9 14:42:34 power sudo[2000756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000756]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep  9 14:42:34 power sudo[2000768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000768]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt test -e /home/workandt/wordpress-backups
Sep  9 14:42:34 power sudo[2000784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000784]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep  9 14:42:34 power sudo[2000799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:34 power sudo[2000799]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:34 power sudo[2000810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep  9 14:42:34 power sudo[2000810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:35 power sudo[2000810]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:35 power sudo[2000825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua test -e /home/youthgua/wordpress-backups
Sep  9 14:42:35 power sudo[2000825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:35 power sudo[2000825]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:35 power sudo[2000839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep  9 14:42:35 power sudo[2000839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:35 power sudo[2000839]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:35 power sudo[2000846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk test -e /home/zampmk/wordpress-backups
Sep  9 14:42:35 power sudo[2000846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:35 power sudo[2000846]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:35 power sudo[2000857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep  9 14:42:35 power sudo[2000857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:35 power sudo[2000857]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:35 power sudo[2000868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord test -e /home/ivanjord/wordpress-backups
Sep  9 14:42:35 power sudo[2000868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:35 power sudo[2000868]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:35 power sudo[2000879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep  9 14:42:35 power sudo[2000879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:35 power sudo[2000879]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:35 power sudo[2000890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep  9 14:42:35 power sudo[2000890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:36 power sudo[2000890]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:36 power sudo[2000900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja test -e /home/janiboja/wordpress-backups
Sep  9 14:42:36 power sudo[2000900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:36 power sudo[2000900]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:36 power sudo[2000911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep  9 14:42:36 power sudo[2000911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:36 power sudo[2000911]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:36 power sudo[2000922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk test -e /home/jaramk/wordpress-backups
Sep  9 14:42:36 power sudo[2000922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:36 power sudo[2000922]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:36 power sudo[2000933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep  9 14:42:36 power sudo[2000933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:36 power sudo[2000933]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:36 power sudo[2000945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep  9 14:42:36 power sudo[2000945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:36 power sudo[2000945]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:36 power sudo[2000958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep  9 14:42:36 power sudo[2000958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:36 power sudo[2000958]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:36 power sudo[2000967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep  9 14:42:36 power sudo[2000967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:36 power sudo[2000967]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:36 power sudo[2000980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep  9 14:42:36 power sudo[2000980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:36 power sudo[2000980]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:36 power sudo[2000991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep  9 14:42:36 power sudo[2000991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2000991]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:37 power sudo[2000997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag test -e /home/mediatag/wordpress-backups
Sep  9 14:42:37 power sudo[2000997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2000997]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:37 power sudo[2001012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep  9 14:42:37 power sudo[2001012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2001012]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:37 power sudo[2001023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep  9 14:42:37 power sudo[2001023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2001023]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:37 power sudo[2001031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog test -e /home/nefrolog/wordpress-backups
Sep  9 14:42:37 power sudo[2001031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2001031]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:37 power sudo[2001043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep  9 14:42:37 power sudo[2001043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2001043]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:37 power sudo[2001049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep  9 14:42:37 power sudo[2001049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2001049]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:37 power sudo[2001060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep  9 14:42:37 power sudo[2001060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2001060]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:37 power sudo[2001072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep  9 14:42:37 power sudo[2001072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2001072]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:37 power sudo[2001077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep  9 14:42:37 power sudo[2001077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:37 power sudo[2001077]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:38 power sudo[2001089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep  9 14:42:38 power sudo[2001089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:38 power sudo[2001089]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:38 power sudo[2001103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom test -e /home/pravekom/wordpress-backups
Sep  9 14:42:38 power sudo[2001103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:38 power sudo[2001103]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:38 power sudo[2001118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep  9 14:42:38 power sudo[2001118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:38 power sudo[2001118]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:38 power sudo[2001128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim test -e /home/proverim/wordpress-backups
Sep  9 14:42:38 power sudo[2001128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:38 power sudo[2001128]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:38 power sudo[2001139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep  9 14:42:38 power sudo[2001139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:38 power sudo[2001139]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:38 power sudo[2001144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz test -e /home/rastiraz/wordpress-backups
Sep  9 14:42:38 power sudo[2001144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:38 power sudo[2001144]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:38 power sudo[2001155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep  9 14:42:38 power sudo[2001155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:38 power sudo[2001155]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:39 power sudo[2001163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva test -e /home/conserva/wordpress-backups
Sep  9 14:42:39 power sudo[2001163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:39 power sudo[2001163]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:39 power sudo[2001174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep  9 14:42:39 power sudo[2001174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:39 power sudo[2001174]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:39 power sudo[2001184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne test -e /home/maleshne/wordpress-backups
Sep  9 14:42:39 power sudo[2001184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:39 power sudo[2001184]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:39 power sudo[2001195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep  9 14:42:39 power sudo[2001195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:39 power sudo[2001195]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:39 power sudo[2001201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped test -e /home/samasped/wordpress-backups
Sep  9 14:42:39 power sudo[2001201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:39 power sudo[2001201]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:39 power sudo[2001212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep  9 14:42:39 power sudo[2001212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:39 power sudo[2001212]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:39 power sudo[2001218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro test -e /home/seloviro/wordpress-backups
Sep  9 14:42:39 power sudo[2001218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:39 power sudo[2001218]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:39 power sudo[2001229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep  9 14:42:39 power sudo[2001229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:40 power sudo[2001229]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:40 power sudo[2001234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart test -e /home/skyapart/wordpress-backups
Sep  9 14:42:40 power sudo[2001234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:40 power sudo[2001234]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:40 power sudo[2001246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep  9 14:42:40 power sudo[2001246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:40 power sudo[2001246]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:40 power sudo[2001255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz test -e /home/socioloz/wordpress-backups
Sep  9 14:42:40 power sudo[2001255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:40 power sudo[2001255]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:40 power sudo[2001268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep  9 14:42:40 power sudo[2001268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:40 power sudo[2001268]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:40 power sudo[2001282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi test -e /home/stojnevi/wordpress-backups
Sep  9 14:42:40 power sudo[2001282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:40 power sudo[2001282]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:40 power sudo[2001294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep  9 14:42:40 power sudo[2001294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:40 power sudo[2001294]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:40 power sudo[2001311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep  9 14:42:40 power sudo[2001311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:40 power sudo[2001311]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:40 power sudo[2001318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop test -e /home/trudovop/wordpress-backups
Sep  9 14:42:40 power sudo[2001318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:40 power sudo[2001318]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:40 power sudo[2001329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep  9 14:42:40 power sudo[2001329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:41 power sudo[2001329]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:41 power sudo[2001339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp test -e /home/urbanexp/wordpress-backups
Sep  9 14:42:41 power sudo[2001339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:41 power sudo[2001339]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:41 power sudo[2001351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep  9 14:42:41 power sudo[2001351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:41 power sudo[2001351]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:41 power sudo[2001367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc test -e /home/vfxnestc/wordpress-backups
Sep  9 14:42:41 power sudo[2001367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:41 power sudo[2001367]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:41 power sudo[2001378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep  9 14:42:41 power sudo[2001378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:41 power sudo[2001378]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:41 power sudo[2001384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/wordpress-backups
Sep  9 14:42:41 power sudo[2001384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:41 power sudo[2001384]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:41 power sudo[2001395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep  9 14:42:41 power sudo[2001395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:41 power sudo[2001395]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:41 power sudo[2001402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace test -e /home/glammace/wordpress-backups
Sep  9 14:42:41 power sudo[2001402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:41 power sudo[2001402]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:41 power sudo[2001413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep  9 14:42:41 power sudo[2001413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:41 power sudo[2001413]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:41 power sudo[2001424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep  9 14:42:41 power sudo[2001424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:42 power sudo[2001424]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:42 power sudo[2001432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc test -e /home/workbenc/wordpress-backups
Sep  9 14:42:42 power sudo[2001432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:42 power sudo[2001432]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:42 power sudo[2001443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep  9 14:42:42 power sudo[2001443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:42 power sudo[2001443]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:43 power sudo[2002784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json'
Sep  9 14:42:43 power sudo[2002784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:43 power sudo[2002784]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:43 power sudo[2002793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=5.9.96.240 --output=json'
Sep  9 14:42:43 power sudo[2002793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:43 power sudo[2002793]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:45 power sudo[2002829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 14:42:45 power sudo[2002829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:45 power sudo[2002829]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:45 power sudo[2002833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vlX0JxdvB2tjFUjK.~
Sep  9 14:42:45 power sudo[2002833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:45 power sudo[2002833]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:45 power sudo[2002837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vlX0JxdvB2tjFUjK.~\''
Sep  9 14:42:45 power sudo[2002837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:45 power sudo[2002837]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:45 power sudo[2002842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vlX0JxdvB2tjFUjK.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 14:42:45 power sudo[2002842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:45 power sudo[2002842]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:45 power sudo[2002846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 14:42:45 power sudo[2002846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:45 power sudo[2002846]: pam_unix(sudo:session): session closed for user root
Sep  9 14:42:49 power sudo[2003585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 14:42:49 power sudo[2003585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 14:42:49 power sudo[2003585]: pam_unix(sudo:session): session closed for user root
Sep  9 14:45:01 power systemd[2006652]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:50:01 power systemd[2013327]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 14:55:01 power systemd[2019607]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:00:02 power systemd[2025749]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:00:02 power systemd[2025754]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 15:00:02 power systemd[2025753]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 15:00:02 power systemd[2025755]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 15:05:01 power systemd[2032927]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:06:01 power systemd[2034100]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 15:07:01 power systemd[2035456]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 15:10:01 power systemd[2039361]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:12:02 power systemd[2041959]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 15:15:01 power systemd[2045341]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:20:01 power systemd[2051029]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:25:01 power systemd[2056716]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:30:02 power systemd[2062285]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:30:02 power systemd[2062288]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 15:30:02 power systemd[2062291]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 15:30:02 power systemd[2062289]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 15:35:01 power systemd[2068169]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:36:01 power systemd[2069381]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 15:37:01 power systemd[2070412]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 15:40:01 power systemd[2073822]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:42:01 power systemd[2075855]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 15:42:06 power sudo[2076035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 15:42:06 power sudo[2076035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076035]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 15:42:06 power sudo[2076040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076040]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 15:42:06 power sudo[2076044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076044]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=junMbXPkFP'
Sep  9 15:42:06 power sudo[2076048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076048]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 15:42:06 power sudo[2076054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076054]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 15:42:06 power sudo[2076058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076058]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 15:42:06 power sudo[2076064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076064]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 15:42:06 power sudo[2076068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076068]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 15:42:06 power sudo[2076076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076076]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 15:42:06 power sudo[2076080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076080]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 15:42:06 power sudo[2076084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076084]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 15:42:06 power sudo[2076088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076088]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 15:42:06 power sudo[2076092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:06 power sudo[2076092]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:06 power sudo[2076097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 15:42:06 power sudo[2076097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:07 power sudo[2076097]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:08 power sudo[2076159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 15:42:08 power sudo[2076159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:08 power sudo[2076159]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:08 power sudo[2076165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 15:42:08 power sudo[2076165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:08 power sudo[2076165]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:08 power sudo[2076173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=cajsproc user-2=hotammk user-3=anitermc user-4=youthgua user-5=oouslave user-6=raremk user-7=bauerbg user-8=uhostmk5 user-9=stojnevi user-10=enaspotc user-11=trudovop user-12=viewinn user-13=vmro user-14=pelagoni user-15=avtogumi user-16=socioloz user-17=evolvepl user-18=caramk user-19=hidrommk user-20=frizered user-21=ekostoc1 user-22=levantmk user-23=oncolog1 user-24=nefrolog user-25=edomcomm user-26=berbermk user-27=dikimk12 user-28=enochmk user-29=herbalpl user-30=sprintst user-31=seloviro user-32=nolimits user-33=kolened1 user-34=centarba user-35=nlpmkorg user-36=dadarmk user-37=proverim user-38=tealmk user-39=gocruise user-40=goodnews user-41=mstmmk user-42=dnevnoin user-43=tradeyou user-44=gjorgeiv user-45=holiyayt user-46=rastiraz user-47=pecakome user-48=stravelm user-49=robustco user-50=wondersp
Sep  9 15:42:08 power sudo[2076173]: wp-toolkit : (command continued) user-51=custome1 user-52=palenzok user-53=zampmk user-54=zvskopje user-55=busymard user-56=klimimk user-57=stokovna user-58=sparkupm user-59=bovincom user-60=stojano1 user-61=vezilkac user-62=cabinetm user-63=janiboja user-64=itradeco user-65=inotekso user-66=jpparkin user-67=drleomk user-68=butelmk user-69=daris user-70=premiums user-71=nasaidni user-72=karpospo user-73=ideaplus user-74=arturaco user-75=screenme user-76=cetplatf user-77=dalmacom user-78=kouzonco user-79=premiuma user-80=univerz1 user-81=kujnamon user-82=gogovan1 user-83=velmk user-84=datalink user-85=mpbmk user-86=agrosind user-87=dhamachi user-88=volkanco user-89=goartsym user-90=mfashion user-91=barececo user-92=delcevca user-93=getaldus user-94=simbiome user-95=workandt user-96=rasmorgm user-97=skyapart user-98=bianasho user-99=makoasmk user-100=wikicamp user-101=urbanexp user-102=infobadi user-103=mspmk user-104=spdcompu user-105=detskagr
Sep  9 15:42:08 power sudo[2076173]: wp-toolkit : (command continued) user-106=maleshne user-107=datelcom user-108=bizporta user-109=polyeste user-110=vfxnestc user-111=sedcmk user-112=ivanjord user-113=groskome user-114=zdmgpsor user-115=v5srybi9dcdx user-116=supremel user-117=aquatech user-118=gorsajmk user-119=taneccom user-120=tehnologija user-121=prizmapl user-122=fnjorgmk user-123=darkogor user-124=dslmk user-125=bozinovm user-126=vacuacti user-127=innofabl user-128=premiumi user-129=inkigaic user-130=modernar user-131=starluxm user-132=radekrat user-133=fffhpcwr user-134=versusmk user-135=ambitiou user-136=fiziosmk user-137=solemor1 user-138=mapaspla user-139=onlinesh user-140=nationa2 user-141=tcieuroc user-142=kardiome user-143=carrent1 user-144=bogdanos user-145=mediasol user-146=apgrupmk user-147=matratze user-148=euronic2 user-149=nucktra1 user-150=lblawcom user-151=mediatag user-152=intelek1 user-153=nikolov1 user-154=hausmark user-155=nikimare user-156=aptekazd
Sep  9 15:42:08 power sudo[2076173]: wp-toolkit : (command continued) user-157=forzares user-158=albuname user-159=glammace user-160=imdskopj user-161=vtranseu user-162=pravekom user-163=infopor1 user-164=elektrot user-165=zapovim1 user-166=euromaki user-167=cosmatob user-168=nutrivim user-169=chemhemc user-170=samasped user-171=progress user-172=cleanerm user-173=animatem user-174=atspedco user-175=sssoluti user-176=jaramk user-177=solointe user-178=taktcomm user-179=recorgmk user-180=pelagini user-181=biplmk user-182=kaoilmk user-183=bbbustou user-184=mbmehani user-185=workbenc user-186=ismassag user-187=wineberr user-188=viplastc user-189=solarinv user-190=eurofarm user-191=naksorgm user-192=eliksirz user-193=trigemat user-194=electrol user-195=golakkom user-196=bauerin2 user-197=folklore user-198=conserva user-199=euronic3 user-200=cupidpro user-201=vegemk1 user-202=evberasm user-203=bonitavi user-204=makdrone user-205=tehnodro user-206=izzomk user-207=jpkomuna
Sep  9 15:42:08 power sudo[2076173]: wp-toolkit : (command continued) user-208=gradbai1 user-209=aptekafa user-210=madzomk user-211=evacommk user-212=fxxcom user-213=peshkai1 user-214=eaptekam user-215=dimpalne feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 15:42:08 power sudo[2076173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:09 power sudo[2076173]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:09 power sudo[2076181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 15:42:09 power sudo[2076181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:09 power sudo[2076181]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:09 power sudo[2076185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ESjHINvhOT7HO3iH.~
Sep  9 15:42:09 power sudo[2076185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:09 power sudo[2076185]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:09 power sudo[2076193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ESjHINvhOT7HO3iH.~\''
Sep  9 15:42:09 power sudo[2076193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:09 power sudo[2076193]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:09 power sudo[2076198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ESjHINvhOT7HO3iH.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 15:42:09 power sudo[2076198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:09 power sudo[2076198]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:09 power sudo[2076202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 15:42:09 power sudo[2076202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:09 power sudo[2076202]: pam_unix(sudo:session): session closed for user root
Sep  9 15:42:09 power sudo[2076451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 15:42:09 power sudo[2076451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 15:42:09 power sudo[2076451]: pam_unix(sudo:session): session closed for user root
Sep  9 15:45:01 power systemd[2079952]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:50:01 power systemd[2085916]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 15:55:01 power systemd[2091435]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:00:01 power systemd[2096693]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:00:01 power systemd[2096705]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 16:00:01 power systemd[2096709]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 16:00:01 power systemd[2096706]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 16:05:01 power systemd[2102897]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:06:01 power systemd[2103873]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 16:07:01 power systemd[2105101]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 16:10:01 power systemd[2108163]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:12:01 power systemd[2110155]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 16:15:01 power systemd[2113763]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:20:01 power systemd[2119921]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:25:01 power systemd[2125413]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:30:01 power systemd[2130808]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:30:01 power systemd[2130811]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 16:30:01 power systemd[2130812]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 16:30:01 power systemd[2130814]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 16:35:01 power systemd[2136293]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:36:01 power systemd[2137518]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 16:37:01 power systemd[2138855]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 16:40:02 power systemd[2142005]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:42:01 power systemd[2144140]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 16:42:06 power sudo[2144266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 16:42:06 power sudo[2144266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144266]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 16:42:06 power sudo[2144272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144272]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 16:42:06 power sudo[2144276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144276]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=xZeRp4dJ2a'
Sep  9 16:42:06 power sudo[2144280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144280]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 16:42:06 power sudo[2144285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144285]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 16:42:06 power sudo[2144289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144289]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 16:42:06 power sudo[2144294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144294]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 16:42:06 power sudo[2144298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144298]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 16:42:06 power sudo[2144308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144308]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 16:42:06 power sudo[2144312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144312]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 16:42:06 power sudo[2144317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144317]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 16:42:06 power sudo[2144324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144324]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 16:42:06 power sudo[2144328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:06 power sudo[2144328]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:06 power sudo[2144333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 16:42:06 power sudo[2144333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:07 power sudo[2144333]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:08 power sudo[2144367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 16:42:08 power sudo[2144367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:08 power sudo[2144367]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:08 power sudo[2144373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 16:42:08 power sudo[2144373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:08 power sudo[2144373]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:08 power sudo[2144383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pelagini user-2=kaoilmk user-3=biplmk user-4=bbbustou user-5=atspedco user-6=sssoluti user-7=progress user-8=cleanerm user-9=animatem user-10=taktcomm user-11=recorgmk user-12=jaramk user-13=solointe user-14=eurofarm user-15=solarinv user-16=golakkom user-17=naksorgm user-18=eliksirz user-19=trigemat user-20=electrol user-21=workbenc user-22=ismassag user-23=mbmehani user-24=wineberr user-25=viplastc user-26=euronic3 user-27=cupidpro user-28=vegemk1 user-29=conserva user-30=evberasm user-31=bonitavi user-32=folklore user-33=bauerin2 user-34=madzomk user-35=aptekafa user-36=evacommk user-37=gradbai1 user-38=eaptekam user-39=dimpalne user-40=fxxcom user-41=peshkai1 user-42=tehnodro user-43=makdrone user-44=izzomk user-45=jpkomuna user-46=prizmapl user-47=darkogor user-48=fnjorgmk user-49=dslmk user-50=bozinovm
Sep  9 16:42:08 power sudo[2144383]: wp-toolkit : (command continued) user-51=vacuacti user-52=premiumi user-53=innofabl user-54=taneccom user-55=tehnologija user-56=modernar user-57=inkigaic user-58=zdmgpsor user-59=aquatech user-60=gorsajmk user-61=v5srybi9dcdx user-62=supremel user-63=onlinesh user-64=nationa2 user-65=solemor1 user-66=mapaspla user-67=tcieuroc user-68=fffhpcwr user-69=starluxm user-70=radekrat user-71=ambitiou user-72=fiziosmk user-73=versusmk user-74=mediatag user-75=intelek1 user-76=nucktra1 user-77=lblawcom user-78=nikimare user-79=aptekazd user-80=forzares user-81=hausmark user-82=nikolov1 user-83=bogdanos user-84=carrent1 user-85=mediasol user-86=apgrupmk user-87=kardiome user-88=matratze user-89=euronic2 user-90=cosmatob user-91=euromaki user-92=zapovim1 user-93=elektrot user-94=chemhemc user-95=samasped user-96=nutrivim user-97=imdskopj user-98=albuname user-99=glammace user-100=infopor1 user-101=pravekom user-102=vtranseu user-103=stojano1
Sep  9 16:42:08 power sudo[2144383]: wp-toolkit : (command continued) user-104=bovincom user-105=janiboja user-106=itradeco user-107=vezilkac user-108=cabinetm user-109=palenzok user-110=zvskopje user-111=zampmk user-112=busymard user-113=custome1 user-114=stokovna user-115=sparkupm user-116=klimimk user-117=kouzonco user-118=premiuma user-119=cetplatf user-120=dalmacom user-121=inotekso user-122=jpparkin user-123=drleomk user-124=nasaidni user-125=karpospo user-126=ideaplus user-127=arturaco user-128=screenme user-129=daris user-130=butelmk user-131=premiums user-132=barececo user-133=delcevca user-134=getaldus user-135=simbiome user-136=workandt user-137=dhamachi user-138=goartsym user-139=volkanco user-140=mfashion user-141=skyapart user-142=makoasmk user-143=bianasho user-144=rasmorgm user-145=datalink user-146=kujnamon user-147=univerz1 user-148=gogovan1 user-149=velmk user-150=mpbmk user-151=agrosind user-152=bizporta user-153=maleshne user-154=datelcom user-155=sedcmk
Sep  9 16:42:08 power sudo[2144383]: wp-toolkit : (command continued) user-156=ivanjord user-157=groskome user-158=polyeste user-159=vfxnestc user-160=wikicamp user-161=urbanexp user-162=spdcompu user-163=detskagr user-164=mspmk user-165=infobadi user-166=stojnevi user-167=oouslave user-168=raremk user-169=bauerbg user-170=uhostmk5 user-171=enaspotc user-172=viewinn user-173=trudovop user-174=vmro user-175=cajsproc user-176=hotammk user-177=anitermc user-178=youthgua user-179=hidrommk user-180=frizered user-181=caramk user-182=levantmk user-183=oncolog1 user-184=ekostoc1 user-185=nefrolog user-186=socioloz user-187=avtogumi user-188=pelagoni user-189=evolvepl user-190=seloviro user-191=kolened1 user-192=centarba user-193=nlpmkorg user-194=nolimits user-195=edomcomm user-196=berbermk user-197=dikimk12 user-198=herbalpl user-199=enochmk user-200=sprintst user-201=tradeyou user-202=gjorgeiv user-203=dnevnoin user-204=pecakome user-205=robustco user-206=stravelm user-207=wondersp
Sep  9 16:42:08 power sudo[2144383]: wp-toolkit : (command continued) user-208=holiyayt user-209=rastiraz user-210=tealmk user-211=dadarmk user-212=proverim user-213=goodnews user-214=mstmmk user-215=gocruise feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 16:42:08 power sudo[2144383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:09 power sudo[2144383]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:09 power sudo[2144394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 16:42:09 power sudo[2144394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:09 power sudo[2144394]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:09 power sudo[2144398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3QSGHmNV47AANwLu.~
Sep  9 16:42:09 power sudo[2144398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:09 power sudo[2144398]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:09 power sudo[2144402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3QSGHmNV47AANwLu.~\''
Sep  9 16:42:09 power sudo[2144402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:09 power sudo[2144402]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:09 power sudo[2144407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3QSGHmNV47AANwLu.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 16:42:09 power sudo[2144407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:09 power sudo[2144407]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:09 power sudo[2144412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 16:42:09 power sudo[2144412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:09 power sudo[2144412]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:13 power sudo[2144883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 16:42:13 power sudo[2144883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:13 power sudo[2144883]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:13 power sudo[2145410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 gethostname --output=json'
Sep  9 16:42:13 power sudo[2145410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:13 power sudo[2145410]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:13 power sudo[2145415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni Themes get_theme_base --output=json'
Sep  9 16:42:13 power sudo[2145415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:13 power sudo[2145415]: pam_unix(sudo:session): session closed for user root
Sep  9 16:42:13 power sudo[2145421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagini WpToolkitNotification send_admin_vulnerability_found_notification \'message=WP Toolkit has detected new vulnerabilities on WordPress sites under your care. It is strongly recommended to update or disable vulnerable assets on these sites. You can also configure WP Toolkit to perform automatic actions when vulnerabilities are detected. <br/><br/>The following vulnerabilities need your attention because they have to be addressed manually:<br/><br/>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012
Sep  9 16:42:13 power sudo[2145421]: wp-toolkit : (command continued) <td colspan="2">Site: <span style="color: black">pelagonijaregion.mk/p</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/171/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">Ninja Forms &lt;= 3.11.0 - Unauthenticated PHP Object Injection</span><br/>#012
Sep  9 16:42:13 power sudo[2145421]: wp-toolkit : (command continued) <div style="line-height: 1.5em; font-size: 0.9em">The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.11.0 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.</div>#012                <div style=\'"\'"\'line-height:1em;\'"\'"\'><a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://wordfence.com\'"\'"\'
Sep  9 16:42:13 power sudo[2145421]: wp-toolkit : (command continued) style=\'"\'"\'color: #737373; font-size: 0.7em; text-decoration: none;\'"\'"\'>This record contains material that is subject to copyright.</a></div>#012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://www.wordfence.com/threat-intel/vulnerabilities/id/a567b932-7984-400b-bca0-8d2b0e4b1cb7?source=api-prod\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Wordfence</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table><br/>More vulnerabilities were found, please go to WP Toolkit for the full list. <br/><br/>Automatic actions can be defined on the site autoupdate policy screen.\' --output=json'
Sep  9 16:42:13 power sudo[2145421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 16:42:13 power sudo[2145421]: pam_unix(sudo:session): session closed for user root
Sep  9 16:45:01 power systemd[2148848]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:50:01 power systemd[2153918]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 16:55:01 power systemd[2158402]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:00:01 power systemd[2163056]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:00:01 power systemd[2163060]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 17:00:01 power systemd[2163062]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 17:00:01 power systemd[2163063]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 17:05:02 power systemd[2169227]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:06:01 power systemd[2170307]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 17:07:01 power systemd[2171229]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 17:07:18 power sshd[2171435]: Connection closed by 181.199.24.92 port 11939 [preauth]
Sep  9 17:07:18 power sshd[2171433]: Connection closed by 181.199.24.92 port 4475 [preauth]
Sep  9 17:07:18 power sshd[2171432]: Connection closed by 181.199.24.92 port 22309 [preauth]
Sep  9 17:07:18 power sshd[2171434]: Connection closed by 181.199.24.92 port 53298 [preauth]
Sep  9 17:07:18 power sshd[2171437]: Connection closed by 181.199.24.92 port 9653 [preauth]
Sep  9 17:07:18 power sshd[2171436]: Connection closed by 181.199.24.92 port 48131 [preauth]
Sep  9 17:10:01 power systemd[2174546]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:10:10 power sshd[2174700]: Connection closed by 181.199.24.92 port 21672 [preauth]
Sep  9 17:10:10 power sshd[2174701]: Connection closed by 181.199.24.92 port 59827 [preauth]
Sep  9 17:10:10 power sshd[2174705]: Connection closed by 181.199.24.92 port 49457 [preauth]
Sep  9 17:10:10 power sshd[2174703]: Connection closed by 181.199.24.92 port 47171 [preauth]
Sep  9 17:10:10 power sshd[2174702]: Connection closed by 181.199.24.92 port 26839 [preauth]
Sep  9 17:10:10 power sshd[2174706]: Connection closed by 181.199.24.92 port 41993 [preauth]
Sep  9 17:12:01 power systemd[2176137]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 17:12:59 power sshd[2177057]: Connection closed by 181.199.24.92 port 33367 [preauth]
Sep  9 17:12:59 power sshd[2177058]: Connection closed by 181.199.24.92 port 15533 [preauth]
Sep  9 17:12:59 power sshd[2177060]: Connection closed by 181.199.24.92 port 22997 [preauth]
Sep  9 17:12:59 power sshd[2177059]: Connection closed by 181.199.24.92 port 64356 [preauth]
Sep  9 17:12:59 power sshd[2177062]: Connection closed by 181.199.24.92 port 20711 [preauth]
Sep  9 17:12:59 power sshd[2177061]: Connection closed by 181.199.24.92 port 59189 [preauth]
Sep  9 17:15:01 power systemd[2179053]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:15:48 power sshd[2180113]: Connection closed by 181.199.24.92 port 32735 [preauth]
Sep  9 17:15:48 power sshd[2180116]: Connection closed by 181.199.24.92 port 58234 [preauth]
Sep  9 17:15:48 power sshd[2180114]: Connection closed by 181.199.24.92 port 6913 [preauth]
Sep  9 17:15:48 power sshd[2180115]: Connection closed by 181.199.24.92 port 53056 [preauth]
Sep  9 17:15:48 power sshd[2180117]: Connection closed by 181.199.24.92 port 37902 [preauth]
Sep  9 17:15:49 power sshd[2180118]: Connection closed by 181.199.24.92 port 60520 [preauth]
Sep  9 17:18:38 power sshd[2182810]: Connection closed by 181.199.24.92 port 6275 [preauth]
Sep  9 17:18:38 power sshd[2182812]: Connection closed by 181.199.24.92 port 34060 [preauth]
Sep  9 17:18:38 power sshd[2182814]: Connection closed by 181.199.24.92 port 26596 [preauth]
Sep  9 17:18:38 power sshd[2182813]: Connection closed by 181.199.24.92 port 11442 [preauth]
Sep  9 17:18:38 power sshd[2182815]: Connection closed by 181.199.24.92 port 44430 [preauth]
Sep  9 17:18:38 power sshd[2182819]: Connection closed by 181.199.24.92 port 31774 [preauth]
Sep  9 17:20:01 power systemd[2184448]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:25:01 power systemd[2188729]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:30:01 power systemd[2193181]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:30:01 power systemd[2193183]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 17:30:01 power systemd[2193185]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 17:30:01 power systemd[2193187]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 17:35:01 power systemd[2198266]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:36:01 power systemd[2199517]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 17:37:01 power systemd[2200491]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 17:40:01 power systemd[2203422]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:42:01 power systemd[2205320]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 17:42:06 power sudo[2205379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 17:42:06 power sudo[2205379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205379]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 17:42:06 power sudo[2205384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205384]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 17:42:06 power sudo[2205389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205389]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=5amaTLoO1V'
Sep  9 17:42:06 power sudo[2205393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205393]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 17:42:06 power sudo[2205399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205399]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 17:42:06 power sudo[2205403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205403]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 17:42:06 power sudo[2205407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205407]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 17:42:06 power sudo[2205411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205411]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 17:42:06 power sudo[2205417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205417]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 17:42:06 power sudo[2205421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205421]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 17:42:06 power sudo[2205425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205425]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 17:42:06 power sudo[2205429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205429]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 17:42:06 power sudo[2205436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:06 power sudo[2205436]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:06 power sudo[2205440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 17:42:06 power sudo[2205440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:07 power sudo[2205440]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:08 power sudo[2205468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 17:42:08 power sudo[2205468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:08 power sudo[2205468]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:08 power sudo[2205473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 17:42:08 power sudo[2205473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:08 power sudo[2205473]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:08 power sudo[2205480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=infobadi user-2=mspmk user-3=detskagr user-4=spdcompu user-5=urbanexp user-6=wikicamp user-7=polyeste user-8=vfxnestc user-9=ivanjord user-10=groskome user-11=sedcmk user-12=maleshne user-13=datelcom user-14=bizporta user-15=mpbmk user-16=agrosind user-17=univerz1 user-18=kujnamon user-19=velmk user-20=gogovan1 user-21=datalink user-22=rasmorgm user-23=skyapart user-24=bianasho user-25=makoasmk user-26=mfashion user-27=dhamachi user-28=goartsym user-29=volkanco user-30=workandt user-31=barececo user-32=getaldus user-33=simbiome user-34=delcevca user-35=butelmk user-36=daris user-37=premiums user-38=screenme user-39=arturaco user-40=karpospo user-41=nasaidni user-42=ideaplus user-43=drleomk user-44=inotekso user-45=jpparkin user-46=dalmacom user-47=cetplatf user-48=premiuma user-49=kouzonco user-50=klimimk
Sep  9 17:42:08 power sudo[2205480]: wp-toolkit : (command continued) user-51=stokovna user-52=sparkupm user-53=custome1 user-54=zampmk user-55=zvskopje user-56=busymard user-57=palenzok user-58=cabinetm user-59=vezilkac user-60=itradeco user-61=janiboja user-62=bovincom user-63=stojano1 user-64=gocruise user-65=mstmmk user-66=goodnews user-67=proverim user-68=dadarmk user-69=tealmk user-70=rastiraz user-71=holiyayt user-72=robustco user-73=stravelm user-74=wondersp user-75=pecakome user-76=dnevnoin user-77=tradeyou user-78=gjorgeiv user-79=herbalpl user-80=enochmk user-81=sprintst user-82=dikimk12 user-83=berbermk user-84=edomcomm user-85=nolimits user-86=kolened1 user-87=centarba user-88=nlpmkorg user-89=seloviro user-90=evolvepl user-91=pelagoni user-92=socioloz user-93=avtogumi user-94=ekostoc1 user-95=levantmk user-96=oncolog1 user-97=nefrolog user-98=caramk user-99=hidrommk user-100=frizered user-101=anitermc user-102=youthgua user-103=hotammk user-104=cajsproc
Sep  9 17:42:08 power sudo[2205480]: wp-toolkit : (command continued) user-105=trudovop user-106=viewinn user-107=vmro user-108=enaspotc user-109=bauerbg user-110=uhostmk5 user-111=oouslave user-112=raremk user-113=stojnevi user-114=jpkomuna user-115=izzomk user-116=makdrone user-117=tehnodro user-118=fxxcom user-119=peshkai1 user-120=dimpalne user-121=eaptekam user-122=gradbai1 user-123=aptekafa user-124=madzomk user-125=evacommk user-126=bauerin2 user-127=folklore user-128=evberasm user-129=bonitavi user-130=conserva user-131=cupidpro user-132=vegemk1 user-133=euronic3 user-134=viplastc user-135=wineberr user-136=mbmehani user-137=ismassag user-138=workbenc user-139=electrol user-140=eliksirz user-141=naksorgm user-142=trigemat user-143=golakkom user-144=solarinv user-145=eurofarm user-146=solointe user-147=jaramk user-148=recorgmk user-149=taktcomm user-150=cleanerm user-151=animatem user-152=progress user-153=sssoluti user-154=atspedco user-155=bbbustou user-156=kaoilmk
Sep  9 17:42:08 power sudo[2205480]: wp-toolkit : (command continued) user-157=biplmk user-158=pelagini user-159=vtranseu user-160=pravekom user-161=infopor1 user-162=albuname user-163=glammace user-164=imdskopj user-165=nutrivim user-166=samasped user-167=chemhemc user-168=elektrot user-169=zapovim1 user-170=cosmatob user-171=euromaki user-172=matratze user-173=euronic2 user-174=kardiome user-175=apgrupmk user-176=bogdanos user-177=carrent1 user-178=mediasol user-179=nikolov1 user-180=hausmark user-181=forzares user-182=nikimare user-183=aptekazd user-184=lblawcom user-185=nucktra1 user-186=mediatag user-187=intelek1 user-188=versusmk user-189=fiziosmk user-190=ambitiou user-191=starluxm user-192=radekrat user-193=fffhpcwr user-194=tcieuroc user-195=mapaspla user-196=solemor1 user-197=nationa2 user-198=onlinesh user-199=supremel user-200=v5srybi9dcdx user-201=aquatech user-202=gorsajmk user-203=zdmgpsor user-204=inkigaic user-205=modernar user-206=tehnologija user-207=taneccom
Sep  9 17:42:08 power sudo[2205480]: wp-toolkit : (command continued) user-208=vacuacti user-209=premiumi user-210=innofabl user-211=dslmk user-212=fnjorgmk user-213=prizmapl user-214=darkogor user-215=bozinovm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 17:42:08 power sudo[2205480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:09 power sudo[2205480]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:09 power sudo[2205485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 17:42:09 power sudo[2205485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:09 power sudo[2205485]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:09 power sudo[2205490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-harPNMeMOYjUjTGR.~
Sep  9 17:42:09 power sudo[2205490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:09 power sudo[2205490]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:09 power sudo[2205494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-harPNMeMOYjUjTGR.~\''
Sep  9 17:42:09 power sudo[2205494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:09 power sudo[2205494]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:09 power sudo[2205502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-harPNMeMOYjUjTGR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 17:42:09 power sudo[2205502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:09 power sudo[2205502]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:09 power sudo[2205506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 17:42:09 power sudo[2205506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:09 power sudo[2205506]: pam_unix(sudo:session): session closed for user root
Sep  9 17:42:13 power sudo[2206218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 17:42:13 power sudo[2206218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 17:42:13 power sudo[2206218]: pam_unix(sudo:session): session closed for user root
Sep  9 17:45:01 power systemd[2208906]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:50:01 power systemd[2214640]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 17:55:01 power systemd[2218841]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:00:01 power systemd[2224970]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:00:01 power systemd[2224972]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 18:00:01 power systemd[2224974]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 18:00:01 power systemd[2224976]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 18:05:01 power systemd[2230087]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:06:01 power systemd[2231139]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 18:07:01 power systemd[2232371]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 18:10:01 power systemd[2235393]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:12:02 power systemd[2237104]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 18:15:01 power systemd[2240033]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:20:01 power systemd[2246687]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:25:01 power systemd[2251766]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:30:01 power systemd[2256749]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:30:01 power systemd[2256752]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 18:30:01 power systemd[2256753]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 18:30:01 power systemd[2256755]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 18:35:01 power systemd[2261854]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:36:01 power systemd[2262690]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 18:37:01 power systemd[2263849]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 18:40:01 power systemd[2266448]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:42:01 power systemd[2268062]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 18:42:06 power sudo[2268153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 18:42:06 power sudo[2268153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268153]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 18:42:06 power sudo[2268157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268157]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 18:42:06 power sudo[2268161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268161]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=S0Mjn6n8AL'
Sep  9 18:42:06 power sudo[2268165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268165]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 18:42:06 power sudo[2268171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268171]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 18:42:06 power sudo[2268175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268175]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 18:42:06 power sudo[2268179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268179]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 18:42:06 power sudo[2268184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268184]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 18:42:06 power sudo[2268189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268189]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 18:42:06 power sudo[2268197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268197]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 18:42:06 power sudo[2268201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268201]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 18:42:06 power sudo[2268205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268205]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 18:42:06 power sudo[2268209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:06 power sudo[2268209]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:06 power sudo[2268213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 18:42:06 power sudo[2268213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:07 power sudo[2268213]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:08 power sudo[2268242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 18:42:08 power sudo[2268242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:08 power sudo[2268242]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:08 power sudo[2268247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 18:42:08 power sudo[2268247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:08 power sudo[2268247]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:08 power sudo[2268255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=centarba user-2=nlpmkorg user-3=kolened1 user-4=nolimits user-5=seloviro user-6=sprintst user-7=herbalpl user-8=enochmk user-9=dikimk12 user-10=berbermk user-11=edomcomm user-12=wondersp user-13=robustco user-14=stravelm user-15=pecakome user-16=rastiraz user-17=holiyayt user-18=tradeyou user-19=gjorgeiv user-20=dnevnoin user-21=mstmmk user-22=goodnews user-23=gocruise user-24=tealmk user-25=proverim user-26=dadarmk user-27=vmro user-28=viewinn user-29=trudovop user-30=enaspotc user-31=stojnevi user-32=uhostmk5 user-33=bauerbg user-34=raremk user-35=oouslave user-36=youthgua user-37=anitermc user-38=hotammk user-39=cajsproc user-40=nefrolog user-41=levantmk user-42=ekostoc1 user-43=oncolog1 user-44=frizered user-45=hidrommk user-46=caramk user-47=evolvepl user-48=socioloz user-49=avtogumi user-50=pelagoni
Sep  9 18:42:08 power sudo[2268255]: wp-toolkit : (command continued) user-51=makoasmk user-52=bianasho user-53=skyapart user-54=rasmorgm user-55=workandt user-56=getaldus user-57=delcevca user-58=simbiome user-59=barececo user-60=mfashion user-61=goartsym user-62=volkanco user-63=dhamachi user-64=agrosind user-65=mpbmk user-66=datalink user-67=velmk user-68=gogovan1 user-69=univerz1 user-70=kujnamon user-71=groskome user-72=ivanjord user-73=sedcmk user-74=vfxnestc user-75=polyeste user-76=bizporta user-77=datelcom user-78=maleshne user-79=detskagr user-80=spdcompu user-81=infobadi user-82=mspmk user-83=urbanexp user-84=wikicamp user-85=itradeco user-86=janiboja user-87=cabinetm user-88=vezilkac user-89=stojano1 user-90=bovincom user-91=sparkupm user-92=stokovna user-93=klimimk user-94=zvskopje user-95=zampmk user-96=busymard user-97=palenzok user-98=custome1 user-99=premiuma user-100=kouzonco user-101=dalmacom user-102=cetplatf user-103=screenme user-104=arturaco user-105=ideaplus
Sep  9 18:42:08 power sudo[2268255]: wp-toolkit : (command continued) user-106=nasaidni user-107=karpospo user-108=premiums user-109=daris user-110=butelmk user-111=drleomk user-112=jpparkin user-113=inotekso user-114=forzares user-115=aptekazd user-116=nikimare user-117=nikolov1 user-118=hausmark user-119=intelek1 user-120=mediatag user-121=lblawcom user-122=nucktra1 user-123=euronic2 user-124=matratze user-125=apgrupmk user-126=mediasol user-127=bogdanos user-128=carrent1 user-129=kardiome user-130=chemhemc user-131=samasped user-132=nutrivim user-133=euromaki user-134=cosmatob user-135=zapovim1 user-136=elektrot user-137=infopor1 user-138=vtranseu user-139=pravekom user-140=imdskopj user-141=glammace user-142=albuname user-143=modernar user-144=inkigaic user-145=innofabl user-146=premiumi user-147=vacuacti user-148=bozinovm user-149=fnjorgmk user-150=darkogor user-151=dslmk user-152=prizmapl user-153=tehnologija user-154=taneccom user-155=gorsajmk user-156=aquatech
Sep  9 18:42:08 power sudo[2268255]: wp-toolkit : (command continued) user-157=supremel user-158=v5srybi9dcdx user-159=zdmgpsor user-160=tcieuroc user-161=nationa2 user-162=onlinesh user-163=mapaspla user-164=solemor1 user-165=fiziosmk user-166=ambitiou user-167=versusmk user-168=fffhpcwr user-169=radekrat user-170=starluxm user-171=bonitavi user-172=evberasm user-173=vegemk1 user-174=cupidpro user-175=euronic3 user-176=conserva user-177=folklore user-178=bauerin2 user-179=dimpalne user-180=eaptekam user-181=peshkai1 user-182=fxxcom user-183=evacommk user-184=aptekafa user-185=madzomk user-186=gradbai1 user-187=jpkomuna user-188=izzomk user-189=tehnodro user-190=makdrone user-191=bbbustou user-192=kaoilmk user-193=biplmk user-194=pelagini user-195=taktcomm user-196=recorgmk user-197=solointe user-198=jaramk user-199=atspedco user-200=sssoluti user-201=animatem user-202=cleanerm user-203=progress user-204=golakkom user-205=electrol user-206=trigemat user-207=eliksirz
Sep  9 18:42:08 power sudo[2268255]: wp-toolkit : (command continued) user-208=naksorgm user-209=eurofarm user-210=solarinv user-211=viplastc user-212=wineberr user-213=ismassag user-214=workbenc user-215=mbmehani feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 18:42:08 power sudo[2268255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:09 power sudo[2268255]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:09 power sudo[2268262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 18:42:09 power sudo[2268262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:09 power sudo[2268262]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:09 power sudo[2268267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yuws251Ht5L6Gi93.~
Sep  9 18:42:09 power sudo[2268267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:09 power sudo[2268267]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:09 power sudo[2268271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yuws251Ht5L6Gi93.~\''
Sep  9 18:42:09 power sudo[2268271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:09 power sudo[2268271]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:09 power sudo[2268276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yuws251Ht5L6Gi93.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 18:42:09 power sudo[2268276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:09 power sudo[2268276]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:09 power sudo[2268280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 18:42:09 power sudo[2268280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:09 power sudo[2268280]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:09 power sudo[2268285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_licenses --output=json'
Sep  9 18:42:09 power sudo[2268285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:09 power sudo[2268285]: pam_unix(sudo:session): session closed for user root
Sep  9 18:42:13 power sudo[2269282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 18:42:13 power sudo[2269282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 18:42:14 power sudo[2269282]: pam_unix(sudo:session): session closed for user root
Sep  9 18:45:01 power systemd[2271822]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:50:01 power systemd[2276627]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 18:55:01 power systemd[2281273]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:00:01 power systemd[2286074]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:00:01 power systemd[2286077]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 19:00:01 power systemd[2286078]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 19:00:01 power systemd[2286080]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 19:05:01 power systemd[2291317]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:06:01 power systemd[2292128]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 19:07:01 power systemd[2292999]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 19:10:01 power systemd[2295954]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:12:02 power systemd[2298070]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 19:15:01 power systemd[2300765]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:20:01 power systemd[2305375]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:21:33 power sudo[2306818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 19:21:33 power sudo[2306818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:21:33 power sudo[2306818]: pam_unix(sudo:session): session closed for user root
Sep  9 19:21:33 power sudo[2306823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dikimk12'
Sep  9 19:21:33 power sudo[2306823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:21:33 power sudo[2306823]: pam_unix(sudo:session): session closed for user root
Sep  9 19:25:01 power systemd[2311189]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:30:01 power systemd[2316816]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:30:01 power systemd[2316817]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 19:30:01 power systemd[2316818]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 19:30:01 power systemd[2316820]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 19:33:40 power sshd[2320745]: error: kex_exchange_identification: Connection closed by remote host
Sep  9 19:33:40 power sshd[2320745]: Connection closed by 207.90.244.18 port 54496
Sep  9 19:33:41 power sshd[2320758]: Connection closed by 207.90.244.18 port 54500 [preauth]
Sep  9 19:33:42 power sshd[2320774]: Connection closed by 207.90.244.18 port 54516 [preauth]
Sep  9 19:35:01 power systemd[2322339]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:36:01 power systemd[2323357]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 19:37:01 power systemd[2324390]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 19:40:01 power systemd[2327571]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:42:01 power systemd[2329867]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 19:42:06 power sudo[2330029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 19:42:06 power sudo[2330029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330029]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 19:42:06 power sudo[2330034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330034]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 19:42:06 power sudo[2330038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330038]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=WylzvGjSBs'
Sep  9 19:42:06 power sudo[2330042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330042]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 19:42:06 power sudo[2330048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330048]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 19:42:06 power sudo[2330053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330053]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 19:42:06 power sudo[2330058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330058]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 19:42:06 power sudo[2330062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330062]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 19:42:06 power sudo[2330072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330072]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 19:42:06 power sudo[2330078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330078]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 19:42:06 power sudo[2330082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330082]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 19:42:06 power sudo[2330086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330086]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 19:42:06 power sudo[2330090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:06 power sudo[2330090]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:06 power sudo[2330096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 19:42:06 power sudo[2330096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:07 power sudo[2330096]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:08 power sudo[2330155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 19:42:08 power sudo[2330155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:08 power sudo[2330155]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:08 power sudo[2330160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 19:42:08 power sudo[2330160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:09 power sudo[2330160]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:09 power sudo[2330166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=onlinesh user-2=nationa2 user-3=solemor1 user-4=mapaspla user-5=tcieuroc user-6=fffhpcwr user-7=starluxm user-8=radekrat user-9=ambitiou user-10=fiziosmk user-11=versusmk user-12=fnjorgmk user-13=darkogor user-14=prizmapl user-15=dslmk user-16=bozinovm user-17=vacuacti user-18=premiumi user-19=innofabl user-20=taneccom user-21=tehnologija user-22=modernar user-23=inkigaic user-24=zdmgpsor user-25=aquatech user-26=gorsajmk user-27=v5srybi9dcdx user-28=supremel user-29=euromaki user-30=cosmatob user-31=zapovim1 user-32=elektrot user-33=chemhemc user-34=samasped user-35=nutrivim user-36=imdskopj user-37=albuname user-38=glammace user-39=infopor1 user-40=pravekom user-41=vtranseu user-42=mediatag user-43=intelek1 user-44=nucktra1 user-45=lblawcom user-46=nikimare user-47=aptekazd user-48=forzares
Sep  9 19:42:09 power sudo[2330166]: wp-toolkit : (command continued) user-49=hausmark user-50=nikolov1 user-51=carrent1 user-52=bogdanos user-53=mediasol user-54=apgrupmk user-55=kardiome user-56=matratze user-57=euronic2 user-58=eurofarm user-59=solarinv user-60=golakkom user-61=eliksirz user-62=naksorgm user-63=trigemat user-64=electrol user-65=workbenc user-66=ismassag user-67=mbmehani user-68=wineberr user-69=viplastc user-70=pelagini user-71=kaoilmk user-72=biplmk user-73=bbbustou user-74=sssoluti user-75=atspedco user-76=progress user-77=cleanerm user-78=animatem user-79=recorgmk user-80=taktcomm user-81=jaramk user-82=solointe user-83=aptekafa user-84=madzomk user-85=evacommk user-86=gradbai1 user-87=eaptekam user-88=dimpalne user-89=fxxcom user-90=peshkai1 user-91=tehnodro user-92=makdrone user-93=izzomk user-94=jpkomuna user-95=euronic3 user-96=cupidpro user-97=vegemk1 user-98=conserva user-99=evberasm user-100=bonitavi user-101=folklore user-102=bauerin2
Sep  9 19:42:09 power sudo[2330166]: wp-toolkit : (command continued) user-103=hidrommk user-104=frizered user-105=caramk user-106=oncolog1 user-107=ekostoc1 user-108=levantmk user-109=nefrolog user-110=socioloz user-111=avtogumi user-112=pelagoni user-113=evolvepl user-114=stojnevi user-115=oouslave user-116=raremk user-117=bauerbg user-118=uhostmk5 user-119=enaspotc user-120=viewinn user-121=trudovop user-122=vmro user-123=cajsproc user-124=hotammk user-125=anitermc user-126=youthgua user-127=gjorgeiv user-128=tradeyou user-129=dnevnoin user-130=pecakome user-131=robustco user-132=stravelm user-133=wondersp user-134=holiyayt user-135=rastiraz user-136=tealmk user-137=dadarmk user-138=proverim user-139=goodnews user-140=mstmmk user-141=gocruise user-142=seloviro user-143=kolened1 user-144=centarba user-145=nlpmkorg user-146=nolimits user-147=edomcomm user-148=berbermk user-149=dikimk12 user-150=herbalpl user-151=enochmk user-152=sprintst user-153=kouzonco user-154=premiuma
Sep  9 19:42:09 power sudo[2330166]: wp-toolkit : (command continued) user-155=cetplatf user-156=dalmacom user-157=inotekso user-158=jpparkin user-159=drleomk user-160=nasaidni user-161=karpospo user-162=ideaplus user-163=screenme user-164=arturaco user-165=butelmk user-166=daris user-167=premiums user-168=stojano1 user-169=bovincom user-170=janiboja user-171=itradeco user-172=vezilkac user-173=cabinetm user-174=palenzok user-175=zampmk user-176=busymard user-177=zvskopje user-178=custome1 user-179=stokovna user-180=sparkupm user-181=klimimk user-182=bizporta user-183=maleshne user-184=datelcom user-185=sedcmk user-186=ivanjord user-187=groskome user-188=polyeste user-189=vfxnestc user-190=wikicamp user-191=urbanexp user-192=spdcompu user-193=detskagr user-194=mspmk user-195=infobadi user-196=barececo user-197=simbiome user-198=getaldus user-199=delcevca user-200=workandt user-201=dhamachi user-202=goartsym user-203=volkanco user-204=mfashion user-205=skyapart user-206=bianasho
Sep  9 19:42:09 power sudo[2330166]: wp-toolkit : (command continued) user-207=makoasmk user-208=rasmorgm user-209=datalink user-210=univerz1 user-211=kujnamon user-212=velmk user-213=gogovan1 user-214=mpbmk user-215=agrosind feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 19:42:09 power sudo[2330166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:09 power sudo[2330166]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:09 power sudo[2330177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 19:42:09 power sudo[2330177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:09 power sudo[2330177]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:09 power sudo[2330182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OBIMrWqFMzs1m97z.~
Sep  9 19:42:09 power sudo[2330182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:09 power sudo[2330182]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:09 power sudo[2330186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OBIMrWqFMzs1m97z.~\''
Sep  9 19:42:09 power sudo[2330186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:09 power sudo[2330186]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:09 power sudo[2330191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OBIMrWqFMzs1m97z.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 19:42:09 power sudo[2330191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:09 power sudo[2330191]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:09 power sudo[2330195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 19:42:09 power sudo[2330195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:09 power sudo[2330195]: pam_unix(sudo:session): session closed for user root
Sep  9 19:42:14 power sudo[2331207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 19:42:14 power sudo[2331207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 19:42:14 power sudo[2331207]: pam_unix(sudo:session): session closed for user root
Sep  9 19:45:01 power systemd[2334562]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:48:30 power sshd[2338022]: error: kex_exchange_identification: client sent invalid protocol identifier "\026\003\001\001"
Sep  9 19:48:30 power sshd[2338022]: banner exchange: Connection from 66.175.213.4 port 14356: invalid format
Sep  9 19:48:30 power sshd[2338026]: error: kex_exchange_identification: client sent invalid protocol identifier "\026\003\001\001"
Sep  9 19:48:30 power sshd[2338026]: banner exchange: Connection from 66.175.213.4 port 14370: invalid format
Sep  9 19:50:01 power systemd[2340098]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 19:55:01 power systemd[2345830]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:00:01 power systemd[2351009]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:00:01 power systemd[2351017]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 20:00:01 power systemd[2351019]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 20:00:01 power systemd[2351020]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 20:05:01 power systemd[2357514]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:06:01 power systemd[2358372]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 20:07:01 power systemd[2359235]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 20:10:01 power systemd[2362374]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:12:01 power systemd[2364379]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 20:15:01 power systemd[2367482]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:20:01 power systemd[2372416]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:25:01 power systemd[2376703]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:30:01 power systemd[2380940]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:30:01 power systemd[2380941]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 20:30:01 power systemd[2380942]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 20:30:01 power systemd[2380943]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 20:35:01 power systemd[2385332]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:36:01 power systemd[2386181]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 20:37:01 power systemd[2387158]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 20:40:01 power systemd[2390053]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:41:37 power sshd[2391429]: error: kex_exchange_identification: client sent invalid protocol identifier "PROXY TCP4 45.135.194.25 5.9.96.240 49566 2200"
Sep  9 20:41:37 power sshd[2391429]: banner exchange: Connection from 45.135.194.25 port 49566: invalid format
Sep  9 20:42:01 power systemd[2391741]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 20:42:06 power sudo[2391817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 20:42:06 power sudo[2391817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391817]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 20:42:06 power sudo[2391824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391824]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 20:42:06 power sudo[2391828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391828]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=Y9A5MzfLys'
Sep  9 20:42:06 power sudo[2391832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391832]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 20:42:06 power sudo[2391838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391838]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 20:42:06 power sudo[2391843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391843]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 20:42:06 power sudo[2391847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391847]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 20:42:06 power sudo[2391851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391851]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 20:42:06 power sudo[2391861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391861]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 20:42:06 power sudo[2391865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391865]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 20:42:06 power sudo[2391869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391869]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 20:42:06 power sudo[2391873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391873]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 20:42:06 power sudo[2391877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:06 power sudo[2391877]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:06 power sudo[2391881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 20:42:06 power sudo[2391881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:07 power sudo[2391881]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:08 power sudo[2391917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 20:42:08 power sudo[2391917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:08 power sudo[2391917]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:08 power sudo[2391922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 20:42:08 power sudo[2391922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:09 power sudo[2391922]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:09 power sudo[2391938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=zdmgpsor user-2=aquatech user-3=gorsajmk user-4=v5srybi9dcdx user-5=supremel user-6=dslmk user-7=fnjorgmk user-8=prizmapl user-9=darkogor user-10=bozinovm user-11=vacuacti user-12=innofabl user-13=premiumi user-14=taneccom user-15=tehnologija user-16=modernar user-17=inkigaic user-18=fffhpcwr user-19=starluxm user-20=radekrat user-21=ambitiou user-22=fiziosmk user-23=versusmk user-24=onlinesh user-25=nationa2 user-26=solemor1 user-27=mapaspla user-28=tcieuroc user-29=carrent1 user-30=bogdanos user-31=mediasol user-32=apgrupmk user-33=kardiome user-34=matratze user-35=euronic2 user-36=mediatag user-37=intelek1 user-38=nucktra1 user-39=lblawcom user-40=nikimare user-41=aptekazd user-42=forzares user-43=hausmark user-44=nikolov1 user-45=imdskopj user-46=albuname user-47=glammace user-48=infopor1
Sep  9 20:42:09 power sudo[2391938]: wp-toolkit : (command continued) user-49=vtranseu user-50=pravekom user-51=cosmatob user-52=euromaki user-53=zapovim1 user-54=elektrot user-55=chemhemc user-56=samasped user-57=nutrivim user-58=sssoluti user-59=atspedco user-60=progress user-61=cleanerm user-62=animatem user-63=recorgmk user-64=taktcomm user-65=jaramk user-66=solointe user-67=pelagini user-68=biplmk user-69=kaoilmk user-70=bbbustou user-71=workbenc user-72=ismassag user-73=mbmehani user-74=wineberr user-75=viplastc user-76=eurofarm user-77=solarinv user-78=golakkom user-79=eliksirz user-80=naksorgm user-81=trigemat user-82=electrol user-83=folklore user-84=bauerin2 user-85=euronic3 user-86=cupidpro user-87=vegemk1 user-88=conserva user-89=evberasm user-90=bonitavi user-91=tehnodro user-92=makdrone user-93=izzomk user-94=jpkomuna user-95=aptekafa user-96=madzomk user-97=evacommk user-98=gradbai1 user-99=eaptekam user-100=dimpalne user-101=fxxcom user-102=peshkai1
Sep  9 20:42:09 power sudo[2391938]: wp-toolkit : (command continued) user-103=cajsproc user-104=hotammk user-105=anitermc user-106=youthgua user-107=stojnevi user-108=oouslave user-109=raremk user-110=bauerbg user-111=uhostmk5 user-112=enaspotc user-113=viewinn user-114=trudovop user-115=vmro user-116=avtogumi user-117=socioloz user-118=pelagoni user-119=evolvepl user-120=hidrommk user-121=frizered user-122=caramk user-123=oncolog1 user-124=ekostoc1 user-125=levantmk user-126=nefrolog user-127=edomcomm user-128=berbermk user-129=dikimk12 user-130=herbalpl user-131=enochmk user-132=sprintst user-133=seloviro user-134=kolened1 user-135=nlpmkorg user-136=centarba user-137=nolimits user-138=tealmk user-139=dadarmk user-140=proverim user-141=goodnews user-142=mstmmk user-143=gocruise user-144=tradeyou user-145=gjorgeiv user-146=dnevnoin user-147=pecakome user-148=stravelm user-149=robustco user-150=wondersp user-151=holiyayt user-152=rastiraz user-153=palenzok user-154=busymard
Sep  9 20:42:09 power sudo[2391938]: wp-toolkit : (command continued) user-155=zampmk user-156=zvskopje user-157=custome1 user-158=stokovna user-159=sparkupm user-160=klimimk user-161=stojano1 user-162=bovincom user-163=janiboja user-164=itradeco user-165=vezilkac user-166=cabinetm user-167=inotekso user-168=jpparkin user-169=drleomk user-170=karpospo user-171=nasaidni user-172=ideaplus user-173=arturaco user-174=screenme user-175=butelmk user-176=daris user-177=premiums user-178=kouzonco user-179=premiuma user-180=cetplatf user-181=dalmacom user-182=datalink user-183=univerz1 user-184=kujnamon user-185=gogovan1 user-186=velmk user-187=mpbmk user-188=agrosind user-189=barececo user-190=delcevca user-191=getaldus user-192=simbiome user-193=workandt user-194=dhamachi user-195=goartsym user-196=volkanco user-197=mfashion user-198=skyapart user-199=bianasho user-200=makoasmk user-201=rasmorgm user-202=wikicamp user-203=urbanexp user-204=spdcompu user-205=detskagr user-206=mspmk
Sep  9 20:42:09 power sudo[2391938]: wp-toolkit : (command continued) user-207=infobadi user-208=bizporta user-209=maleshne user-210=datelcom user-211=sedcmk user-212=ivanjord user-213=groskome user-214=polyeste user-215=vfxnestc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 20:42:09 power sudo[2391938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:09 power sudo[2391938]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:09 power sudo[2391989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 20:42:09 power sudo[2391989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:09 power sudo[2391989]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:09 power sudo[2391994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Nok53wPjwe7ezhlH.~
Sep  9 20:42:09 power sudo[2391994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:09 power sudo[2391994]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:09 power sudo[2391998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Nok53wPjwe7ezhlH.~\''
Sep  9 20:42:09 power sudo[2391998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:09 power sudo[2391998]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:09 power sudo[2392003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Nok53wPjwe7ezhlH.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 20:42:09 power sudo[2392003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:09 power sudo[2392003]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:09 power sudo[2392007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 20:42:09 power sudo[2392007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:09 power sudo[2392007]: pam_unix(sudo:session): session closed for user root
Sep  9 20:42:13 power sudo[2392719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 20:42:13 power sudo[2392719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 20:42:13 power sudo[2392719]: pam_unix(sudo:session): session closed for user root
Sep  9 20:45:01 power systemd[2395583]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:50:01 power systemd[2400570]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 20:51:40 power sshd[2402386]: Connection closed by 172.236.228.198 port 27560 [preauth]
Sep  9 20:51:41 power sshd[2402414]: Connection closed by 172.236.228.198 port 27574 [preauth]
Sep  9 20:51:43 power sshd[2402425]: Connection closed by 172.236.228.198 port 27576 [preauth]
Sep  9 20:55:01 power systemd[2405584]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:00:01 power systemd[2410169]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:00:01 power systemd[2410170]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 21:00:01 power systemd[2410174]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 21:00:01 power systemd[2410173]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 21:05:01 power systemd[2416306]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:06:01 power systemd[2417238]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 21:07:01 power systemd[2418108]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 21:10:01 power systemd[2420815]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:12:01 power systemd[2422505]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 21:15:01 power systemd[2425147]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:15:01 power systemd[2425149]: pam_unix(systemd-user:session): session opened for user polyeste(uid=1217) by polyeste(uid=0)
Sep  9 21:20:01 power systemd[2430889]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:23:13 power sshd[2434018]: Connection closed by 89.248.168.227 port 37726 [preauth]
Sep  9 21:25:01 power systemd[2436864]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:27:26 power sshd[2438829]: Connection closed by 167.94.138.160 port 40112 [preauth]
Sep  9 21:30:01 power systemd[2441562]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:30:01 power systemd[2441564]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 21:30:01 power systemd[2441565]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 21:30:01 power systemd[2441567]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 21:33:25 power sshd[2445036]: error: kex_exchange_identification: read: Connection reset by peer
Sep  9 21:33:25 power sshd[2445036]: Connection reset by 45.79.211.97 port 33541
Sep  9 21:35:01 power systemd[2448099]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:36:02 power systemd[2448991]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 21:37:01 power systemd[2450056]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 21:40:01 power systemd[2453081]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:42:01 power systemd[2454884]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 21:42:06 power sudo[2454949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 21:42:06 power sudo[2454949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454949]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 21:42:06 power sudo[2454953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454953]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 21:42:06 power sudo[2454957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454957]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=komd8Wezdp'
Sep  9 21:42:06 power sudo[2454961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454961]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 21:42:06 power sudo[2454966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454966]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 21:42:06 power sudo[2454970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454970]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 21:42:06 power sudo[2454974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454974]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 21:42:06 power sudo[2454978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454978]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 21:42:06 power sudo[2454987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454987]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 21:42:06 power sudo[2454992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454992]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2454997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 21:42:06 power sudo[2454997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2454997]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2455001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 21:42:06 power sudo[2455001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2455001]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2455005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 21:42:06 power sudo[2455005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:06 power sudo[2455005]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:06 power sudo[2455009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 21:42:06 power sudo[2455009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:07 power sudo[2455009]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:08 power sudo[2455031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 21:42:08 power sudo[2455031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:08 power sudo[2455031]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:08 power sudo[2455036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 21:42:08 power sudo[2455036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:08 power sudo[2455036]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:08 power sudo[2455043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=stojano1 user-2=bovincom user-3=itradeco user-4=janiboja user-5=cabinetm user-6=vezilkac user-7=zampmk user-8=busymard user-9=zvskopje user-10=palenzok user-11=custome1 user-12=sparkupm user-13=stokovna user-14=klimimk user-15=premiuma user-16=kouzonco user-17=dalmacom user-18=cetplatf user-19=drleomk user-20=jpparkin user-21=inotekso user-22=arturaco user-23=screenme user-24=ideaplus user-25=nasaidni user-26=karpospo user-27=premiums user-28=daris user-29=butelmk user-30=workandt user-31=simbiome user-32=getaldus user-33=delcevca user-34=barececo user-35=mfashion user-36=volkanco user-37=goartsym user-38=dhamachi user-39=makoasmk user-40=bianasho user-41=skyapart user-42=rasmorgm user-43=datalink user-44=velmk user-45=gogovan1 user-46=kujnamon user-47=univerz1 user-48=agrosind user-49=mpbmk user-50=bizporta
Sep  9 21:42:08 power sudo[2455043]: wp-toolkit : (command continued) user-51=datelcom user-52=maleshne user-53=ivanjord user-54=groskome user-55=sedcmk user-56=vfxnestc user-57=polyeste user-58=urbanexp user-59=wikicamp user-60=detskagr user-61=spdcompu user-62=mspmk user-63=infobadi user-64=stojnevi user-65=uhostmk5 user-66=bauerbg user-67=raremk user-68=oouslave user-69=vmro user-70=viewinn user-71=trudovop user-72=enaspotc user-73=hotammk user-74=cajsproc user-75=youthgua user-76=anitermc user-77=frizered user-78=hidrommk user-79=caramk user-80=nefrolog user-81=ekostoc1 user-82=levantmk user-83=oncolog1 user-84=avtogumi user-85=socioloz user-86=pelagoni user-87=evolvepl user-88=seloviro user-89=nlpmkorg user-90=centarba user-91=kolened1 user-92=nolimits user-93=berbermk user-94=edomcomm user-95=sprintst user-96=herbalpl user-97=enochmk user-98=dikimk12 user-99=gjorgeiv user-100=tradeyou user-101=dnevnoin user-102=wondersp user-103=stravelm user-104=robustco user-105=pecakome
Sep  9 21:42:08 power sudo[2455043]: wp-toolkit : (command continued) user-106=rastiraz user-107=holiyayt user-108=tealmk user-109=proverim user-110=dadarmk user-111=mstmmk user-112=goodnews user-113=gocruise user-114=pelagini user-115=bbbustou user-116=biplmk user-117=kaoilmk user-118=atspedco user-119=sssoluti user-120=animatem user-121=cleanerm user-122=progress user-123=recorgmk user-124=taktcomm user-125=solointe user-126=jaramk user-127=eurofarm user-128=solarinv user-129=golakkom user-130=electrol user-131=trigemat user-132=naksorgm user-133=eliksirz user-134=ismassag user-135=workbenc user-136=mbmehani user-137=viplastc user-138=wineberr user-139=vegemk1 user-140=cupidpro user-141=euronic3 user-142=conserva user-143=bonitavi user-144=evberasm user-145=folklore user-146=bauerin2 user-147=evacommk user-148=aptekafa user-149=madzomk user-150=gradbai1 user-151=dimpalne user-152=eaptekam user-153=peshkai1 user-154=fxxcom user-155=tehnodro user-156=makdrone user-157=jpkomuna
Sep  9 21:42:08 power sudo[2455043]: wp-toolkit : (command continued) user-158=izzomk user-159=premiumi user-160=innofabl user-161=vacuacti user-162=bozinovm user-163=prizmapl user-164=fnjorgmk user-165=dslmk user-166=darkogor user-167=tehnologija user-168=taneccom user-169=modernar user-170=inkigaic user-171=zdmgpsor user-172=gorsajmk user-173=aquatech user-174=supremel user-175=v5srybi9dcdx user-176=nationa2 user-177=onlinesh user-178=mapaspla user-179=solemor1 user-180=tcieuroc user-181=fffhpcwr user-182=radekrat user-183=starluxm user-184=fiziosmk user-185=ambitiou user-186=versusmk user-187=intelek1 user-188=mediatag user-189=lblawcom user-190=nucktra1 user-191=forzares user-192=aptekazd user-193=nikimare user-194=hausmark user-195=nikolov1 user-196=apgrupmk user-197=mediasol user-198=carrent1 user-199=bogdanos user-200=kardiome user-201=euronic2 user-202=matratze user-203=euromaki user-204=cosmatob user-205=zapovim1 user-206=elektrot user-207=chemhemc user-208=samasped
Sep  9 21:42:08 power sudo[2455043]: wp-toolkit : (command continued) user-209=nutrivim user-210=imdskopj user-211=glammace user-212=albuname user-213=infopor1 user-214=vtranseu user-215=pravekom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 21:42:08 power sudo[2455043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:09 power sudo[2455043]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:09 power sudo[2455051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 21:42:09 power sudo[2455051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:09 power sudo[2455051]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:09 power sudo[2455055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UsHgLvyojwkPVf0j.~
Sep  9 21:42:09 power sudo[2455055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:09 power sudo[2455055]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:09 power sudo[2455059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UsHgLvyojwkPVf0j.~\''
Sep  9 21:42:09 power sudo[2455059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:09 power sudo[2455059]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:09 power sudo[2455064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UsHgLvyojwkPVf0j.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 21:42:09 power sudo[2455064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:09 power sudo[2455064]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:09 power sudo[2455068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 21:42:09 power sudo[2455068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:09 power sudo[2455068]: pam_unix(sudo:session): session closed for user root
Sep  9 21:42:13 power sudo[2455261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 21:42:13 power sudo[2455261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 21:42:13 power sudo[2455261]: pam_unix(sudo:session): session closed for user root
Sep  9 21:45:01 power systemd[2459103]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:48:47 power sshd[2462572]: error: kex_exchange_identification: client sent invalid protocol identifier "PROXY TCP4 45.135.194.25 5.9.96.214 1308 2200"
Sep  9 21:48:47 power sshd[2462572]: banner exchange: Connection from 45.135.194.25 port 1308: invalid format
Sep  9 21:50:01 power systemd[2463933]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 21:50:15 power sshd[2464176]: error: kex_exchange_identification: client sent invalid protocol identifier "PROXY TCP4 45.135.194.25 5.9.96.218 11572 2200"
Sep  9 21:50:15 power sshd[2464176]: banner exchange: Connection from 45.135.194.25 port 11572: invalid format
Sep  9 21:55:01 power systemd[2468087]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:00:01 power systemd[2472457]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:00:01 power systemd[2472458]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 22:00:01 power systemd[2472460]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 22:00:01 power systemd[2472462]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 22:05:01 power systemd[2478267]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:06:01 power systemd[2479124]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 22:07:01 power systemd[2480187]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 22:09:01 power systemd[2481918]: pam_unix(systemd-user:session): session opened for user chemhemc(uid=1006) by chemhemc(uid=0)
Sep  9 22:10:01 power systemd[2483037]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:12:01 power systemd[2484726]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 22:15:01 power systemd[2487506]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:20:01 power systemd[2492310]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:25:01 power systemd[2496500]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:30:01 power systemd[2500830]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:30:01 power systemd[2500831]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 22:30:01 power systemd[2500832]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 22:30:01 power systemd[2500834]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 22:35:01 power systemd[2505336]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep  9 22:35:01 power systemd[2505340]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:36:01 power systemd[2506242]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 22:37:01 power systemd[2507187]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 22:40:01 power systemd[2509908]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:42:01 power systemd[2511779]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 22:42:06 power sudo[2511869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 22:42:06 power sudo[2511869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511869]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 22:42:06 power sudo[2511873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511873]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 22:42:06 power sudo[2511877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511877]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=38Q9sgCP3x'
Sep  9 22:42:06 power sudo[2511881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511881]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 22:42:06 power sudo[2511887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511887]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 22:42:06 power sudo[2511891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511891]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 22:42:06 power sudo[2511895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511895]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 22:42:06 power sudo[2511899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511899]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 22:42:06 power sudo[2511911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511911]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 22:42:06 power sudo[2511920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511920]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 22:42:06 power sudo[2511925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511925]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 22:42:06 power sudo[2511930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511930]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 22:42:06 power sudo[2511934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:06 power sudo[2511934]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:06 power sudo[2511938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 22:42:06 power sudo[2511938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:07 power sudo[2511938]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:08 power sudo[2511976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 22:42:08 power sudo[2511976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:09 power sudo[2511976]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:09 power sudo[2511984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 22:42:09 power sudo[2511984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:09 power sudo[2511984]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:09 power sudo[2511991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=electrol user-2=eliksirz user-3=naksorgm user-4=trigemat user-5=golakkom user-6=solarinv user-7=eurofarm user-8=viplastc user-9=wineberr user-10=mbmehani user-11=ismassag user-12=workbenc user-13=bbbustou user-14=kaoilmk user-15=biplmk user-16=pelagini user-17=solointe user-18=jaramk user-19=recorgmk user-20=taktcomm user-21=cleanerm user-22=animatem user-23=progress user-24=sssoluti user-25=atspedco user-26=fxxcom user-27=peshkai1 user-28=dimpalne user-29=eaptekam user-30=gradbai1 user-31=aptekafa user-32=madzomk user-33=evacommk user-34=jpkomuna user-35=izzomk user-36=makdrone user-37=tehnodro user-38=evberasm user-39=bonitavi user-40=conserva user-41=cupidpro user-42=vegemk1 user-43=euronic3 user-44=bauerin2 user-45=folklore user-46=tcieuroc user-47=mapaspla user-48=solemor1 user-49=nationa2
Sep  9 22:42:09 power sudo[2511991]: wp-toolkit : (command continued) user-50=onlinesh user-51=versusmk user-52=fiziosmk user-53=ambitiou user-54=starluxm user-55=radekrat user-56=fffhpcwr user-57=inkigaic user-58=modernar user-59=tehnologija user-60=taneccom user-61=vacuacti user-62=premiumi user-63=innofabl user-64=fnjorgmk user-65=darkogor user-66=dslmk user-67=prizmapl user-68=bozinovm user-69=supremel user-70=v5srybi9dcdx user-71=aquatech user-72=gorsajmk user-73=zdmgpsor user-74=nutrivim user-75=samasped user-76=chemhemc user-77=elektrot user-78=zapovim1 user-79=euromaki user-80=cosmatob user-81=pravekom user-82=vtranseu user-83=infopor1 user-84=albuname user-85=glammace user-86=imdskopj user-87=hausmark user-88=nikolov1 user-89=forzares user-90=nikimare user-91=aptekazd user-92=lblawcom user-93=nucktra1 user-94=mediatag user-95=intelek1 user-96=matratze user-97=euronic2 user-98=kardiome user-99=apgrupmk user-100=carrent1 user-101=bogdanos user-102=mediasol user-103=dalmacom
Sep  9 22:42:09 power sudo[2511991]: wp-toolkit : (command continued) user-104=cetplatf user-105=premiuma user-106=kouzonco user-107=butelmk user-108=daris user-109=premiums user-110=screenme user-111=arturaco user-112=karpospo user-113=nasaidni user-114=ideaplus user-115=drleomk user-116=inotekso user-117=jpparkin user-118=cabinetm user-119=vezilkac user-120=itradeco user-121=janiboja user-122=bovincom user-123=stojano1 user-124=klimimk user-125=stokovna user-126=sparkupm user-127=custome1 user-128=zampmk user-129=zvskopje user-130=busymard user-131=palenzok user-132=polyeste user-133=vfxnestc user-134=groskome user-135=ivanjord user-136=sedcmk user-137=maleshne user-138=datelcom user-139=bizporta user-140=mspmk user-141=infobadi user-142=detskagr user-143=spdcompu user-144=urbanexp user-145=wikicamp user-146=rasmorgm user-147=skyapart user-148=makoasmk user-149=bianasho user-150=mfashion user-151=dhamachi user-152=goartsym user-153=volkanco user-154=workandt user-155=barececo
Sep  9 22:42:09 power sudo[2511991]: wp-toolkit : (command continued) user-156=delcevca user-157=getaldus user-158=simbiome user-159=mpbmk user-160=agrosind user-161=univerz1 user-162=kujnamon user-163=gogovan1 user-164=velmk user-165=datalink user-166=oncolog1 user-167=ekostoc1 user-168=levantmk user-169=nefrolog user-170=caramk user-171=hidrommk user-172=frizered user-173=evolvepl user-174=pelagoni user-175=socioloz user-176=avtogumi user-177=viewinn user-178=trudovop user-179=vmro user-180=enaspotc user-181=bauerbg user-182=uhostmk5 user-183=oouslave user-184=raremk user-185=stojnevi user-186=anitermc user-187=youthgua user-188=hotammk user-189=cajsproc user-190=rastiraz user-191=holiyayt user-192=stravelm user-193=robustco user-194=wondersp user-195=pecakome user-196=dnevnoin user-197=tradeyou user-198=gjorgeiv user-199=gocruise user-200=mstmmk user-201=goodnews user-202=proverim user-203=dadarmk user-204=tealmk user-205=nolimits user-206=kolened1 user-207=centarba
Sep  9 22:42:09 power sudo[2511991]: wp-toolkit : (command continued) user-208=nlpmkorg user-209=seloviro user-210=enochmk user-211=herbalpl user-212=sprintst user-213=dikimk12 user-214=berbermk user-215=edomcomm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 22:42:09 power sudo[2511991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:09 power sudo[2511991]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:09 power sudo[2512007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 22:42:09 power sudo[2512007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:09 power sudo[2512007]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:09 power sudo[2512011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uZi5ShfuqIfffGMt.~
Sep  9 22:42:09 power sudo[2512011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:09 power sudo[2512011]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:09 power sudo[2512015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uZi5ShfuqIfffGMt.~\''
Sep  9 22:42:09 power sudo[2512015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:09 power sudo[2512015]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:09 power sudo[2512020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uZi5ShfuqIfffGMt.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 22:42:09 power sudo[2512020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:09 power sudo[2512020]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:09 power sudo[2512025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 22:42:09 power sudo[2512025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:09 power sudo[2512025]: pam_unix(sudo:session): session closed for user root
Sep  9 22:42:13 power sudo[2512250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 22:42:13 power sudo[2512250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 22:42:13 power sudo[2512250]: pam_unix(sudo:session): session closed for user root
Sep  9 22:45:01 power systemd[2515447]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:50:01 power systemd[2520296]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 22:55:01 power systemd[2524627]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:00:01 power systemd[2529161]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 23:00:01 power systemd[2529157]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:00:01 power systemd[2529162]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 23:00:01 power systemd[2529164]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 23:05:01 power systemd[2535038]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:06:01 power systemd[2535962]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 23:07:01 power systemd[2536897]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 23:10:01 power systemd[2539775]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep  9 23:10:02 power systemd[2539777]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:12:01 power systemd[2541816]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 23:15:01 power systemd[2545636]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:20:01 power systemd[2550966]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:25:01 power systemd[2555416]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:30:01 power systemd[2559867]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:30:01 power systemd[2559870]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep  9 23:30:01 power systemd[2559871]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep  9 23:30:01 power systemd[2559873]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep  9 23:35:01 power systemd[2563979]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:36:01 power systemd[2564828]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep  9 23:37:01 power systemd[2565563]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 23:40:01 power systemd[2568277]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:42:01 power systemd[2570484]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep  9 23:42:06 power sudo[2570598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep  9 23:42:06 power sudo[2570598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570598]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep  9 23:42:06 power sudo[2570603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570603]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep  9 23:42:06 power sudo[2570607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570607]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=XmIYdooqDp'
Sep  9 23:42:06 power sudo[2570611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570611]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep  9 23:42:06 power sudo[2570617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570617]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep  9 23:42:06 power sudo[2570621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570621]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep  9 23:42:06 power sudo[2570625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570625]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep  9 23:42:06 power sudo[2570629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570629]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep  9 23:42:06 power sudo[2570640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570640]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep  9 23:42:06 power sudo[2570644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570644]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep  9 23:42:06 power sudo[2570649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570649]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 23:42:06 power sudo[2570653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570653]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep  9 23:42:06 power sudo[2570658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:06 power sudo[2570658]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:06 power sudo[2570662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep  9 23:42:06 power sudo[2570662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:07 power sudo[2570662]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:08 power sudo[2570711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep  9 23:42:08 power sudo[2570711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:08 power sudo[2570711]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:08 power sudo[2570716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep  9 23:42:08 power sudo[2570716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:09 power sudo[2570716]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:09 power sudo[2570723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=progress user-2=cleanerm user-3=animatem user-4=atspedco user-5=sssoluti user-6=jaramk user-7=solointe user-8=taktcomm user-9=recorgmk user-10=pelagini user-11=kaoilmk user-12=biplmk user-13=bbbustou user-14=mbmehani user-15=workbenc user-16=ismassag user-17=wineberr user-18=viplastc user-19=solarinv user-20=eurofarm user-21=eliksirz user-22=naksorgm user-23=trigemat user-24=electrol user-25=golakkom user-26=bauerin2 user-27=folklore user-28=conserva user-29=euronic3 user-30=cupidpro user-31=vegemk1 user-32=evberasm user-33=bonitavi user-34=makdrone user-35=tehnodro user-36=izzomk user-37=jpkomuna user-38=gradbai1 user-39=aptekafa user-40=madzomk user-41=evacommk user-42=fxxcom user-43=peshkai1 user-44=eaptekam user-45=dimpalne user-46=zdmgpsor user-47=v5srybi9dcdx user-48=supremel user-49=aquatech
Sep  9 23:42:09 power sudo[2570723]: wp-toolkit : (command continued) user-50=gorsajmk user-51=taneccom user-52=tehnologija user-53=fnjorgmk user-54=prizmapl user-55=darkogor user-56=dslmk user-57=bozinovm user-58=vacuacti user-59=innofabl user-60=premiumi user-61=inkigaic user-62=modernar user-63=starluxm user-64=radekrat user-65=fffhpcwr user-66=versusmk user-67=ambitiou user-68=fiziosmk user-69=solemor1 user-70=mapaspla user-71=onlinesh user-72=nationa2 user-73=tcieuroc user-74=kardiome user-75=carrent1 user-76=bogdanos user-77=mediasol user-78=apgrupmk user-79=matratze user-80=euronic2 user-81=nucktra1 user-82=lblawcom user-83=mediatag user-84=intelek1 user-85=nikolov1 user-86=hausmark user-87=nikimare user-88=aptekazd user-89=forzares user-90=albuname user-91=glammace user-92=imdskopj user-93=vtranseu user-94=pravekom user-95=infopor1 user-96=zapovim1 user-97=elektrot user-98=euromaki user-99=cosmatob user-100=nutrivim user-101=samasped user-102=chemhemc user-103=custome1
Sep  9 23:42:09 power sudo[2570723]: wp-toolkit : (command continued) user-104=palenzok user-105=zampmk user-106=busymard user-107=zvskopje user-108=klimimk user-109=stokovna user-110=sparkupm user-111=bovincom user-112=stojano1 user-113=vezilkac user-114=cabinetm user-115=janiboja user-116=itradeco user-117=inotekso user-118=jpparkin user-119=drleomk user-120=daris user-121=butelmk user-122=premiums user-123=nasaidni user-124=karpospo user-125=ideaplus user-126=screenme user-127=arturaco user-128=cetplatf user-129=dalmacom user-130=kouzonco user-131=premiuma user-132=univerz1 user-133=kujnamon user-134=gogovan1 user-135=velmk user-136=datalink user-137=mpbmk user-138=agrosind user-139=dhamachi user-140=goartsym user-141=volkanco user-142=mfashion user-143=barececo user-144=getaldus user-145=simbiome user-146=delcevca user-147=workandt user-148=rasmorgm user-149=skyapart user-150=bianasho user-151=makoasmk user-152=wikicamp user-153=urbanexp user-154=infobadi user-155=mspmk
Sep  9 23:42:09 power sudo[2570723]: wp-toolkit : (command continued) user-156=spdcompu user-157=detskagr user-158=maleshne user-159=datelcom user-160=bizporta user-161=polyeste user-162=vfxnestc user-163=sedcmk user-164=ivanjord user-165=groskome user-166=cajsproc user-167=hotammk user-168=anitermc user-169=youthgua user-170=oouslave user-171=raremk user-172=bauerbg user-173=uhostmk5 user-174=stojnevi user-175=enaspotc user-176=trudovop user-177=viewinn user-178=vmro user-179=pelagoni user-180=avtogumi user-181=socioloz user-182=evolvepl user-183=caramk user-184=hidrommk user-185=frizered user-186=ekostoc1 user-187=oncolog1 user-188=levantmk user-189=nefrolog user-190=edomcomm user-191=berbermk user-192=dikimk12 user-193=herbalpl user-194=enochmk user-195=sprintst user-196=seloviro user-197=nolimits user-198=kolened1 user-199=nlpmkorg user-200=centarba user-201=dadarmk user-202=proverim user-203=tealmk user-204=gocruise user-205=goodnews user-206=mstmmk user-207=dnevnoin
Sep  9 23:42:09 power sudo[2570723]: wp-toolkit : (command continued) user-208=tradeyou user-209=gjorgeiv user-210=holiyayt user-211=rastiraz user-212=pecakome user-213=stravelm user-214=robustco user-215=wondersp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep  9 23:42:09 power sudo[2570723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:09 power sudo[2570723]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:09 power sudo[2570733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 23:42:09 power sudo[2570733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:09 power sudo[2570733]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:09 power sudo[2570737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XMuEuukB5R81d2BM.~
Sep  9 23:42:09 power sudo[2570737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:09 power sudo[2570737]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:09 power sudo[2570741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XMuEuukB5R81d2BM.~\''
Sep  9 23:42:09 power sudo[2570741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:09 power sudo[2570741]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:09 power sudo[2570746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XMuEuukB5R81d2BM.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep  9 23:42:09 power sudo[2570746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:09 power sudo[2570746]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:09 power sudo[2570750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep  9 23:42:09 power sudo[2570750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:09 power sudo[2570750]: pam_unix(sudo:session): session closed for user root
Sep  9 23:42:13 power sudo[2571610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep  9 23:42:13 power sudo[2571610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep  9 23:42:13 power sudo[2571610]: pam_unix(sudo:session): session closed for user root
Sep  9 23:45:01 power systemd[2574678]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:50:01 power systemd[2579696]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep  9 23:55:01 power systemd[2584556]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:00:01 power systemd[2589431]: pam_unix(systemd-user:session): session opened for user fffhpcwr(uid=1010) by fffhpcwr(uid=0)
Sep 10 00:00:01 power systemd[2589435]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 00:00:01 power systemd[2589432]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:00:01 power systemd[2589434]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 00:00:01 power systemd[2589440]: pam_unix(systemd-user:session): session opened for user tcieuroc(uid=1184) by tcieuroc(uid=0)
Sep 10 00:00:01 power systemd[2589436]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 00:05:01 power systemd[2595829]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:06:01 power systemd[2596971]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 00:07:01 power systemd[2597836]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 00:10:01 power systemd[2600458]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:12:01 power systemd[2602674]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 00:15:01 power systemd[2605508]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:20:01 power systemd[2611410]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:25:01 power systemd[2616025]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:30:01 power systemd[2630029]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:30:01 power systemd[2630030]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 00:30:01 power systemd[2630031]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 00:30:01 power systemd[2630033]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 00:35:01 power systemd[2635104]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:36:01 power systemd[2636113]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 00:37:01 power systemd[2637083]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 00:40:01 power systemd[2639770]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:42:01 power systemd[2641085]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 00:42:05 power sudo[2641175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 00:42:05 power sudo[2641175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641175]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 00:42:05 power sudo[2641179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641179]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 00:42:05 power sudo[2641183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641183]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=SjoqwWCWE5'
Sep 10 00:42:05 power sudo[2641187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641187]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 00:42:05 power sudo[2641193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641193]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 00:42:05 power sudo[2641197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641197]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 00:42:05 power sudo[2641201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641201]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 00:42:05 power sudo[2641205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641205]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 00:42:05 power sudo[2641211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641211]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 00:42:05 power sudo[2641216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641216]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 00:42:05 power sudo[2641220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641220]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 00:42:05 power sudo[2641224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641224]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 00:42:05 power sudo[2641228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:05 power sudo[2641228]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:05 power sudo[2641232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 00:42:05 power sudo[2641232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:06 power sudo[2641232]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:07 power sudo[2641256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 00:42:07 power sudo[2641256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:07 power sudo[2641256]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:07 power sudo[2641262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 00:42:07 power sudo[2641262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:08 power sudo[2641262]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:08 power sudo[2641267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=stojano1 user-2=bovincom user-3=itradeco user-4=janiboja user-5=cabinetm user-6=vezilkac user-7=zampmk user-8=zvskopje user-9=busymard user-10=palenzok user-11=custome1 user-12=sparkupm user-13=stokovna user-14=klimimk user-15=premiuma user-16=kouzonco user-17=dalmacom user-18=cetplatf user-19=drleomk user-20=jpparkin user-21=inotekso user-22=screenme user-23=arturaco user-24=ideaplus user-25=karpospo user-26=nasaidni user-27=premiums user-28=daris user-29=butelmk user-30=workandt user-31=simbiome user-32=getaldus user-33=delcevca user-34=barececo user-35=mfashion user-36=goartsym user-37=volkanco user-38=dhamachi user-39=bianasho user-40=makoasmk user-41=skyapart user-42=rasmorgm user-43=datalink user-44=gogovan1 user-45=velmk user-46=kujnamon user-47=univerz1 user-48=agrosind user-49=mpbmk user-50=bizporta
Sep 10 00:42:08 power sudo[2641267]: wp-toolkit : (command continued) user-51=datelcom user-52=maleshne user-53=groskome user-54=ivanjord user-55=sedcmk user-56=vfxnestc user-57=polyeste user-58=urbanexp user-59=wikicamp user-60=detskagr user-61=spdcompu user-62=mspmk user-63=infobadi user-64=stojnevi user-65=uhostmk5 user-66=bauerbg user-67=raremk user-68=oouslave user-69=vmro user-70=viewinn user-71=trudovop user-72=enaspotc user-73=hotammk user-74=cajsproc user-75=youthgua user-76=anitermc user-77=frizered user-78=hidrommk user-79=caramk user-80=nefrolog user-81=levantmk user-82=ekostoc1 user-83=oncolog1 user-84=avtogumi user-85=socioloz user-86=pelagoni user-87=evolvepl user-88=seloviro user-89=nlpmkorg user-90=centarba user-91=kolened1 user-92=nolimits user-93=berbermk user-94=edomcomm user-95=sprintst user-96=herbalpl user-97=enochmk user-98=dikimk12 user-99=tradeyou user-100=gjorgeiv user-101=dnevnoin user-102=wondersp user-103=robustco user-104=stravelm user-105=pecakome
Sep 10 00:42:08 power sudo[2641267]: wp-toolkit : (command continued) user-106=rastiraz user-107=holiyayt user-108=tealmk user-109=proverim user-110=dadarmk user-111=mstmmk user-112=goodnews user-113=gocruise user-114=pelagini user-115=bbbustou user-116=biplmk user-117=kaoilmk user-118=atspedco user-119=sssoluti user-120=animatem user-121=cleanerm user-122=progress user-123=taktcomm user-124=recorgmk user-125=solointe user-126=jaramk user-127=eurofarm user-128=solarinv user-129=golakkom user-130=electrol user-131=trigemat user-132=naksorgm user-133=eliksirz user-134=ismassag user-135=workbenc user-136=mbmehani user-137=viplastc user-138=wineberr user-139=vegemk1 user-140=cupidpro user-141=euronic3 user-142=conserva user-143=bonitavi user-144=evberasm user-145=folklore user-146=bauerin2 user-147=evacommk user-148=aptekafa user-149=madzomk user-150=gradbai1 user-151=dimpalne user-152=eaptekam user-153=peshkai1 user-154=fxxcom user-155=tehnodro user-156=makdrone user-157=jpkomuna
Sep 10 00:42:08 power sudo[2641267]: wp-toolkit : (command continued) user-158=izzomk user-159=premiumi user-160=innofabl user-161=vacuacti user-162=bozinovm user-163=prizmapl user-164=darkogor user-165=fnjorgmk user-166=dslmk user-167=tehnologija user-168=taneccom user-169=modernar user-170=inkigaic user-171=zdmgpsor user-172=gorsajmk user-173=aquatech user-174=supremel user-175=v5srybi9dcdx user-176=nationa2 user-177=onlinesh user-178=mapaspla user-179=solemor1 user-180=tcieuroc user-181=fffhpcwr user-182=radekrat user-183=starluxm user-184=fiziosmk user-185=ambitiou user-186=versusmk user-187=intelek1 user-188=mediatag user-189=lblawcom user-190=nucktra1 user-191=forzares user-192=aptekazd user-193=nikimare user-194=nikolov1 user-195=hausmark user-196=apgrupmk user-197=mediasol user-198=carrent1 user-199=bogdanos user-200=kardiome user-201=euronic2 user-202=matratze user-203=euromaki user-204=cosmatob user-205=elektrot user-206=zapovim1 user-207=samasped user-208=chemhemc
Sep 10 00:42:08 power sudo[2641267]: wp-toolkit : (command continued) user-209=nutrivim user-210=imdskopj user-211=glammace user-212=albuname user-213=infopor1 user-214=pravekom user-215=vtranseu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 00:42:08 power sudo[2641267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:08 power sudo[2641267]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:08 power sudo[2641276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 00:42:08 power sudo[2641276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:08 power sudo[2641276]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:08 power sudo[2641280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sFz0xxj6LvtnMfYL.~
Sep 10 00:42:08 power sudo[2641280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:08 power sudo[2641280]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:08 power sudo[2641284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sFz0xxj6LvtnMfYL.~\''
Sep 10 00:42:08 power sudo[2641284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:08 power sudo[2641284]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:08 power sudo[2641289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sFz0xxj6LvtnMfYL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 00:42:08 power sudo[2641289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:08 power sudo[2641289]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:08 power sudo[2641293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 00:42:08 power sudo[2641293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:08 power sudo[2641293]: pam_unix(sudo:session): session closed for user root
Sep 10 00:42:12 power sudo[2641889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 00:42:12 power sudo[2641889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 00:42:12 power sudo[2641889]: pam_unix(sudo:session): session closed for user root
Sep 10 00:45:02 power systemd[2644502]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:50:01 power systemd[2649467]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 00:55:01 power systemd[2653832]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:00:01 power systemd[2658318]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:00:01 power systemd[2658321]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 01:00:01 power systemd[2658320]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 01:00:01 power systemd[2658319]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 01:05:01 power systemd[2664672]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:06:01 power systemd[2665837]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 01:07:01 power systemd[2666938]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 01:10:01 power systemd[2670243]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:12:01 power systemd[2672204]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 01:15:01 power systemd[2675158]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:20:01 power systemd[2681005]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:25:01 power systemd[2685967]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:30:01 power systemd[2691234]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:30:01 power systemd[2691235]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 01:30:01 power systemd[2691236]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 01:30:01 power systemd[2691238]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 01:31:39 power sshd[2454060]: pam_unix(sshd:session): session closed for user root
Sep 10 01:31:43 power sshd[2692925]: Connection closed by 167.94.138.62 port 44232 [preauth]
Sep 10 01:35:01 power systemd[2697014]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:35:01 power systemd[2697013]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 01:36:02 power systemd[2698119]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 01:37:01 power systemd[2699109]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 01:39:01 power systemd[2700974]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 01:40:01 power systemd[2702103]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 01:40:01 power systemd[2702104]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:42:01 power systemd[2703665]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 01:42:05 power sudo[2703736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 01:42:05 power systemd[2703741]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 01:42:05 power sudo[2703736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:05 power sudo[2703736]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:05 power sudo[2703759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 01:42:05 power sudo[2703759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:05 power sudo[2703759]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:05 power sudo[2703764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 01:42:05 power sudo[2703764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:05 power sudo[2703764]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:05 power sudo[2703768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=YPMmY23s9W'
Sep 10 01:42:05 power sudo[2703768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:05 power sudo[2703768]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:05 power sudo[2703773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 01:42:05 power sudo[2703773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:05 power sudo[2703773]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:05 power sudo[2703777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 01:42:05 power sudo[2703777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:05 power sudo[2703777]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:05 power sudo[2703782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 01:42:05 power sudo[2703782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:05 power sudo[2703782]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:05 power sudo[2703786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 01:42:05 power sudo[2703786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:06 power sudo[2703786]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:06 power sudo[2703794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 01:42:06 power sudo[2703794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:06 power sudo[2703794]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:06 power sudo[2703798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 01:42:06 power sudo[2703798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:06 power sudo[2703798]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:06 power sudo[2703802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 01:42:06 power sudo[2703802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:06 power sudo[2703802]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:06 power sudo[2703806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 01:42:06 power sudo[2703806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:06 power sudo[2703806]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:06 power sudo[2703810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 01:42:06 power sudo[2703810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:06 power sudo[2703810]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:06 power sudo[2703814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 01:42:06 power sudo[2703814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:06 power sudo[2703814]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:10 power sudo[2703875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 01:42:10 power sudo[2703875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:10 power sudo[2703875]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:10 power sudo[2703881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 01:42:10 power sudo[2703881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:10 power sudo[2703881]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:10 power sudo[2703886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=anitermc user-2=youthgua user-3=cajsproc user-4=hotammk user-5=enaspotc user-6=trudovop user-7=viewinn user-8=vmro user-9=oouslave user-10=raremk user-11=bauerbg user-12=uhostmk5 user-13=stojnevi user-14=evolvepl user-15=pelagoni user-16=socioloz user-17=avtogumi user-18=oncolog1 user-19=ekostoc1 user-20=levantmk user-21=nefrolog user-22=caramk user-23=hidrommk user-24=frizered user-25=dikimk12 user-26=enochmk user-27=herbalpl user-28=sprintst user-29=edomcomm user-30=berbermk user-31=nolimits user-32=kolened1 user-33=centarba user-34=nlpmkorg user-35=seloviro user-36=gocruise user-37=goodnews user-38=mstmmk user-39=dadarmk user-40=proverim user-41=tealmk user-42=holiyayt user-43=rastiraz user-44=pecakome user-45=robustco user-46=stravelm user-47=wondersp user-48=dnevnoin user-49=tradeyou user-50=gjorgeiv
Sep 10 01:42:10 power sudo[2703886]: wp-toolkit : (command continued) user-51=klimimk user-52=stokovna user-53=sparkupm user-54=custome1 user-55=palenzok user-56=zampmk user-57=busymard user-58=zvskopje user-59=vezilkac user-60=cabinetm user-61=janiboja user-62=itradeco user-63=bovincom user-64=stojano1 user-65=daris user-66=butelmk user-67=premiums user-68=karpospo user-69=nasaidni user-70=ideaplus user-71=screenme user-72=arturaco user-73=inotekso user-74=jpparkin user-75=drleomk user-76=cetplatf user-77=dalmacom user-78=kouzonco user-79=premiuma user-80=mpbmk user-81=agrosind user-82=univerz1 user-83=kujnamon user-84=gogovan1 user-85=velmk user-86=datalink user-87=rasmorgm user-88=skyapart user-89=makoasmk user-90=bianasho user-91=dhamachi user-92=volkanco user-93=goartsym user-94=mfashion user-95=barececo user-96=simbiome user-97=getaldus user-98=delcevca user-99=workandt user-100=infobadi user-101=mspmk user-102=spdcompu user-103=detskagr user-104=wikicamp user-105=urbanexp
Sep 10 01:42:10 power sudo[2703886]: wp-toolkit : (command continued) user-106=polyeste user-107=vfxnestc user-108=sedcmk user-109=ivanjord user-110=groskome user-111=maleshne user-112=datelcom user-113=bizporta user-114=v5srybi9dcdx user-115=supremel user-116=aquatech user-117=gorsajmk user-118=zdmgpsor user-119=inkigaic user-120=modernar user-121=taneccom user-122=tehnologija user-123=fnjorgmk user-124=darkogor user-125=prizmapl user-126=dslmk user-127=bozinovm user-128=vacuacti user-129=premiumi user-130=innofabl user-131=versusmk user-132=ambitiou user-133=fiziosmk user-134=starluxm user-135=radekrat user-136=fffhpcwr user-137=tcieuroc user-138=solemor1 user-139=mapaspla user-140=onlinesh user-141=nationa2 user-142=matratze user-143=euronic2 user-144=kardiome user-145=bogdanos user-146=carrent1 user-147=mediasol user-148=apgrupmk user-149=nikolov1 user-150=hausmark user-151=nikimare user-152=aptekazd user-153=forzares user-154=nucktra1 user-155=lblawcom user-156=mediatag
Sep 10 01:42:10 power sudo[2703886]: wp-toolkit : (command continued) user-157=intelek1 user-158=pravekom user-159=vtranseu user-160=infopor1 user-161=albuname user-162=glammace user-163=imdskopj user-164=nutrivim user-165=chemhemc user-166=samasped user-167=zapovim1 user-168=elektrot user-169=euromaki user-170=cosmatob user-171=jaramk user-172=solointe user-173=taktcomm user-174=recorgmk user-175=progress user-176=cleanerm user-177=animatem user-178=atspedco user-179=sssoluti user-180=kaoilmk user-181=biplmk user-182=bbbustou user-183=pelagini user-184=wineberr user-185=viplastc user-186=mbmehani user-187=workbenc user-188=ismassag user-189=naksorgm user-190=eliksirz user-191=trigemat user-192=electrol user-193=golakkom user-194=solarinv user-195=eurofarm user-196=bauerin2 user-197=folklore user-198=evberasm user-199=bonitavi user-200=conserva user-201=euronic3 user-202=cupidpro user-203=vegemk1 user-204=izzomk user-205=jpkomuna user-206=makdrone user-207=tehnodro user-208=fxxcom
Sep 10 01:42:10 power sudo[2703886]: wp-toolkit : (command continued) user-209=peshkai1 user-210=eaptekam user-211=dimpalne user-212=gradbai1 user-213=aptekafa user-214=madzomk user-215=evacommk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 01:42:10 power sudo[2703886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:11 power sudo[2703886]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:11 power sudo[2703892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 01:42:11 power sudo[2703892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:11 power sudo[2703892]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:11 power sudo[2703897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-AqS1744nheuex9i6.~
Sep 10 01:42:11 power sudo[2703897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:11 power sudo[2703897]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:11 power sudo[2703903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-AqS1744nheuex9i6.~\''
Sep 10 01:42:11 power sudo[2703903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:11 power sudo[2703903]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:11 power sudo[2703908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-AqS1744nheuex9i6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 01:42:11 power sudo[2703908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:11 power sudo[2703908]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:11 power sudo[2703912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 01:42:11 power sudo[2703912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:11 power sudo[2703912]: pam_unix(sudo:session): session closed for user root
Sep 10 01:42:14 power sudo[2704267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 01:42:14 power sudo[2704267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 01:42:14 power sudo[2704267]: pam_unix(sudo:session): session closed for user root
Sep 10 01:45:01 power systemd[2707356]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 01:45:01 power systemd[2707357]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:50:01 power systemd[2711965]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 01:50:01 power systemd[2711963]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 01:55:01 power systemd[2716411]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 01:55:01 power systemd[2716412]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:00:01 power systemd[2720585]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 02:00:01 power systemd[2720587]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:00:01 power systemd[2720590]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 02:00:01 power systemd[2720588]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 02:00:01 power systemd[2720592]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 02:05:01 power systemd[2725890]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:06:01 power systemd[2726666]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 02:07:01 power systemd[2727670]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 02:10:01 power systemd[2730239]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:12:01 power systemd[2732036]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 02:15:01 power systemd[2734663]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:20:01 power systemd[2738472]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:25:01 power systemd[2742329]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:30:01 power systemd[2746057]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:30:01 power systemd[2746058]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 02:30:01 power systemd[2746059]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 02:30:01 power systemd[2746061]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 02:35:01 power systemd[2750089]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:36:01 power systemd[2750803]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 02:37:01 power systemd[2751387]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 02:40:01 power systemd[2753661]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:42:01 power systemd[2754984]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 02:42:05 power sudo[2755063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 02:42:05 power sudo[2755063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755063]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 02:42:05 power sudo[2755071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755071]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 02:42:05 power sudo[2755075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755075]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=OlIipdyfWr'
Sep 10 02:42:05 power sudo[2755079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755079]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 02:42:05 power sudo[2755084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755084]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 02:42:05 power sudo[2755088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755088]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 02:42:05 power sudo[2755093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755093]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 02:42:05 power sudo[2755097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755097]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 02:42:05 power sudo[2755103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755103]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 02:42:05 power sudo[2755107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755107]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:05 power sudo[2755111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 02:42:05 power sudo[2755111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:05 power sudo[2755111]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:06 power sudo[2755115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 02:42:06 power sudo[2755115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:06 power sudo[2755115]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:06 power sudo[2755119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 02:42:06 power sudo[2755119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:06 power sudo[2755119]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:06 power sudo[2755124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 02:42:06 power sudo[2755124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:06 power sudo[2755124]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:08 power sudo[2755151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 02:42:08 power sudo[2755151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:08 power sudo[2755151]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:08 power sudo[2755159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 02:42:08 power sudo[2755159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:08 power sudo[2755159]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:08 power sudo[2755165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=fffhpcwr user-2=radekrat user-3=starluxm user-4=fiziosmk user-5=ambitiou user-6=versusmk user-7=nationa2 user-8=onlinesh user-9=mapaspla user-10=solemor1 user-11=tcieuroc user-12=zdmgpsor user-13=gorsajmk user-14=aquatech user-15=supremel user-16=v5srybi9dcdx user-17=innofabl user-18=premiumi user-19=vacuacti user-20=bozinovm user-21=prizmapl user-22=darkogor user-23=fnjorgmk user-24=dslmk user-25=tehnologija user-26=taneccom user-27=modernar user-28=inkigaic user-29=imdskopj user-30=glammace user-31=albuname user-32=infopor1 user-33=vtranseu user-34=pravekom user-35=cosmatob user-36=euromaki user-37=elektrot user-38=zapovim1 user-39=samasped user-40=chemhemc user-41=nutrivim user-42=apgrupmk user-43=mediasol user-44=bogdanos user-45=carrent1 user-46=kardiome user-47=euronic2 user-48=matratze
Sep 10 02:42:08 power sudo[2755165]: wp-toolkit : (command continued) user-49=intelek1 user-50=mediatag user-51=lblawcom user-52=nucktra1 user-53=forzares user-54=aptekazd user-55=nikimare user-56=nikolov1 user-57=hausmark user-58=ismassag user-59=workbenc user-60=mbmehani user-61=viplastc user-62=wineberr user-63=eurofarm user-64=solarinv user-65=golakkom user-66=electrol user-67=trigemat user-68=naksorgm user-69=eliksirz user-70=sssoluti user-71=atspedco user-72=animatem user-73=cleanerm user-74=progress user-75=recorgmk user-76=taktcomm user-77=solointe user-78=jaramk user-79=pelagini user-80=bbbustou user-81=biplmk user-82=kaoilmk user-83=tehnodro user-84=makdrone user-85=jpkomuna user-86=izzomk user-87=evacommk user-88=madzomk user-89=aptekafa user-90=gradbai1 user-91=dimpalne user-92=eaptekam user-93=peshkai1 user-94=fxxcom user-95=folklore user-96=bauerin2 user-97=vegemk1 user-98=cupidpro user-99=euronic3 user-100=conserva user-101=bonitavi user-102=evberasm
Sep 10 02:42:08 power sudo[2755165]: wp-toolkit : (command continued) user-103=socioloz user-104=avtogumi user-105=pelagoni user-106=evolvepl user-107=frizered user-108=hidrommk user-109=caramk user-110=nefrolog user-111=ekostoc1 user-112=levantmk user-113=oncolog1 user-114=hotammk user-115=cajsproc user-116=youthgua user-117=anitermc user-118=stojnevi user-119=uhostmk5 user-120=bauerbg user-121=raremk user-122=oouslave user-123=vmro user-124=viewinn user-125=trudovop user-126=enaspotc user-127=tealmk user-128=proverim user-129=dadarmk user-130=mstmmk user-131=goodnews user-132=gocruise user-133=tradeyou user-134=gjorgeiv user-135=dnevnoin user-136=wondersp user-137=robustco user-138=stravelm user-139=pecakome user-140=rastiraz user-141=holiyayt user-142=berbermk user-143=edomcomm user-144=sprintst user-145=enochmk user-146=herbalpl user-147=dikimk12 user-148=seloviro user-149=centarba user-150=nlpmkorg user-151=kolened1 user-152=nolimits user-153=drleomk user-154=jpparkin
Sep 10 02:42:08 power sudo[2755165]: wp-toolkit : (command continued) user-155=inotekso user-156=arturaco user-157=screenme user-158=ideaplus user-159=karpospo user-160=nasaidni user-161=premiums user-162=daris user-163=butelmk user-164=premiuma user-165=kouzonco user-166=dalmacom user-167=cetplatf user-168=zampmk user-169=busymard user-170=zvskopje user-171=palenzok user-172=custome1 user-173=sparkupm user-174=stokovna user-175=klimimk user-176=stojano1 user-177=bovincom user-178=itradeco user-179=janiboja user-180=cabinetm user-181=vezilkac user-182=urbanexp user-183=wikicamp user-184=detskagr user-185=spdcompu user-186=mspmk user-187=infobadi user-188=bizporta user-189=datelcom user-190=maleshne user-191=groskome user-192=ivanjord user-193=sedcmk user-194=vfxnestc user-195=polyeste user-196=datalink user-197=velmk user-198=gogovan1 user-199=kujnamon user-200=univerz1 user-201=agrosind user-202=mpbmk user-203=workandt user-204=getaldus user-205=simbiome user-206=delcevca
Sep 10 02:42:08 power sudo[2755165]: wp-toolkit : (command continued) user-207=barececo user-208=mfashion user-209=volkanco user-210=goartsym user-211=dhamachi user-212=bianasho user-213=makoasmk user-214=skyapart user-215=rasmorgm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 02:42:08 power sudo[2755165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:08 power sudo[2755165]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:08 power sudo[2755172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 02:42:08 power sudo[2755172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:08 power sudo[2755172]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:08 power sudo[2755176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3xFWoWDhyJNGI736.~
Sep 10 02:42:08 power sudo[2755176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:08 power sudo[2755176]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:08 power sudo[2755180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3xFWoWDhyJNGI736.~\''
Sep 10 02:42:08 power sudo[2755180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:08 power sudo[2755180]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:08 power sudo[2755185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3xFWoWDhyJNGI736.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 02:42:08 power sudo[2755185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:08 power sudo[2755185]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:08 power sudo[2755189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 02:42:08 power sudo[2755189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:08 power sudo[2755189]: pam_unix(sudo:session): session closed for user root
Sep 10 02:42:13 power sudo[2756142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 02:42:13 power sudo[2756142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 02:42:13 power sudo[2756142]: pam_unix(sudo:session): session closed for user root
Sep 10 02:44:04 power sshd[2757750]: error: kex_exchange_identification: banner line contains invalid characters
Sep 10 02:44:04 power sshd[2757750]: banner exchange: Connection from 91.196.152.122 port 43629: invalid format
Sep 10 02:44:10 power sshd[2757840]: error: kex_exchange_identification: Connection closed by remote host
Sep 10 02:44:10 power sshd[2757840]: Connection closed by 91.196.152.34 port 34313
Sep 10 02:45:01 power systemd[2758645]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:50:01 power systemd[2762485]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 02:55:01 power systemd[2765897]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:00:01 power systemd[2769281]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:00:01 power systemd[2769283]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 03:00:01 power systemd[2769285]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 03:00:01 power systemd[2769286]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 03:05:01 power systemd[2773318]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:06:01 power systemd[2774134]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 03:06:08 power sshd[2774209]: Connection closed by 91.231.89.118 port 43139 [preauth]
Sep 10 03:07:01 power systemd[2774843]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 03:10:01 power systemd[2776991]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:12:01 power systemd[2778357]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 03:15:01 power systemd[2780823]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:20:01 power systemd[2784809]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:25:01 power systemd[2788867]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:27:01 power systemd[2790344]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 10 03:30:01 power systemd[2792805]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:30:01 power systemd[2792808]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 03:30:01 power systemd[2792809]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 03:30:01 power systemd[2792812]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 03:35:01 power systemd[2797446]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:36:01 power systemd[2798422]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 03:37:01 power systemd[2799349]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 03:40:01 power systemd[2802720]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:42:01 power systemd[2804799]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 03:42:05 power sudo[2804867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 03:42:05 power sudo[2804867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804867]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 03:42:05 power sudo[2804871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804871]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 03:42:05 power sudo[2804875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804875]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=oMZJ5gvKVM'
Sep 10 03:42:05 power sudo[2804879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804879]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 03:42:05 power sudo[2804884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804884]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 03:42:05 power sudo[2804888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804888]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 03:42:05 power sudo[2804893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804893]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 03:42:05 power sudo[2804897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804897]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 03:42:05 power sudo[2804910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804910]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 03:42:05 power sudo[2804914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:05 power sudo[2804914]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:05 power sudo[2804918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 03:42:05 power sudo[2804918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:06 power sudo[2804918]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:06 power sudo[2804922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 03:42:06 power sudo[2804922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:06 power sudo[2804922]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:06 power sudo[2804926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 03:42:06 power sudo[2804926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:06 power sudo[2804926]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:06 power sudo[2804931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 03:42:06 power sudo[2804931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:06 power sudo[2804931]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:08 power sudo[2804963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 03:42:08 power sudo[2804963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:08 power sudo[2804963]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:08 power sudo[2804971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 03:42:08 power sudo[2804971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:08 power sudo[2804971]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:08 power sudo[2804977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tcieuroc user-2=onlinesh user-3=nationa2 user-4=solemor1 user-5=mapaspla user-6=ambitiou user-7=fiziosmk user-8=versusmk user-9=fffhpcwr user-10=radekrat user-11=starluxm user-12=modernar user-13=inkigaic user-14=bozinovm user-15=darkogor user-16=fnjorgmk user-17=prizmapl user-18=dslmk user-19=innofabl user-20=premiumi user-21=vacuacti user-22=taneccom user-23=tehnologija user-24=gorsajmk user-25=aquatech user-26=v5srybi9dcdx user-27=supremel user-28=zdmgpsor user-29=samasped user-30=chemhemc user-31=nutrivim user-32=euromaki user-33=cosmatob user-34=elektrot user-35=zapovim1 user-36=infopor1 user-37=pravekom user-38=vtranseu user-39=imdskopj user-40=glammace user-41=albuname user-42=aptekazd user-43=nikimare user-44=forzares user-45=hausmark user-46=nikolov1 user-47=intelek1 user-48=mediatag
Sep 10 03:42:08 power sudo[2804977]: wp-toolkit : (command continued) user-49=nucktra1 user-50=lblawcom user-51=euronic2 user-52=matratze user-53=mediasol user-54=bogdanos user-55=carrent1 user-56=apgrupmk user-57=kardiome user-58=golakkom user-59=trigemat user-60=naksorgm user-61=eliksirz user-62=electrol user-63=eurofarm user-64=solarinv user-65=wineberr user-66=viplastc user-67=workbenc user-68=ismassag user-69=mbmehani user-70=biplmk user-71=kaoilmk user-72=bbbustou user-73=pelagini user-74=recorgmk user-75=taktcomm user-76=jaramk user-77=solointe user-78=atspedco user-79=sssoluti user-80=progress user-81=animatem user-82=cleanerm user-83=eaptekam user-84=dimpalne user-85=peshkai1 user-86=fxxcom user-87=evacommk user-88=madzomk user-89=aptekafa user-90=gradbai1 user-91=izzomk user-92=jpkomuna user-93=tehnodro user-94=makdrone user-95=bonitavi user-96=evberasm user-97=euronic3 user-98=vegemk1 user-99=cupidpro user-100=conserva user-101=folklore user-102=bauerin2
Sep 10 03:42:08 power sudo[2804977]: wp-toolkit : (command continued) user-103=nefrolog user-104=ekostoc1 user-105=oncolog1 user-106=levantmk user-107=frizered user-108=hidrommk user-109=caramk user-110=evolvepl user-111=avtogumi user-112=socioloz user-113=pelagoni user-114=enaspotc user-115=vmro user-116=viewinn user-117=trudovop user-118=stojnevi user-119=raremk user-120=oouslave user-121=uhostmk5 user-122=bauerbg user-123=youthgua user-124=anitermc user-125=cajsproc user-126=hotammk user-127=pecakome user-128=wondersp user-129=robustco user-130=stravelm user-131=holiyayt user-132=rastiraz user-133=tradeyou user-134=gjorgeiv user-135=dnevnoin user-136=goodnews user-137=mstmmk user-138=gocruise user-139=tealmk user-140=dadarmk user-141=proverim user-142=centarba user-143=nlpmkorg user-144=kolened1 user-145=nolimits user-146=seloviro user-147=dikimk12 user-148=sprintst user-149=herbalpl user-150=enochmk user-151=edomcomm user-152=berbermk user-153=kouzonco user-154=premiuma
Sep 10 03:42:08 power sudo[2804977]: wp-toolkit : (command continued) user-155=cetplatf user-156=dalmacom user-157=ideaplus user-158=karpospo user-159=nasaidni user-160=screenme user-161=arturaco user-162=premiums user-163=butelmk user-164=daris user-165=jpparkin user-166=inotekso user-167=drleomk user-168=janiboja user-169=itradeco user-170=vezilkac user-171=cabinetm user-172=stojano1 user-173=bovincom user-174=sparkupm user-175=stokovna user-176=klimimk user-177=palenzok user-178=zvskopje user-179=zampmk user-180=busymard user-181=custome1 user-182=sedcmk user-183=ivanjord user-184=groskome user-185=vfxnestc user-186=polyeste user-187=bizporta user-188=datelcom user-189=maleshne user-190=spdcompu user-191=detskagr user-192=mspmk user-193=infobadi user-194=wikicamp user-195=urbanexp user-196=bianasho user-197=makoasmk user-198=skyapart user-199=rasmorgm user-200=delcevca user-201=simbiome user-202=getaldus user-203=barececo user-204=workandt user-205=goartsym user-206=volkanco
Sep 10 03:42:08 power sudo[2804977]: wp-toolkit : (command continued) user-207=dhamachi user-208=mfashion user-209=agrosind user-210=mpbmk user-211=datalink user-212=velmk user-213=gogovan1 user-214=univerz1 user-215=kujnamon feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 03:42:08 power sudo[2804977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:08 power sudo[2804977]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:08 power sudo[2804985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 03:42:08 power sudo[2804985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:08 power sudo[2804985]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:08 power sudo[2804989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v9Wqn3SFWKVJGTcy.~
Sep 10 03:42:08 power sudo[2804989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:08 power sudo[2804989]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:08 power sudo[2804993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v9Wqn3SFWKVJGTcy.~\''
Sep 10 03:42:08 power sudo[2804993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:08 power sudo[2804993]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:08 power sudo[2804998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v9Wqn3SFWKVJGTcy.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 03:42:08 power sudo[2804998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:08 power sudo[2804998]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:09 power sudo[2805002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 03:42:09 power sudo[2805002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:09 power sudo[2805002]: pam_unix(sudo:session): session closed for user root
Sep 10 03:42:09 power sudo[2805627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 03:42:09 power sudo[2805627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 03:42:09 power sudo[2805627]: pam_unix(sudo:session): session closed for user root
Sep 10 03:45:01 power systemd[2808810]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:50:01 power systemd[2814435]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 03:55:01 power systemd[2819389]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:00:01 power systemd[2824383]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:00:01 power systemd[2824390]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 04:00:01 power systemd[2824394]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 04:00:01 power systemd[2824391]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 04:05:01 power systemd[2829281]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:06:01 power systemd[2830371]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 04:07:01 power systemd[2831297]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 04:10:01 power systemd[2834550]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:12:01 power systemd[2836595]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 04:15:01 power systemd[2839754]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:20:02 power systemd[2845193]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:25:01 power systemd[2849764]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:30:01 power systemd[2854679]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 04:30:01 power systemd[2854678]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:30:01 power systemd[2854681]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 04:30:01 power systemd[2854682]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 04:30:01 power systemd[2854685]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 10 04:34:48 power sshd[2860034]: Connection closed by 89.248.168.227 port 52474 [preauth]
Sep 10 04:35:01 power systemd[2860355]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:36:01 power systemd[2861555]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 04:37:01 power systemd[2862566]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 04:40:01 power systemd[2866121]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:42:01 power systemd[2868472]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 04:42:05 power sudo[2868548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 04:42:05 power sudo[2868548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:05 power sudo[2868548]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:05 power sudo[2868553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 04:42:05 power sudo[2868553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:05 power sudo[2868553]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:05 power sudo[2868557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 04:42:05 power sudo[2868557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:05 power sudo[2868557]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:05 power sudo[2868561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=7xB7xo1Y6J'
Sep 10 04:42:05 power sudo[2868561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:05 power sudo[2868561]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:05 power sudo[2868566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 04:42:05 power sudo[2868566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:05 power sudo[2868566]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:05 power sudo[2868572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 04:42:05 power sudo[2868572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:05 power sudo[2868572]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:05 power sudo[2868576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 04:42:05 power sudo[2868576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:05 power sudo[2868576]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:05 power sudo[2868581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 04:42:05 power sudo[2868581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:05 power sudo[2868581]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:06 power sudo[2868586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 04:42:06 power sudo[2868586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:06 power sudo[2868586]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:06 power sudo[2868590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 04:42:06 power sudo[2868590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:06 power sudo[2868590]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:06 power sudo[2868594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 04:42:06 power sudo[2868594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:06 power sudo[2868594]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:06 power sudo[2868598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 04:42:06 power sudo[2868598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:06 power sudo[2868598]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:06 power sudo[2868603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 04:42:06 power sudo[2868603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:06 power sudo[2868603]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:06 power sudo[2868607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 04:42:06 power sudo[2868607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:06 power sudo[2868607]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:08 power sudo[2868651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 04:42:08 power sudo[2868651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:08 power sudo[2868651]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:08 power sudo[2868656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 04:42:08 power sudo[2868656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:08 power sudo[2868656]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:08 power sudo[2868662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mfashion user-2=dhamachi user-3=volkanco user-4=goartsym user-5=workandt user-6=barececo user-7=simbiome user-8=delcevca user-9=getaldus user-10=rasmorgm user-11=skyapart user-12=bianasho user-13=makoasmk user-14=kujnamon user-15=univerz1 user-16=velmk user-17=gogovan1 user-18=datalink user-19=mpbmk user-20=agrosind user-21=maleshne user-22=datelcom user-23=bizporta user-24=polyeste user-25=vfxnestc user-26=groskome user-27=ivanjord user-28=sedcmk user-29=urbanexp user-30=wikicamp user-31=infobadi user-32=mspmk user-33=detskagr user-34=spdcompu user-35=bovincom user-36=stojano1 user-37=cabinetm user-38=vezilkac user-39=itradeco user-40=janiboja user-41=custome1 user-42=zampmk user-43=busymard user-44=zvskopje user-45=palenzok user-46=klimimk user-47=stokovna user-48=sparkupm user-49=dalmacom user-50=cetplatf
Sep 10 04:42:08 power sudo[2868662]: wp-toolkit : (command continued) user-51=premiuma user-52=kouzonco user-53=drleomk user-54=inotekso user-55=jpparkin user-56=butelmk user-57=daris user-58=premiums user-59=screenme user-60=arturaco user-61=karpospo user-62=nasaidni user-63=ideaplus user-64=seloviro user-65=nolimits user-66=kolened1 user-67=centarba user-68=nlpmkorg user-69=berbermk user-70=edomcomm user-71=herbalpl user-72=enochmk user-73=sprintst user-74=dikimk12 user-75=dnevnoin user-76=gjorgeiv user-77=tradeyou user-78=rastiraz user-79=holiyayt user-80=stravelm user-81=robustco user-82=wondersp user-83=pecakome user-84=proverim user-85=dadarmk user-86=tealmk user-87=gocruise user-88=mstmmk user-89=goodnews user-90=bauerbg user-91=uhostmk5 user-92=oouslave user-93=raremk user-94=stojnevi user-95=trudovop user-96=viewinn user-97=vmro user-98=enaspotc user-99=hotammk user-100=cajsproc user-101=anitermc user-102=youthgua user-103=caramk user-104=hidrommk user-105=frizered
Sep 10 04:42:08 power sudo[2868662]: wp-toolkit : (command continued) user-106=ekostoc1 user-107=oncolog1 user-108=levantmk user-109=nefrolog user-110=pelagoni user-111=socioloz user-112=avtogumi user-113=evolvepl user-114=conserva user-115=cupidpro user-116=vegemk1 user-117=euronic3 user-118=evberasm user-119=bonitavi user-120=bauerin2 user-121=folklore user-122=gradbai1 user-123=aptekafa user-124=madzomk user-125=evacommk user-126=fxxcom user-127=peshkai1 user-128=dimpalne user-129=eaptekam user-130=makdrone user-131=tehnodro user-132=jpkomuna user-133=izzomk user-134=pelagini user-135=bbbustou user-136=kaoilmk user-137=biplmk user-138=cleanerm user-139=animatem user-140=progress user-141=sssoluti user-142=atspedco user-143=solointe user-144=jaramk user-145=recorgmk user-146=taktcomm user-147=solarinv user-148=eurofarm user-149=electrol user-150=naksorgm user-151=eliksirz user-152=trigemat user-153=golakkom user-154=mbmehani user-155=ismassag user-156=workbenc user-157=viplastc
Sep 10 04:42:08 power sudo[2868662]: wp-toolkit : (command continued) user-158=wineberr user-159=lblawcom user-160=nucktra1 user-161=mediatag user-162=intelek1 user-163=hausmark user-164=nikolov1 user-165=forzares user-166=nikimare user-167=aptekazd user-168=kardiome user-169=apgrupmk user-170=bogdanos user-171=carrent1 user-172=mediasol user-173=matratze user-174=euronic2 user-175=elektrot user-176=zapovim1 user-177=euromaki user-178=cosmatob user-179=nutrivim user-180=chemhemc user-181=samasped user-182=albuname user-183=glammace user-184=imdskopj user-185=vtranseu user-186=pravekom user-187=infopor1 user-188=tehnologija user-189=taneccom user-190=vacuacti user-191=innofabl user-192=premiumi user-193=darkogor user-194=dslmk user-195=fnjorgmk user-196=prizmapl user-197=bozinovm user-198=inkigaic user-199=modernar user-200=zdmgpsor user-201=supremel user-202=v5srybi9dcdx user-203=aquatech user-204=gorsajmk user-205=mapaspla user-206=solemor1 user-207=nationa2 user-208=onlinesh
Sep 10 04:42:08 power sudo[2868662]: wp-toolkit : (command continued) user-209=tcieuroc user-210=starluxm user-211=radekrat user-212=fffhpcwr user-213=versusmk user-214=fiziosmk user-215=ambitiou feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 04:42:08 power sudo[2868662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:08 power sudo[2868662]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:08 power sudo[2868673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 04:42:08 power sudo[2868673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:08 power sudo[2868673]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:08 power sudo[2868677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xcpz5U0gEIQ0JUxM.~
Sep 10 04:42:08 power sudo[2868677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:08 power sudo[2868677]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:08 power sudo[2868681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xcpz5U0gEIQ0JUxM.~\''
Sep 10 04:42:08 power sudo[2868681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:08 power sudo[2868681]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:08 power sudo[2868686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xcpz5U0gEIQ0JUxM.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 04:42:08 power sudo[2868686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:08 power sudo[2868686]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:08 power sudo[2868690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 04:42:08 power sudo[2868690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:08 power sudo[2868690]: pam_unix(sudo:session): session closed for user root
Sep 10 04:42:09 power sudo[2869626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 04:42:10 power sudo[2869626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:42:10 power sudo[2869626]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:05 power sudo[2871656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 04:44:05 power sudo[2871656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:05 power sudo[2871656]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:05 power sudo[2871663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 04:44:05 power sudo[2871663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:05 power sudo[2871663]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:05 power sudo[2871677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 04:44:05 power sudo[2871677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:06 power sudo[2871677]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:06 power sudo[2871690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=zdmgpsor user-2=aquatech user-3=gorsajmk user-4=supremel user-5=v5srybi9dcdx user-6=vacuacti user-7=innofabl user-8=premiumi user-9=dslmk user-10=darkogor user-11=fnjorgmk user-12=prizmapl user-13=bozinovm user-14=tehnologija user-15=taneccom user-16=modernar user-17=inkigaic user-18=fffhpcwr user-19=starluxm user-20=radekrat user-21=fiziosmk user-22=ambitiou user-23=versusmk user-24=nationa2 user-25=onlinesh user-26=mapaspla user-27=solemor1 user-28=tcieuroc user-29=apgrupmk user-30=bogdanos user-31=carrent1 user-32=mediasol user-33=kardiome user-34=matratze user-35=euronic2 user-36=mediatag user-37=intelek1 user-38=lblawcom user-39=nucktra1 user-40=forzares user-41=nikimare user-42=aptekazd user-43=hausmark user-44=nikolov1 user-45=imdskopj user-46=albuname user-47=glammace user-48=infopor1
Sep 10 04:44:06 power sudo[2871690]: wp-toolkit : (command continued) user-49=vtranseu user-50=pravekom user-51=cosmatob user-52=euromaki user-53=elektrot user-54=zapovim1 user-55=chemhemc user-56=samasped user-57=nutrivim user-58=atspedco user-59=sssoluti user-60=cleanerm user-61=animatem user-62=progress user-63=recorgmk user-64=taktcomm user-65=solointe user-66=jaramk user-67=pelagini user-68=bbbustou user-69=kaoilmk user-70=biplmk user-71=ismassag user-72=workbenc user-73=mbmehani user-74=viplastc user-75=wineberr user-76=eurofarm user-77=solarinv user-78=golakkom user-79=electrol user-80=naksorgm user-81=eliksirz user-82=trigemat user-83=folklore user-84=bauerin2 user-85=cupidpro user-86=vegemk1 user-87=euronic3 user-88=conserva user-89=evberasm user-90=bonitavi user-91=tehnodro user-92=makdrone user-93=jpkomuna user-94=izzomk user-95=madzomk user-96=aptekafa user-97=evacommk user-98=gradbai1 user-99=dimpalne user-100=eaptekam user-101=fxxcom user-102=peshkai1 user-103=hotammk
Sep 10 04:44:06 power sudo[2871690]: wp-toolkit : (command continued) user-104=cajsproc user-105=anitermc user-106=youthgua user-107=stojnevi user-108=bauerbg user-109=uhostmk5 user-110=oouslave user-111=raremk user-112=trudovop user-113=viewinn user-114=vmro user-115=enaspotc user-116=avtogumi user-117=socioloz user-118=pelagoni user-119=evolvepl user-120=hidrommk user-121=frizered user-122=caramk user-123=ekostoc1 user-124=oncolog1 user-125=levantmk user-126=nefrolog user-127=berbermk user-128=edomcomm user-129=enochmk user-130=herbalpl user-131=sprintst user-132=dikimk12 user-133=seloviro user-134=kolened1 user-135=nlpmkorg user-136=centarba user-137=nolimits user-138=tealmk user-139=proverim user-140=dadarmk user-141=mstmmk user-142=goodnews user-143=gocruise user-144=gjorgeiv user-145=tradeyou user-146=dnevnoin user-147=robustco user-148=stravelm user-149=wondersp user-150=pecakome user-151=rastiraz user-152=holiyayt user-153=zvskopje user-154=zampmk user-155=busymard
Sep 10 04:44:06 power sudo[2871690]: wp-toolkit : (command continued) user-156=palenzok user-157=custome1 user-158=stokovna user-159=sparkupm user-160=klimimk user-161=stojano1 user-162=bovincom user-163=itradeco user-164=janiboja user-165=cabinetm user-166=vezilkac user-167=drleomk user-168=inotekso user-169=jpparkin user-170=arturaco user-171=screenme user-172=nasaidni user-173=karpospo user-174=ideaplus user-175=butelmk user-176=daris user-177=premiums user-178=premiuma user-179=kouzonco user-180=dalmacom user-181=cetplatf user-182=datalink user-183=kujnamon user-184=univerz1 user-185=velmk user-186=gogovan1 user-187=mpbmk user-188=agrosind user-189=workandt user-190=barececo user-191=simbiome user-192=delcevca user-193=getaldus user-194=mfashion user-195=dhamachi user-196=volkanco user-197=goartsym user-198=skyapart user-199=bianasho user-200=makoasmk user-201=rasmorgm user-202=urbanexp user-203=wikicamp user-204=detskagr user-205=spdcompu user-206=mspmk user-207=infobadi
Sep 10 04:44:06 power sudo[2871690]: wp-toolkit : (command continued) user-208=bizporta user-209=maleshne user-210=datelcom user-211=ivanjord user-212=groskome user-213=sedcmk user-214=polyeste user-215=vfxnestc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 04:44:06 power sudo[2871690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:06 power sudo[2871690]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:06 power sudo[2871703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep 10 04:44:06 power sudo[2871703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:06 power sudo[2871703]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:06 power sudo[2871712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vmro --output=json'
Sep 10 04:44:06 power sudo[2871712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:06 power sudo[2871712]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:09 power sudo[2871789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro /bin/sh -c 'cd /home/vmro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:44:09 power sudo[2871789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:09 power sudo[2871789]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:09 power sudo[2871796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vmro --user-current --json'
Sep 10 04:44:09 power sudo[2871796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:09 power sudo[2871796]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:09 power sudo[2871806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro LangPHP php_get_vhost_versions --output=json'
Sep 10 04:44:09 power sudo[2871806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:09 power sudo[2871806]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:09 power sudo[2871814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php83 --output=json'
Sep 10 04:44:09 power sudo[2871814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:10 power sudo[2871814]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:10 power sudo[2871847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:44:10 power sudo[2871847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:10 power sudo[2871847]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:10 power sudo[2871863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DomainInfo single_domain_data domain=vmro-dpmne.org.mk return_https_redirect_status=1 --output=json'
Sep 10 04:44:10 power sudo[2871863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:10 power sudo[2871863]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:10 power sudo[2871870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_vhost_ssl_components --output=json'
Sep 10 04:44:10 power sudo[2871870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:11 power sudo[2871870]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:11 power sudo[2871878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_ssl_vhosts --output=json'
Sep 10 04:44:11 power sudo[2871878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:11 power sudo[2871878]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:11 power sudo[2871885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro Mime list_redirects --output=json'
Sep 10 04:44:11 power sudo[2871885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:11 power sudo[2871885]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:13 power sudo[2871975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DirectoryPrivacy is_directory_protected dir=/home/vmro/public_html --output=json'
Sep 10 04:44:13 power sudo[2871975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:13 power sudo[2871975]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:17 power sudo[2872211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep 10 04:44:17 power sudo[2872211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:17 power sudo[2872211]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:17 power sudo[2872222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dadarmk --output=json'
Sep 10 04:44:17 power sudo[2872222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:17 power sudo[2872222]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:21 power sudo[2872369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/academy.dadar.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:44:21 power sudo[2872369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:21 power sudo[2872369]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:21 power sudo[2872377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep 10 04:44:21 power sudo[2872377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:21 power sudo[2872377]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:21 power sudo[2872397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk LangPHP php_get_vhost_versions --output=json'
Sep 10 04:44:22 power sudo[2872397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:22 power sudo[2872397]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:22 power sudo[2872403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:44:22 power sudo[2872403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:22 power sudo[2872403]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:22 power sudo[2872421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=academy.dadar.mk return_https_redirect_status=1 --output=json'
Sep 10 04:44:22 power sudo[2872421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:22 power sudo[2872421]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:22 power sudo[2872432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk Mime list_redirects --output=json'
Sep 10 04:44:22 power sudo[2872432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:22 power sudo[2872432]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:25 power sudo[2872523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/academy.dadar.mk --output=json'
Sep 10 04:44:25 power sudo[2872523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:25 power sudo[2872523]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:28 power sudo[2872731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep 10 04:44:28 power sudo[2872731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:29 power sudo[2872731]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:29 power sudo[2872737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=agrosind --output=json'
Sep 10 04:44:29 power sudo[2872737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:29 power sudo[2872737]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:35 power sudo[2872881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:44:35 power sudo[2872881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:35 power sudo[2872881]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:35 power sudo[2872888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user agrosind --user-current --json'
Sep 10 04:44:36 power sudo[2872888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:36 power sudo[2872888]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:36 power sudo[2872896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind LangPHP php_get_vhost_versions --output=json'
Sep 10 04:44:36 power sudo[2872896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:36 power sudo[2872896]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:36 power sudo[2872902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php81 --output=json'
Sep 10 04:44:36 power sudo[2872902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:36 power sudo[2872902]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:36 power sudo[2872916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:44:37 power sudo[2872916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:37 power sudo[2872916]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:37 power sudo[2872936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DomainInfo single_domain_data domain=agrosindikat.mk return_https_redirect_status=1 --output=json'
Sep 10 04:44:37 power sudo[2872936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:37 power sudo[2872936]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:37 power sudo[2872943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind Mime list_redirects --output=json'
Sep 10 04:44:37 power sudo[2872943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:37 power sudo[2872943]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:41 power sudo[2873089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DirectoryPrivacy is_directory_protected dir=/home/agrosind/public_html --output=json'
Sep 10 04:44:41 power sudo[2873089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:41 power sudo[2873089]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:42 power sudo[2873157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:44:42 power sudo[2873157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:42 power sudo[2873157]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:42 power sudo[2873163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:44:42 power sudo[2873163]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:44:42 power sudo[2873163]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:44:42 power sudo[2873163]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:44:42 power sudo[2873163]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:44:42 power sudo[2873163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:42 power sudo[2873163]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:42 power sudo[2873168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:44:42 power sudo[2873168]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:44:42 power sudo[2873168]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:44:42 power sudo[2873168]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:44:42 power sudo[2873168]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:44:42 power sudo[2873168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:42 power sudo[2873168]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:44 power sudo[2873293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:44:44 power sudo[2873293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:44 power sudo[2873293]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:44 power sudo[2873299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:44:44 power sudo[2873299]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:44:44 power sudo[2873299]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:44:44 power sudo[2873299]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:44:44 power sudo[2873299]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:44:44 power sudo[2873299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:44 power sudo[2873299]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:44 power sudo[2873305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:44:44 power sudo[2873305]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:44:44 power sudo[2873305]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:44:44 power sudo[2873305]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:44:44 power sudo[2873305]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:44:44 power sudo[2873305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:44 power sudo[2873305]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:45 power sudo[2873345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep 10 04:44:45 power sudo[2873345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:45 power sudo[2873345]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:45 power sudo[2873359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=fffhpcwr --output=json'
Sep 10 04:44:45 power sudo[2873359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:45 power sudo[2873359]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:50 power sudo[2873470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/al.rsbsp.org.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:44:50 power sudo[2873470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:50 power sudo[2873470]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:50 power sudo[2873478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep 10 04:44:50 power sudo[2873478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:50 power sudo[2873478]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:51 power sudo[2873485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr LangPHP php_get_vhost_versions --output=json'
Sep 10 04:44:51 power sudo[2873485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:51 power sudo[2873485]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:51 power sudo[2873494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:44:51 power sudo[2873494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:51 power sudo[2873494]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:51 power sudo[2873510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=al.rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep 10 04:44:51 power sudo[2873510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:51 power sudo[2873510]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:51 power sudo[2873516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr Mime list_redirects --output=json'
Sep 10 04:44:51 power sudo[2873516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:51 power sudo[2873516]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:54 power sudo[2873615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/al.rsbsp.org.mk --output=json'
Sep 10 04:44:54 power sudo[2873615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:54 power sudo[2873615]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:59 power sudo[2873923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep 10 04:44:59 power sudo[2873923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:59 power sudo[2873923]: pam_unix(sudo:session): session closed for user root
Sep 10 04:44:59 power sudo[2873939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ambitiou --output=json'
Sep 10 04:44:59 power sudo[2873939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:44:59 power sudo[2873939]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:01 power systemd[2874085]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:45:04 power sudo[2874218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/public_html/site && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:45:04 power sudo[2874218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:04 power sudo[2874218]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:04 power sudo[2874225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep 10 04:45:04 power sudo[2874225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:04 power sudo[2874225]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:04 power sudo[2874240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou LangPHP php_get_vhost_versions --output=json'
Sep 10 04:45:04 power sudo[2874240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:04 power sudo[2874240]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:04 power sudo[2874245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep 10 04:45:04 power sudo[2874245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:05 power sudo[2874245]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:05 power sudo[2874264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:45:05 power sudo[2874264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:05 power sudo[2874264]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:06 power sudo[2874285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep 10 04:45:06 power sudo[2874285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:06 power sudo[2874285]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:06 power sudo[2874298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou Mime list_redirects --output=json'
Sep 10 04:45:06 power sudo[2874298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:06 power sudo[2874298]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:09 power sudo[2874536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/public_html/site --output=json'
Sep 10 04:45:09 power sudo[2874536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:09 power sudo[2874536]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:13 power sudo[2874845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep 10 04:45:13 power sudo[2874845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:13 power sudo[2874845]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:13 power sudo[2874851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=animatem --output=json'
Sep 10 04:45:13 power sudo[2874851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:13 power sudo[2874851]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:19 power sudo[2874994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem /bin/sh -c 'cd /home/animatem/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:45:19 power sudo[2874994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:19 power sudo[2874994]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:19 power sudo[2875000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user animatem --user-current --json'
Sep 10 04:45:19 power sudo[2875000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:20 power sudo[2875000]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:20 power sudo[2875011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem LangPHP php_get_vhost_versions --output=json'
Sep 10 04:45:20 power sudo[2875011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:20 power sudo[2875011]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:20 power sudo[2875016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php73 --output=json'
Sep 10 04:45:20 power sudo[2875016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:20 power sudo[2875016]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:20 power sudo[2875029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:45:20 power sudo[2875029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:20 power sudo[2875029]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:21 power sudo[2875044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DomainInfo single_domain_data domain=animate.mk return_https_redirect_status=1 --output=json'
Sep 10 04:45:21 power sudo[2875044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:21 power sudo[2875044]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:21 power sudo[2875055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem Mime list_redirects --output=json'
Sep 10 04:45:21 power sudo[2875055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:21 power sudo[2875055]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:25 power sudo[2875211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DirectoryPrivacy is_directory_protected dir=/home/animatem/public_html --output=json'
Sep 10 04:45:25 power sudo[2875211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:25 power sudo[2875211]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:28 power sudo[2875431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep 10 04:45:28 power sudo[2875431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:29 power sudo[2875431]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:29 power sudo[2875439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=anitermc --output=json'
Sep 10 04:45:29 power sudo[2875439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:29 power sudo[2875439]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:40 power sudo[2875707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc /bin/sh -c 'cd /home/anitermc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:45:40 power sudo[2875707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:40 power sudo[2875707]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:40 power sudo[2875715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user anitermc --user-current --json'
Sep 10 04:45:40 power sudo[2875715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:40 power sudo[2875715]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:40 power sudo[2875725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc LangPHP php_get_vhost_versions --output=json'
Sep 10 04:45:40 power sudo[2875725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:40 power sudo[2875725]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:41 power sudo[2875732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:45:41 power sudo[2875732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:41 power sudo[2875732]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:41 power sudo[2875753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DomainInfo single_domain_data domain=aniterm.com.mk return_https_redirect_status=1 --output=json'
Sep 10 04:45:41 power sudo[2875753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:41 power sudo[2875753]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:41 power sudo[2875763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc Mime list_redirects --output=json'
Sep 10 04:45:41 power sudo[2875763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:41 power sudo[2875763]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:48 power sudo[2875929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DirectoryPrivacy is_directory_protected dir=/home/anitermc/public_html --output=json'
Sep 10 04:45:48 power sudo[2875929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:48 power sudo[2875929]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:52 power sudo[2876155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep 10 04:45:52 power sudo[2876155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:52 power sudo[2876155]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:52 power sudo[2876160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wineberr --output=json'
Sep 10 04:45:52 power sudo[2876160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:52 power sudo[2876160]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:58 power sudo[2876365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/app.wineberry.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:45:58 power sudo[2876365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:58 power sudo[2876365]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:58 power sudo[2876370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep 10 04:45:58 power sudo[2876370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:59 power sudo[2876370]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:59 power sudo[2876379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr LangPHP php_get_vhost_versions --output=json'
Sep 10 04:45:59 power sudo[2876379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:59 power sudo[2876379]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:59 power sudo[2876387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:45:59 power sudo[2876387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:45:59 power sudo[2876387]: pam_unix(sudo:session): session closed for user root
Sep 10 04:45:59 power sudo[2876414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=app.wineberry.mk return_https_redirect_status=1 --output=json'
Sep 10 04:45:59 power sudo[2876414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:00 power sudo[2876414]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:00 power sudo[2876423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr Mime list_redirects --output=json'
Sep 10 04:46:00 power sudo[2876423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:00 power sudo[2876423]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:03 power sudo[2876545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/app.wineberry.mk/bck --output=json'
Sep 10 04:46:03 power sudo[2876545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:03 power sudo[2876545]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:07 power sudo[2876778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep 10 04:46:08 power sudo[2876778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:08 power sudo[2876778]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:08 power sudo[2876787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=aptekazd --output=json'
Sep 10 04:46:08 power sudo[2876787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:08 power sudo[2876787]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:13 power sudo[2876904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:46:13 power sudo[2876904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:13 power sudo[2876904]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:13 power sudo[2876911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user aptekazd --user-current --json'
Sep 10 04:46:13 power sudo[2876911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:13 power sudo[2876911]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:13 power sudo[2876917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd LangPHP php_get_vhost_versions --output=json'
Sep 10 04:46:13 power sudo[2876917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:13 power sudo[2876917]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:13 power sudo[2876923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:46:13 power sudo[2876923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:13 power sudo[2876923]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:14 power sudo[2876944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DomainInfo single_domain_data domain=aptekazdravje.mk return_https_redirect_status=1 --output=json'
Sep 10 04:46:14 power sudo[2876944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:14 power sudo[2876944]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:14 power sudo[2876951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd Mime list_redirects --output=json'
Sep 10 04:46:14 power sudo[2876951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:14 power sudo[2876951]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:17 power sudo[2877050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DirectoryPrivacy is_directory_protected dir=/home/aptekazd/public_html --output=json'
Sep 10 04:46:17 power sudo[2877050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:17 power sudo[2877050]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:18 power sudo[2877110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:46:18 power sudo[2877110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:18 power sudo[2877110]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:18 power sudo[2877116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:46:18 power sudo[2877116]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:46:18 power sudo[2877116]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:46:18 power sudo[2877116]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:46:18 power sudo[2877116]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:46:18 power sudo[2877116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:18 power sudo[2877116]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:18 power sudo[2877121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:46:18 power sudo[2877121]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:46:18 power sudo[2877121]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:46:18 power sudo[2877121]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:46:18 power sudo[2877121]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:46:18 power sudo[2877121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:18 power sudo[2877121]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:20 power sudo[2877259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:46:20 power sudo[2877259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:20 power sudo[2877259]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:20 power sudo[2877265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:46:20 power sudo[2877265]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:46:20 power sudo[2877265]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:46:20 power sudo[2877265]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:46:20 power sudo[2877265]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:46:20 power sudo[2877265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:20 power sudo[2877265]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:20 power sudo[2877270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:46:20 power sudo[2877270]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:46:20 power sudo[2877270]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:46:20 power sudo[2877270]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:46:20 power sudo[2877270]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:46:20 power sudo[2877270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:20 power sudo[2877270]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:21 power sudo[2877321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep 10 04:46:21 power sudo[2877321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:21 power sudo[2877321]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:21 power sudo[2877330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=progress --output=json'
Sep 10 04:46:21 power sudo[2877330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:21 power sudo[2877330]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:26 power sudo[2877475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress /bin/sh -c 'cd /home/progress/artivo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:46:26 power sudo[2877475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:26 power sudo[2877475]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:26 power sudo[2877485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user progress --user-current --json'
Sep 10 04:46:26 power sudo[2877485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:26 power sudo[2877485]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:26 power sudo[2877494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress LangPHP php_get_vhost_versions --output=json'
Sep 10 04:46:26 power sudo[2877494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:27 power sudo[2877494]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:27 power sudo[2877500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:46:27 power sudo[2877500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:27 power sudo[2877500]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:27 power sudo[2877531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DomainInfo single_domain_data domain=artivo.mk return_https_redirect_status=1 --output=json'
Sep 10 04:46:27 power sudo[2877531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:27 power sudo[2877531]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:27 power sudo[2877538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress Mime list_redirects --output=json'
Sep 10 04:46:27 power sudo[2877538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:27 power sudo[2877538]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:31 power sudo[2877630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DirectoryPrivacy is_directory_protected dir=/home/progress/artivo.mk --output=json'
Sep 10 04:46:31 power sudo[2877630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:31 power sudo[2877630]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:34 power sudo[2877853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep 10 04:46:34 power sudo[2877853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:35 power sudo[2877853]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:35 power sudo[2877860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bbbustou --output=json'
Sep 10 04:46:35 power sudo[2877860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:35 power sudo[2877860]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:41 power sudo[2878013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:46:41 power sudo[2878013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:41 power sudo[2878013]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:41 power sudo[2878020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep 10 04:46:41 power sudo[2878020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:41 power sudo[2878020]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:41 power sudo[2878027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou LangPHP php_get_vhost_versions --output=json'
Sep 10 04:46:41 power sudo[2878027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:41 power sudo[2878027]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:41 power sudo[2878033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php84 --output=json'
Sep 10 04:46:41 power sudo[2878033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:42 power sudo[2878033]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:42 power sudo[2878050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:46:42 power sudo[2878050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:42 power sudo[2878050]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:42 power sudo[2878067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=bbbustours.mk return_https_redirect_status=1 --output=json'
Sep 10 04:46:42 power sudo[2878067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:42 power sudo[2878067]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:42 power sudo[2878074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou Mime list_redirects --output=json'
Sep 10 04:46:43 power sudo[2878074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:43 power sudo[2878074]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:46 power sudo[2878182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/public_html --output=json'
Sep 10 04:46:46 power sudo[2878182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:46 power sudo[2878182]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:50 power sudo[2878404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep 10 04:46:50 power sudo[2878404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:50 power sudo[2878404]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:50 power sudo[2878411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nationa2 --output=json'
Sep 10 04:46:50 power sudo[2878411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:50 power sudo[2878411]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:54 power sudo[2878500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 /bin/sh -c 'cd /home/nationa2/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:46:54 power sudo[2878500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:54 power sudo[2878500]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:54 power sudo[2878506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nationa2 --user-current --json'
Sep 10 04:46:54 power sudo[2878506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:54 power sudo[2878506]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:54 power sudo[2878513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 LangPHP php_get_vhost_versions --output=json'
Sep 10 04:46:54 power sudo[2878513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:54 power sudo[2878513]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:54 power sudo[2878519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php74 --output=json'
Sep 10 04:46:54 power sudo[2878519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:55 power sudo[2878519]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:55 power sudo[2878533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:46:55 power sudo[2878533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:55 power sudo[2878533]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:55 power sudo[2878553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DomainInfo single_domain_data domain=beactiveday.mk return_https_redirect_status=1 --output=json'
Sep 10 04:46:55 power sudo[2878553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:56 power sudo[2878553]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:56 power sudo[2878560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 Mime list_redirects --output=json'
Sep 10 04:46:56 power sudo[2878560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:56 power sudo[2878560]: pam_unix(sudo:session): session closed for user root
Sep 10 04:46:58 power sudo[2878657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DirectoryPrivacy is_directory_protected dir=/home/nationa2/public_html --output=json'
Sep 10 04:46:58 power sudo[2878657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:46:58 power sudo[2878657]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:12 power sudo[2880217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep 10 04:48:12 power sudo[2880217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:12 power sudo[2880217]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:12 power sudo[2880226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cetplatf --output=json'
Sep 10 04:48:12 power sudo[2880226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:12 power sudo[2880226]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:16 power sudo[2880313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/beep.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:48:16 power sudo[2880313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:17 power sudo[2880313]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:17 power sudo[2880319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 10 04:48:17 power sudo[2880319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:17 power sudo[2880319]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:17 power sudo[2880329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf LangPHP php_get_vhost_versions --output=json'
Sep 10 04:48:17 power sudo[2880329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:17 power sudo[2880329]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:17 power sudo[2880334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:48:17 power sudo[2880334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:17 power sudo[2880334]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:17 power sudo[2880348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=beep.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 04:48:17 power sudo[2880348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:18 power sudo[2880348]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:18 power sudo[2880354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf Mime list_redirects --output=json'
Sep 10 04:48:18 power sudo[2880354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:18 power sudo[2880354]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:20 power sudo[2880438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/beep.cetplatform.mk --output=json'
Sep 10 04:48:21 power sudo[2880438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:21 power sudo[2880438]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:24 power sudo[2880636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep 10 04:48:24 power sudo[2880636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:25 power sudo[2880636]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:25 power sudo[2880642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bianasho --output=json'
Sep 10 04:48:25 power sudo[2880642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:25 power sudo[2880642]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:32 power sudo[2880768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho /bin/sh -c 'cd /home/bianasho/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:48:32 power sudo[2880768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:32 power sudo[2880768]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:32 power sudo[2880775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bianasho --user-current --json'
Sep 10 04:48:32 power sudo[2880775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:32 power sudo[2880775]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:32 power sudo[2880789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho LangPHP php_get_vhost_versions --output=json'
Sep 10 04:48:32 power sudo[2880789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:32 power sudo[2880789]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:32 power sudo[2880795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:48:32 power sudo[2880795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:32 power sudo[2880795]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:34 power sudo[2880814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DomainInfo single_domain_data domain=bianashoes.mk return_https_redirect_status=1 --output=json'
Sep 10 04:48:34 power sudo[2880814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:34 power sudo[2880814]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:34 power sudo[2880823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho Mime list_redirects --output=json'
Sep 10 04:48:34 power sudo[2880823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:34 power sudo[2880823]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:39 power sudo[2880952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DirectoryPrivacy is_directory_protected dir=/home/bianasho/public_html --output=json'
Sep 10 04:48:39 power sudo[2880952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:39 power sudo[2880952]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:43 power sudo[2881171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep 10 04:48:43 power sudo[2881171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:43 power sudo[2881171]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:43 power sudo[2881183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=velmk --output=json'
Sep 10 04:48:43 power sudo[2881183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:43 power sudo[2881183]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:49 power sudo[2881288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk /bin/sh -c 'cd /home/velmk/blog.vel.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:48:49 power sudo[2881288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:49 power sudo[2881288]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:49 power sudo[2881294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user velmk --user-current --json'
Sep 10 04:48:49 power sudo[2881294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:49 power sudo[2881294]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:49 power sudo[2881299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk LangPHP php_get_vhost_versions --output=json'
Sep 10 04:48:49 power sudo[2881299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:49 power sudo[2881299]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:49 power sudo[2881304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:48:49 power sudo[2881304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:49 power sudo[2881304]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:50 power sudo[2881322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DomainInfo single_domain_data domain=blog.vel.mk return_https_redirect_status=1 --output=json'
Sep 10 04:48:50 power sudo[2881322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:51 power sudo[2881322]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:51 power sudo[2881328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk Mime list_redirects --output=json'
Sep 10 04:48:51 power sudo[2881328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:51 power sudo[2881328]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:54 power sudo[2881439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DirectoryPrivacy is_directory_protected dir=/home/velmk/blog.vel.mk --output=json'
Sep 10 04:48:54 power sudo[2881439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:54 power sudo[2881439]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:58 power sudo[2881645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep 10 04:48:58 power sudo[2881645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:58 power sudo[2881645]: pam_unix(sudo:session): session closed for user root
Sep 10 04:48:58 power sudo[2881650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enaspotc --output=json'
Sep 10 04:48:58 power sudo[2881650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:48:58 power sudo[2881650]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:01 power sudo[2881772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/boiling.pt && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:49:01 power sudo[2881772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:01 power sudo[2881772]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:01 power sudo[2881778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep 10 04:49:01 power sudo[2881778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:01 power sudo[2881778]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:02 power sudo[2881785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc LangPHP php_get_vhost_versions --output=json'
Sep 10 04:49:02 power sudo[2881785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:02 power sudo[2881785]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:02 power sudo[2881794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:49:02 power sudo[2881794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:02 power sudo[2881794]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:02 power sudo[2881815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=boiling.pt return_https_redirect_status=1 --output=json'
Sep 10 04:49:02 power sudo[2881815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:02 power sudo[2881815]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:02 power sudo[2881821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc Mime list_redirects --output=json'
Sep 10 04:49:02 power sudo[2881821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:02 power sudo[2881821]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:04 power sudo[2881909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/boiling.pt --output=json'
Sep 10 04:49:04 power sudo[2881909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:04 power sudo[2881909]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:08 power sudo[2882122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep 10 04:49:08 power sudo[2882122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:08 power sudo[2882122]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:08 power sudo[2882130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bonitavi --output=json'
Sep 10 04:49:08 power sudo[2882130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:08 power sudo[2882130]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:12 power sudo[2882254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi /bin/sh -c 'cd /home/bonitavi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:49:12 power sudo[2882254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:12 power sudo[2882254]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:12 power sudo[2882260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bonitavi --user-current --json'
Sep 10 04:49:12 power sudo[2882260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:13 power sudo[2882260]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:13 power sudo[2882267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi LangPHP php_get_vhost_versions --output=json'
Sep 10 04:49:13 power sudo[2882267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:13 power sudo[2882267]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:13 power sudo[2882274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:49:13 power sudo[2882274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:13 power sudo[2882274]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:13 power sudo[2882290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DomainInfo single_domain_data domain=bonita-vita.com return_https_redirect_status=1 --output=json'
Sep 10 04:49:13 power sudo[2882290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:13 power sudo[2882290]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:13 power sudo[2882299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi Mime list_redirects --output=json'
Sep 10 04:49:13 power sudo[2882299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:13 power sudo[2882299]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:16 power sudo[2882411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DirectoryPrivacy is_directory_protected dir=/home/bonitavi/public_html --output=json'
Sep 10 04:49:16 power sudo[2882411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:16 power sudo[2882411]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:19 power sudo[2882625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep 10 04:49:19 power sudo[2882625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:19 power sudo[2882625]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:19 power sudo[2882636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bovincom --output=json'
Sep 10 04:49:19 power sudo[2882636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:19 power sudo[2882636]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:27 power sudo[2882825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom /bin/sh -c 'cd /home/bovincom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:49:27 power sudo[2882825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:27 power sudo[2882825]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:27 power sudo[2882832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bovincom --user-current --json'
Sep 10 04:49:27 power sudo[2882832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:27 power sudo[2882832]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:27 power sudo[2882844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom LangPHP php_get_vhost_versions --output=json'
Sep 10 04:49:27 power sudo[2882844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:27 power sudo[2882844]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:27 power sudo[2882850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:49:27 power sudo[2882850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:27 power sudo[2882850]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:28 power sudo[2882878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DomainInfo single_domain_data domain=bovin.com.mk return_https_redirect_status=1 --output=json'
Sep 10 04:49:28 power sudo[2882878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:28 power sudo[2882878]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:28 power sudo[2882884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom Mime list_redirects --output=json'
Sep 10 04:49:28 power sudo[2882884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:28 power sudo[2882884]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:33 power sudo[2883010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DirectoryPrivacy is_directory_protected dir=/home/bovincom/public_html --output=json'
Sep 10 04:49:33 power sudo[2883010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:33 power sudo[2883010]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:37 power sudo[2883240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep 10 04:49:37 power sudo[2883240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:37 power sudo[2883240]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:37 power sudo[2883248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=butelmk --output=json'
Sep 10 04:49:37 power sudo[2883248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:37 power sudo[2883248]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:50 power sudo[2883515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk /bin/sh -c 'cd /home/butelmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:49:50 power sudo[2883515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:50 power sudo[2883515]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:50 power sudo[2883528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user butelmk --user-current --json'
Sep 10 04:49:50 power sudo[2883528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:50 power sudo[2883528]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:50 power sudo[2883535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk LangPHP php_get_vhost_versions --output=json'
Sep 10 04:49:50 power sudo[2883535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:50 power sudo[2883535]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:50 power sudo[2883541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 10 04:49:50 power sudo[2883541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:50 power sudo[2883541]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:50 power sudo[2883546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=alt-php73 --output=json'
Sep 10 04:49:50 power sudo[2883546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:51 power sudo[2883546]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:51 power sudo[2883562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:49:51 power sudo[2883562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:51 power sudo[2883562]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:51 power sudo[2883580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DomainInfo single_domain_data domain=butel.mk return_https_redirect_status=1 --output=json'
Sep 10 04:49:51 power sudo[2883580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:51 power sudo[2883580]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:51 power sudo[2883589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk Mime list_redirects --output=json'
Sep 10 04:49:51 power sudo[2883589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:52 power sudo[2883589]: pam_unix(sudo:session): session closed for user root
Sep 10 04:49:58 power sudo[2883750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DirectoryPrivacy is_directory_protected dir=/home/butelmk/public_html --output=json'
Sep 10 04:49:58 power sudo[2883750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:49:58 power sudo[2883750]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:01 power systemd[2884072]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:50:03 power sudo[2884219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep 10 04:50:03 power sudo[2884219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:03 power sudo[2884219]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:03 power sudo[2884227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=izzomk --output=json'
Sep 10 04:50:03 power sudo[2884227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:03 power sudo[2884227]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:11 power sudo[2884536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/caffeizzo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:50:11 power sudo[2884536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:11 power sudo[2884536]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:11 power sudo[2884544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep 10 04:50:11 power sudo[2884544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:11 power sudo[2884544]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:11 power sudo[2884551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk LangPHP php_get_vhost_versions --output=json'
Sep 10 04:50:11 power sudo[2884551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:12 power sudo[2884551]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:12 power sudo[2884564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:50:12 power sudo[2884564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:12 power sudo[2884564]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:12 power sudo[2884598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=caffeizzo.mk return_https_redirect_status=1 --output=json'
Sep 10 04:50:12 power sudo[2884598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:12 power sudo[2884598]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:12 power sudo[2884605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk Mime list_redirects --output=json'
Sep 10 04:50:12 power sudo[2884605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:12 power sudo[2884605]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:17 power sudo[2884728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/caffeizzo.mk --output=json'
Sep 10 04:50:17 power sudo[2884728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:17 power sudo[2884728]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:25 power sudo[2885040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/cateye.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:50:25 power sudo[2885040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:25 power sudo[2885040]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:25 power sudo[2885046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 10 04:50:25 power sudo[2885046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:25 power sudo[2885046]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:25 power sudo[2885054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:50:25 power sudo[2885054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:26 power sudo[2885054]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:26 power sudo[2885074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cateye.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 04:50:26 power sudo[2885074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:26 power sudo[2885074]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:29 power sudo[2885165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/cateye.cetplatform.mk --output=json'
Sep 10 04:50:29 power sudo[2885165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:29 power sudo[2885165]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:37 power sudo[2885484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:50:37 power sudo[2885484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:38 power sudo[2885484]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:38 power sudo[2885490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 10 04:50:38 power sudo[2885490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:38 power sudo[2885490]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:38 power sudo[2885497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:50:38 power sudo[2885497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:38 power sudo[2885497]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:39 power sudo[2885527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 04:50:39 power sudo[2885527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:39 power sudo[2885527]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:43 power sudo[2885663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/public_html --output=json'
Sep 10 04:50:43 power sudo[2885663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:43 power sudo[2885663]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:46 power sudo[2885851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep 10 04:50:46 power sudo[2885851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:46 power sudo[2885851]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:46 power sudo[2885859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=chemhemc --output=json'
Sep 10 04:50:46 power sudo[2885859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:46 power sudo[2885859]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:51 power sudo[2885934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:50:51 power sudo[2885934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:51 power sudo[2885934]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:51 power sudo[2885940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep 10 04:50:51 power sudo[2885940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:51 power sudo[2885940]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:51 power sudo[2885946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc LangPHP php_get_vhost_versions --output=json'
Sep 10 04:50:51 power sudo[2885946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:51 power sudo[2885946]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:51 power sudo[2885954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:50:51 power sudo[2885954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:51 power sudo[2885954]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:51 power sudo[2885970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=chemhem.com return_https_redirect_status=1 --output=json'
Sep 10 04:50:51 power sudo[2885970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:51 power sudo[2885970]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:51 power sudo[2885982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc Mime list_redirects --output=json'
Sep 10 04:50:51 power sudo[2885982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:51 power sudo[2885982]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:54 power sudo[2886071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/public_html --output=json'
Sep 10 04:50:54 power sudo[2886071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:54 power sudo[2886071]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:55 power sudo[2886136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:50:55 power sudo[2886136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:55 power sudo[2886136]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:55 power sudo[2886141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:50:55 power sudo[2886141]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:50:55 power sudo[2886141]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:50:55 power sudo[2886141]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:50:55 power sudo[2886141]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:50:55 power sudo[2886141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:55 power sudo[2886141]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:55 power sudo[2886146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:50:55 power sudo[2886146]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:50:55 power sudo[2886146]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:50:55 power sudo[2886146]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:50:55 power sudo[2886146]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:50:55 power sudo[2886146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:55 power sudo[2886146]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:57 power sudo[2886257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:50:57 power sudo[2886257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:57 power sudo[2886257]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:57 power sudo[2886262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:50:57 power sudo[2886262]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:50:57 power sudo[2886262]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:50:57 power sudo[2886262]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:50:57 power sudo[2886262]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:50:57 power sudo[2886262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:57 power sudo[2886262]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:57 power sudo[2886267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:50:57 power sudo[2886267]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:50:57 power sudo[2886267]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:50:57 power sudo[2886267]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:50:57 power sudo[2886267]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:50:57 power sudo[2886267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:57 power sudo[2886267]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:58 power sudo[2886310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep 10 04:50:58 power sudo[2886310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:58 power sudo[2886310]: pam_unix(sudo:session): session closed for user root
Sep 10 04:50:58 power sudo[2886321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cosmatob --output=json'
Sep 10 04:50:58 power sudo[2886321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:50:58 power sudo[2886321]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:05 power sudo[2886531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob /bin/sh -c 'cd /home/cosmatob/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:51:05 power sudo[2886531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:05 power sudo[2886531]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:05 power sudo[2886538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cosmatob --user-current --json'
Sep 10 04:51:05 power sudo[2886538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:05 power sudo[2886538]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:05 power sudo[2886551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob LangPHP php_get_vhost_versions --output=json'
Sep 10 04:51:05 power sudo[2886551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:05 power sudo[2886551]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:05 power sudo[2886557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:51:05 power sudo[2886557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:05 power sudo[2886557]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:06 power sudo[2886586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DomainInfo single_domain_data domain=cosmatobacco.mk return_https_redirect_status=1 --output=json'
Sep 10 04:51:06 power sudo[2886586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:06 power sudo[2886586]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:06 power sudo[2886594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob Mime list_redirects --output=json'
Sep 10 04:51:06 power sudo[2886594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:06 power sudo[2886594]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:11 power sudo[2886732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DirectoryPrivacy is_directory_protected dir=/home/cosmatob/public_html --output=json'
Sep 10 04:51:11 power sudo[2886732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:11 power sudo[2886732]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:18 power sudo[2887069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:51:18 power sudo[2887069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:18 power sudo[2887069]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:18 power sudo[2887076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep 10 04:51:18 power sudo[2887076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:19 power sudo[2887076]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:19 power sudo[2887083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:51:19 power sudo[2887083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:19 power sudo[2887083]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:19 power sudo[2887100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=dadar.mk return_https_redirect_status=1 --output=json'
Sep 10 04:51:19 power sudo[2887100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:19 power sudo[2887100]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:21 power sudo[2887193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/public_html --output=json'
Sep 10 04:51:21 power sudo[2887193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:21 power sudo[2887193]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:25 power sudo[2887408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep 10 04:51:25 power sudo[2887408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:25 power sudo[2887408]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:25 power sudo[2887418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=delcevca --output=json'
Sep 10 04:51:25 power sudo[2887418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:25 power sudo[2887418]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:30 power sudo[2887536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:51:30 power sudo[2887536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:30 power sudo[2887536]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:30 power sudo[2887543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user delcevca --user-current --json'
Sep 10 04:51:30 power sudo[2887543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:31 power sudo[2887543]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:31 power sudo[2887548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca LangPHP php_get_vhost_versions --output=json'
Sep 10 04:51:31 power sudo[2887548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:31 power sudo[2887548]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:31 power sudo[2887554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:51:31 power sudo[2887554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:31 power sudo[2887554]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:31 power sudo[2887575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DomainInfo single_domain_data domain=delcevcani.mk return_https_redirect_status=1 --output=json'
Sep 10 04:51:31 power sudo[2887575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:31 power sudo[2887575]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:31 power sudo[2887583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca Mime list_redirects --output=json'
Sep 10 04:51:31 power sudo[2887583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:31 power sudo[2887583]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:35 power sudo[2887679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DirectoryPrivacy is_directory_protected dir=/home/delcevca/public_html --output=json'
Sep 10 04:51:35 power sudo[2887679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:35 power sudo[2887679]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:36 power sudo[2887742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:51:36 power sudo[2887742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:36 power sudo[2887742]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:36 power sudo[2887747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:51:36 power sudo[2887747]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:51:36 power sudo[2887747]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:51:36 power sudo[2887747]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:51:36 power sudo[2887747]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:51:36 power sudo[2887747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:36 power sudo[2887747]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:36 power sudo[2887752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:51:36 power sudo[2887752]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:51:36 power sudo[2887752]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:51:36 power sudo[2887752]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:51:36 power sudo[2887752]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:51:36 power sudo[2887752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:36 power sudo[2887752]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:36 power sudo[2887758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:51:36 power sudo[2887758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:51:36 power sudo[2887758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:51:36 power sudo[2887758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:51:36 power sudo[2887758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:51:36 power sudo[2887758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:36 power sudo[2887758]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:38 power sudo[2887880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:51:38 power sudo[2887880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:38 power sudo[2887880]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:38 power sudo[2887885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:51:38 power sudo[2887885]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:51:38 power sudo[2887885]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:51:38 power sudo[2887885]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:51:38 power sudo[2887885]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:51:38 power sudo[2887885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:38 power sudo[2887885]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:38 power sudo[2887890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:51:38 power sudo[2887890]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:51:38 power sudo[2887890]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:51:38 power sudo[2887890]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:51:38 power sudo[2887890]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:51:38 power sudo[2887890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:38 power sudo[2887890]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:38 power sudo[2887895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:51:38 power sudo[2887895]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:51:38 power sudo[2887895]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:51:38 power sudo[2887895]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:51:38 power sudo[2887895]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:51:38 power sudo[2887895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:38 power sudo[2887895]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:39 power sudo[2887939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep 10 04:51:39 power sudo[2887939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:39 power sudo[2887939]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:39 power sudo[2887947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=edomcomm --output=json'
Sep 10 04:51:39 power sudo[2887947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:39 power sudo[2887947]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:42 power sudo[2888065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:51:42 power sudo[2888065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:42 power sudo[2888065]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:42 power sudo[2888075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user edomcomm --user-current --json'
Sep 10 04:51:42 power sudo[2888075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:42 power sudo[2888075]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:42 power sudo[2888085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm LangPHP php_get_vhost_versions --output=json'
Sep 10 04:51:42 power sudo[2888085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:42 power sudo[2888085]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:42 power sudo[2888091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:51:42 power sudo[2888091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:42 power sudo[2888091]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:43 power sudo[2888109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=deosol.mk return_https_redirect_status=1 --output=json'
Sep 10 04:51:43 power sudo[2888109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:43 power sudo[2888109]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:43 power sudo[2888117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm Mime list_redirects --output=json'
Sep 10 04:51:43 power sudo[2888117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:43 power sudo[2888117]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:45 power sudo[2888225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/w --output=json'
Sep 10 04:51:45 power sudo[2888225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:45 power sudo[2888225]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:52 power sudo[2888566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/ekobalans.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:51:52 power sudo[2888566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:52 power sudo[2888566]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:52 power sudo[2888578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 10 04:51:52 power sudo[2888578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:52 power sudo[2888578]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:52 power sudo[2888584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:51:52 power sudo[2888584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:52 power sudo[2888584]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:52 power sudo[2888602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=ekobalans.mk return_https_redirect_status=1 --output=json'
Sep 10 04:51:52 power sudo[2888602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:53 power sudo[2888602]: pam_unix(sudo:session): session closed for user root
Sep 10 04:51:55 power sudo[2888701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/ekobalans.mk --output=json'
Sep 10 04:51:55 power sudo[2888701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:51:55 power sudo[2888701]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:01 power sudo[2889058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/moetodete.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:52:01 power sudo[2889058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:01 power sudo[2889058]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:01 power sudo[2889077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 10 04:52:01 power sudo[2889077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:01 power sudo[2889077]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:01 power sudo[2889088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:52:01 power sudo[2889088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:01 power sudo[2889088]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:02 power sudo[2889131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=moetodete.mk return_https_redirect_status=1 --output=json'
Sep 10 04:52:02 power sudo[2889131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:02 power sudo[2889131]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:04 power sudo[2889249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/moetodete.mk --output=json'
Sep 10 04:52:04 power sudo[2889249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:04 power sudo[2889249]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:08 power sudo[2889512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep 10 04:52:08 power sudo[2889512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:08 power sudo[2889512]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:08 power sudo[2889518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=detskagr --output=json'
Sep 10 04:52:08 power sudo[2889518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:08 power sudo[2889518]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:15 power sudo[2889661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:52:15 power sudo[2889661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:15 power sudo[2889661]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:15 power sudo[2889669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user detskagr --user-current --json'
Sep 10 04:52:15 power sudo[2889669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:15 power sudo[2889669]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:15 power sudo[2889678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr LangPHP php_get_vhost_versions --output=json'
Sep 10 04:52:15 power sudo[2889678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:16 power sudo[2889678]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:16 power sudo[2889683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:52:16 power sudo[2889683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:16 power sudo[2889683]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:16 power sudo[2889698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DomainInfo single_domain_data domain=detskagradinka-prolet.mk return_https_redirect_status=1 --output=json'
Sep 10 04:52:16 power sudo[2889698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:16 power sudo[2889698]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:16 power sudo[2889711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr Mime list_redirects --output=json'
Sep 10 04:52:16 power sudo[2889711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:16 power sudo[2889711]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:20 power sudo[2889825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DirectoryPrivacy is_directory_protected dir=/home/detskagr/public_html/wordpress --output=json'
Sep 10 04:52:20 power sudo[2889825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:20 power sudo[2889825]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:21 power sudo[2889894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:52:21 power sudo[2889894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:21 power sudo[2889894]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:21 power sudo[2889899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 10 04:52:21 power sudo[2889899]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 10 04:52:21 power sudo[2889899]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 10 04:52:21 power sudo[2889899]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 10 04:52:21 power sudo[2889899]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:52:21 power sudo[2889899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:21 power sudo[2889899]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:21 power sudo[2889904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 10 04:52:21 power sudo[2889904]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 10 04:52:21 power sudo[2889904]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 10 04:52:21 power sudo[2889904]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 10 04:52:21 power sudo[2889904]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:52:21 power sudo[2889904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:21 power sudo[2889904]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:21 power sudo[2889910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep 10 04:52:21 power sudo[2889910]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep 10 04:52:21 power sudo[2889910]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep 10 04:52:21 power sudo[2889910]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep 10 04:52:21 power sudo[2889910]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:52:21 power sudo[2889910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:21 power sudo[2889910]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:23 power sudo[2890018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:52:23 power sudo[2890018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:23 power sudo[2890018]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:23 power sudo[2890024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 10 04:52:23 power sudo[2890024]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 10 04:52:23 power sudo[2890024]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 10 04:52:23 power sudo[2890024]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 10 04:52:23 power sudo[2890024]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:52:23 power sudo[2890024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:23 power sudo[2890024]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:23 power sudo[2890029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 10 04:52:23 power sudo[2890029]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 10 04:52:23 power sudo[2890029]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 10 04:52:23 power sudo[2890029]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 10 04:52:23 power sudo[2890029]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:52:23 power sudo[2890029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:23 power sudo[2890029]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:23 power sudo[2890034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep 10 04:52:23 power sudo[2890034]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep 10 04:52:23 power sudo[2890034]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep 10 04:52:23 power sudo[2890034]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep 10 04:52:23 power sudo[2890034]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:52:23 power sudo[2890034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:23 power sudo[2890034]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:24 power sudo[2890069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep 10 04:52:24 power sudo[2890069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:24 power sudo[2890069]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:24 power sudo[2890088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eaptekam --output=json'
Sep 10 04:52:24 power sudo[2890088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:24 power sudo[2890088]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:30 power sudo[2890212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam /bin/sh -c 'cd /home/eaptekam/dev.eapteka.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:52:30 power sudo[2890212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:30 power sudo[2890212]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:30 power sudo[2890219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eaptekam --user-current --json'
Sep 10 04:52:30 power sudo[2890219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:31 power sudo[2890219]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:31 power sudo[2890225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam LangPHP php_get_vhost_versions --output=json'
Sep 10 04:52:31 power sudo[2890225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:31 power sudo[2890225]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:31 power sudo[2890231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:52:31 power sudo[2890231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:31 power sudo[2890231]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:32 power sudo[2890255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DomainInfo single_domain_data domain=dev.eapteka.mk return_https_redirect_status=1 --output=json'
Sep 10 04:52:32 power sudo[2890255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:32 power sudo[2890255]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:32 power sudo[2890262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam Mime list_redirects --output=json'
Sep 10 04:52:32 power sudo[2890262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:32 power sudo[2890262]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:35 power sudo[2890369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DirectoryPrivacy is_directory_protected dir=/home/eaptekam/dev.eapteka.mk --output=json'
Sep 10 04:52:35 power sudo[2890369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:35 power sudo[2890369]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:39 power sudo[2890609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep 10 04:52:39 power sudo[2890609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:39 power sudo[2890609]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:39 power sudo[2890616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dimpalne --output=json'
Sep 10 04:52:39 power sudo[2890616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:39 power sudo[2890616]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:43 power sudo[2890759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne /bin/sh -c 'cd /home/dimpalne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:52:43 power sudo[2890759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:43 power sudo[2890759]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:43 power sudo[2890766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dimpalne --user-current --json'
Sep 10 04:52:43 power sudo[2890766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:44 power sudo[2890766]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:44 power sudo[2890777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne LangPHP php_get_vhost_versions --output=json'
Sep 10 04:52:44 power sudo[2890777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:44 power sudo[2890777]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:44 power sudo[2890782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:52:44 power sudo[2890782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:44 power sudo[2890782]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:44 power sudo[2890797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DomainInfo single_domain_data domain=dimpal.net return_https_redirect_status=1 --output=json'
Sep 10 04:52:44 power sudo[2890797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:44 power sudo[2890797]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:44 power sudo[2890808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne Mime list_redirects --output=json'
Sep 10 04:52:44 power sudo[2890808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:44 power sudo[2890808]: pam_unix(sudo:session): session closed for user root
Sep 10 04:52:47 power sudo[2890900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DirectoryPrivacy is_directory_protected dir=/home/dimpalne/public_html --output=json'
Sep 10 04:52:47 power sudo[2890900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:52:47 power sudo[2890900]: pam_unix(sudo:session): session closed for user root
Sep 10 04:54:25 power sudo[2892666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=dreamholidays.bbbustours.mk return_https_redirect_status=1 --output=json'
Sep 10 04:54:25 power sudo[2892666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:54:25 power sudo[2892666]: pam_unix(sudo:session): session closed for user root
Sep 10 04:54:27 power sudo[2892729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/dreamholidays.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:54:27 power sudo[2892729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:54:27 power sudo[2892729]: pam_unix(sudo:session): session closed for user root
Sep 10 04:54:27 power sudo[2892736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep 10 04:54:27 power sudo[2892736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:54:27 power sudo[2892736]: pam_unix(sudo:session): session closed for user root
Sep 10 04:54:27 power sudo[2892743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:54:27 power sudo[2892743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:54:27 power sudo[2892743]: pam_unix(sudo:session): session closed for user root
Sep 10 04:54:31 power sudo[2892862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/dreamholidays.mk --output=json'
Sep 10 04:54:31 power sudo[2892862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:54:31 power sudo[2892862]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:01 power systemd[2893483]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 04:55:07 power sudo[2893777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep 10 04:55:07 power sudo[2893777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:07 power sudo[2893777]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:07 power sudo[2893784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=drleomk --output=json'
Sep 10 04:55:07 power sudo[2893784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:07 power sudo[2893784]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:12 power sudo[2894054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk /bin/sh -c 'cd /home/drleomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:55:12 power sudo[2894054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:12 power sudo[2894054]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:12 power sudo[2894060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user drleomk --user-current --json'
Sep 10 04:55:12 power sudo[2894060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:12 power sudo[2894060]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:12 power sudo[2894073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk LangPHP php_get_vhost_versions --output=json'
Sep 10 04:55:12 power sudo[2894073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:12 power sudo[2894073]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:12 power sudo[2894078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:55:12 power sudo[2894078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:12 power sudo[2894078]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:13 power sudo[2894107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DomainInfo single_domain_data domain=drleo.mk return_https_redirect_status=1 --output=json'
Sep 10 04:55:13 power sudo[2894107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:13 power sudo[2894107]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:13 power sudo[2894114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk Mime list_redirects --output=json'
Sep 10 04:55:13 power sudo[2894114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:13 power sudo[2894114]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:15 power sudo[2894214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DirectoryPrivacy is_directory_protected dir=/home/drleomk/public_html --output=json'
Sep 10 04:55:15 power sudo[2894214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:16 power sudo[2894214]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:19 power sudo[2894437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep 10 04:55:20 power sudo[2894437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:20 power sudo[2894437]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:20 power sudo[2894449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=goodnews --output=json'
Sep 10 04:55:20 power sudo[2894449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:20 power sudo[2894449]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:24 power sudo[2894543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:55:24 power sudo[2894543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:24 power sudo[2894543]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:24 power sudo[2894552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 10 04:55:24 power sudo[2894552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:24 power sudo[2894552]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:24 power sudo[2894572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews LangPHP php_get_vhost_versions --output=json'
Sep 10 04:55:24 power sudo[2894572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:25 power sudo[2894572]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:25 power sudo[2894578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:55:25 power sudo[2894578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:25 power sudo[2894578]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:25 power sudo[2894631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=elan.mk return_https_redirect_status=1 --output=json'
Sep 10 04:55:25 power sudo[2894631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:25 power sudo[2894631]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:25 power sudo[2894639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews Mime list_redirects --output=json'
Sep 10 04:55:25 power sudo[2894639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:25 power sudo[2894639]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:30 power sudo[2894771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/elan.mk --output=json'
Sep 10 04:55:30 power sudo[2894771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:30 power sudo[2894771]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:30 power sudo[2894828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:55:30 power sudo[2894828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:30 power sudo[2894828]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:30 power sudo[2894833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 04:55:30 power sudo[2894833]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 04:55:30 power sudo[2894833]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 04:55:30 power sudo[2894833]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 04:55:30 power sudo[2894833]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:55:30 power sudo[2894833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:30 power sudo[2894833]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:30 power sudo[2894839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 04:55:30 power sudo[2894839]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 04:55:30 power sudo[2894839]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 04:55:30 power sudo[2894839]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 04:55:30 power sudo[2894839]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:55:30 power sudo[2894839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:30 power sudo[2894839]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:32 power sudo[2894939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:55:32 power sudo[2894939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:32 power sudo[2894939]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:32 power sudo[2894944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 04:55:32 power sudo[2894944]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 04:55:32 power sudo[2894944]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 04:55:32 power sudo[2894944]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 04:55:32 power sudo[2894944]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:55:32 power sudo[2894944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:32 power sudo[2894944]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:32 power sudo[2894949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 04:55:32 power sudo[2894949]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 04:55:32 power sudo[2894949]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 04:55:32 power sudo[2894949]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 04:55:32 power sudo[2894949]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:55:32 power sudo[2894949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:32 power sudo[2894949]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:33 power sudo[2894976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep 10 04:55:33 power sudo[2894976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:33 power sudo[2894976]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:33 power sudo[2894986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=electrol --output=json'
Sep 10 04:55:33 power sudo[2894986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:33 power sudo[2894986]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:37 power sudo[2895083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol /bin/sh -c 'cd /home/electrol/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:55:37 power sudo[2895083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:37 power sudo[2895083]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:37 power sudo[2895094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user electrol --user-current --json'
Sep 10 04:55:37 power sudo[2895094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:38 power sudo[2895094]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:38 power sudo[2895102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol LangPHP php_get_vhost_versions --output=json'
Sep 10 04:55:38 power sudo[2895102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:38 power sudo[2895102]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:38 power sudo[2895108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:55:38 power sudo[2895108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:38 power sudo[2895108]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:39 power sudo[2895133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DomainInfo single_domain_data domain=electrolight.mk return_https_redirect_status=1 --output=json'
Sep 10 04:55:39 power sudo[2895133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:39 power sudo[2895133]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:39 power sudo[2895143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol Mime list_redirects --output=json'
Sep 10 04:55:39 power sudo[2895143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:39 power sudo[2895143]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:43 power sudo[2895264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DirectoryPrivacy is_directory_protected dir=/home/electrol/public_html --output=json'
Sep 10 04:55:43 power sudo[2895264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:43 power sudo[2895264]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:47 power sudo[2895465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep 10 04:55:47 power sudo[2895465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:47 power sudo[2895465]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:47 power sudo[2895477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=elektrot --output=json'
Sep 10 04:55:47 power sudo[2895477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:47 power sudo[2895477]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:49 power sudo[2895535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot /bin/sh -c 'cd /home/elektrot/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:55:49 power sudo[2895535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:49 power sudo[2895535]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:49 power sudo[2895541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user elektrot --user-current --json'
Sep 10 04:55:49 power sudo[2895541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:49 power sudo[2895541]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:49 power sudo[2895552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot LangPHP php_get_vhost_versions --output=json'
Sep 10 04:55:49 power sudo[2895552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:49 power sudo[2895552]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:49 power sudo[2895557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:55:49 power sudo[2895557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:49 power sudo[2895557]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:50 power sudo[2895578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DomainInfo single_domain_data domain=elektrotehnika-inzinering.mk return_https_redirect_status=1 --output=json'
Sep 10 04:55:50 power sudo[2895578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:50 power sudo[2895578]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:50 power sudo[2895586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot Mime list_redirects --output=json'
Sep 10 04:55:50 power sudo[2895586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:50 power sudo[2895586]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:51 power sudo[2895689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy is_directory_protected dir=/home/elektrot/public_html/wp --output=json'
Sep 10 04:55:51 power sudo[2895689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:51 power sudo[2895689]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:51 power sudo[2895696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy list_users dir=/home/elektrot/public_html/wp --output=json'
Sep 10 04:55:51 power sudo[2895696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:52 power sudo[2895696]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:57 power sudo[2895938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:55:57 power sudo[2895938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:57 power sudo[2895938]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:57 power sudo[2895945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep 10 04:55:57 power sudo[2895945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:57 power sudo[2895945]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:57 power sudo[2895953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:55:57 power sudo[2895953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:57 power sudo[2895953]: pam_unix(sudo:session): session closed for user root
Sep 10 04:55:58 power sudo[2895972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=enaspot.com return_https_redirect_status=1 --output=json'
Sep 10 04:55:58 power sudo[2895972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:55:58 power sudo[2895972]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:01 power sudo[2896061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/public_html --output=json'
Sep 10 04:56:01 power sudo[2896061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:01 power sudo[2896061]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:04 power sudo[2896279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep 10 04:56:04 power sudo[2896279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:05 power sudo[2896279]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:05 power sudo[2896305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enochmk --output=json'
Sep 10 04:56:05 power sudo[2896305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:05 power sudo[2896305]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:10 power sudo[2896447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:56:10 power sudo[2896447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:10 power sudo[2896447]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:10 power sudo[2896454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enochmk --user-current --json'
Sep 10 04:56:10 power sudo[2896454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:11 power sudo[2896454]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:11 power sudo[2896459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk LangPHP php_get_vhost_versions --output=json'
Sep 10 04:56:11 power sudo[2896459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:11 power sudo[2896459]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:11 power sudo[2896465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:56:11 power sudo[2896465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:11 power sudo[2896465]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:12 power sudo[2896492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DomainInfo single_domain_data domain=enoch.mk return_https_redirect_status=1 --output=json'
Sep 10 04:56:12 power sudo[2896492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:12 power sudo[2896492]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:12 power sudo[2896502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk Mime list_redirects --output=json'
Sep 10 04:56:12 power sudo[2896502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:12 power sudo[2896502]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:16 power sudo[2896609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DirectoryPrivacy is_directory_protected dir=/home/enochmk/public_html --output=json'
Sep 10 04:56:16 power sudo[2896609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:16 power sudo[2896609]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:17 power sudo[2896678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:56:17 power sudo[2896678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:17 power sudo[2896678]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:17 power sudo[2896683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 04:56:17 power sudo[2896683]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 04:56:17 power sudo[2896683]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 04:56:17 power sudo[2896683]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 04:56:17 power sudo[2896683]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:56:17 power sudo[2896683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:17 power sudo[2896683]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:17 power sudo[2896688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 04:56:17 power sudo[2896688]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 04:56:17 power sudo[2896688]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 04:56:17 power sudo[2896688]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 04:56:17 power sudo[2896688]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:56:17 power sudo[2896688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:17 power sudo[2896688]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:19 power sudo[2896795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:56:19 power sudo[2896795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:19 power sudo[2896795]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:19 power sudo[2896801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 04:56:19 power sudo[2896801]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 04:56:19 power sudo[2896801]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 04:56:19 power sudo[2896801]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 04:56:19 power sudo[2896801]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:56:19 power sudo[2896801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:19 power sudo[2896801]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:19 power sudo[2896806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 04:56:19 power sudo[2896806]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 04:56:19 power sudo[2896806]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 04:56:19 power sudo[2896806]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 04:56:19 power sudo[2896806]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:56:19 power sudo[2896806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:19 power sudo[2896806]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:22 power sudo[2896919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/equip.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:56:22 power sudo[2896919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:22 power sudo[2896919]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:23 power sudo[2896926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 10 04:56:23 power sudo[2896926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:23 power sudo[2896926]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:23 power sudo[2896939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:56:23 power sudo[2896939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:23 power sudo[2896939]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:23 power sudo[2896955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=equip.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 04:56:23 power sudo[2896955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:23 power sudo[2896955]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:25 power sudo[2897035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/equip.cetplatform.mk --output=json'
Sep 10 04:56:25 power sudo[2897035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:25 power sudo[2897035]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:29 power sudo[2897234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep 10 04:56:29 power sudo[2897234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:29 power sudo[2897234]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:29 power sudo[2897241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eurofarm --output=json'
Sep 10 04:56:29 power sudo[2897241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:29 power sudo[2897241]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:37 power sudo[2897408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm /bin/sh -c 'cd /home/eurofarm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:56:37 power sudo[2897408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:37 power sudo[2897408]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:37 power sudo[2897415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eurofarm --user-current --json'
Sep 10 04:56:37 power sudo[2897415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:38 power sudo[2897415]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:38 power sudo[2897421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm LangPHP php_get_vhost_versions --output=json'
Sep 10 04:56:38 power sudo[2897421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:38 power sudo[2897421]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:38 power sudo[2897426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:56:38 power sudo[2897426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:38 power sudo[2897426]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:38 power sudo[2897445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DomainInfo single_domain_data domain=eurofarm.com.mk return_https_redirect_status=1 --output=json'
Sep 10 04:56:38 power sudo[2897445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:38 power sudo[2897445]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:38 power sudo[2897451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm Mime list_redirects --output=json'
Sep 10 04:56:38 power sudo[2897451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:38 power sudo[2897451]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:43 power sudo[2897594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DirectoryPrivacy is_directory_protected dir=/home/eurofarm/public_html --output=json'
Sep 10 04:56:43 power sudo[2897594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:43 power sudo[2897594]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:47 power sudo[2897821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep 10 04:56:47 power sudo[2897821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:47 power sudo[2897821]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:47 power sudo[2897828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=euromaki --output=json'
Sep 10 04:56:47 power sudo[2897828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:47 power sudo[2897828]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:51 power sudo[2897940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki /bin/sh -c 'cd /home/euromaki/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:56:51 power sudo[2897940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:51 power sudo[2897940]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:51 power sudo[2897947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user euromaki --user-current --json'
Sep 10 04:56:51 power sudo[2897947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:51 power sudo[2897947]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:51 power sudo[2897956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki LangPHP php_get_vhost_versions --output=json'
Sep 10 04:56:51 power sudo[2897956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:51 power sudo[2897956]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:51 power sudo[2897962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:56:51 power sudo[2897962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:51 power sudo[2897962]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:52 power sudo[2897977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DomainInfo single_domain_data domain=euromakinsurance.mk return_https_redirect_status=1 --output=json'
Sep 10 04:56:52 power sudo[2897977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:52 power sudo[2897977]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:52 power sudo[2897988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki Mime list_redirects --output=json'
Sep 10 04:56:52 power sudo[2897988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:52 power sudo[2897988]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:56 power sudo[2898135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DirectoryPrivacy is_directory_protected dir=/home/euromaki/public_html --output=json'
Sep 10 04:56:56 power sudo[2898135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:56 power sudo[2898135]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:59 power sudo[2898342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep 10 04:56:59 power sudo[2898342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:59 power sudo[2898342]: pam_unix(sudo:session): session closed for user root
Sep 10 04:56:59 power sudo[2898349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evberasm --output=json'
Sep 10 04:56:59 power sudo[2898349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:56:59 power sudo[2898349]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:06 power sudo[2898554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm /bin/sh -c 'cd /home/evberasm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:57:06 power sudo[2898554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:06 power sudo[2898554]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:06 power sudo[2898560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evberasm --user-current --json'
Sep 10 04:57:06 power sudo[2898560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:07 power sudo[2898560]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:07 power sudo[2898567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm LangPHP php_get_vhost_versions --output=json'
Sep 10 04:57:07 power sudo[2898567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:07 power sudo[2898567]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:07 power sudo[2898579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:57:07 power sudo[2898579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:07 power sudo[2898579]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:07 power sudo[2898594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DomainInfo single_domain_data domain=evberasmusplus.com.mk return_https_redirect_status=1 --output=json'
Sep 10 04:57:07 power sudo[2898594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:07 power sudo[2898594]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:07 power sudo[2898601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm Mime list_redirects --output=json'
Sep 10 04:57:07 power sudo[2898601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:07 power sudo[2898601]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:11 power sudo[2898733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DirectoryPrivacy is_directory_protected dir=/home/evberasm/public_html/wp --output=json'
Sep 10 04:57:11 power sudo[2898733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:11 power sudo[2898733]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:14 power sudo[2898944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep 10 04:57:14 power sudo[2898944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:14 power sudo[2898944]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:14 power sudo[2898950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evolvepl --output=json'
Sep 10 04:57:14 power sudo[2898950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:14 power sudo[2898950]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:18 power sudo[2899038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:57:18 power sudo[2899038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:19 power sudo[2899038]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:19 power sudo[2899047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evolvepl --user-current --json'
Sep 10 04:57:19 power sudo[2899047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:19 power sudo[2899047]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:19 power sudo[2899058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl LangPHP php_get_vhost_versions --output=json'
Sep 10 04:57:19 power sudo[2899058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:19 power sudo[2899058]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:19 power sudo[2899070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:57:19 power sudo[2899070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:19 power sudo[2899070]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:20 power sudo[2899099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DomainInfo single_domain_data domain=evolveplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 04:57:20 power sudo[2899099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:20 power sudo[2899099]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:20 power sudo[2899110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl Mime list_redirects --output=json'
Sep 10 04:57:20 power sudo[2899110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:20 power sudo[2899110]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:23 power sudo[2899229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DirectoryPrivacy is_directory_protected dir=/home/evolvepl/public_html --output=json'
Sep 10 04:57:23 power sudo[2899229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:23 power sudo[2899229]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:24 power sudo[2899304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:57:24 power sudo[2899304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:24 power sudo[2899304]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:24 power sudo[2899309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:57:24 power sudo[2899309]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:57:24 power sudo[2899309]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:57:24 power sudo[2899309]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:57:24 power sudo[2899309]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:57:24 power sudo[2899309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:24 power sudo[2899309]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:24 power sudo[2899315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:57:24 power sudo[2899315]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:57:24 power sudo[2899315]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:57:24 power sudo[2899315]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:57:24 power sudo[2899315]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:57:24 power sudo[2899315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:24 power sudo[2899315]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:24 power sudo[2899323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:57:24 power sudo[2899323]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:57:24 power sudo[2899323]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:57:24 power sudo[2899323]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:57:24 power sudo[2899323]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:57:24 power sudo[2899323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:24 power sudo[2899323]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:26 power sudo[2899441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:57:26 power sudo[2899441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:26 power sudo[2899441]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:26 power sudo[2899446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:57:26 power sudo[2899446]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:57:26 power sudo[2899446]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:57:26 power sudo[2899446]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:57:26 power sudo[2899446]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:57:26 power sudo[2899446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:26 power sudo[2899446]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:26 power sudo[2899451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:57:26 power sudo[2899451]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:57:26 power sudo[2899451]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:57:26 power sudo[2899451]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:57:26 power sudo[2899451]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:57:26 power sudo[2899451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:26 power sudo[2899451]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:26 power sudo[2899462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:57:26 power sudo[2899462]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:57:26 power sudo[2899462]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:57:26 power sudo[2899462]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:57:26 power sudo[2899462]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:57:26 power sudo[2899462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:26 power sudo[2899462]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:31 power sudo[2899598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/ey.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:57:31 power sudo[2899598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:31 power sudo[2899598]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:31 power sudo[2899604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 10 04:57:31 power sudo[2899604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:31 power sudo[2899604]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:31 power sudo[2899617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:57:31 power sudo[2899617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:31 power sudo[2899617]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:32 power sudo[2899632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=ey.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 04:57:32 power sudo[2899632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:32 power sudo[2899632]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:34 power sudo[2899728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/ey.cetplatform.mk --output=json'
Sep 10 04:57:34 power sudo[2899728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:34 power sudo[2899728]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:38 power sudo[2899952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep 10 04:57:38 power sudo[2899952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:38 power sudo[2899952]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:38 power sudo[2899962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=holiyayt --output=json'
Sep 10 04:57:38 power sudo[2899962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:38 power sudo[2899962]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:41 power sudo[2900061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/fitkit.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:57:41 power sudo[2900061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:41 power sudo[2900061]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:42 power sudo[2900067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 10 04:57:42 power sudo[2900067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:42 power sudo[2900067]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:42 power sudo[2900074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt LangPHP php_get_vhost_versions --output=json'
Sep 10 04:57:42 power sudo[2900074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:42 power sudo[2900074]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:42 power sudo[2900088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:57:42 power sudo[2900088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:42 power sudo[2900088]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:42 power sudo[2900105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=fitkit.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 10 04:57:42 power sudo[2900105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:42 power sudo[2900105]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:42 power sudo[2900111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt Mime list_redirects --output=json'
Sep 10 04:57:42 power sudo[2900111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:42 power sudo[2900111]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:44 power sudo[2900185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/fitkit.holiyaytravel.com --output=json'
Sep 10 04:57:44 power sudo[2900185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:44 power sudo[2900185]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:47 power sudo[2900389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep 10 04:57:47 power sudo[2900389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:48 power sudo[2900389]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:48 power sudo[2900397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=v5srybi9dcdx --output=json'
Sep 10 04:57:48 power sudo[2900397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:48 power sudo[2900397]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:50 power sudo[2900466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/flowoptstudio.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:57:50 power sudo[2900466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:50 power sudo[2900466]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:50 power sudo[2900472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep 10 04:57:50 power sudo[2900472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:51 power sudo[2900472]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:51 power sudo[2900485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx LangPHP php_get_vhost_versions --output=json'
Sep 10 04:57:51 power sudo[2900485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:51 power sudo[2900485]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:51 power sudo[2900492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:57:51 power sudo[2900492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:51 power sudo[2900492]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:51 power sudo[2900512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=flowoptstudio.com return_https_redirect_status=1 --output=json'
Sep 10 04:57:51 power sudo[2900512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:51 power sudo[2900512]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:51 power sudo[2900518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx Mime list_redirects --output=json'
Sep 10 04:57:51 power sudo[2900518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:51 power sudo[2900518]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:54 power sudo[2900614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/flowoptstudio.com --output=json'
Sep 10 04:57:54 power sudo[2900614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:54 power sudo[2900614]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:58 power sudo[2900824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep 10 04:57:58 power sudo[2900824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:58 power sudo[2900824]: pam_unix(sudo:session): session closed for user root
Sep 10 04:57:58 power sudo[2900834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=folklore --output=json'
Sep 10 04:57:58 power sudo[2900834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:57:58 power sudo[2900834]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:01 power sudo[2900915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:58:01 power sudo[2900915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:01 power sudo[2900915]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:01 power sudo[2900921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user folklore --user-current --json'
Sep 10 04:58:01 power sudo[2900921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:01 power sudo[2900921]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:01 power sudo[2900940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore LangPHP php_get_vhost_versions --output=json'
Sep 10 04:58:01 power sudo[2900940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:01 power sudo[2900940]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:01 power sudo[2900945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:58:01 power sudo[2900945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:01 power sudo[2900945]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:02 power sudo[2900961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DomainInfo single_domain_data domain=folklorefestivals.com return_https_redirect_status=1 --output=json'
Sep 10 04:58:02 power sudo[2900961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:02 power sudo[2900961]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:02 power sudo[2900968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore Mime list_redirects --output=json'
Sep 10 04:58:02 power sudo[2900968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:02 power sudo[2900968]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:04 power sudo[2901041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DirectoryPrivacy is_directory_protected dir=/home/folklore/public_html --output=json'
Sep 10 04:58:04 power sudo[2901041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:04 power sudo[2901041]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:04 power sudo[2901091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:58:04 power sudo[2901091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:04 power sudo[2901091]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:04 power sudo[2901096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:58:04 power sudo[2901096]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:58:04 power sudo[2901096]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:58:04 power sudo[2901096]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:58:04 power sudo[2901096]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:58:05 power sudo[2901096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:05 power sudo[2901096]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:05 power sudo[2901101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:58:05 power sudo[2901101]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:58:05 power sudo[2901101]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:58:05 power sudo[2901101]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:58:05 power sudo[2901101]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:58:05 power sudo[2901101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:05 power sudo[2901101]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:05 power sudo[2901106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:58:05 power sudo[2901106]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:58:05 power sudo[2901106]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:58:05 power sudo[2901106]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:58:05 power sudo[2901106]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:58:05 power sudo[2901106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:05 power sudo[2901106]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:06 power sudo[2901236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:58:06 power sudo[2901236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:06 power sudo[2901236]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:06 power sudo[2901242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:58:06 power sudo[2901242]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:58:06 power sudo[2901242]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:58:06 power sudo[2901242]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:58:06 power sudo[2901242]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:58:06 power sudo[2901242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:06 power sudo[2901242]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:06 power sudo[2901247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:58:06 power sudo[2901247]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:58:06 power sudo[2901247]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:58:06 power sudo[2901247]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:58:06 power sudo[2901247]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:58:06 power sudo[2901247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:06 power sudo[2901247]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:06 power sudo[2901254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:58:06 power sudo[2901254]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:58:06 power sudo[2901254]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:58:06 power sudo[2901254]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:58:06 power sudo[2901254]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:58:06 power sudo[2901254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:06 power sudo[2901254]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:07 power sudo[2901281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep 10 04:58:07 power sudo[2901281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:07 power sudo[2901281]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:07 power sudo[2901291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=forzares --output=json'
Sep 10 04:58:07 power sudo[2901291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:07 power sudo[2901291]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:13 power sudo[2901417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares /bin/sh -c 'cd /home/forzares/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:58:13 power sudo[2901417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:13 power sudo[2901417]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:13 power sudo[2901427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user forzares --user-current --json'
Sep 10 04:58:13 power sudo[2901427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:13 power sudo[2901427]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:13 power sudo[2901434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares LangPHP php_get_vhost_versions --output=json'
Sep 10 04:58:13 power sudo[2901434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:13 power sudo[2901434]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:13 power sudo[2901444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:58:13 power sudo[2901444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:13 power sudo[2901444]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:14 power sudo[2901462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DomainInfo single_domain_data domain=forzarestaurant.com.mk return_https_redirect_status=1 --output=json'
Sep 10 04:58:14 power sudo[2901462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:14 power sudo[2901462]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:14 power sudo[2901469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares Mime list_redirects --output=json'
Sep 10 04:58:14 power sudo[2901469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:14 power sudo[2901469]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:17 power sudo[2901591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DirectoryPrivacy is_directory_protected dir=/home/forzares/public_html --output=json'
Sep 10 04:58:17 power sudo[2901591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:17 power sudo[2901591]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:20 power sudo[2901772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep 10 04:58:20 power sudo[2901772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:20 power sudo[2901772]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:20 power sudo[2901780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=getaldus --output=json'
Sep 10 04:58:21 power sudo[2901780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:21 power sudo[2901780]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:23 power sudo[2901854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus /bin/sh -c 'cd /home/getaldus/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:58:23 power sudo[2901854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:23 power sudo[2901854]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:23 power sudo[2901861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user getaldus --user-current --json'
Sep 10 04:58:23 power sudo[2901861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:23 power sudo[2901861]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:23 power sudo[2901872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus LangPHP php_get_vhost_versions --output=json'
Sep 10 04:58:23 power sudo[2901872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:23 power sudo[2901872]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:23 power sudo[2901883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:58:23 power sudo[2901883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:23 power sudo[2901883]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:24 power sudo[2901898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DomainInfo single_domain_data domain=getaldus.mk return_https_redirect_status=1 --output=json'
Sep 10 04:58:24 power sudo[2901898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:24 power sudo[2901898]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:24 power sudo[2901906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus Mime list_redirects --output=json'
Sep 10 04:58:24 power sudo[2901906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:24 power sudo[2901906]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:25 power sudo[2901989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DirectoryPrivacy is_directory_protected dir=/home/getaldus/public_html --output=json'
Sep 10 04:58:25 power sudo[2901989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:25 power sudo[2901989]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:29 power sudo[2902195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep 10 04:58:29 power sudo[2902195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:29 power sudo[2902195]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:29 power sudo[2902203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gocruise --output=json'
Sep 10 04:58:29 power sudo[2902203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:29 power sudo[2902203]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:34 power sudo[2902322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise /bin/sh -c 'cd /home/gocruise/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:58:34 power sudo[2902322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:34 power sudo[2902322]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:34 power sudo[2902328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gocruise --user-current --json'
Sep 10 04:58:34 power sudo[2902328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:35 power sudo[2902328]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:35 power sudo[2902337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise LangPHP php_get_vhost_versions --output=json'
Sep 10 04:58:35 power sudo[2902337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:35 power sudo[2902337]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:35 power sudo[2902342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:58:35 power sudo[2902342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:35 power sudo[2902342]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:35 power sudo[2902370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DomainInfo single_domain_data domain=gocruise.mk return_https_redirect_status=1 --output=json'
Sep 10 04:58:35 power sudo[2902370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:36 power sudo[2902370]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:36 power sudo[2902376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise Mime list_redirects --output=json'
Sep 10 04:58:36 power sudo[2902376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:36 power sudo[2902376]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:39 power sudo[2902539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DirectoryPrivacy is_directory_protected dir=/home/gocruise/public_html --output=json'
Sep 10 04:58:39 power sudo[2902539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:39 power sudo[2902539]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:42 power sudo[2902773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep 10 04:58:42 power sudo[2902773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:43 power sudo[2902773]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:43 power sudo[2902780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gogovan1 --output=json'
Sep 10 04:58:43 power sudo[2902780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:43 power sudo[2902780]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:47 power sudo[2902872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 /bin/sh -c 'cd /home/gogovan1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:58:47 power sudo[2902872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:47 power sudo[2902872]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:47 power sudo[2902878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gogovan1 --user-current --json'
Sep 10 04:58:47 power sudo[2902878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:47 power sudo[2902878]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:47 power sudo[2902890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 LangPHP php_get_vhost_versions --output=json'
Sep 10 04:58:47 power sudo[2902890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:47 power sudo[2902890]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:47 power sudo[2902895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:58:47 power sudo[2902895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:47 power sudo[2902895]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:47 power sudo[2902912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DomainInfo single_domain_data domain=gogovan.mk return_https_redirect_status=1 --output=json'
Sep 10 04:58:48 power sudo[2902912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:48 power sudo[2902912]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:48 power sudo[2902919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 Mime list_redirects --output=json'
Sep 10 04:58:48 power sudo[2902919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:48 power sudo[2902919]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:50 power sudo[2903023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DirectoryPrivacy is_directory_protected dir=/home/gogovan1/public_html --output=json'
Sep 10 04:58:50 power sudo[2903023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:50 power sudo[2903023]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:54 power sudo[2903263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep 10 04:58:54 power sudo[2903263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:54 power sudo[2903263]: pam_unix(sudo:session): session closed for user root
Sep 10 04:58:54 power sudo[2903272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=golakkom --output=json'
Sep 10 04:58:54 power sudo[2903272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:58:54 power sudo[2903272]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:01 power sudo[2903417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 04:59:01 power sudo[2903417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:01 power sudo[2903417]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:01 power sudo[2903423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user golakkom --user-current --json'
Sep 10 04:59:01 power sudo[2903423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:02 power sudo[2903423]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:02 power sudo[2903432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom LangPHP php_get_vhost_versions --output=json'
Sep 10 04:59:02 power sudo[2903432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:02 power sudo[2903432]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:02 power sudo[2903437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 04:59:02 power sudo[2903437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:02 power sudo[2903437]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:02 power sudo[2903455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DomainInfo single_domain_data domain=golak-komerc.mk return_https_redirect_status=1 --output=json'
Sep 10 04:59:02 power sudo[2903455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:02 power sudo[2903455]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:02 power sudo[2903461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom Mime list_redirects --output=json'
Sep 10 04:59:02 power sudo[2903461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:02 power sudo[2903461]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:06 power sudo[2903604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DirectoryPrivacy is_directory_protected dir=/home/golakkom/public_html --output=json'
Sep 10 04:59:06 power sudo[2903604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:06 power sudo[2903604]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:07 power sudo[2903682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:59:07 power sudo[2903682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:07 power sudo[2903682]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:07 power sudo[2903703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 04:59:07 power sudo[2903703]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 04:59:07 power sudo[2903703]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 04:59:07 power sudo[2903703]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 04:59:07 power sudo[2903703]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:59:07 power sudo[2903703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:07 power sudo[2903703]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:07 power sudo[2903708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:59:07 power sudo[2903708]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:59:07 power sudo[2903708]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:59:07 power sudo[2903708]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:59:07 power sudo[2903708]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:59:07 power sudo[2903708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:07 power sudo[2903708]: pam_unix(sudo:session): session closed for user root
Sep 10 04:59:07 power sudo[2903715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 04:59:07 power sudo[2903715]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 04:59:07 power sudo[2903715]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 04:59:07 power sudo[2903715]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 04:59:07 power sudo[2903715]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 04:59:07 power sudo[2903715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 04:59:07 power sudo[2903715]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:01 power systemd[2904907]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:00:01 power systemd[2904908]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 05:00:01 power systemd[2904909]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 05:00:01 power systemd[2904911]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 05:00:05 power sudo[2905245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:00:05 power sudo[2905245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:06 power sudo[2905245]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:06 power sudo[2905254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 10 05:00:06 power sudo[2905254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:06 power sudo[2905254]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:06 power sudo[2905275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:00:06 power sudo[2905275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:06 power sudo[2905275]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:07 power sudo[2905322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=goodnews.mk return_https_redirect_status=1 --output=json'
Sep 10 05:00:07 power sudo[2905322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:07 power sudo[2905322]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:10 power sudo[2905613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/public_html --output=json'
Sep 10 05:00:10 power sudo[2905613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:10 power sudo[2905613]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:15 power sudo[2906053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep 10 05:00:15 power sudo[2906053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:16 power sudo[2906053]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:16 power sudo[2906066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=herbalpl --output=json'
Sep 10 05:00:16 power sudo[2906066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:16 power sudo[2906066]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:22 power sudo[2906219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl /bin/sh -c 'cd /home/herbalpl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:00:22 power sudo[2906219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:22 power sudo[2906219]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:22 power sudo[2906225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user herbalpl --user-current --json'
Sep 10 05:00:22 power sudo[2906225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:22 power sudo[2906225]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:22 power sudo[2906231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl LangPHP php_get_vhost_versions --output=json'
Sep 10 05:00:22 power sudo[2906231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:22 power sudo[2906231]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:22 power sudo[2906236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:00:22 power sudo[2906236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:22 power sudo[2906236]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:23 power sudo[2906260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DomainInfo single_domain_data domain=herbalplus.mk return_https_redirect_status=1 --output=json'
Sep 10 05:00:23 power sudo[2906260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:23 power sudo[2906260]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:23 power sudo[2906268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl Mime list_redirects --output=json'
Sep 10 05:00:23 power sudo[2906268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:23 power sudo[2906268]: pam_unix(sudo:session): session closed for user root
Sep 10 05:00:27 power sudo[2906370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DirectoryPrivacy is_directory_protected dir=/home/herbalpl/public_html --output=json'
Sep 10 05:00:27 power sudo[2906370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:00:27 power sudo[2906370]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:11 power sudo[2907317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/hero.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:01:11 power sudo[2907317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:11 power sudo[2907317]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:11 power sudo[2907323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 10 05:01:11 power sudo[2907323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:11 power sudo[2907323]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:11 power sudo[2907334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:01:11 power sudo[2907334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:11 power sudo[2907334]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:12 power sudo[2907358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=hero.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 05:01:12 power sudo[2907358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:12 power sudo[2907358]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:14 power sudo[2907444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/hero.cetplatform.mk --output=json'
Sep 10 05:01:14 power sudo[2907444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:15 power sudo[2907444]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:22 power sudo[2907728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:01:22 power sudo[2907728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:22 power sudo[2907728]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:22 power sudo[2907738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 10 05:01:22 power sudo[2907738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:22 power sudo[2907738]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:22 power sudo[2907744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:01:22 power sudo[2907744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:22 power sudo[2907744]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:23 power sudo[2907777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 10 05:01:23 power sudo[2907777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:23 power sudo[2907777]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:26 power sudo[2907882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/public_html --output=json'
Sep 10 05:01:26 power sudo[2907882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:26 power sudo[2907882]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:27 power sudo[2907937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:01:27 power sudo[2907937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:27 power sudo[2907937]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:27 power sudo[2907942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:01:27 power sudo[2907942]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:01:27 power sudo[2907942]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:01:27 power sudo[2907942]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:01:27 power sudo[2907942]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:01:27 power sudo[2907942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:27 power sudo[2907942]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:27 power sudo[2907947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:01:27 power sudo[2907947]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:01:27 power sudo[2907947]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:01:27 power sudo[2907947]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:01:27 power sudo[2907947]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:01:27 power sudo[2907947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:27 power sudo[2907947]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:27 power sudo[2907959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:01:27 power sudo[2907959]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:01:27 power sudo[2907959]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:01:27 power sudo[2907959]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:01:27 power sudo[2907959]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:01:27 power sudo[2907959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:27 power sudo[2907959]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:29 power sudo[2908054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:01:29 power sudo[2908054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:29 power sudo[2908054]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:29 power sudo[2908059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:01:29 power sudo[2908059]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:01:29 power sudo[2908059]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:01:29 power sudo[2908059]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:01:29 power sudo[2908059]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:01:29 power sudo[2908059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:29 power sudo[2908059]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:29 power sudo[2908064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:01:29 power sudo[2908064]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:01:29 power sudo[2908064]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:01:29 power sudo[2908064]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:01:29 power sudo[2908064]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:01:29 power sudo[2908064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:29 power sudo[2908064]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:29 power sudo[2908075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:01:29 power sudo[2908075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:01:29 power sudo[2908075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:01:29 power sudo[2908075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:01:29 power sudo[2908075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:01:29 power sudo[2908075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:29 power sudo[2908075]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:30 power sudo[2908107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep 10 05:01:30 power sudo[2908107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:30 power sudo[2908107]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:30 power sudo[2908113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vezilkac --output=json'
Sep 10 05:01:30 power sudo[2908113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:30 power sudo[2908113]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:35 power sudo[2908217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/vezden.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:01:35 power sudo[2908217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:35 power sudo[2908217]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:35 power sudo[2908223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 10 05:01:35 power sudo[2908223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:35 power sudo[2908223]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:35 power sudo[2908228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac LangPHP php_get_vhost_versions --output=json'
Sep 10 05:01:35 power sudo[2908228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:35 power sudo[2908228]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:35 power sudo[2908233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:01:35 power sudo[2908233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:35 power sudo[2908233]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:36 power sudo[2908250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezden.mk return_https_redirect_status=1 --output=json'
Sep 10 05:01:36 power sudo[2908250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:36 power sudo[2908250]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:36 power sudo[2908257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Mime list_redirects --output=json'
Sep 10 05:01:36 power sudo[2908257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:36 power sudo[2908257]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:38 power sudo[2908341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/vezden.mk --output=json'
Sep 10 05:01:38 power sudo[2908341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:39 power sudo[2908341]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:55 power sudo[2908790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/metatet && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:01:55 power sudo[2908790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:55 power sudo[2908790]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:55 power sudo[2908799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 10 05:01:55 power sudo[2908799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:55 power sudo[2908799]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:55 power sudo[2908805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:01:55 power sudo[2908805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:55 power sudo[2908805]: pam_unix(sudo:session): session closed for user root
Sep 10 05:01:55 power sudo[2908823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=metatet.com return_https_redirect_status=1 --output=json'
Sep 10 05:01:55 power sudo[2908823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:01:55 power sudo[2908823]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:01 power sudo[2908962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/metatet --output=json'
Sep 10 05:02:01 power sudo[2908962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:01 power sudo[2908962]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:18 power sudo[2909538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:02:18 power sudo[2909538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:18 power sudo[2909538]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:18 power sudo[2909544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 10 05:02:18 power sudo[2909544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:19 power sudo[2909544]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:19 power sudo[2909553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:02:19 power sudo[2909553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:19 power sudo[2909553]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:19 power sudo[2909567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezilka.com return_https_redirect_status=1 --output=json'
Sep 10 05:02:19 power sudo[2909567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:19 power sudo[2909567]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:26 power sudo[2909721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html --output=json'
Sep 10 05:02:26 power sudo[2909721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:26 power sudo[2909721]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:34 power sudo[2910038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/sorabotnici && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:02:34 power sudo[2910038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:34 power sudo[2910038]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:34 power sudo[2910044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 10 05:02:34 power sudo[2910044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:35 power sudo[2910044]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:35 power sudo[2910054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:02:35 power sudo[2910054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:35 power sudo[2910054]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:35 power sudo[2910073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=sorabotnici.vezilka.com return_https_redirect_status=1 --output=json'
Sep 10 05:02:35 power sudo[2910073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:35 power sudo[2910073]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:37 power sudo[2910157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/sorabotnici --output=json'
Sep 10 05:02:37 power sudo[2910157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:37 power sudo[2910157]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:44 power sudo[2910468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/pp && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:02:44 power sudo[2910468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:44 power sudo[2910468]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:44 power sudo[2910474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 10 05:02:44 power sudo[2910474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:44 power sudo[2910474]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:44 power sudo[2910480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:02:44 power sudo[2910480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:44 power sudo[2910480]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:45 power sudo[2910493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=pp.denicija.mk return_https_redirect_status=1 --output=json'
Sep 10 05:02:45 power sudo[2910493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:45 power sudo[2910493]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:47 power sudo[2910573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/pp --output=json'
Sep 10 05:02:47 power sudo[2910573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:47 power sudo[2910573]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:50 power sudo[2910789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep 10 05:02:50 power sudo[2910789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:50 power sudo[2910789]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:50 power sudo[2910804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=madzomk --output=json'
Sep 10 05:02:50 power sudo[2910804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:50 power sudo[2910804]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:56 power sudo[2910932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk /bin/sh -c 'cd /home/madzomk/hotelcitypark.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:02:56 power sudo[2910932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:56 power sudo[2910932]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:56 power sudo[2910938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user madzomk --user-current --json'
Sep 10 05:02:56 power sudo[2910938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:56 power sudo[2910938]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:56 power sudo[2910949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk LangPHP php_get_vhost_versions --output=json'
Sep 10 05:02:56 power sudo[2910949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:56 power sudo[2910949]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:56 power sudo[2910955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:02:56 power sudo[2910955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:56 power sudo[2910955]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:56 power sudo[2910973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DomainInfo single_domain_data domain=hotelcitypark.mk return_https_redirect_status=1 --output=json'
Sep 10 05:02:56 power sudo[2910973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:57 power sudo[2910973]: pam_unix(sudo:session): session closed for user root
Sep 10 05:02:57 power sudo[2910982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk Mime list_redirects --output=json'
Sep 10 05:02:57 power sudo[2910982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:02:57 power sudo[2910982]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:00 power sudo[2911108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DirectoryPrivacy is_directory_protected dir=/home/madzomk/hotelcitypark.mk --output=json'
Sep 10 05:03:00 power sudo[2911108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:01 power sudo[2911108]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:05 power sudo[2911344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep 10 05:03:05 power sudo[2911344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:05 power sudo[2911344]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:05 power sudo[2911350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=imdskopj --output=json'
Sep 10 05:03:05 power sudo[2911350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:05 power sudo[2911350]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:08 power sudo[2911438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj /bin/sh -c 'cd /home/imdskopj/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:03:08 power sudo[2911438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:08 power sudo[2911438]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:08 power sudo[2911445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user imdskopj --user-current --json'
Sep 10 05:03:08 power sudo[2911445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:08 power sudo[2911445]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:08 power sudo[2911451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj LangPHP php_get_vhost_versions --output=json'
Sep 10 05:03:08 power sudo[2911451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:08 power sudo[2911451]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:08 power sudo[2911456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:03:08 power sudo[2911456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:08 power sudo[2911456]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:08 power sudo[2911471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DomainInfo single_domain_data domain=imdskopje.mk return_https_redirect_status=1 --output=json'
Sep 10 05:03:09 power sudo[2911471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:09 power sudo[2911471]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:09 power sudo[2911478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj Mime list_redirects --output=json'
Sep 10 05:03:09 power sudo[2911478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:09 power sudo[2911478]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:11 power sudo[2911625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DirectoryPrivacy is_directory_protected dir=/home/imdskopj/public_html --output=json'
Sep 10 05:03:11 power sudo[2911625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:11 power sudo[2911625]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:15 power sudo[2911864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep 10 05:03:15 power sudo[2911864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:15 power sudo[2911864]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:15 power sudo[2911871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=infopor1 --output=json'
Sep 10 05:03:15 power sudo[2911871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:15 power sudo[2911871]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:20 power sudo[2911970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:03:20 power sudo[2911970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:20 power sudo[2911970]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:20 power sudo[2911976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user infopor1 --user-current --json'
Sep 10 05:03:20 power sudo[2911976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:21 power sudo[2911976]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:21 power sudo[2911982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 LangPHP php_get_vhost_versions --output=json'
Sep 10 05:03:21 power sudo[2911982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:21 power sudo[2911982]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:21 power sudo[2911995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:03:21 power sudo[2911995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:21 power sudo[2911995]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:21 power sudo[2912011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DomainInfo single_domain_data domain=infoportal.mk return_https_redirect_status=1 --output=json'
Sep 10 05:03:21 power sudo[2912011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:21 power sudo[2912011]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:21 power sudo[2912019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 Mime list_redirects --output=json'
Sep 10 05:03:22 power sudo[2912019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:22 power sudo[2912019]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:24 power sudo[2912107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DirectoryPrivacy is_directory_protected dir=/home/infopor1/public_html --output=json'
Sep 10 05:03:24 power sudo[2912107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:25 power sudo[2912107]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:25 power sudo[2912170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:25 power sudo[2912170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:25 power sudo[2912170]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:25 power sudo[2912175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:03:25 power sudo[2912175]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:03:25 power sudo[2912175]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:03:25 power sudo[2912175]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:03:25 power sudo[2912175]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:25 power sudo[2912175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:25 power sudo[2912175]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:25 power sudo[2912180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:03:25 power sudo[2912180]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:03:25 power sudo[2912180]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:03:25 power sudo[2912180]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:03:25 power sudo[2912180]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:25 power sudo[2912180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:26 power sudo[2912180]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:26 power sudo[2912191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:03:26 power sudo[2912191]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:03:26 power sudo[2912191]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:03:26 power sudo[2912191]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:03:26 power sudo[2912191]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:26 power sudo[2912191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:26 power sudo[2912191]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:27 power sudo[2912298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:27 power sudo[2912298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:27 power sudo[2912298]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:27 power sudo[2912303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:03:27 power sudo[2912303]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:03:27 power sudo[2912303]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:03:27 power sudo[2912303]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:03:27 power sudo[2912303]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:27 power sudo[2912303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:27 power sudo[2912303]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:27 power sudo[2912308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:03:27 power sudo[2912308]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:03:27 power sudo[2912308]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:03:27 power sudo[2912308]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:03:27 power sudo[2912308]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:27 power sudo[2912308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:28 power sudo[2912308]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:28 power sudo[2912314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:03:28 power sudo[2912314]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:03:28 power sudo[2912314]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:03:28 power sudo[2912314]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:03:28 power sudo[2912314]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:28 power sudo[2912314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:28 power sudo[2912314]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:28 power sudo[2912352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep 10 05:03:28 power sudo[2912352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:29 power sudo[2912352]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:29 power sudo[2912360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=intelek1 --output=json'
Sep 10 05:03:29 power sudo[2912360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:29 power sudo[2912360]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:33 power sudo[2912452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:03:33 power sudo[2912452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:33 power sudo[2912452]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:33 power sudo[2912458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user intelek1 --user-current --json'
Sep 10 05:03:33 power sudo[2912458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:33 power sudo[2912458]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:33 power sudo[2912465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 LangPHP php_get_vhost_versions --output=json'
Sep 10 05:03:33 power sudo[2912465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:33 power sudo[2912465]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:33 power sudo[2912472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:03:33 power sudo[2912472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:33 power sudo[2912472]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:34 power sudo[2912493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DomainInfo single_domain_data domain=intelekt-bb.com return_https_redirect_status=1 --output=json'
Sep 10 05:03:34 power sudo[2912493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:34 power sudo[2912493]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:34 power sudo[2912506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 Mime list_redirects --output=json'
Sep 10 05:03:34 power sudo[2912506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:34 power sudo[2912506]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:37 power sudo[2912605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DirectoryPrivacy is_directory_protected dir=/home/intelek1/public_html --output=json'
Sep 10 05:03:37 power sudo[2912605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:37 power sudo[2912605]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:38 power sudo[2912677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:38 power sudo[2912677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:38 power sudo[2912677]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:38 power sudo[2912682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:03:38 power sudo[2912682]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:03:38 power sudo[2912682]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:03:38 power sudo[2912682]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:03:38 power sudo[2912682]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:38 power sudo[2912682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:38 power sudo[2912682]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:38 power sudo[2912687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:03:38 power sudo[2912687]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:03:38 power sudo[2912687]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:03:38 power sudo[2912687]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:03:38 power sudo[2912687]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:38 power sudo[2912687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:38 power sudo[2912687]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:38 power sudo[2912693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:03:38 power sudo[2912693]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:03:38 power sudo[2912693]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:03:38 power sudo[2912693]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:03:38 power sudo[2912693]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:38 power sudo[2912693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:38 power sudo[2912693]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:40 power sudo[2912832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:40 power sudo[2912832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:40 power sudo[2912832]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:40 power sudo[2912837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:03:40 power sudo[2912837]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:03:40 power sudo[2912837]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:03:40 power sudo[2912837]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:03:40 power sudo[2912837]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:40 power sudo[2912837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:40 power sudo[2912837]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:40 power sudo[2912842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:03:40 power sudo[2912842]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:03:40 power sudo[2912842]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:03:40 power sudo[2912842]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:03:40 power sudo[2912842]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:40 power sudo[2912842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:40 power sudo[2912842]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:40 power sudo[2912848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:03:40 power sudo[2912848]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:03:40 power sudo[2912848]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:03:40 power sudo[2912848]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:03:40 power sudo[2912848]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:03:40 power sudo[2912848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:40 power sudo[2912848]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:42 power sudo[2912926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=invoices.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 10 05:03:42 power sudo[2912926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:42 power sudo[2912926]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:44 power sudo[2912963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/invoices.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:03:44 power sudo[2912963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:44 power sudo[2912963]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:44 power sudo[2912973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 10 05:03:44 power sudo[2912973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:44 power sudo[2912973]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:44 power sudo[2912979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:03:44 power sudo[2912979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:44 power sudo[2912979]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:46 power sudo[2913071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/invoices.holiyaytravel.com --output=json'
Sep 10 05:03:46 power sudo[2913071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:46 power sudo[2913071]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:50 power sudo[2913287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep 10 05:03:50 power sudo[2913287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:50 power sudo[2913287]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:50 power sudo[2913294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jpparkin --output=json'
Sep 10 05:03:50 power sudo[2913294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:50 power sudo[2913294]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:53 power sudo[2913377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin /bin/sh -c 'cd /home/jpparkin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:03:53 power sudo[2913377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:53 power sudo[2913377]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:53 power sudo[2913384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jpparkin --user-current --json'
Sep 10 05:03:53 power sudo[2913384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:53 power sudo[2913384]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:53 power sudo[2913389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin LangPHP php_get_vhost_versions --output=json'
Sep 10 05:03:53 power sudo[2913389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:53 power sudo[2913389]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:53 power sudo[2913395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:03:53 power sudo[2913395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:53 power sudo[2913395]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:54 power sudo[2913414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DomainInfo single_domain_data domain=jpparkinzinegotino.mk return_https_redirect_status=1 --output=json'
Sep 10 05:03:54 power sudo[2913414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:54 power sudo[2913414]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:54 power sudo[2913428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin Mime list_redirects --output=json'
Sep 10 05:03:54 power sudo[2913428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:54 power sudo[2913428]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:56 power sudo[2913497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DirectoryPrivacy is_directory_protected dir=/home/jpparkin/public_html --output=json'
Sep 10 05:03:56 power sudo[2913497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:56 power sudo[2913497]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:59 power sudo[2913673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep 10 05:03:59 power sudo[2913673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:59 power sudo[2913673]: pam_unix(sudo:session): session closed for user root
Sep 10 05:03:59 power sudo[2913681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=karpospo --output=json'
Sep 10 05:03:59 power sudo[2913681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:03:59 power sudo[2913681]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:03 power sudo[2913801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo /bin/sh -c 'cd /home/karpospo/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:04:03 power sudo[2913801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:03 power sudo[2913801]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:03 power sudo[2913808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user karpospo --user-current --json'
Sep 10 05:04:03 power sudo[2913808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:04 power sudo[2913808]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:04 power sudo[2913813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo LangPHP php_get_vhost_versions --output=json'
Sep 10 05:04:04 power sudo[2913813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:04 power sudo[2913813]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:04 power sudo[2913819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:04:04 power sudo[2913819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:04 power sudo[2913819]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:04 power sudo[2913838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DomainInfo single_domain_data domain=karpospoliklinika.com.mk return_https_redirect_status=1 --output=json'
Sep 10 05:04:04 power sudo[2913838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:04 power sudo[2913838]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:04 power sudo[2913844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo Mime list_redirects --output=json'
Sep 10 05:04:04 power sudo[2913844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:04 power sudo[2913844]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:07 power sudo[2913969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DirectoryPrivacy is_directory_protected dir=/home/karpospo/public_html --output=json'
Sep 10 05:04:07 power sudo[2913969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:07 power sudo[2913969]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:14 power sudo[2914310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:04:14 power sudo[2914310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:14 power sudo[2914310]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:14 power sudo[2914316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 10 05:04:14 power sudo[2914316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:14 power sudo[2914316]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:14 power sudo[2914329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:04:14 power sudo[2914329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:14 power sudo[2914329]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:14 power sudo[2914343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=kaysharov.com return_https_redirect_status=1 --output=json'
Sep 10 05:04:14 power sudo[2914343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:15 power sudo[2914343]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:17 power sudo[2914438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com --output=json'
Sep 10 05:04:17 power sudo[2914438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:17 power sudo[2914438]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:27 power sudo[2914784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:04:27 power sudo[2914784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:27 power sudo[2914784]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:27 power sudo[2914790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 10 05:04:27 power sudo[2914790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:27 power sudo[2914790]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:27 power sudo[2914799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:04:27 power sudo[2914799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:27 power sudo[2914799]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:30 power sudo[2914897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com/test --output=json'
Sep 10 05:04:30 power sudo[2914897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:30 power sudo[2914897]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:34 power sudo[2915109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep 10 05:04:34 power sudo[2915109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:34 power sudo[2915109]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:34 power sudo[2915114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kolened1 --output=json'
Sep 10 05:04:34 power sudo[2915114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:34 power sudo[2915114]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:46 power sudo[2915328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:04:46 power sudo[2915328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:46 power sudo[2915328]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:46 power sudo[2915335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kolened1 --user-current --json'
Sep 10 05:04:46 power sudo[2915335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:46 power sudo[2915335]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:46 power sudo[2915341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 LangPHP php_get_vhost_versions --output=json'
Sep 10 05:04:46 power sudo[2915341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:47 power sudo[2915341]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:47 power sudo[2915346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:04:47 power sudo[2915346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:47 power sudo[2915346]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:47 power sudo[2915363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DomainInfo single_domain_data domain=kolenedelkovski.edu.mk return_https_redirect_status=1 --output=json'
Sep 10 05:04:47 power sudo[2915363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:47 power sudo[2915363]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:47 power sudo[2915369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 Mime list_redirects --output=json'
Sep 10 05:04:47 power sudo[2915369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:47 power sudo[2915369]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:54 power sudo[2915523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DirectoryPrivacy is_directory_protected dir=/home/kolened1/public_html --output=json'
Sep 10 05:04:54 power sudo[2915523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:54 power sudo[2915523]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:55 power sudo[2915600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:04:55 power sudo[2915600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:55 power sudo[2915600]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:55 power sudo[2915605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:04:55 power sudo[2915605]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:04:55 power sudo[2915605]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:04:55 power sudo[2915605]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:04:55 power sudo[2915605]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:04:55 power sudo[2915605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:55 power sudo[2915605]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:55 power sudo[2915610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:04:55 power sudo[2915610]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:04:55 power sudo[2915610]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:04:55 power sudo[2915610]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:04:55 power sudo[2915610]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:04:55 power sudo[2915610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:55 power sudo[2915610]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:57 power sudo[2915727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:04:57 power sudo[2915727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:57 power sudo[2915727]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:57 power sudo[2915732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:04:57 power sudo[2915732]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:04:57 power sudo[2915732]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:04:57 power sudo[2915732]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:04:57 power sudo[2915732]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:04:57 power sudo[2915732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:57 power sudo[2915732]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:57 power sudo[2915737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:04:57 power sudo[2915737]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:04:57 power sudo[2915737]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:04:57 power sudo[2915737]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:04:57 power sudo[2915737]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:04:57 power sudo[2915737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:57 power sudo[2915737]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:58 power sudo[2915775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep 10 05:04:58 power sudo[2915775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:58 power sudo[2915775]: pam_unix(sudo:session): session closed for user root
Sep 10 05:04:58 power sudo[2915781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kouzonco --output=json'
Sep 10 05:04:58 power sudo[2915781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:04:58 power sudo[2915781]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:01 power systemd[2915952]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:05:02 power sudo[2915993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco /bin/sh -c 'cd /home/kouzonco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:05:02 power sudo[2915993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:02 power sudo[2915993]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:02 power sudo[2916000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kouzonco --user-current --json'
Sep 10 05:05:02 power sudo[2916000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:02 power sudo[2916000]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:02 power sudo[2916009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco LangPHP php_get_vhost_versions --output=json'
Sep 10 05:05:02 power sudo[2916009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:02 power sudo[2916009]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:02 power sudo[2916015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:05:02 power sudo[2916015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:02 power sudo[2916015]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:03 power sudo[2916030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DomainInfo single_domain_data domain=kouzon.com.hn return_https_redirect_status=1 --output=json'
Sep 10 05:05:03 power sudo[2916030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:03 power sudo[2916030]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:03 power sudo[2916039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco Mime list_redirects --output=json'
Sep 10 05:05:03 power sudo[2916039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:03 power sudo[2916039]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:05 power sudo[2916117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DirectoryPrivacy is_directory_protected dir=/home/kouzonco/public_html --output=json'
Sep 10 05:05:05 power sudo[2916117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:05 power sudo[2916117]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:09 power sudo[2916325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep 10 05:05:09 power sudo[2916325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:09 power sudo[2916325]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:09 power sudo[2916332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sprintst --output=json'
Sep 10 05:05:09 power sudo[2916332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:09 power sudo[2916332]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:14 power sudo[2916636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst /bin/sh -c 'cd /home/sprintst/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:05:14 power sudo[2916636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:14 power sudo[2916636]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:14 power sudo[2916642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sprintst --user-current --json'
Sep 10 05:05:14 power sudo[2916642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:14 power sudo[2916642]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:14 power sudo[2916651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst LangPHP php_get_vhost_versions --output=json'
Sep 10 05:05:14 power sudo[2916651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:14 power sudo[2916651]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:14 power sudo[2916657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:05:14 power sudo[2916657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:14 power sudo[2916657]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:15 power sudo[2916687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DomainInfo single_domain_data domain=kritiki.mk return_https_redirect_status=1 --output=json'
Sep 10 05:05:15 power sudo[2916687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:15 power sudo[2916687]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:15 power sudo[2916701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst Mime list_redirects --output=json'
Sep 10 05:05:15 power sudo[2916701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:15 power sudo[2916701]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:18 power sudo[2916812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DirectoryPrivacy is_directory_protected dir=/home/sprintst/public_html --output=json'
Sep 10 05:05:18 power sudo[2916812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:18 power sudo[2916812]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:22 power sudo[2917019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep 10 05:05:22 power sudo[2917019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:22 power sudo[2917019]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:22 power sudo[2917028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kujnamon --output=json'
Sep 10 05:05:22 power sudo[2917028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:22 power sudo[2917028]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:27 power sudo[2917140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon /bin/sh -c 'cd /home/kujnamon/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:05:27 power sudo[2917140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:27 power sudo[2917140]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:27 power sudo[2917148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kujnamon --user-current --json'
Sep 10 05:05:27 power sudo[2917148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:27 power sudo[2917148]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:27 power sudo[2917158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon LangPHP php_get_vhost_versions --output=json'
Sep 10 05:05:27 power sudo[2917158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:27 power sudo[2917158]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:27 power sudo[2917165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:05:27 power sudo[2917165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:27 power sudo[2917165]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:27 power sudo[2917192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DomainInfo single_domain_data domain=kujnamoni.mk return_https_redirect_status=1 --output=json'
Sep 10 05:05:27 power sudo[2917192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:28 power sudo[2917192]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:28 power sudo[2917202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon Mime list_redirects --output=json'
Sep 10 05:05:28 power sudo[2917202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:28 power sudo[2917202]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:30 power sudo[2917307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DirectoryPrivacy is_directory_protected dir=/home/kujnamon/public_html --output=json'
Sep 10 05:05:30 power sudo[2917307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:30 power sudo[2917307]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:38 power sudo[2917575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/love.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:05:38 power sudo[2917575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:38 power sudo[2917575]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:38 power sudo[2917581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 10 05:05:38 power sudo[2917581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:38 power sudo[2917581]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:38 power sudo[2917588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:05:38 power sudo[2917588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:38 power sudo[2917588]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:39 power sudo[2917605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=love.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 05:05:39 power sudo[2917605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:39 power sudo[2917605]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:42 power sudo[2917721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/love.cetplatform.mk --output=json'
Sep 10 05:05:42 power sudo[2917721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:42 power sudo[2917721]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:46 power sudo[2917950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep 10 05:05:46 power sudo[2917950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:46 power sudo[2917950]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:46 power sudo[2917962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makdrone --output=json'
Sep 10 05:05:46 power sudo[2917962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:46 power sudo[2917962]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:50 power sudo[2918085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:05:50 power sudo[2918085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:50 power sudo[2918085]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:50 power sudo[2918093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makdrone --user-current --json'
Sep 10 05:05:50 power sudo[2918093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:51 power sudo[2918093]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:51 power sudo[2918102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone LangPHP php_get_vhost_versions --output=json'
Sep 10 05:05:51 power sudo[2918102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:51 power sudo[2918102]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:51 power sudo[2918107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:05:51 power sudo[2918107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:51 power sudo[2918107]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:51 power sudo[2918130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DomainInfo single_domain_data domain=makdrone.mk return_https_redirect_status=1 --output=json'
Sep 10 05:05:51 power sudo[2918130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:51 power sudo[2918130]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:51 power sudo[2918138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone Mime list_redirects --output=json'
Sep 10 05:05:51 power sudo[2918138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:52 power sudo[2918138]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:54 power sudo[2918233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DirectoryPrivacy is_directory_protected dir=/home/makdrone/public_html --output=json'
Sep 10 05:05:54 power sudo[2918233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:54 power sudo[2918233]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:55 power sudo[2918304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:05:55 power sudo[2918304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:55 power sudo[2918304]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:55 power sudo[2918309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:05:55 power sudo[2918309]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:05:55 power sudo[2918309]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:05:55 power sudo[2918309]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:05:55 power sudo[2918309]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:05:55 power sudo[2918309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:55 power sudo[2918309]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:55 power sudo[2918316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:05:55 power sudo[2918316]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:05:55 power sudo[2918316]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:05:55 power sudo[2918316]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:05:55 power sudo[2918316]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:05:55 power sudo[2918316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:55 power sudo[2918316]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:55 power sudo[2918321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:05:55 power sudo[2918321]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:05:55 power sudo[2918321]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:05:55 power sudo[2918321]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:05:55 power sudo[2918321]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:05:55 power sudo[2918321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:56 power sudo[2918321]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:57 power sudo[2918435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:05:57 power sudo[2918435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:57 power sudo[2918435]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:57 power sudo[2918441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:05:57 power sudo[2918441]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:05:57 power sudo[2918441]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:05:57 power sudo[2918441]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:05:57 power sudo[2918441]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:05:57 power sudo[2918441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:57 power sudo[2918441]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:57 power sudo[2918446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:05:57 power sudo[2918446]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:05:57 power sudo[2918446]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:05:57 power sudo[2918446]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:05:57 power sudo[2918446]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:05:57 power sudo[2918446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:58 power sudo[2918446]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:58 power sudo[2918451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:05:58 power sudo[2918451]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:05:58 power sudo[2918451]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:05:58 power sudo[2918451]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:05:58 power sudo[2918451]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:05:58 power sudo[2918451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:58 power sudo[2918451]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:58 power sudo[2918490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep 10 05:05:58 power sudo[2918490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:59 power sudo[2918490]: pam_unix(sudo:session): session closed for user root
Sep 10 05:05:59 power sudo[2918500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makoasmk --output=json'
Sep 10 05:05:59 power sudo[2918500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:05:59 power sudo[2918500]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:01 power systemd[2918571]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 05:06:03 power sudo[2918649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk /bin/sh -c 'cd /home/makoasmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:06:03 power sudo[2918649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:03 power sudo[2918649]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:03 power sudo[2918655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makoasmk --user-current --json'
Sep 10 05:06:03 power sudo[2918655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:04 power sudo[2918655]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:04 power sudo[2918664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk LangPHP php_get_vhost_versions --output=json'
Sep 10 05:06:04 power sudo[2918664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:04 power sudo[2918664]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:04 power sudo[2918671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:06:04 power sudo[2918671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:04 power sudo[2918671]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:04 power sudo[2918691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DomainInfo single_domain_data domain=makoas.mk return_https_redirect_status=1 --output=json'
Sep 10 05:06:04 power sudo[2918691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:04 power sudo[2918691]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:04 power sudo[2918699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk Mime list_redirects --output=json'
Sep 10 05:06:04 power sudo[2918699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:04 power sudo[2918699]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:09 power sudo[2918828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DirectoryPrivacy is_directory_protected dir=/home/makoasmk/public_html --output=json'
Sep 10 05:06:09 power sudo[2918828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:09 power sudo[2918828]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:17 power sudo[2919228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/mango.ambitioussolutions.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:06:17 power sudo[2919228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:17 power sudo[2919228]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:17 power sudo[2919234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep 10 05:06:17 power sudo[2919234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:17 power sudo[2919234]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:17 power sudo[2919246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:06:17 power sudo[2919246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:17 power sudo[2919246]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:18 power sudo[2919267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=mango.ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep 10 05:06:18 power sudo[2919267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:18 power sudo[2919267]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:22 power sudo[2919371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/mango.ambitioussolutions.mk --output=json'
Sep 10 05:06:22 power sudo[2919371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:22 power sudo[2919371]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:32 power sudo[2919719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/mkvesti.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:06:32 power sudo[2919719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:32 power sudo[2919719]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:32 power sudo[2919733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 10 05:06:32 power sudo[2919733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:32 power sudo[2919733]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:32 power sudo[2919738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:06:32 power sudo[2919738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:32 power sudo[2919738]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:32 power sudo[2919755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=mkvesti.mk return_https_redirect_status=1 --output=json'
Sep 10 05:06:32 power sudo[2919755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:33 power sudo[2919755]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:36 power sudo[2919882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/mkvesti.mk --output=json'
Sep 10 05:06:36 power sudo[2919882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:36 power sudo[2919882]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:40 power sudo[2920175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep 10 05:06:40 power sudo[2920175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:40 power sudo[2920175]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:40 power sudo[2920181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=modernar --output=json'
Sep 10 05:06:41 power sudo[2920181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:41 power sudo[2920181]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:44 power sudo[2920263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:06:44 power sudo[2920263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:44 power sudo[2920263]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:44 power sudo[2920271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user modernar --user-current --json'
Sep 10 05:06:44 power sudo[2920271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:45 power sudo[2920271]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:45 power sudo[2920279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar LangPHP php_get_vhost_versions --output=json'
Sep 10 05:06:45 power sudo[2920279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:45 power sudo[2920279]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:45 power sudo[2920285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:06:45 power sudo[2920285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:45 power sudo[2920285]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:45 power sudo[2920308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DomainInfo single_domain_data domain=modernart.mk return_https_redirect_status=1 --output=json'
Sep 10 05:06:45 power sudo[2920308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:46 power sudo[2920308]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:46 power sudo[2920315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar Mime list_redirects --output=json'
Sep 10 05:06:46 power sudo[2920315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:46 power sudo[2920315]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:49 power sudo[2920396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DirectoryPrivacy is_directory_protected dir=/home/modernar/public_html --output=json'
Sep 10 05:06:49 power sudo[2920396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:49 power sudo[2920396]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:50 power sudo[2920471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:06:50 power sudo[2920471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:50 power sudo[2920471]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:50 power sudo[2920476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:06:50 power sudo[2920476]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:06:50 power sudo[2920476]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:06:50 power sudo[2920476]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:06:50 power sudo[2920476]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:06:50 power sudo[2920476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:50 power sudo[2920476]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:50 power sudo[2920485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:06:50 power sudo[2920485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:06:50 power sudo[2920485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:06:50 power sudo[2920485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:06:50 power sudo[2920485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:06:50 power sudo[2920485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:50 power sudo[2920485]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:50 power sudo[2920492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:06:50 power sudo[2920492]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:06:50 power sudo[2920492]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:06:50 power sudo[2920492]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:06:50 power sudo[2920492]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:06:50 power sudo[2920492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:50 power sudo[2920492]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:52 power sudo[2920615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:06:52 power sudo[2920615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:52 power sudo[2920615]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:52 power sudo[2920620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:06:52 power sudo[2920620]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:06:52 power sudo[2920620]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:06:52 power sudo[2920620]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:06:52 power sudo[2920620]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:06:52 power sudo[2920620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:52 power sudo[2920620]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:52 power sudo[2920625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:06:52 power sudo[2920625]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:06:52 power sudo[2920625]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:06:52 power sudo[2920625]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:06:52 power sudo[2920625]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:06:52 power sudo[2920625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:52 power sudo[2920625]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:52 power sudo[2920631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:06:52 power sudo[2920631]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:06:52 power sudo[2920631]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:06:52 power sudo[2920631]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:06:52 power sudo[2920631]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:06:52 power sudo[2920631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:52 power sudo[2920631]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:56 power sudo[2920751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:06:56 power sudo[2920751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:56 power sudo[2920751]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:56 power sudo[2920757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep 10 05:06:56 power sudo[2920757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:57 power sudo[2920757]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:57 power sudo[2920773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:06:57 power sudo[2920773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:57 power sudo[2920773]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:57 power sudo[2920792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=momcurls.com return_https_redirect_status=1 --output=json'
Sep 10 05:06:57 power sudo[2920792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:57 power sudo[2920792]: pam_unix(sudo:session): session closed for user root
Sep 10 05:06:59 power sudo[2920891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/public_html --output=json'
Sep 10 05:06:59 power sudo[2920891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:06:59 power sudo[2920891]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:02 power systemd[2921045]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 05:07:03 power sudo[2921163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep 10 05:07:03 power sudo[2921163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:04 power sudo[2921163]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:04 power sudo[2921168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mpbmk --output=json'
Sep 10 05:07:04 power sudo[2921168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:04 power sudo[2921168]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:06 power sudo[2921237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk /bin/sh -c 'cd /home/mpbmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:07:06 power sudo[2921237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:06 power sudo[2921237]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:06 power sudo[2921244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mpbmk --user-current --json'
Sep 10 05:07:06 power sudo[2921244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:06 power sudo[2921244]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:06 power sudo[2921250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk LangPHP php_get_vhost_versions --output=json'
Sep 10 05:07:06 power sudo[2921250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:06 power sudo[2921250]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:06 power sudo[2921259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:07:06 power sudo[2921259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:06 power sudo[2921259]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:06 power sudo[2921273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DomainInfo single_domain_data domain=mpb.mk return_https_redirect_status=1 --output=json'
Sep 10 05:07:06 power sudo[2921273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:06 power sudo[2921273]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:06 power sudo[2921282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk Mime list_redirects --output=json'
Sep 10 05:07:06 power sudo[2921282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:06 power sudo[2921282]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:08 power sudo[2921375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DirectoryPrivacy is_directory_protected dir=/home/mpbmk/public_html --output=json'
Sep 10 05:07:08 power sudo[2921375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:08 power sudo[2921375]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:11 power sudo[2921616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep 10 05:07:11 power sudo[2921616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:11 power sudo[2921616]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:11 power sudo[2921629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mspmk --output=json'
Sep 10 05:07:11 power sudo[2921629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:12 power sudo[2921629]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:17 power sudo[2921798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk /bin/sh -c 'cd /home/mspmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:07:17 power sudo[2921798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:17 power sudo[2921798]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:17 power sudo[2921804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mspmk --user-current --json'
Sep 10 05:07:17 power sudo[2921804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:18 power sudo[2921804]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:18 power sudo[2921812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk LangPHP php_get_vhost_versions --output=json'
Sep 10 05:07:18 power sudo[2921812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:18 power sudo[2921812]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:18 power sudo[2921817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:07:18 power sudo[2921817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:18 power sudo[2921817]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:18 power sudo[2921837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DomainInfo single_domain_data domain=msp.mk return_https_redirect_status=1 --output=json'
Sep 10 05:07:18 power sudo[2921837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:18 power sudo[2921837]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:18 power sudo[2921845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk Mime list_redirects --output=json'
Sep 10 05:07:18 power sudo[2921845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:18 power sudo[2921845]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:22 power sudo[2921934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DirectoryPrivacy is_directory_protected dir=/home/mspmk/public_html --output=json'
Sep 10 05:07:22 power sudo[2921934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:22 power sudo[2921934]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:25 power sudo[2922162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep 10 05:07:25 power sudo[2922162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:26 power sudo[2922162]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:26 power sudo[2922168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mstmmk --output=json'
Sep 10 05:07:26 power sudo[2922168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:26 power sudo[2922168]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:29 power sudo[2922262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk /bin/sh -c 'cd /home/mstmmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:07:29 power sudo[2922262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:29 power sudo[2922262]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:29 power sudo[2922269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mstmmk --user-current --json'
Sep 10 05:07:29 power sudo[2922269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:30 power sudo[2922269]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:30 power sudo[2922275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk LangPHP php_get_vhost_versions --output=json'
Sep 10 05:07:30 power sudo[2922275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:30 power sudo[2922275]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:30 power sudo[2922281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:07:30 power sudo[2922281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:30 power sudo[2922281]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:30 power sudo[2922298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DomainInfo single_domain_data domain=mstm.mk return_https_redirect_status=1 --output=json'
Sep 10 05:07:30 power sudo[2922298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:30 power sudo[2922298]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:30 power sudo[2922305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk Mime list_redirects --output=json'
Sep 10 05:07:30 power sudo[2922305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:30 power sudo[2922305]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:34 power sudo[2922400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DirectoryPrivacy is_directory_protected dir=/home/mstmmk/public_html --output=json'
Sep 10 05:07:34 power sudo[2922400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:34 power sudo[2922400]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:37 power sudo[2922597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep 10 05:07:37 power sudo[2922597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:37 power sudo[2922597]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:37 power sudo[2922611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=naksorgm --output=json'
Sep 10 05:07:37 power sudo[2922611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:37 power sudo[2922611]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:43 power sudo[2922758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm /bin/sh -c 'cd /home/naksorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:07:43 power sudo[2922758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:43 power sudo[2922758]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:44 power sudo[2922765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user naksorgm --user-current --json'
Sep 10 05:07:44 power sudo[2922765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:44 power sudo[2922765]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:44 power sudo[2922770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm LangPHP php_get_vhost_versions --output=json'
Sep 10 05:07:44 power sudo[2922770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:44 power sudo[2922770]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:44 power sudo[2922778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:07:44 power sudo[2922778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:44 power sudo[2922778]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:44 power sudo[2922803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DomainInfo single_domain_data domain=naks.org.mk return_https_redirect_status=1 --output=json'
Sep 10 05:07:44 power sudo[2922803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:44 power sudo[2922803]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:44 power sudo[2922809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm Mime list_redirects --output=json'
Sep 10 05:07:44 power sudo[2922809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:45 power sudo[2922809]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:48 power sudo[2922924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DirectoryPrivacy is_directory_protected dir=/home/naksorgm/public_html --output=json'
Sep 10 05:07:48 power sudo[2922924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:49 power sudo[2922924]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:52 power sudo[2923143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep 10 05:07:52 power sudo[2923143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:53 power sudo[2923143]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:53 power sudo[2923153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nasaidni --output=json'
Sep 10 05:07:53 power sudo[2923153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:53 power sudo[2923153]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:56 power sudo[2923242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html/test.nasaidnina.com.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:07:56 power sudo[2923242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:56 power sudo[2923242]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:56 power sudo[2923249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep 10 05:07:56 power sudo[2923249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:56 power sudo[2923249]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:56 power sudo[2923257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni LangPHP php_get_vhost_versions --output=json'
Sep 10 05:07:56 power sudo[2923257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:56 power sudo[2923257]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:56 power sudo[2923262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:07:56 power sudo[2923262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:56 power sudo[2923262]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:57 power sudo[2923281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=test.nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep 10 05:07:57 power sudo[2923281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:57 power sudo[2923281]: pam_unix(sudo:session): session closed for user root
Sep 10 05:07:57 power sudo[2923290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni Mime list_redirects --output=json'
Sep 10 05:07:57 power sudo[2923290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:07:57 power sudo[2923290]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:00 power sudo[2923401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html/test.nasaidnina.com.mk/wp --output=json'
Sep 10 05:08:00 power sudo[2923401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:00 power sudo[2923401]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:07 power sudo[2923720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:08:07 power sudo[2923720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:07 power sudo[2923720]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:07 power sudo[2923727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep 10 05:08:07 power sudo[2923727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:07 power sudo[2923727]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:07 power sudo[2923733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:08:07 power sudo[2923733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:07 power sudo[2923733]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:07 power sudo[2923749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep 10 05:08:07 power sudo[2923749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:07 power sudo[2923749]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:10 power sudo[2923855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html --output=json'
Sep 10 05:08:10 power sudo[2923855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:10 power sudo[2923855]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:13 power sudo[2924062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep 10 05:08:13 power sudo[2924062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:13 power sudo[2924062]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:13 power sudo[2924087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ismassag --output=json'
Sep 10 05:08:13 power sudo[2924087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:14 power sudo[2924087]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:21 power sudo[2924255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag /bin/sh -c 'cd /home/ismassag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:08:21 power sudo[2924255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:21 power sudo[2924255]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:21 power sudo[2924262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ismassag --user-current --json'
Sep 10 05:08:21 power sudo[2924262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:21 power sudo[2924262]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:21 power sudo[2924269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag LangPHP php_get_vhost_versions --output=json'
Sep 10 05:08:21 power sudo[2924269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:21 power sudo[2924269]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:21 power sudo[2924277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:08:21 power sudo[2924277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:21 power sudo[2924277]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:22 power sudo[2924294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DomainInfo single_domain_data domain=needmassagetherapy.co.uk return_https_redirect_status=1 --output=json'
Sep 10 05:08:22 power sudo[2924294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:22 power sudo[2924294]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:22 power sudo[2924302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag Mime list_redirects --output=json'
Sep 10 05:08:22 power sudo[2924302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:22 power sudo[2924302]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:26 power sudo[2924417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DirectoryPrivacy is_directory_protected dir=/home/ismassag/public_html --output=json'
Sep 10 05:08:26 power sudo[2924417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:26 power sudo[2924417]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:33 power sudo[2924688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:08:33 power sudo[2924688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:33 power sudo[2924688]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:33 power sudo[2924694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep 10 05:08:33 power sudo[2924694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:33 power sudo[2924694]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:33 power sudo[2924702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:08:33 power sudo[2924702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:33 power sudo[2924702]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:34 power sudo[2924724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=new.chemhem.com return_https_redirect_status=1 --output=json'
Sep 10 05:08:34 power sudo[2924724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:34 power sudo[2924724]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:36 power sudo[2924833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/new.chemhem.com --output=json'
Sep 10 05:08:36 power sudo[2924833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:36 power sudo[2924833]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:37 power sudo[2924907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:37 power sudo[2924907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:37 power sudo[2924907]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:37 power sudo[2924912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 10 05:08:37 power sudo[2924912]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 10 05:08:37 power sudo[2924912]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 10 05:08:37 power sudo[2924912]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 10 05:08:37 power sudo[2924912]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:37 power sudo[2924912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:38 power sudo[2924912]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:38 power sudo[2924917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 10 05:08:38 power sudo[2924917]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 10 05:08:38 power sudo[2924917]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 10 05:08:38 power sudo[2924917]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 10 05:08:38 power sudo[2924917]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:38 power sudo[2924917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:38 power sudo[2924917]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:38 power sudo[2924922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep 10 05:08:38 power sudo[2924922]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep 10 05:08:38 power sudo[2924922]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep 10 05:08:38 power sudo[2924922]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep 10 05:08:38 power sudo[2924922]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:38 power sudo[2924922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:38 power sudo[2924922]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:40 power sudo[2925066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:40 power sudo[2925066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:40 power sudo[2925066]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:40 power sudo[2925071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 10 05:08:40 power sudo[2925071]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 10 05:08:40 power sudo[2925071]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 10 05:08:40 power sudo[2925071]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 10 05:08:40 power sudo[2925071]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:40 power sudo[2925071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:40 power sudo[2925071]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:40 power sudo[2925077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 10 05:08:40 power sudo[2925077]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 10 05:08:40 power sudo[2925077]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 10 05:08:40 power sudo[2925077]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 10 05:08:40 power sudo[2925077]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:40 power sudo[2925077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:40 power sudo[2925077]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:40 power sudo[2925084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep 10 05:08:40 power sudo[2925084]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep 10 05:08:40 power sudo[2925084]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep 10 05:08:40 power sudo[2925084]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep 10 05:08:40 power sudo[2925084]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:40 power sudo[2925084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:40 power sudo[2925084]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:40 power sudo[2925125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep 10 05:08:40 power sudo[2925125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:41 power sudo[2925125]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:41 power sudo[2925133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikolov1 --output=json'
Sep 10 05:08:41 power sudo[2925133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:41 power sudo[2925133]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:45 power sudo[2925249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:08:45 power sudo[2925249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:45 power sudo[2925249]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:45 power sudo[2925255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikolov1 --user-current --json'
Sep 10 05:08:45 power sudo[2925255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:45 power sudo[2925255]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:45 power sudo[2925260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 LangPHP php_get_vhost_versions --output=json'
Sep 10 05:08:45 power sudo[2925260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:45 power sudo[2925260]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:45 power sudo[2925267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:08:45 power sudo[2925267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:45 power sudo[2925267]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:46 power sudo[2925283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DomainInfo single_domain_data domain=nikolovproduction.com return_https_redirect_status=1 --output=json'
Sep 10 05:08:46 power sudo[2925283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:46 power sudo[2925283]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:46 power sudo[2925293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 Mime list_redirects --output=json'
Sep 10 05:08:46 power sudo[2925293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:46 power sudo[2925293]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:48 power sudo[2925387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DirectoryPrivacy is_directory_protected dir=/home/nikolov1/public_html --output=json'
Sep 10 05:08:48 power sudo[2925387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:48 power sudo[2925387]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:49 power sudo[2925455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:50 power sudo[2925455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:50 power sudo[2925455]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:50 power sudo[2925460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:08:50 power sudo[2925460]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:08:50 power sudo[2925460]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:08:50 power sudo[2925460]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:08:50 power sudo[2925460]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:50 power sudo[2925460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:50 power sudo[2925460]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:50 power sudo[2925465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:08:50 power sudo[2925465]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:08:50 power sudo[2925465]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:08:50 power sudo[2925465]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:08:50 power sudo[2925465]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:50 power sudo[2925465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:50 power sudo[2925465]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:50 power sudo[2925476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:08:50 power sudo[2925476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:08:50 power sudo[2925476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:08:50 power sudo[2925476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:08:50 power sudo[2925476]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:50 power sudo[2925476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:50 power sudo[2925476]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:52 power sudo[2925587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:52 power sudo[2925587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:52 power sudo[2925587]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:52 power sudo[2925595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:08:52 power sudo[2925595]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:08:52 power sudo[2925595]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:08:52 power sudo[2925595]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:08:52 power sudo[2925595]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:52 power sudo[2925595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:52 power sudo[2925595]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:52 power sudo[2925600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:08:52 power sudo[2925600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:08:52 power sudo[2925600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:08:52 power sudo[2925600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:08:52 power sudo[2925600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:52 power sudo[2925600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:52 power sudo[2925600]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:52 power sudo[2925605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:08:52 power sudo[2925605]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:08:52 power sudo[2925605]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:08:52 power sudo[2925605]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:08:52 power sudo[2925605]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:08:52 power sudo[2925605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:52 power sudo[2925605]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:52 power sudo[2925644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep 10 05:08:52 power sudo[2925644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:53 power sudo[2925644]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:53 power sudo[2925653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nolimits --output=json'
Sep 10 05:08:53 power sudo[2925653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:53 power sudo[2925653]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:57 power sudo[2925761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits /bin/sh -c 'cd /home/nolimits/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:08:57 power sudo[2925761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:57 power sudo[2925761]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:57 power sudo[2925768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nolimits --user-current --json'
Sep 10 05:08:57 power sudo[2925768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:58 power sudo[2925768]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:58 power sudo[2925776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits LangPHP php_get_vhost_versions --output=json'
Sep 10 05:08:58 power sudo[2925776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:58 power sudo[2925776]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:58 power sudo[2925786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:08:58 power sudo[2925786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:58 power sudo[2925786]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:58 power sudo[2925799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DomainInfo single_domain_data domain=nolimits.mk return_https_redirect_status=1 --output=json'
Sep 10 05:08:58 power sudo[2925799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:58 power sudo[2925799]: pam_unix(sudo:session): session closed for user root
Sep 10 05:08:58 power sudo[2925812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits Mime list_redirects --output=json'
Sep 10 05:08:58 power sudo[2925812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:08:58 power sudo[2925812]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:00 power sudo[2925905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DirectoryPrivacy is_directory_protected dir=/home/nolimits/public_html/tru-find --output=json'
Sep 10 05:09:00 power sudo[2925905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:00 power sudo[2925905]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:04 power sudo[2926148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep 10 05:09:04 power sudo[2926148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:04 power sudo[2926148]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:04 power sudo[2926160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=onlinesh --output=json'
Sep 10 05:09:04 power sudo[2926160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:04 power sudo[2926160]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:07 power sudo[2926287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh /bin/sh -c 'cd /home/onlinesh/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:09:07 power sudo[2926287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:07 power sudo[2926287]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:07 power sudo[2926293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user onlinesh --user-current --json'
Sep 10 05:09:07 power sudo[2926293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:07 power sudo[2926293]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:07 power sudo[2926300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh LangPHP php_get_vhost_versions --output=json'
Sep 10 05:09:07 power sudo[2926300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:08 power sudo[2926300]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:08 power sudo[2926307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:09:08 power sudo[2926307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:08 power sudo[2926307]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:08 power sudo[2926325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DomainInfo single_domain_data domain=onlineshop.com.mk return_https_redirect_status=1 --output=json'
Sep 10 05:09:08 power sudo[2926325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:08 power sudo[2926325]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:08 power sudo[2926333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh Mime list_redirects --output=json'
Sep 10 05:09:08 power sudo[2926333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:08 power sudo[2926333]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:10 power sudo[2926443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DirectoryPrivacy is_directory_protected dir=/home/onlinesh/public_html --output=json'
Sep 10 05:09:10 power sudo[2926443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:10 power sudo[2926443]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:14 power sudo[2926652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep 10 05:09:14 power sudo[2926652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:14 power sudo[2926652]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:14 power sudo[2926667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=palenzok --output=json'
Sep 10 05:09:14 power sudo[2926667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:14 power sudo[2926667]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:18 power sudo[2926796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok /bin/sh -c 'cd /home/palenzok/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:09:18 power sudo[2926796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:18 power sudo[2926796]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:18 power sudo[2926805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user palenzok --user-current --json'
Sep 10 05:09:18 power sudo[2926805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:18 power sudo[2926805]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:18 power sudo[2926815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok LangPHP php_get_vhost_versions --output=json'
Sep 10 05:09:18 power sudo[2926815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:18 power sudo[2926815]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:18 power sudo[2926820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:09:18 power sudo[2926820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:18 power sudo[2926820]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:19 power sudo[2926841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DomainInfo single_domain_data domain=palenzokompani.mk return_https_redirect_status=1 --output=json'
Sep 10 05:09:19 power sudo[2926841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:19 power sudo[2926841]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:19 power sudo[2926848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok Mime list_redirects --output=json'
Sep 10 05:09:19 power sudo[2926848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:19 power sudo[2926848]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:22 power sudo[2926946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DirectoryPrivacy is_directory_protected dir=/home/palenzok/public_html --output=json'
Sep 10 05:09:22 power sudo[2926946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:22 power sudo[2926946]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:25 power sudo[2927176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep 10 05:09:25 power sudo[2927176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:26 power sudo[2927176]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:26 power sudo[2927182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pelagoni --output=json'
Sep 10 05:09:26 power sudo[2927182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:26 power sudo[2927182]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:30 power sudo[2927268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni /bin/sh -c 'cd /home/pelagoni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:09:30 power sudo[2927268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:30 power sudo[2927268]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:30 power sudo[2927275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pelagoni --user-current --json'
Sep 10 05:09:30 power sudo[2927275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:30 power sudo[2927275]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:30 power sudo[2927280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni LangPHP php_get_vhost_versions --output=json'
Sep 10 05:09:30 power sudo[2927280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:30 power sudo[2927280]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:30 power sudo[2927286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:09:30 power sudo[2927286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:30 power sudo[2927286]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:31 power sudo[2927310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DomainInfo single_domain_data domain=pelagonijaregion.mk return_https_redirect_status=1 --output=json'
Sep 10 05:09:31 power sudo[2927310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:32 power sudo[2927310]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:32 power sudo[2927316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni Mime list_redirects --output=json'
Sep 10 05:09:32 power sudo[2927316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:32 power sudo[2927316]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:35 power sudo[2927416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DirectoryPrivacy is_directory_protected dir=/home/pelagoni/public_html/p --output=json'
Sep 10 05:09:35 power sudo[2927416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:35 power sudo[2927416]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:39 power sudo[2927625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep 10 05:09:39 power sudo[2927625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:39 power sudo[2927625]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:39 power sudo[2927631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=biplmk --output=json'
Sep 10 05:09:39 power sudo[2927631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:39 power sudo[2927631]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:42 power sudo[2927722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk /bin/sh -c 'cd /home/biplmk/petstop.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:09:42 power sudo[2927722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:42 power sudo[2927722]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:42 power sudo[2927734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user biplmk --user-current --json'
Sep 10 05:09:42 power sudo[2927734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:42 power sudo[2927734]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:42 power sudo[2927750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk LangPHP php_get_vhost_versions --output=json'
Sep 10 05:09:42 power sudo[2927750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:42 power sudo[2927750]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:42 power sudo[2927756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:09:42 power sudo[2927756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:42 power sudo[2927756]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:43 power sudo[2927776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DomainInfo single_domain_data domain=petstop.mk return_https_redirect_status=1 --output=json'
Sep 10 05:09:43 power sudo[2927776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:43 power sudo[2927776]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:43 power sudo[2927787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk Mime list_redirects --output=json'
Sep 10 05:09:43 power sudo[2927787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:43 power sudo[2927787]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:46 power sudo[2927882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DirectoryPrivacy is_directory_protected dir=/home/biplmk/petstop.mk/wp --output=json'
Sep 10 05:09:46 power sudo[2927882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:46 power sudo[2927882]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:49 power sudo[2928106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep 10 05:09:49 power sudo[2928106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:49 power sudo[2928106]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:49 power sudo[2928113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=premiumi --output=json'
Sep 10 05:09:49 power sudo[2928113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:49 power sudo[2928113]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:53 power sudo[2928194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:09:53 power sudo[2928194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:53 power sudo[2928194]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:53 power sudo[2928201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user premiumi --user-current --json'
Sep 10 05:09:53 power sudo[2928201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:53 power sudo[2928201]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:53 power sudo[2928209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi LangPHP php_get_vhost_versions --output=json'
Sep 10 05:09:53 power sudo[2928209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:53 power sudo[2928209]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:53 power sudo[2928218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:09:53 power sudo[2928218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:53 power sudo[2928218]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:54 power sudo[2928242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DomainInfo single_domain_data domain=premiuminsurance.mk return_https_redirect_status=1 --output=json'
Sep 10 05:09:54 power sudo[2928242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:54 power sudo[2928242]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:54 power sudo[2928249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi Mime list_redirects --output=json'
Sep 10 05:09:54 power sudo[2928249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:54 power sudo[2928249]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:56 power sudo[2928334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DirectoryPrivacy is_directory_protected dir=/home/premiumi/public_html --output=json'
Sep 10 05:09:56 power sudo[2928334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:56 power sudo[2928334]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:57 power sudo[2928376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:09:57 power sudo[2928376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:57 power sudo[2928376]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:57 power sudo[2928381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:09:57 power sudo[2928381]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:09:57 power sudo[2928381]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:09:57 power sudo[2928381]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:09:57 power sudo[2928381]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:09:57 power sudo[2928381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:57 power sudo[2928381]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:57 power sudo[2928386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:09:57 power sudo[2928386]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:09:57 power sudo[2928386]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:09:57 power sudo[2928386]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:09:57 power sudo[2928386]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:09:57 power sudo[2928386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:57 power sudo[2928386]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:57 power sudo[2928392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:09:57 power sudo[2928392]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:09:57 power sudo[2928392]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:09:57 power sudo[2928392]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:09:57 power sudo[2928392]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:09:57 power sudo[2928392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:57 power sudo[2928392]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:59 power sudo[2928540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:09:59 power sudo[2928540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:09:59 power sudo[2928540]: pam_unix(sudo:session): session closed for user root
Sep 10 05:09:59 power sudo[2928546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:09:59 power sudo[2928546]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:09:59 power sudo[2928546]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:09:59 power sudo[2928546]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:09:59 power sudo[2928546]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:09:59 power sudo[2928546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:00 power sudo[2928546]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:00 power sudo[2928551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:10:00 power sudo[2928551]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:10:00 power sudo[2928551]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:10:00 power sudo[2928551]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:10:00 power sudo[2928551]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:10:00 power sudo[2928551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:00 power sudo[2928551]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:00 power sudo[2928559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:10:00 power sudo[2928559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:10:00 power sudo[2928559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:10:00 power sudo[2928559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:10:00 power sudo[2928559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:10:00 power sudo[2928559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:00 power sudo[2928559]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:01 power systemd[2928704]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:10:05 power sudo[2928829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:10:05 power sudo[2928829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:05 power sudo[2928829]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:05 power sudo[2928835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep 10 05:10:05 power sudo[2928835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:05 power sudo[2928835]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:05 power sudo[2928842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:10:05 power sudo[2928842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:05 power sudo[2928842]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:06 power sudo[2928863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep 10 05:10:06 power sudo[2928863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:06 power sudo[2928863]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:09 power sudo[2928951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/public_html --output=json'
Sep 10 05:10:09 power sudo[2928951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:09 power sudo[2928951]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:14 power sudo[2929296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep 10 05:10:14 power sudo[2929296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:14 power sudo[2929296]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:14 power sudo[2929322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=radekrat --output=json'
Sep 10 05:10:14 power sudo[2929322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:14 power sudo[2929322]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:20 power sudo[2929531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:10:20 power sudo[2929531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:20 power sudo[2929531]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:20 power sudo[2929537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user radekrat --user-current --json'
Sep 10 05:10:20 power sudo[2929537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:20 power sudo[2929537]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:20 power sudo[2929543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat LangPHP php_get_vhost_versions --output=json'
Sep 10 05:10:20 power sudo[2929543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:20 power sudo[2929543]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:20 power sudo[2929549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:10:20 power sudo[2929549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:20 power sudo[2929549]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:21 power sudo[2929573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DomainInfo single_domain_data domain=radekratovce.edu.mk return_https_redirect_status=1 --output=json'
Sep 10 05:10:21 power sudo[2929573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:21 power sudo[2929573]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:21 power sudo[2929583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat Mime list_redirects --output=json'
Sep 10 05:10:21 power sudo[2929583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:21 power sudo[2929583]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:24 power sudo[2929688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DirectoryPrivacy is_directory_protected dir=/home/radekrat/public_html/wp --output=json'
Sep 10 05:10:24 power sudo[2929688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:24 power sudo[2929688]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:25 power sudo[2929732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:10:25 power sudo[2929732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:25 power sudo[2929732]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:25 power sudo[2929737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:10:25 power sudo[2929737]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:10:25 power sudo[2929737]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:10:25 power sudo[2929737]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:10:25 power sudo[2929737]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:10:25 power sudo[2929737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:25 power sudo[2929737]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:25 power sudo[2929742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 10 05:10:25 power sudo[2929742]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 10 05:10:25 power sudo[2929742]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 10 05:10:25 power sudo[2929742]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 10 05:10:25 power sudo[2929742]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:10:25 power sudo[2929742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:25 power sudo[2929742]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:25 power sudo[2929752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 10 05:10:25 power sudo[2929752]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 10 05:10:25 power sudo[2929752]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 10 05:10:25 power sudo[2929752]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 10 05:10:25 power sudo[2929752]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:10:25 power sudo[2929752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:25 power sudo[2929752]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:30 power sudo[2929954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep 10 05:10:30 power sudo[2929954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:31 power sudo[2929954]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:31 power sudo[2929961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rasmorgm --output=json'
Sep 10 05:10:31 power sudo[2929961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:31 power sudo[2929961]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:37 power sudo[2930104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm /bin/sh -c 'cd /home/rasmorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:10:37 power sudo[2930104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:37 power sudo[2930104]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:37 power sudo[2930110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rasmorgm --user-current --json'
Sep 10 05:10:37 power sudo[2930110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:38 power sudo[2930110]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:38 power sudo[2930116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm LangPHP php_get_vhost_versions --output=json'
Sep 10 05:10:38 power sudo[2930116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:38 power sudo[2930116]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:38 power sudo[2930121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:10:38 power sudo[2930121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:38 power sudo[2930121]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:38 power sudo[2930138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DomainInfo single_domain_data domain=rasm.org.mk return_https_redirect_status=1 --output=json'
Sep 10 05:10:38 power sudo[2930138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:38 power sudo[2930138]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:38 power sudo[2930144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm Mime list_redirects --output=json'
Sep 10 05:10:38 power sudo[2930144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:38 power sudo[2930144]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:42 power sudo[2930279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DirectoryPrivacy is_directory_protected dir=/home/rasmorgm/public_html --output=json'
Sep 10 05:10:42 power sudo[2930279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:42 power sudo[2930279]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:45 power sudo[2930489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep 10 05:10:45 power sudo[2930489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:46 power sudo[2930489]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:46 power sudo[2930495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=recorgmk --output=json'
Sep 10 05:10:46 power sudo[2930495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:46 power sudo[2930495]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:52 power sudo[2930643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk /bin/sh -c 'cd /home/recorgmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:10:52 power sudo[2930643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:52 power sudo[2930643]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:52 power sudo[2930649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user recorgmk --user-current --json'
Sep 10 05:10:52 power sudo[2930649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:52 power sudo[2930649]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:52 power sudo[2930655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk LangPHP php_get_vhost_versions --output=json'
Sep 10 05:10:52 power sudo[2930655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:52 power sudo[2930655]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:52 power sudo[2930660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:10:53 power sudo[2930660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:53 power sudo[2930660]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:53 power sudo[2930681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DomainInfo single_domain_data domain=rec.org.mk return_https_redirect_status=1 --output=json'
Sep 10 05:10:53 power sudo[2930681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:53 power sudo[2930681]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:53 power sudo[2930711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk Mime list_redirects --output=json'
Sep 10 05:10:53 power sudo[2930711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:53 power sudo[2930711]: pam_unix(sudo:session): session closed for user root
Sep 10 05:10:57 power sudo[2930833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DirectoryPrivacy is_directory_protected dir=/home/recorgmk/public_html --output=json'
Sep 10 05:10:57 power sudo[2930833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:10:57 power sudo[2930833]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:00 power sudo[2931043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep 10 05:11:00 power sudo[2931043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:00 power sudo[2931043]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:00 power sudo[2931049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stravelm --output=json'
Sep 10 05:11:00 power sudo[2931049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:01 power sudo[2931049]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:04 power sudo[2931136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm /bin/sh -c 'cd /home/stravelm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:11:04 power sudo[2931136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:04 power sudo[2931136]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:04 power sudo[2931142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stravelm --user-current --json'
Sep 10 05:11:04 power sudo[2931142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:04 power sudo[2931142]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:04 power sudo[2931148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm LangPHP php_get_vhost_versions --output=json'
Sep 10 05:11:04 power sudo[2931148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:04 power sudo[2931148]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:04 power sudo[2931153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:11:05 power sudo[2931153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:05 power sudo[2931153]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:05 power sudo[2931179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DomainInfo single_domain_data domain=s-travel.mk return_https_redirect_status=1 --output=json'
Sep 10 05:11:05 power sudo[2931179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:06 power sudo[2931179]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:06 power sudo[2931187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm Mime list_redirects --output=json'
Sep 10 05:11:06 power sudo[2931187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:06 power sudo[2931187]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:08 power sudo[2931268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DirectoryPrivacy is_directory_protected dir=/home/stravelm/public_html --output=json'
Sep 10 05:11:08 power sudo[2931268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:08 power sudo[2931268]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:12 power sudo[2931457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep 10 05:11:12 power sudo[2931457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:12 power sudo[2931457]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:12 power sudo[2931469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=simbiome --output=json'
Sep 10 05:11:12 power sudo[2931469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:12 power sudo[2931469]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:17 power sudo[2931623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome /bin/sh -c 'cd /home/simbiome/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:11:17 power sudo[2931623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:17 power sudo[2931623]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:18 power sudo[2931631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user simbiome --user-current --json'
Sep 10 05:11:18 power sudo[2931631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:18 power sudo[2931631]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:18 power sudo[2931640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome LangPHP php_get_vhost_versions --output=json'
Sep 10 05:11:18 power sudo[2931640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:18 power sudo[2931640]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:18 power sudo[2931646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:11:18 power sudo[2931646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:18 power sudo[2931646]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:19 power sudo[2931664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DomainInfo single_domain_data domain=simbiomedic.mk return_https_redirect_status=1 --output=json'
Sep 10 05:11:19 power sudo[2931664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:19 power sudo[2931664]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:19 power sudo[2931676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome Mime list_redirects --output=json'
Sep 10 05:11:19 power sudo[2931676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:19 power sudo[2931676]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:23 power sudo[2931793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DirectoryPrivacy is_directory_protected dir=/home/simbiome/public_html --output=json'
Sep 10 05:11:23 power sudo[2931793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:23 power sudo[2931793]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:32 power sudo[2932133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/sk.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:11:32 power sudo[2932133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:32 power sudo[2932133]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:32 power sudo[2932140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 10 05:11:32 power sudo[2932140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:32 power sudo[2932140]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:32 power sudo[2932145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:11:32 power sudo[2932145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:32 power sudo[2932145]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:32 power sudo[2932161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=sk.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 05:11:33 power sudo[2932161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:33 power sudo[2932161]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:36 power sudo[2932274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/sk.cetplatform.mk --output=json'
Sep 10 05:11:36 power sudo[2932274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:36 power sudo[2932274]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:40 power sudo[2932514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 10 05:11:40 power sudo[2932514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:40 power sudo[2932514]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:40 power sudo[2932521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=solemor1 --output=json'
Sep 10 05:11:40 power sudo[2932521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:40 power sudo[2932521]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:43 power sudo[2932578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:11:43 power sudo[2932578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:43 power sudo[2932578]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:43 power sudo[2932588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep 10 05:11:43 power sudo[2932588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:43 power sudo[2932588]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:43 power sudo[2932594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 LangPHP php_get_vhost_versions --output=json'
Sep 10 05:11:43 power sudo[2932594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:43 power sudo[2932594]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:43 power sudo[2932599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:11:43 power sudo[2932599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:43 power sudo[2932599]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:44 power sudo[2932616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=solem.org.mk return_https_redirect_status=1 --output=json'
Sep 10 05:11:44 power sudo[2932616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:44 power sudo[2932616]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:44 power sudo[2932630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 Mime list_redirects --output=json'
Sep 10 05:11:44 power sudo[2932630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:44 power sudo[2932630]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:46 power sudo[2932725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html --output=json'
Sep 10 05:11:46 power sudo[2932725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:46 power sudo[2932725]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:47 power sudo[2932793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:11:47 power sudo[2932793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:47 power sudo[2932793]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:47 power sudo[2932798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:11:47 power sudo[2932798]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:11:47 power sudo[2932798]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:11:47 power sudo[2932798]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:11:47 power sudo[2932798]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:11:47 power sudo[2932798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:47 power sudo[2932798]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:47 power sudo[2932803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:11:47 power sudo[2932803]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:11:47 power sudo[2932803]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:11:47 power sudo[2932803]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:11:47 power sudo[2932803]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:11:47 power sudo[2932803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:47 power sudo[2932803]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:47 power sudo[2932811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:11:47 power sudo[2932811]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:11:47 power sudo[2932811]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:11:47 power sudo[2932811]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:11:47 power sudo[2932811]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:11:47 power sudo[2932811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:47 power sudo[2932811]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:49 power sudo[2932919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:11:49 power sudo[2932919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:49 power sudo[2932919]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:49 power sudo[2932924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:11:49 power sudo[2932924]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:11:49 power sudo[2932924]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:11:49 power sudo[2932924]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:11:49 power sudo[2932924]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:11:49 power sudo[2932924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:49 power sudo[2932924]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:49 power sudo[2932929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:11:49 power sudo[2932929]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:11:49 power sudo[2932929]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:11:49 power sudo[2932929]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:11:49 power sudo[2932929]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:11:49 power sudo[2932929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:49 power sudo[2932929]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:49 power sudo[2932935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:11:49 power sudo[2932935]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:11:49 power sudo[2932935]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:11:49 power sudo[2932935]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:11:49 power sudo[2932935]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:11:49 power sudo[2932935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:49 power sudo[2932935]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:55 power sudo[2933075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html/vedi && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:11:55 power sudo[2933075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:55 power sudo[2933075]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:55 power sudo[2933084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep 10 05:11:55 power sudo[2933084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:55 power sudo[2933084]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:55 power sudo[2933093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:11:55 power sudo[2933093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:55 power sudo[2933093]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:55 power sudo[2933108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=vedi.mk return_https_redirect_status=1 --output=json'
Sep 10 05:11:55 power sudo[2933108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:56 power sudo[2933108]: pam_unix(sudo:session): session closed for user root
Sep 10 05:11:58 power sudo[2933192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html/vedi --output=json'
Sep 10 05:11:58 power sudo[2933192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:11:58 power sudo[2933192]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:01 power systemd[2933413]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 05:12:01 power sudo[2933437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep 10 05:12:01 power sudo[2933437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:01 power sudo[2933437]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:01 power sudo[2933445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sssoluti --output=json'
Sep 10 05:12:01 power sudo[2933445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:02 power sudo[2933445]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:07 power sudo[2933552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti /bin/sh -c 'cd /home/sssoluti/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:12:07 power sudo[2933552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:07 power sudo[2933552]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:07 power sudo[2933559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sssoluti --user-current --json'
Sep 10 05:12:07 power sudo[2933559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:07 power sudo[2933559]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:07 power sudo[2933568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti LangPHP php_get_vhost_versions --output=json'
Sep 10 05:12:07 power sudo[2933568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:07 power sudo[2933568]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:07 power sudo[2933575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:12:07 power sudo[2933575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:07 power sudo[2933575]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:07 power sudo[2933590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DomainInfo single_domain_data domain=sssolutions.mk return_https_redirect_status=1 --output=json'
Sep 10 05:12:07 power sudo[2933590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:07 power sudo[2933590]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:08 power sudo[2933597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti Mime list_redirects --output=json'
Sep 10 05:12:08 power sudo[2933597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:08 power sudo[2933597]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:11 power sudo[2933708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DirectoryPrivacy is_directory_protected dir=/home/sssoluti/public_html --output=json'
Sep 10 05:12:11 power sudo[2933708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:11 power sudo[2933708]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:14 power sudo[2933924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep 10 05:12:14 power sudo[2933924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:14 power sudo[2933924]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:14 power sudo[2933932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=supremel --output=json'
Sep 10 05:12:14 power sudo[2933932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:15 power sudo[2933932]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:24 power sudo[2934146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:12:24 power sudo[2934146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:24 power sudo[2934146]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:24 power sudo[2934156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep 10 05:12:24 power sudo[2934156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:24 power sudo[2934156]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:24 power sudo[2934167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel LangPHP php_get_vhost_versions --output=json'
Sep 10 05:12:24 power sudo[2934167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:24 power sudo[2934167]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:24 power sudo[2934173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:12:24 power sudo[2934173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:24 power sudo[2934173]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:25 power sudo[2934196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=supremeleader.eu return_https_redirect_status=1 --output=json'
Sep 10 05:12:25 power sudo[2934196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:25 power sudo[2934196]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:25 power sudo[2934202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel Mime list_redirects --output=json'
Sep 10 05:12:25 power sudo[2934202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:25 power sudo[2934202]: pam_unix(sudo:session): session closed for user root
Sep 10 05:12:29 power sudo[2934325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/public_html --output=json'
Sep 10 05:12:29 power sudo[2934325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:12:29 power sudo[2934325]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:29 power sudo[2936428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep 10 05:14:29 power sudo[2936428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:29 power sudo[2936428]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:29 power sudo[2936434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=tehnodro --output=json'
Sep 10 05:14:29 power sudo[2936434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:29 power sudo[2936434]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:35 power sudo[2936569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:14:35 power sudo[2936569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:35 power sudo[2936569]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:35 power sudo[2936579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user tehnodro --user-current --json'
Sep 10 05:14:35 power sudo[2936579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:35 power sudo[2936579]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:35 power sudo[2936587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro LangPHP php_get_vhost_versions --output=json'
Sep 10 05:14:35 power sudo[2936587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:35 power sudo[2936587]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:35 power sudo[2936592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:14:35 power sudo[2936592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:35 power sudo[2936592]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:36 power sudo[2936613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DomainInfo single_domain_data domain=tehnodrom.mk return_https_redirect_status=1 --output=json'
Sep 10 05:14:36 power sudo[2936613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:36 power sudo[2936613]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:36 power sudo[2936619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro Mime list_redirects --output=json'
Sep 10 05:14:36 power sudo[2936619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:36 power sudo[2936619]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:40 power sudo[2936754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DirectoryPrivacy is_directory_protected dir=/home/tehnodro/public_html --output=json'
Sep 10 05:14:40 power sudo[2936754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:40 power sudo[2936754]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:41 power sudo[2936822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:14:41 power sudo[2936822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:41 power sudo[2936822]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:41 power sudo[2936827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:14:41 power sudo[2936827]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:14:41 power sudo[2936827]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:14:41 power sudo[2936827]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:14:41 power sudo[2936827]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:14:41 power sudo[2936827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:41 power sudo[2936827]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:41 power sudo[2936832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:14:41 power sudo[2936832]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:14:41 power sudo[2936832]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:14:41 power sudo[2936832]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:14:41 power sudo[2936832]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:14:41 power sudo[2936832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:41 power sudo[2936832]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:41 power sudo[2936843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:14:41 power sudo[2936843]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:14:41 power sudo[2936843]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:14:41 power sudo[2936843]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:14:41 power sudo[2936843]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:14:41 power sudo[2936843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:41 power sudo[2936843]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:43 power sudo[2936961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:14:43 power sudo[2936961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:43 power sudo[2936961]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:43 power sudo[2936966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:14:43 power sudo[2936966]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:14:43 power sudo[2936966]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:14:43 power sudo[2936966]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:14:43 power sudo[2936966]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:14:43 power sudo[2936966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:43 power sudo[2936966]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:43 power sudo[2936971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:14:43 power sudo[2936971]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:14:43 power sudo[2936971]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:14:43 power sudo[2936971]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:14:43 power sudo[2936971]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:14:43 power sudo[2936971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:43 power sudo[2936971]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:43 power sudo[2936977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:14:43 power sudo[2936977]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:14:43 power sudo[2936977]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:14:43 power sudo[2936977]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:14:43 power sudo[2936977]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:14:43 power sudo[2936977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:43 power sudo[2936977]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:49 power sudo[2937126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/theuniversalgroup.net && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:14:49 power sudo[2937126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:49 power sudo[2937126]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:49 power sudo[2937132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep 10 05:14:49 power sudo[2937132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:50 power sudo[2937132]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:50 power sudo[2937143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:14:50 power sudo[2937143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:50 power sudo[2937143]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:50 power sudo[2937163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=theuniversalgroup.net return_https_redirect_status=1 --output=json'
Sep 10 05:14:50 power sudo[2937163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:50 power sudo[2937163]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:53 power sudo[2937264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/theuniversalgroup.net --output=json'
Sep 10 05:14:53 power sudo[2937264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:53 power sudo[2937264]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:56 power sudo[2937471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep 10 05:14:56 power sudo[2937471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:56 power sudo[2937471]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:56 power sudo[2937482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=viewinn --output=json'
Sep 10 05:14:56 power sudo[2937482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:57 power sudo[2937482]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:59 power sudo[2937551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn /bin/sh -c 'cd /home/viewinn/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:14:59 power sudo[2937551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:59 power sudo[2937551]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:59 power sudo[2937558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user viewinn --user-current --json'
Sep 10 05:14:59 power sudo[2937558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:59 power sudo[2937558]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:59 power sudo[2937570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn LangPHP php_get_vhost_versions --output=json'
Sep 10 05:14:59 power sudo[2937570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:59 power sudo[2937570]: pam_unix(sudo:session): session closed for user root
Sep 10 05:14:59 power sudo[2937576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:14:59 power sudo[2937576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:14:59 power sudo[2937576]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:00 power sudo[2937592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DomainInfo single_domain_data domain=viewinn.mk return_https_redirect_status=1 --output=json'
Sep 10 05:15:00 power sudo[2937592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:00 power sudo[2937592]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:00 power sudo[2937598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn Mime list_redirects --output=json'
Sep 10 05:15:00 power sudo[2937598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:00 power sudo[2937598]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:01 power systemd[2937718]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:15:02 power sudo[2937804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DirectoryPrivacy is_directory_protected dir=/home/viewinn/public_html --output=json'
Sep 10 05:15:02 power sudo[2937804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:02 power sudo[2937804]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:05 power sudo[2938039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep 10 05:15:05 power sudo[2938039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:05 power sudo[2938039]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:05 power sudo[2938054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wikicamp --output=json'
Sep 10 05:15:05 power sudo[2938054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:05 power sudo[2938054]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:14 power sudo[2938366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp /bin/sh -c 'cd /home/wikicamp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:15:14 power sudo[2938366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:14 power sudo[2938366]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:14 power sudo[2938373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wikicamp --user-current --json'
Sep 10 05:15:14 power sudo[2938373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:14 power sudo[2938373]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:14 power sudo[2938379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp LangPHP php_get_vhost_versions --output=json'
Sep 10 05:15:14 power sudo[2938379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:14 power sudo[2938379]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:14 power sudo[2938384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:15:14 power sudo[2938384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:14 power sudo[2938384]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:14 power sudo[2938401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DomainInfo single_domain_data domain=wikicamp.mk return_https_redirect_status=1 --output=json'
Sep 10 05:15:14 power sudo[2938401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:14 power sudo[2938401]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:14 power sudo[2938409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp Mime list_redirects --output=json'
Sep 10 05:15:14 power sudo[2938409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:14 power sudo[2938409]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:18 power sudo[2938571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DirectoryPrivacy is_directory_protected dir=/home/wikicamp/public_html --output=json'
Sep 10 05:15:18 power sudo[2938571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:18 power sudo[2938571]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:22 power sudo[2938839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep 10 05:15:22 power sudo[2938839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:22 power sudo[2938839]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:22 power sudo[2938845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workandt --output=json'
Sep 10 05:15:22 power sudo[2938845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:22 power sudo[2938845]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:27 power sudo[2938968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt /bin/sh -c 'cd /home/workandt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:15:27 power sudo[2938968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:27 power sudo[2938968]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:27 power sudo[2938975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workandt --user-current --json'
Sep 10 05:15:27 power sudo[2938975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:28 power sudo[2938975]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:28 power sudo[2938987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt LangPHP php_get_vhost_versions --output=json'
Sep 10 05:15:28 power sudo[2938987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:28 power sudo[2938987]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:28 power sudo[2938993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:15:28 power sudo[2938993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:28 power sudo[2938993]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:28 power sudo[2939007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DomainInfo single_domain_data domain=workandtravel.mk return_https_redirect_status=1 --output=json'
Sep 10 05:15:28 power sudo[2939007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:28 power sudo[2939007]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:28 power sudo[2939013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt Mime list_redirects --output=json'
Sep 10 05:15:28 power sudo[2939013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:28 power sudo[2939013]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:32 power sudo[2939129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DirectoryPrivacy is_directory_protected dir=/home/workandt/public_html --output=json'
Sep 10 05:15:32 power sudo[2939129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:32 power sudo[2939129]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:40 power sudo[2939461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/yoe.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:15:40 power sudo[2939461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:40 power sudo[2939461]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:40 power sudo[2939467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 10 05:15:40 power sudo[2939467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:40 power sudo[2939467]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:40 power sudo[2939475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:15:40 power sudo[2939475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:40 power sudo[2939475]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:40 power sudo[2939491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=yoe.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 10 05:15:40 power sudo[2939491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:40 power sudo[2939491]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:43 power sudo[2939592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/yoe.cetplatform.mk --output=json'
Sep 10 05:15:43 power sudo[2939592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:43 power sudo[2939592]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:47 power sudo[2939826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep 10 05:15:47 power sudo[2939826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:47 power sudo[2939826]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:47 power sudo[2939834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=youthgua --output=json'
Sep 10 05:15:47 power sudo[2939834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:47 power sudo[2939834]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:52 power sudo[2939922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua /bin/sh -c 'cd /home/youthgua/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:15:52 power sudo[2939922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:52 power sudo[2939922]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:52 power sudo[2939929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user youthgua --user-current --json'
Sep 10 05:15:52 power sudo[2939929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:52 power sudo[2939929]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:52 power sudo[2939940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua LangPHP php_get_vhost_versions --output=json'
Sep 10 05:15:52 power sudo[2939940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:52 power sudo[2939940]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:52 power sudo[2939945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:15:52 power sudo[2939945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:52 power sudo[2939945]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:53 power sudo[2939968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DomainInfo single_domain_data domain=youthguarantee-wb.eu return_https_redirect_status=1 --output=json'
Sep 10 05:15:53 power sudo[2939968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:53 power sudo[2939968]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:53 power sudo[2939978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua Mime list_redirects --output=json'
Sep 10 05:15:53 power sudo[2939978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:53 power sudo[2939978]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:56 power sudo[2940103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DirectoryPrivacy is_directory_protected dir=/home/youthgua/public_html --output=json'
Sep 10 05:15:56 power sudo[2940103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:15:56 power sudo[2940103]: pam_unix(sudo:session): session closed for user root
Sep 10 05:15:59 power sudo[2940341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep 10 05:15:59 power sudo[2940341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:00 power sudo[2940341]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:00 power sudo[2940352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=zampmk --output=json'
Sep 10 05:16:00 power sudo[2940352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:00 power sudo[2940352]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:04 power sudo[2940476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk /bin/sh -c 'cd /home/zampmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:16:04 power sudo[2940476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:04 power sudo[2940476]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:04 power sudo[2940485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user zampmk --user-current --json'
Sep 10 05:16:04 power sudo[2940485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:04 power sudo[2940485]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:04 power sudo[2940493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk LangPHP php_get_vhost_versions --output=json'
Sep 10 05:16:04 power sudo[2940493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:04 power sudo[2940493]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:04 power sudo[2940500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:16:04 power sudo[2940500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:04 power sudo[2940500]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:05 power sudo[2940516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DomainInfo single_domain_data domain=zamp.mk return_https_redirect_status=1 --output=json'
Sep 10 05:16:05 power sudo[2940516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:05 power sudo[2940516]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:05 power sudo[2940527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk Mime list_redirects --output=json'
Sep 10 05:16:05 power sudo[2940527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:05 power sudo[2940527]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:07 power sudo[2940622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DirectoryPrivacy is_directory_protected dir=/home/zampmk/public_html --output=json'
Sep 10 05:16:07 power sudo[2940622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:07 power sudo[2940622]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:11 power sudo[2940855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep 10 05:16:11 power sudo[2940855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:11 power sudo[2940855]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:11 power sudo[2940861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ivanjord --output=json'
Sep 10 05:16:11 power sudo[2940861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:11 power sudo[2940861]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:22 power sudo[2941139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord /bin/sh -c 'cd /home/ivanjord/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:16:22 power sudo[2941139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:22 power sudo[2941139]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:22 power sudo[2941146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ivanjord --user-current --json'
Sep 10 05:16:22 power sudo[2941146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:22 power sudo[2941146]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:22 power sudo[2941153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord LangPHP php_get_vhost_versions --output=json'
Sep 10 05:16:22 power sudo[2941153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:22 power sudo[2941153]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:22 power sudo[2941159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:16:22 power sudo[2941159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:22 power sudo[2941159]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:23 power sudo[2941179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DomainInfo single_domain_data domain=novaidninazastip.mk return_https_redirect_status=1 --output=json'
Sep 10 05:16:23 power sudo[2941179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:23 power sudo[2941179]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:23 power sudo[2941188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord Mime list_redirects --output=json'
Sep 10 05:16:23 power sudo[2941188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:23 power sudo[2941188]: pam_unix(sudo:session): session closed for user root
Sep 10 05:16:28 power sudo[2941328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DirectoryPrivacy is_directory_protected dir=/home/ivanjord/public_html --output=json'
Sep 10 05:16:28 power sudo[2941328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:16:28 power sudo[2941328]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:40 power sudo[2942782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:17:40 power sudo[2942782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:40 power sudo[2942782]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:40 power sudo[2942789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep 10 05:17:40 power sudo[2942789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:40 power sudo[2942789]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:40 power sudo[2942795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:17:40 power sudo[2942795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:40 power sudo[2942795]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:41 power sudo[2942815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=izzo.mk return_https_redirect_status=1 --output=json'
Sep 10 05:17:41 power sudo[2942815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:41 power sudo[2942815]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:43 power sudo[2942900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/public_html/wp --output=json'
Sep 10 05:17:43 power sudo[2942900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:43 power sudo[2942900]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:47 power sudo[2943115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep 10 05:17:47 power sudo[2943115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:47 power sudo[2943115]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:47 power sudo[2943121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=janiboja --output=json'
Sep 10 05:17:47 power sudo[2943121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:47 power sudo[2943121]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:50 power sudo[2943202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:17:50 power sudo[2943202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:50 power sudo[2943202]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:50 power sudo[2943208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user janiboja --user-current --json'
Sep 10 05:17:50 power sudo[2943208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:51 power sudo[2943208]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:51 power sudo[2943214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja LangPHP php_get_vhost_versions --output=json'
Sep 10 05:17:51 power sudo[2943214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:51 power sudo[2943214]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:51 power sudo[2943219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:17:51 power sudo[2943219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:51 power sudo[2943219]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:51 power sudo[2943238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DomainInfo single_domain_data domain=janibojadzi.com return_https_redirect_status=1 --output=json'
Sep 10 05:17:51 power sudo[2943238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:51 power sudo[2943238]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:51 power sudo[2943244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja Mime list_redirects --output=json'
Sep 10 05:17:51 power sudo[2943244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:51 power sudo[2943244]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:53 power sudo[2943334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DirectoryPrivacy is_directory_protected dir=/home/janiboja/public_html --output=json'
Sep 10 05:17:53 power sudo[2943334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:53 power sudo[2943334]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:54 power sudo[2943401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:17:54 power sudo[2943401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:54 power sudo[2943401]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:54 power sudo[2943406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:17:54 power sudo[2943406]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:17:54 power sudo[2943406]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:17:54 power sudo[2943406]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:17:54 power sudo[2943406]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:17:54 power sudo[2943406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:54 power sudo[2943406]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:54 power sudo[2943411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:17:54 power sudo[2943411]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:17:54 power sudo[2943411]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:17:54 power sudo[2943411]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:17:54 power sudo[2943411]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:17:54 power sudo[2943411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:54 power sudo[2943411]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:54 power sudo[2943416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:17:54 power sudo[2943416]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:17:54 power sudo[2943416]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:17:54 power sudo[2943416]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:17:54 power sudo[2943416]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:17:54 power sudo[2943416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:54 power sudo[2943416]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:56 power sudo[2943534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:17:56 power sudo[2943534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:56 power sudo[2943534]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:56 power sudo[2943539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:17:56 power sudo[2943539]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:17:56 power sudo[2943539]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:17:56 power sudo[2943539]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:17:56 power sudo[2943539]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:17:56 power sudo[2943539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:56 power sudo[2943539]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:56 power sudo[2943544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:17:56 power sudo[2943544]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:17:56 power sudo[2943544]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:17:56 power sudo[2943544]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:17:56 power sudo[2943544]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:17:56 power sudo[2943544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:56 power sudo[2943544]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:56 power sudo[2943550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:17:56 power sudo[2943550]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:17:56 power sudo[2943550]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:17:56 power sudo[2943550]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:17:56 power sudo[2943550]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:17:56 power sudo[2943550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:56 power sudo[2943550]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:57 power sudo[2943590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep 10 05:17:57 power sudo[2943590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:57 power sudo[2943590]: pam_unix(sudo:session): session closed for user root
Sep 10 05:17:57 power sudo[2943596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jaramk --output=json'
Sep 10 05:17:57 power sudo[2943596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:17:57 power sudo[2943596]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:02 power sudo[2943721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:18:02 power sudo[2943721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:02 power sudo[2943721]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:02 power sudo[2943727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jaramk --user-current --json'
Sep 10 05:18:02 power sudo[2943727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:03 power sudo[2943727]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:03 power sudo[2943739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk LangPHP php_get_vhost_versions --output=json'
Sep 10 05:18:03 power sudo[2943739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:03 power sudo[2943739]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:03 power sudo[2943748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:18:03 power sudo[2943748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:03 power sudo[2943748]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:03 power sudo[2943768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DomainInfo single_domain_data domain=jara.mk return_https_redirect_status=1 --output=json'
Sep 10 05:18:03 power sudo[2943768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:03 power sudo[2943768]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:03 power sudo[2943775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk Mime list_redirects --output=json'
Sep 10 05:18:03 power sudo[2943775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:03 power sudo[2943775]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:06 power sudo[2943887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DirectoryPrivacy is_directory_protected dir=/home/jaramk/public_html --output=json'
Sep 10 05:18:06 power sudo[2943887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:06 power sudo[2943887]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:07 power sudo[2943958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:18:07 power sudo[2943958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:07 power sudo[2943958]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:07 power sudo[2943963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep 10 05:18:07 power sudo[2943963]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep 10 05:18:07 power sudo[2943963]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep 10 05:18:07 power sudo[2943963]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep 10 05:18:07 power sudo[2943963]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:18:07 power sudo[2943963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:07 power sudo[2943963]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:07 power sudo[2943968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 05:18:07 power sudo[2943968]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 05:18:07 power sudo[2943968]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 05:18:07 power sudo[2943968]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 05:18:07 power sudo[2943968]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:18:07 power sudo[2943968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:07 power sudo[2943968]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:07 power sudo[2943974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 05:18:07 power sudo[2943974]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 05:18:07 power sudo[2943974]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 05:18:07 power sudo[2943974]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 05:18:07 power sudo[2943974]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:18:07 power sudo[2943974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:07 power sudo[2943974]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:09 power sudo[2944085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:18:09 power sudo[2944085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:09 power sudo[2944085]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:09 power sudo[2944091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep 10 05:18:09 power sudo[2944091]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep 10 05:18:09 power sudo[2944091]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep 10 05:18:09 power sudo[2944091]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep 10 05:18:09 power sudo[2944091]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:18:09 power sudo[2944091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:09 power sudo[2944091]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:09 power sudo[2944096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 05:18:09 power sudo[2944096]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 05:18:09 power sudo[2944096]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 05:18:09 power sudo[2944096]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 05:18:09 power sudo[2944096]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:18:09 power sudo[2944096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:09 power sudo[2944096]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:09 power sudo[2944102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 10 05:18:09 power sudo[2944102]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 10 05:18:09 power sudo[2944102]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 10 05:18:09 power sudo[2944102]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 10 05:18:09 power sudo[2944102]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:18:09 power sudo[2944102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:09 power sudo[2944102]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:10 power sudo[2944162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep 10 05:18:10 power sudo[2944162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:10 power sudo[2944162]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:10 power sudo[2944168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=innofabl --output=json'
Sep 10 05:18:10 power sudo[2944168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:10 power sudo[2944168]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:24 power sudo[2944447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/kupireciklirano.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:18:24 power sudo[2944447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:25 power sudo[2944447]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:25 power sudo[2944453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep 10 05:18:25 power sudo[2944453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:25 power sudo[2944453]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:25 power sudo[2944461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl LangPHP php_get_vhost_versions --output=json'
Sep 10 05:18:25 power sudo[2944461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:25 power sudo[2944461]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:25 power sudo[2944467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:18:25 power sudo[2944467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:25 power sudo[2944467]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:27 power sudo[2944501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=kupireciklirano.mk return_https_redirect_status=1 --output=json'
Sep 10 05:18:27 power sudo[2944501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:27 power sudo[2944501]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:27 power sudo[2944507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl Mime list_redirects --output=json'
Sep 10 05:18:27 power sudo[2944507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:27 power sudo[2944507]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:36 power sudo[2944670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/kupireciklirano.mk --output=json'
Sep 10 05:18:36 power sudo[2944670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:36 power sudo[2944670]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:39 power sudo[2944874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep 10 05:18:39 power sudo[2944874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:39 power sudo[2944874]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:39 power sudo[2944884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mapaspla --output=json'
Sep 10 05:18:39 power sudo[2944884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:39 power sudo[2944884]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:43 power sudo[2944986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:18:43 power sudo[2944986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:43 power sudo[2944986]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:43 power sudo[2944994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep 10 05:18:43 power sudo[2944994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:43 power sudo[2944994]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:43 power sudo[2945000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla LangPHP php_get_vhost_versions --output=json'
Sep 10 05:18:43 power sudo[2945000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:43 power sudo[2945000]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:43 power sudo[2945006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:18:43 power sudo[2945006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:43 power sudo[2945006]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:44 power sudo[2945028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DomainInfo single_domain_data domain=mapasplastik.com return_https_redirect_status=1 --output=json'
Sep 10 05:18:44 power sudo[2945028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:44 power sudo[2945028]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:44 power sudo[2945040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla Mime list_redirects --output=json'
Sep 10 05:18:44 power sudo[2945040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:44 power sudo[2945040]: pam_unix(sudo:session): session closed for user root
Sep 10 05:18:47 power sudo[2945145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html/eng --output=json'
Sep 10 05:18:47 power sudo[2945145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:18:47 power sudo[2945145]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:03 power sudo[2945635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:19:03 power sudo[2945635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:03 power sudo[2945635]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:03 power sudo[2945642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep 10 05:19:03 power sudo[2945642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:04 power sudo[2945642]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:04 power sudo[2945656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:19:04 power sudo[2945656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:04 power sudo[2945656]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:07 power sudo[2945777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html --output=json'
Sep 10 05:19:07 power sudo[2945777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:08 power sudo[2945777]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:13 power sudo[2945992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep 10 05:19:13 power sudo[2945992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:13 power sudo[2945992]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:13 power sudo[2946001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mediatag --output=json'
Sep 10 05:19:13 power sudo[2946001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:13 power sudo[2946001]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:18 power sudo[2946124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag /bin/sh -c 'cd /home/mediatag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:19:18 power sudo[2946124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:18 power sudo[2946124]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:18 power sudo[2946130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mediatag --user-current --json'
Sep 10 05:19:18 power sudo[2946130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:19 power sudo[2946130]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:19 power sudo[2946141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag LangPHP php_get_vhost_versions --output=json'
Sep 10 05:19:19 power sudo[2946141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:19 power sudo[2946141]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:19 power sudo[2946148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:19:19 power sudo[2946148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:19 power sudo[2946148]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:19 power sudo[2946163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DomainInfo single_domain_data domain=mediatag.mk return_https_redirect_status=1 --output=json'
Sep 10 05:19:19 power sudo[2946163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:19 power sudo[2946163]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:19 power sudo[2946169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag Mime list_redirects --output=json'
Sep 10 05:19:19 power sudo[2946169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:19 power sudo[2946169]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:24 power sudo[2946340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DirectoryPrivacy is_directory_protected dir=/home/mediatag/public_html --output=json'
Sep 10 05:19:24 power sudo[2946340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:24 power sudo[2946340]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:35 power sudo[2946696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/mulprotex.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:19:35 power sudo[2946696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:35 power sudo[2946696]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:35 power sudo[2946702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep 10 05:19:35 power sudo[2946702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:35 power sudo[2946702]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:35 power sudo[2946714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:19:35 power sudo[2946714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:35 power sudo[2946714]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:35 power sudo[2946733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=mulprotex.com return_https_redirect_status=1 --output=json'
Sep 10 05:19:35 power sudo[2946733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:36 power sudo[2946733]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:40 power sudo[2946901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/mulprotex.com --output=json'
Sep 10 05:19:40 power sudo[2946901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:40 power sudo[2946901]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:43 power sudo[2947100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep 10 05:19:44 power sudo[2947100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:44 power sudo[2947100]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:44 power sudo[2947108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nefrolog --output=json'
Sep 10 05:19:44 power sudo[2947108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:44 power sudo[2947108]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:48 power sudo[2947217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog /bin/sh -c 'cd /home/nefrolog/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:19:48 power sudo[2947217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:48 power sudo[2947217]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:48 power sudo[2947224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nefrolog --user-current --json'
Sep 10 05:19:48 power sudo[2947224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:48 power sudo[2947224]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:48 power sudo[2947252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog LangPHP php_get_vhost_versions --output=json'
Sep 10 05:19:48 power sudo[2947252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:48 power sudo[2947252]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:48 power sudo[2947257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:19:48 power sudo[2947257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:48 power sudo[2947257]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:49 power sudo[2947295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DomainInfo single_domain_data domain=nefrologija.mk return_https_redirect_status=1 --output=json'
Sep 10 05:19:49 power sudo[2947295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:49 power sudo[2947295]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:49 power sudo[2947301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog Mime list_redirects --output=json'
Sep 10 05:19:49 power sudo[2947301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:49 power sudo[2947301]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:51 power sudo[2947410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DirectoryPrivacy is_directory_protected dir=/home/nefrolog/public_html --output=json'
Sep 10 05:19:51 power sudo[2947410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:52 power sudo[2947410]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:55 power sudo[2947610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep 10 05:19:55 power sudo[2947610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:55 power sudo[2947610]: pam_unix(sudo:session): session closed for user root
Sep 10 05:19:55 power sudo[2947620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikimare --output=json'
Sep 10 05:19:55 power sudo[2947620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:19:55 power sudo[2947620]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:01 power systemd[2947880]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:20:02 power sudo[2947929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:20:02 power sudo[2947929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:02 power sudo[2947929]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:02 power sudo[2947935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep 10 05:20:02 power sudo[2947935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:03 power sudo[2947935]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:03 power sudo[2947943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare LangPHP php_get_vhost_versions --output=json'
Sep 10 05:20:03 power sudo[2947943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:03 power sudo[2947943]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:03 power sudo[2947948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:20:03 power sudo[2947948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:03 power sudo[2947948]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:03 power sudo[2947967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DomainInfo single_domain_data domain=niki-mare.com return_https_redirect_status=1 --output=json'
Sep 10 05:20:03 power sudo[2947967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:03 power sudo[2947967]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:03 power sudo[2947977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare Mime list_redirects --output=json'
Sep 10 05:20:03 power sudo[2947977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:03 power sudo[2947977]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:07 power sudo[2948106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html/wp --output=json'
Sep 10 05:20:07 power sudo[2948106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:07 power sudo[2948106]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:17 power sudo[2948590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:20:17 power sudo[2948590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:17 power sudo[2948590]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:17 power sudo[2948597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep 10 05:20:17 power sudo[2948597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:18 power sudo[2948597]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:18 power sudo[2948603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:20:18 power sudo[2948603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:18 power sudo[2948603]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:22 power sudo[2948775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html --output=json'
Sep 10 05:20:22 power sudo[2948775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:22 power sudo[2948775]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:26 power sudo[2948987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep 10 05:20:26 power sudo[2948987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:26 power sudo[2948987]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:26 power sudo[2948997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nucktra1 --output=json'
Sep 10 05:20:26 power sudo[2948997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:26 power sudo[2948997]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:31 power sudo[2949084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:20:31 power sudo[2949084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:31 power sudo[2949084]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:31 power sudo[2949091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep 10 05:20:31 power sudo[2949091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:31 power sudo[2949091]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:31 power sudo[2949099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 LangPHP php_get_vhost_versions --output=json'
Sep 10 05:20:31 power sudo[2949099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:31 power sudo[2949099]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:31 power sudo[2949105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php56 --output=json'
Sep 10 05:20:31 power sudo[2949105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:32 power sudo[2949105]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:32 power sudo[2949115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:20:32 power sudo[2949115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:32 power sudo[2949115]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:32 power sudo[2949139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep 10 05:20:32 power sudo[2949139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:32 power sudo[2949139]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:32 power sudo[2949149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 Mime list_redirects --output=json'
Sep 10 05:20:32 power sudo[2949149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:32 power sudo[2949149]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:36 power sudo[2949261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/public_html --output=json'
Sep 10 05:20:36 power sudo[2949261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:36 power sudo[2949261]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:42 power sudo[2949573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep 10 05:20:42 power sudo[2949573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:42 power sudo[2949573]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:42 power sudo[2949585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pravekom --output=json'
Sep 10 05:20:42 power sudo[2949585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:42 power sudo[2949585]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:53 power sudo[2949769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom /bin/sh -c 'cd /home/pravekom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:20:53 power sudo[2949769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:53 power sudo[2949769]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:53 power sudo[2949775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pravekom --user-current --json'
Sep 10 05:20:53 power sudo[2949775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:53 power sudo[2949775]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:53 power sudo[2949789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom LangPHP php_get_vhost_versions --output=json'
Sep 10 05:20:53 power sudo[2949789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:53 power sudo[2949789]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:53 power sudo[2949795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:20:53 power sudo[2949795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:53 power sudo[2949795]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:53 power sudo[2949813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DomainInfo single_domain_data domain=praveko.mk return_https_redirect_status=1 --output=json'
Sep 10 05:20:53 power sudo[2949813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:53 power sudo[2949813]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:53 power sudo[2949819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom Mime list_redirects --output=json'
Sep 10 05:20:53 power sudo[2949819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:54 power sudo[2949819]: pam_unix(sudo:session): session closed for user root
Sep 10 05:20:59 power sudo[2949981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DirectoryPrivacy is_directory_protected dir=/home/pravekom/public_html --output=json'
Sep 10 05:20:59 power sudo[2949981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:20:59 power sudo[2949981]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:03 power sudo[2950234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep 10 05:21:03 power sudo[2950234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:03 power sudo[2950234]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:03 power sudo[2950244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=proverim --output=json'
Sep 10 05:21:03 power sudo[2950244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:03 power sudo[2950244]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:09 power sudo[2950373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:21:09 power sudo[2950373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:09 power sudo[2950373]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:09 power sudo[2950379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user proverim --user-current --json'
Sep 10 05:21:09 power sudo[2950379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:09 power sudo[2950379]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:09 power sudo[2950391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim LangPHP php_get_vhost_versions --output=json'
Sep 10 05:21:09 power sudo[2950391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:09 power sudo[2950391]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:09 power sudo[2950408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:21:09 power sudo[2950408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:09 power sudo[2950408]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:10 power sudo[2950426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DomainInfo single_domain_data domain=proveri.mk return_https_redirect_status=1 --output=json'
Sep 10 05:21:10 power sudo[2950426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:10 power sudo[2950426]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:10 power sudo[2950437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim Mime list_redirects --output=json'
Sep 10 05:21:10 power sudo[2950437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:10 power sudo[2950437]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:13 power sudo[2950547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DirectoryPrivacy is_directory_protected dir=/home/proverim/public_html --output=json'
Sep 10 05:21:13 power sudo[2950547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:13 power sudo[2950547]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:14 power sudo[2950618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:14 power sudo[2950618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:14 power sudo[2950618]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:14 power sudo[2950623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:21:14 power sudo[2950623]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:21:14 power sudo[2950623]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:21:14 power sudo[2950623]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:21:14 power sudo[2950623]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:14 power sudo[2950623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:14 power sudo[2950623]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:14 power sudo[2950628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:14 power sudo[2950628]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:14 power sudo[2950628]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:14 power sudo[2950628]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:14 power sudo[2950628]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:14 power sudo[2950628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:14 power sudo[2950628]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:14 power sudo[2950633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:14 power sudo[2950633]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:14 power sudo[2950633]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:14 power sudo[2950633]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:14 power sudo[2950633]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:14 power sudo[2950633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:14 power sudo[2950633]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:16 power sudo[2950758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:16 power sudo[2950758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:16 power sudo[2950758]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:16 power sudo[2950763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:21:16 power sudo[2950763]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:21:16 power sudo[2950763]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:21:16 power sudo[2950763]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:21:16 power sudo[2950763]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:16 power sudo[2950763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:16 power sudo[2950763]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:16 power sudo[2950768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:16 power sudo[2950768]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:16 power sudo[2950768]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:16 power sudo[2950768]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:16 power sudo[2950768]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:16 power sudo[2950768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:16 power sudo[2950768]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:16 power sudo[2950775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:16 power sudo[2950775]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:16 power sudo[2950775]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:16 power sudo[2950775]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:16 power sudo[2950775]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:16 power sudo[2950775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:16 power sudo[2950775]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:16 power sudo[2950816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep 10 05:21:17 power sudo[2950816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:17 power sudo[2950816]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:17 power sudo[2950828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rastiraz --output=json'
Sep 10 05:21:17 power sudo[2950828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:17 power sudo[2950828]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:20 power sudo[2950915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:21:20 power sudo[2950915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:20 power sudo[2950915]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:20 power sudo[2950921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rastiraz --user-current --json'
Sep 10 05:21:20 power sudo[2950921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:20 power sudo[2950921]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:20 power sudo[2950931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz LangPHP php_get_vhost_versions --output=json'
Sep 10 05:21:20 power sudo[2950931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:20 power sudo[2950931]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:20 power sudo[2950936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:21:20 power sudo[2950936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:20 power sudo[2950936]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:20 power sudo[2950950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DomainInfo single_domain_data domain=rastirazvoj.mk return_https_redirect_status=1 --output=json'
Sep 10 05:21:20 power sudo[2950950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:21 power sudo[2950950]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:21 power sudo[2950957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz Mime list_redirects --output=json'
Sep 10 05:21:21 power sudo[2950957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:21 power sudo[2950957]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:23 power sudo[2951036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DirectoryPrivacy is_directory_protected dir=/home/rastiraz/public_html --output=json'
Sep 10 05:21:23 power sudo[2951036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:23 power sudo[2951036]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:24 power sudo[2951143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:24 power sudo[2951143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:24 power sudo[2951143]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:24 power sudo[2951148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:21:24 power sudo[2951148]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:21:24 power sudo[2951148]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:21:24 power sudo[2951148]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:21:24 power sudo[2951148]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:24 power sudo[2951148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:24 power sudo[2951148]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:24 power sudo[2951153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:24 power sudo[2951153]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:24 power sudo[2951153]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:24 power sudo[2951153]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:24 power sudo[2951153]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:24 power sudo[2951153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:24 power sudo[2951153]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:24 power sudo[2951158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:24 power sudo[2951158]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:24 power sudo[2951158]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:24 power sudo[2951158]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:24 power sudo[2951158]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:24 power sudo[2951158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:24 power sudo[2951158]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:25 power sudo[2951272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:25 power sudo[2951272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:25 power sudo[2951272]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:25 power sudo[2951277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:21:25 power sudo[2951277]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:21:25 power sudo[2951277]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:21:25 power sudo[2951277]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:21:25 power sudo[2951277]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:26 power sudo[2951277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:26 power sudo[2951277]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:26 power sudo[2951282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:26 power sudo[2951282]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:26 power sudo[2951282]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:26 power sudo[2951282]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:26 power sudo[2951282]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:26 power sudo[2951282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:26 power sudo[2951282]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:26 power sudo[2951287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:26 power sudo[2951287]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:26 power sudo[2951287]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:26 power sudo[2951287]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:26 power sudo[2951287]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:26 power sudo[2951287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:26 power sudo[2951287]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:26 power sudo[2951335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep 10 05:21:26 power sudo[2951335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:26 power sudo[2951335]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:27 power sudo[2951342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=conserva --output=json'
Sep 10 05:21:27 power sudo[2951342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:27 power sudo[2951342]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:30 power sudo[2951443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva /bin/sh -c 'cd /home/conserva/RebornMacedonia.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:21:30 power sudo[2951443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:30 power sudo[2951443]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:30 power sudo[2951451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user conserva --user-current --json'
Sep 10 05:21:30 power sudo[2951451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:31 power sudo[2951451]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:31 power sudo[2951463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva LangPHP php_get_vhost_versions --output=json'
Sep 10 05:21:31 power sudo[2951463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:31 power sudo[2951463]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:31 power sudo[2951469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:21:31 power sudo[2951469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:31 power sudo[2951469]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:31 power sudo[2951490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DomainInfo single_domain_data domain=rebornmacedonia.com return_https_redirect_status=1 --output=json'
Sep 10 05:21:31 power sudo[2951490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:31 power sudo[2951490]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:31 power sudo[2951505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva Mime list_redirects --output=json'
Sep 10 05:21:31 power sudo[2951505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:31 power sudo[2951505]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:34 power sudo[2951617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DirectoryPrivacy is_directory_protected dir=/home/conserva/RebornMacedonia.com --output=json'
Sep 10 05:21:34 power sudo[2951617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:34 power sudo[2951617]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:37 power sudo[2951829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep 10 05:21:37 power sudo[2951829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:38 power sudo[2951829]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:38 power sudo[2951836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=maleshne --output=json'
Sep 10 05:21:38 power sudo[2951836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:38 power sudo[2951836]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:42 power sudo[2951946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:21:42 power sudo[2951946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:42 power sudo[2951946]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:42 power sudo[2951954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user maleshne --user-current --json'
Sep 10 05:21:42 power sudo[2951954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:42 power sudo[2951954]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:42 power sudo[2951967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne LangPHP php_get_vhost_versions --output=json'
Sep 10 05:21:42 power sudo[2951967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:42 power sudo[2951967]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:42 power sudo[2951973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:21:42 power sudo[2951973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:42 power sudo[2951973]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:43 power sudo[2951994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DomainInfo single_domain_data domain=restoranmrs.mk return_https_redirect_status=1 --output=json'
Sep 10 05:21:43 power sudo[2951994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:43 power sudo[2951994]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:43 power sudo[2952001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne Mime list_redirects --output=json'
Sep 10 05:21:43 power sudo[2952001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:43 power sudo[2952001]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:45 power sudo[2952079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DirectoryPrivacy is_directory_protected dir=/home/maleshne/public_html --output=json'
Sep 10 05:21:45 power sudo[2952079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:45 power sudo[2952079]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:46 power sudo[2952144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:46 power sudo[2952144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:46 power sudo[2952144]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:46 power sudo[2952149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:21:46 power sudo[2952149]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:21:46 power sudo[2952149]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:21:46 power sudo[2952149]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:21:46 power sudo[2952149]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:46 power sudo[2952149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:46 power sudo[2952149]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:46 power sudo[2952154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:46 power sudo[2952154]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:46 power sudo[2952154]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:46 power sudo[2952154]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:46 power sudo[2952154]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:46 power sudo[2952154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:46 power sudo[2952154]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:48 power sudo[2952298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:48 power sudo[2952298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:48 power sudo[2952298]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:48 power sudo[2952303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:21:48 power sudo[2952303]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:21:48 power sudo[2952303]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:21:48 power sudo[2952303]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:21:48 power sudo[2952303]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:48 power sudo[2952303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:48 power sudo[2952303]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:48 power sudo[2952308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:21:48 power sudo[2952308]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:21:48 power sudo[2952308]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:21:48 power sudo[2952308]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:21:48 power sudo[2952308]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:21:48 power sudo[2952308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:48 power sudo[2952308]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:49 power sudo[2952347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep 10 05:21:49 power sudo[2952347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:49 power sudo[2952347]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:49 power sudo[2952352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=samasped --output=json'
Sep 10 05:21:49 power sudo[2952352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:49 power sudo[2952352]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:56 power sudo[2952505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped /bin/sh -c 'cd /home/samasped/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:21:56 power sudo[2952505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:56 power sudo[2952505]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:56 power sudo[2952512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user samasped --user-current --json'
Sep 10 05:21:56 power sudo[2952512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:57 power sudo[2952512]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:57 power sudo[2952518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped LangPHP php_get_vhost_versions --output=json'
Sep 10 05:21:57 power sudo[2952518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:57 power sudo[2952518]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:57 power sudo[2952523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:21:57 power sudo[2952523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:57 power sudo[2952523]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:57 power sudo[2952541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DomainInfo single_domain_data domain=samasped.mk return_https_redirect_status=1 --output=json'
Sep 10 05:21:57 power sudo[2952541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:57 power sudo[2952541]: pam_unix(sudo:session): session closed for user root
Sep 10 05:21:57 power sudo[2952547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped Mime list_redirects --output=json'
Sep 10 05:21:57 power sudo[2952547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:21:57 power sudo[2952547]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:01 power sudo[2952662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DirectoryPrivacy is_directory_protected dir=/home/samasped/public_html --output=json'
Sep 10 05:22:01 power sudo[2952662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:01 power sudo[2952662]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:04 power sudo[2952896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep 10 05:22:04 power sudo[2952896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:04 power sudo[2952896]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:04 power sudo[2952904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=seloviro --output=json'
Sep 10 05:22:04 power sudo[2952904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:05 power sudo[2952904]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:10 power sudo[2953040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:22:10 power sudo[2953040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:10 power sudo[2953040]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:10 power sudo[2953046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user seloviro --user-current --json'
Sep 10 05:22:10 power sudo[2953046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:11 power sudo[2953046]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:11 power sudo[2953052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro LangPHP php_get_vhost_versions --output=json'
Sep 10 05:22:11 power sudo[2953052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:11 power sudo[2953052]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:11 power sudo[2953056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:22:11 power sudo[2953056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:11 power sudo[2953056]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:11 power sudo[2953078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DomainInfo single_domain_data domain=selovirovo.mk return_https_redirect_status=1 --output=json'
Sep 10 05:22:11 power sudo[2953078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:11 power sudo[2953078]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:11 power sudo[2953084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro Mime list_redirects --output=json'
Sep 10 05:22:11 power sudo[2953084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:11 power sudo[2953084]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:15 power sudo[2953189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DirectoryPrivacy is_directory_protected dir=/home/seloviro/public_html --output=json'
Sep 10 05:22:15 power sudo[2953189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:15 power sudo[2953189]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:16 power sudo[2953260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:22:16 power sudo[2953260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:16 power sudo[2953260]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:16 power sudo[2953265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:22:16 power sudo[2953265]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:22:16 power sudo[2953265]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:22:16 power sudo[2953265]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:22:16 power sudo[2953265]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:22:16 power sudo[2953265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:16 power sudo[2953265]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:16 power sudo[2953271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:22:16 power sudo[2953271]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:22:16 power sudo[2953271]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:22:16 power sudo[2953271]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:22:16 power sudo[2953271]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:22:16 power sudo[2953271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:16 power sudo[2953271]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:16 power sudo[2953278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:22:16 power sudo[2953278]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:22:16 power sudo[2953278]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:22:16 power sudo[2953278]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:22:16 power sudo[2953278]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:22:16 power sudo[2953278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:16 power sudo[2953278]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:18 power sudo[2953390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:22:18 power sudo[2953390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:18 power sudo[2953390]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:18 power sudo[2953395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:22:18 power sudo[2953395]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:22:18 power sudo[2953395]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:22:18 power sudo[2953395]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:22:18 power sudo[2953395]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:22:18 power sudo[2953395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:18 power sudo[2953395]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:18 power sudo[2953400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:22:18 power sudo[2953400]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:22:18 power sudo[2953400]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:22:18 power sudo[2953400]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:22:18 power sudo[2953400]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:22:18 power sudo[2953400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:18 power sudo[2953400]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:18 power sudo[2953406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:22:18 power sudo[2953406]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:22:18 power sudo[2953406]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:22:18 power sudo[2953406]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:22:18 power sudo[2953406]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:22:18 power sudo[2953406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:18 power sudo[2953406]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:19 power sudo[2953450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep 10 05:22:19 power sudo[2953450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:19 power sudo[2953450]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:19 power sudo[2953457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=skyapart --output=json'
Sep 10 05:22:19 power sudo[2953457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:19 power sudo[2953457]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:21 power sudo[2953543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart /bin/sh -c 'cd /home/skyapart/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:22:21 power sudo[2953543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:21 power sudo[2953543]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:21 power sudo[2953551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user skyapart --user-current --json'
Sep 10 05:22:21 power sudo[2953551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:21 power sudo[2953551]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:21 power sudo[2953559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart LangPHP php_get_vhost_versions --output=json'
Sep 10 05:22:21 power sudo[2953559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:22 power sudo[2953559]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:22 power sudo[2953564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:22:22 power sudo[2953564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:22 power sudo[2953564]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:22 power sudo[2953581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DomainInfo single_domain_data domain=skyapartments.mk return_https_redirect_status=1 --output=json'
Sep 10 05:22:22 power sudo[2953581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:22 power sudo[2953581]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:22 power sudo[2953588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart Mime list_redirects --output=json'
Sep 10 05:22:22 power sudo[2953588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:22 power sudo[2953588]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:24 power sudo[2953709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DirectoryPrivacy is_directory_protected dir=/home/skyapart/public_html --output=json'
Sep 10 05:22:24 power sudo[2953709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:24 power sudo[2953709]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:28 power sudo[2953922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep 10 05:22:28 power sudo[2953922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:28 power sudo[2953922]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:28 power sudo[2953930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=socioloz --output=json'
Sep 10 05:22:28 power sudo[2953930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:28 power sudo[2953930]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:39 power sudo[2954152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz /bin/sh -c 'cd /home/socioloz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:22:39 power sudo[2954152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:39 power sudo[2954152]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:39 power sudo[2954167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user socioloz --user-current --json'
Sep 10 05:22:39 power sudo[2954167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:40 power sudo[2954167]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:40 power sudo[2954178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz LangPHP php_get_vhost_versions --output=json'
Sep 10 05:22:40 power sudo[2954178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:40 power sudo[2954178]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:40 power sudo[2954184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:22:40 power sudo[2954184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:40 power sudo[2954184]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:40 power sudo[2954208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DomainInfo single_domain_data domain=sociolozi.org.mk return_https_redirect_status=1 --output=json'
Sep 10 05:22:40 power sudo[2954208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:40 power sudo[2954208]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:40 power sudo[2954214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz Mime list_redirects --output=json'
Sep 10 05:22:40 power sudo[2954214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:40 power sudo[2954214]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:46 power sudo[2954387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DirectoryPrivacy is_directory_protected dir=/home/socioloz/public_html --output=json'
Sep 10 05:22:46 power sudo[2954387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:46 power sudo[2954387]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:51 power sudo[2954608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep 10 05:22:51 power sudo[2954608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:51 power sudo[2954608]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:51 power sudo[2954614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stojnevi --output=json'
Sep 10 05:22:51 power sudo[2954614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:51 power sudo[2954614]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:54 power sudo[2954714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi /bin/sh -c 'cd /home/stojnevi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:22:54 power sudo[2954714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:54 power sudo[2954714]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:54 power sudo[2954721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stojnevi --user-current --json'
Sep 10 05:22:54 power sudo[2954721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:55 power sudo[2954721]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:55 power sudo[2954731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi LangPHP php_get_vhost_versions --output=json'
Sep 10 05:22:55 power sudo[2954731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:55 power sudo[2954731]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:55 power sudo[2954741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:22:55 power sudo[2954741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:55 power sudo[2954741]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:55 power sudo[2954760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DomainInfo single_domain_data domain=stojnevi.mk return_https_redirect_status=1 --output=json'
Sep 10 05:22:55 power sudo[2954760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:55 power sudo[2954760]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:55 power sudo[2954767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi Mime list_redirects --output=json'
Sep 10 05:22:55 power sudo[2954767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:55 power sudo[2954767]: pam_unix(sudo:session): session closed for user root
Sep 10 05:22:58 power sudo[2954865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DirectoryPrivacy is_directory_protected dir=/home/stojnevi/public_html --output=json'
Sep 10 05:22:58 power sudo[2954865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:22:58 power sudo[2954865]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:08 power sudo[2955281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/teatar.nucktrajkoprokopiev.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:23:08 power sudo[2955281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:08 power sudo[2955281]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:08 power sudo[2955287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep 10 05:23:08 power sudo[2955287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:08 power sudo[2955287]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:08 power sudo[2955293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:23:08 power sudo[2955293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:08 power sudo[2955293]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:09 power sudo[2955312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=teatar.nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep 10 05:23:09 power sudo[2955312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:09 power sudo[2955312]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:12 power sudo[2955458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/teatar.nucktrajkoprokopiev.mk/mk --output=json'
Sep 10 05:23:12 power sudo[2955458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:12 power sudo[2955458]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:16 power sudo[2955664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep 10 05:23:16 power sudo[2955664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:16 power sudo[2955664]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:16 power sudo[2955671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=trudovop --output=json'
Sep 10 05:23:16 power sudo[2955671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:16 power sudo[2955671]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:24 power sudo[2955818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop /bin/sh -c 'cd /home/trudovop/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:23:24 power sudo[2955818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:24 power sudo[2955818]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:24 power sudo[2955825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user trudovop --user-current --json'
Sep 10 05:23:24 power sudo[2955825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:24 power sudo[2955825]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:24 power sudo[2955846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop LangPHP php_get_vhost_versions --output=json'
Sep 10 05:23:24 power sudo[2955846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:24 power sudo[2955846]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:24 power sudo[2955863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:23:24 power sudo[2955863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:24 power sudo[2955863]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:25 power sudo[2955902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DomainInfo single_domain_data domain=trudovopravo.mk return_https_redirect_status=1 --output=json'
Sep 10 05:23:25 power sudo[2955902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:25 power sudo[2955902]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:25 power sudo[2955908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop Mime list_redirects --output=json'
Sep 10 05:23:25 power sudo[2955908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:25 power sudo[2955908]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:30 power sudo[2956029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DirectoryPrivacy is_directory_protected dir=/home/trudovop/public_html --output=json'
Sep 10 05:23:30 power sudo[2956029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:30 power sudo[2956029]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:33 power sudo[2956243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep 10 05:23:33 power sudo[2956243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:34 power sudo[2956243]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:34 power sudo[2956254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=urbanexp --output=json'
Sep 10 05:23:34 power sudo[2956254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:34 power sudo[2956254]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:40 power sudo[2956439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp /bin/sh -c 'cd /home/urbanexp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:23:40 power sudo[2956439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:40 power sudo[2956439]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:40 power sudo[2956445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user urbanexp --user-current --json'
Sep 10 05:23:40 power sudo[2956445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:40 power sudo[2956445]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:40 power sudo[2956451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp LangPHP php_get_vhost_versions --output=json'
Sep 10 05:23:40 power sudo[2956451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:40 power sudo[2956451]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:40 power sudo[2956456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:23:40 power sudo[2956456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:40 power sudo[2956456]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:41 power sudo[2956475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DomainInfo single_domain_data domain=urbanexpert.mk return_https_redirect_status=1 --output=json'
Sep 10 05:23:41 power sudo[2956475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:41 power sudo[2956475]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:41 power sudo[2956481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp Mime list_redirects --output=json'
Sep 10 05:23:41 power sudo[2956481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:41 power sudo[2956481]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:44 power sudo[2956598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DirectoryPrivacy is_directory_protected dir=/home/urbanexp/public_html --output=json'
Sep 10 05:23:44 power sudo[2956598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:44 power sudo[2956598]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:47 power sudo[2956841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep 10 05:23:47 power sudo[2956841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:48 power sudo[2956841]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:48 power sudo[2956854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vfxnestc --output=json'
Sep 10 05:23:48 power sudo[2956854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:48 power sudo[2956854]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:54 power sudo[2957008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc /bin/sh -c 'cd /home/vfxnestc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:23:54 power sudo[2957008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:54 power sudo[2957008]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:54 power sudo[2957014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vfxnestc --user-current --json'
Sep 10 05:23:54 power sudo[2957014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:54 power sudo[2957014]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:54 power sudo[2957020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc LangPHP php_get_vhost_versions --output=json'
Sep 10 05:23:54 power sudo[2957020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:55 power sudo[2957020]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:55 power sudo[2957026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:23:55 power sudo[2957026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:55 power sudo[2957026]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:55 power sudo[2957046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DomainInfo single_domain_data domain=vfxnest.com return_https_redirect_status=1 --output=json'
Sep 10 05:23:55 power sudo[2957046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:55 power sudo[2957046]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:55 power sudo[2957055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc Mime list_redirects --output=json'
Sep 10 05:23:55 power sudo[2957055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:55 power sudo[2957055]: pam_unix(sudo:session): session closed for user root
Sep 10 05:23:59 power sudo[2957177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DirectoryPrivacy is_directory_protected dir=/home/vfxnestc/public_html --output=json'
Sep 10 05:23:59 power sudo[2957177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:23:59 power sudo[2957177]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:04 power sudo[2957420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep 10 05:24:04 power sudo[2957420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:04 power sudo[2957420]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:04 power sudo[2957456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=volkanco --output=json'
Sep 10 05:24:04 power sudo[2957456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:04 power sudo[2957456]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:08 power sudo[2957553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:24:08 power sudo[2957553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:08 power sudo[2957553]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:08 power sudo[2957565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep 10 05:24:08 power sudo[2957565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:09 power sudo[2957565]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:09 power sudo[2957574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco LangPHP php_get_vhost_versions --output=json'
Sep 10 05:24:09 power sudo[2957574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:09 power sudo[2957574]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:09 power sudo[2957580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:24:09 power sudo[2957580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:09 power sudo[2957580]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:09 power sudo[2957597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DomainInfo single_domain_data domain=volkan.com.mk return_https_redirect_status=1 --output=json'
Sep 10 05:24:09 power sudo[2957597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:09 power sudo[2957597]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:09 power sudo[2957606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mime list_redirects --output=json'
Sep 10 05:24:09 power sudo[2957606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:09 power sudo[2957606]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:12 power sudo[2957708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DirectoryPrivacy is_directory_protected dir=/home/volkanco/public_html --output=json'
Sep 10 05:24:12 power sudo[2957708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:12 power sudo[2957708]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:13 power sudo[2957774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:24:13 power sudo[2957774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:13 power sudo[2957774]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:13 power sudo[2957779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:24:13 power sudo[2957779]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:24:13 power sudo[2957779]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:24:13 power sudo[2957779]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:24:13 power sudo[2957779]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:24:13 power sudo[2957779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:13 power sudo[2957779]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:13 power sudo[2957784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:24:13 power sudo[2957784]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:24:13 power sudo[2957784]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:24:13 power sudo[2957784]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:24:13 power sudo[2957784]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:24:13 power sudo[2957784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:13 power sudo[2957784]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:13 power sudo[2957788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:24:13 power sudo[2957788]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:24:13 power sudo[2957788]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:24:13 power sudo[2957788]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:24:13 power sudo[2957788]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:24:13 power sudo[2957788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:13 power sudo[2957788]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:21 power sudo[2957994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco ResourceUsage get_usages --output=json'
Sep 10 05:24:21 power sudo[2957994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:22 power sudo[2957994]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:22 power sudo[2958015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=database_prefix --output=json'
Sep 10 05:24:22 power sudo[2958015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:22 power sudo[2958015]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:22 power sudo[2958022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mysql get_restrictions --output=json'
Sep 10 05:24:22 power sudo[2958022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:22 power sudo[2958022]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:22 power sudo[2958037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mysql list_databases --output=json'
Sep 10 05:24:22 power sudo[2958037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:22 power sudo[2958037]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:22 power sudo[2958046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/public_html/.wp-toolkit_B
Sep 10 05:24:22 power sudo[2958046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:22 power sudo[2958046]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:24 power sudo[2958103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:24:24 power sudo[2958103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:24 power sudo[2958103]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:24 power sudo[2958114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep 10 05:24:24 power sudo[2958114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:24 power sudo[2958114]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:24 power sudo[2958123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:24:25 power sudo[2958123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958123]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/volkanco/public_html/.wp-toolkit_B/.wp-toolkit-ignore
Sep 10 05:24:25 power sudo[2958145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958145]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Variables get_user_information --output=json'
Sep 10 05:24:25 power sudo[2958155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958155]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:24:25 power sudo[2958169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958169]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:24:25 power sudo[2958174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958174]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-activate.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-activate.php -replace-modified'
Sep 10 05:24:25 power sudo[2958374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958374]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/license.txt -target-path /home/volkanco/public_html/.wp-toolkit_B/license.txt -replace-modified'
Sep 10 05:24:25 power sudo[2958409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958409]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-settings.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-settings.php -replace-modified'
Sep 10 05:24:25 power sudo[2958435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958435]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-login.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-login.php -replace-modified'
Sep 10 05:24:25 power sudo[2958461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958461]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/error_log -target-path /home/volkanco/public_html/.wp-toolkit_B/error_log -replace-modified'
Sep 10 05:24:25 power sudo[2958487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958487]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-config-sample.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-config-sample.php -replace-modified'
Sep 10 05:24:25 power sudo[2958520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958520]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/readme.html -target-path /home/volkanco/public_html/.wp-toolkit_B/readme.html -replace-modified'
Sep 10 05:24:25 power sudo[2958546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958546]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wordpress_N -target-path /home/volkanco/public_html/.wp-toolkit_B/wordpress_N -replace-modified'
Sep 10 05:24:25 power sudo[2958572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958572]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp -target-path /home/volkanco/public_html/.wp-toolkit_B/wp -replace-modified'
Sep 10 05:24:25 power sudo[2958599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958599]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-links-opml.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-links-opml.php -replace-modified'
Sep 10 05:24:25 power sudo[2958645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:25 power sudo[2958645]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:25 power sudo[2958673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-content -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-content -replace-modified'
Sep 10 05:24:25 power sudo[2958673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2958673]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2958755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-cron.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-cron.php -replace-modified'
Sep 10 05:24:27 power sudo[2958755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2958755]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2958781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/index.php -target-path /home/volkanco/public_html/.wp-toolkit_B/index.php -replace-modified'
Sep 10 05:24:27 power sudo[2958781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2958781]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2958807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-blog-header.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-blog-header.php -replace-modified'
Sep 10 05:24:27 power sudo[2958807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2958807]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2958833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-mail.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-mail.php -replace-modified'
Sep 10 05:24:27 power sudo[2958833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2958833]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2958859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-includes -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-includes -replace-modified'
Sep 10 05:24:27 power sudo[2958859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2958859]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2958921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/5.8.1.zip -target-path /home/volkanco/public_html/.wp-toolkit_B/5.8.1.zip -replace-modified'
Sep 10 05:24:27 power sudo[2958921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2958921]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2958966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/xmlrpc.php -target-path /home/volkanco/public_html/.wp-toolkit_B/xmlrpc.php -replace-modified'
Sep 10 05:24:27 power sudo[2958966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2958966]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2958993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-load.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-load.php -replace-modified'
Sep 10 05:24:27 power sudo[2958993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2958993]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2959020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-admin -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-admin -replace-modified'
Sep 10 05:24:27 power sudo[2959020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2959020]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2959074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-comments-post.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-comments-post.php -replace-modified'
Sep 10 05:24:27 power sudo[2959074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2959074]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2959102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-signup.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-signup.php -replace-modified'
Sep 10 05:24:27 power sudo[2959102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:27 power sudo[2959102]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:27 power sudo[2959128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wordpress -target-path /home/volkanco/public_html/.wp-toolkit_B/wordpress -replace-modified'
Sep 10 05:24:27 power sudo[2959128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:28 power sudo[2959128]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:28 power sudo[2959171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/wp-trackback.php -target-path /home/volkanco/public_html/.wp-toolkit_B/wp-trackback.php -replace-modified'
Sep 10 05:24:28 power sudo[2959171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:28 power sudo[2959171]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:28 power sudo[2959221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/bin/fileTransfer -run-type same-server -source-username volkanco -target-username volkanco -source-path /home/volkanco/public_html/.htaccess -target-path /home/volkanco/public_html/.wp-toolkit_B/.htaccess -replace-modified'
Sep 10 05:24:28 power sudo[2959221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:28 power sudo[2959221]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:28 power sudo[2959256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mysql create_database name=volkanco_wp_plsbn --output=json'
Sep 10 05:24:28 power sudo[2959256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:28 power sudo[2959256]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:28 power sudo[2959265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mysql list_databases --output=json'
Sep 10 05:24:28 power sudo[2959265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:28 power sudo[2959265]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:28 power sudo[2959271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco --input=json Mysql create_user --output=json'
Sep 10 05:24:28 power sudo[2959271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:28 power sudo[2959271]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:28 power sudo[2959278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mysql set_privileges_on_database user=volkanco_wp_lvj8e database=volkanco_wp_plsbn \'privileges=ALL PRIVILEGES\' --output=json'
Sep 10 05:24:28 power sudo[2959278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:28 power sudo[2959278]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:28 power sudo[2959291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 remote_mysql_read_profiles --output=json'
Sep 10 05:24:28 power sudo[2959291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:28 power sudo[2959291]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 domainuserdata domain=volkan.com.mk --output=json'
Sep 10 05:24:29 power sudo[2959321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959321]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/.wp-toolkit
Sep 10 05:24:29 power sudo[2959339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959339]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco mktemp -p /home/volkanco/.wp-toolkit
Sep 10 05:24:29 power sudo[2959345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959345]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -f /home/volkanco/.wp-toolkit/tmp.fV2zbDhvQv
Sep 10 05:24:29 power sudo[2959353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959353]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco stat -c %a /home/volkanco/.wp-toolkit/tmp.fV2zbDhvQv
Sep 10 05:24:29 power sudo[2959358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959358]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/.wp-toolkit/tmp-wpt-tmp-CLa5cwRjM1fX8Oqg.fV2zbDhvQv
Sep 10 05:24:29 power sudo[2959363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959363]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cat > /home/volkanco/.wp-toolkit/tmp-wpt-tmp-CLa5cwRjM1fX8Oqg.fV2zbDhvQv'
Sep 10 05:24:29 power sudo[2959368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959368]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco chmod 600 /home/volkanco/.wp-toolkit/tmp-wpt-tmp-CLa5cwRjM1fX8Oqg.fV2zbDhvQv
Sep 10 05:24:29 power sudo[2959374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959374]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco mv /home/volkanco/.wp-toolkit/tmp-wpt-tmp-CLa5cwRjM1fX8Oqg.fV2zbDhvQv /home/volkanco/.wp-toolkit/tmp.fV2zbDhvQv
Sep 10 05:24:29 power sudo[2959379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959379]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c '/bin/sh /home/volkanco/.wp-toolkit/tmp.fV2zbDhvQv'
Sep 10 05:24:29 power sudo[2959385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959385]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco rm -f /home/volkanco/.wp-toolkit/tmp.fV2zbDhvQv
Sep 10 05:24:29 power sudo[2959400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959400]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c '/usr/bin/mariadb-dump --help | grep \'column-statistics\' || exit 0'
Sep 10 05:24:29 power sudo[2959406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959406]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/.wp-toolkit
Sep 10 05:24:29 power sudo[2959413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959413]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:29 power sudo[2959418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco mktemp -p /home/volkanco/.wp-toolkit
Sep 10 05:24:29 power sudo[2959418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:29 power sudo[2959418]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:30 power sudo[2959423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -f /home/volkanco/.wp-toolkit/tmp.TAm440HbyQ
Sep 10 05:24:30 power sudo[2959423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:30 power sudo[2959423]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:30 power sudo[2959428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco stat -c %a /home/volkanco/.wp-toolkit/tmp.TAm440HbyQ
Sep 10 05:24:30 power sudo[2959428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:30 power sudo[2959428]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:30 power sudo[2959433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/.wp-toolkit/tmp-wpt-tmp-UGaHyZ83z2oipzxc.TAm440HbyQ
Sep 10 05:24:30 power sudo[2959433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:30 power sudo[2959433]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:30 power sudo[2959438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cat > /home/volkanco/.wp-toolkit/tmp-wpt-tmp-UGaHyZ83z2oipzxc.TAm440HbyQ'
Sep 10 05:24:30 power sudo[2959438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:30 power sudo[2959438]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:30 power sudo[2959444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco chmod 600 /home/volkanco/.wp-toolkit/tmp-wpt-tmp-UGaHyZ83z2oipzxc.TAm440HbyQ
Sep 10 05:24:30 power sudo[2959444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:30 power sudo[2959444]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:30 power sudo[2959449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco mv /home/volkanco/.wp-toolkit/tmp-wpt-tmp-UGaHyZ83z2oipzxc.TAm440HbyQ /home/volkanco/.wp-toolkit/tmp.TAm440HbyQ
Sep 10 05:24:30 power sudo[2959449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:30 power sudo[2959449]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:30 power sudo[2959454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c '/bin/sh /home/volkanco/.wp-toolkit/tmp.TAm440HbyQ'
Sep 10 05:24:30 power sudo[2959454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:40 power sudo[2959454]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:40 power sudo[2959621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco rm -f /home/volkanco/.wp-toolkit/tmp.TAm440HbyQ
Sep 10 05:24:40 power sudo[2959621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:40 power sudo[2959621]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:40 power sudo[2959626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c '/usr/local/bin/php /usr/local/cpanel/3rdparty/wp-toolkit/plib/scripts/user-scripts/cut-definer.php /home/volkanco/.wp-toolkit/291/db_291_ilatu4aqi.sql /home/volkanco/.wp-toolkit/291/db_291_ilatu4aqi.sql.definer-cut'
Sep 10 05:24:40 power sudo[2959626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959626]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/.wp-toolkit
Sep 10 05:24:51 power sudo[2959797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959797]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco mktemp -p /home/volkanco/.wp-toolkit
Sep 10 05:24:51 power sudo[2959802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959802]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -f /home/volkanco/.wp-toolkit/tmp.bH7q3HAVg1
Sep 10 05:24:51 power sudo[2959807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959807]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco stat -c %a /home/volkanco/.wp-toolkit/tmp.bH7q3HAVg1
Sep 10 05:24:51 power sudo[2959812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959812]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/.wp-toolkit/tmp-wpt-tmp-jcPPl4EHR1YbrVbC.bH7q3HAVg1
Sep 10 05:24:51 power sudo[2959817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959817]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cat > /home/volkanco/.wp-toolkit/tmp-wpt-tmp-jcPPl4EHR1YbrVbC.bH7q3HAVg1'
Sep 10 05:24:51 power sudo[2959822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959822]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco chmod 600 /home/volkanco/.wp-toolkit/tmp-wpt-tmp-jcPPl4EHR1YbrVbC.bH7q3HAVg1
Sep 10 05:24:51 power sudo[2959829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959829]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco mv /home/volkanco/.wp-toolkit/tmp-wpt-tmp-jcPPl4EHR1YbrVbC.bH7q3HAVg1 /home/volkanco/.wp-toolkit/tmp.bH7q3HAVg1
Sep 10 05:24:51 power sudo[2959834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959834]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c '/bin/sh /home/volkanco/.wp-toolkit/tmp.bH7q3HAVg1'
Sep 10 05:24:51 power sudo[2959839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959839]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:51 power sudo[2959845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco rm -f /home/volkanco/.wp-toolkit/tmp.bH7q3HAVg1
Sep 10 05:24:51 power sudo[2959845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:51 power sudo[2959845]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:58 power sudo[2960128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:24:58 power sudo[2960128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:58 power sudo[2960128]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:58 power sudo[2960134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep 10 05:24:58 power sudo[2960134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:59 power sudo[2960134]: pam_unix(sudo:session): session closed for user root
Sep 10 05:24:59 power sudo[2960147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:24:59 power sudo[2960147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:24:59 power sudo[2960147]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:01 power sudo[2960241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:25:01 power sudo[2960241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:01 power sudo[2960241]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:01 power sudo[2960248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep 10 05:25:01 power sudo[2960248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:01 power sudo[2960248]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:01 power sudo[2960254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:25:01 power sudo[2960254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:01 power sudo[2960254]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:02 power systemd[2960368]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:25:03 power sudo[2960487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:03 power sudo[2960487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:03 power sudo[2960487]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:03 power sudo[2960492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:25:03 power sudo[2960492]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:25:03 power sudo[2960492]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:25:03 power sudo[2960492]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:25:03 power sudo[2960492]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:03 power sudo[2960492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:03 power sudo[2960492]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:03 power sudo[2960498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:25:03 power sudo[2960498]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:25:03 power sudo[2960498]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:25:03 power sudo[2960498]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:25:03 power sudo[2960498]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:03 power sudo[2960498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:03 power sudo[2960498]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:03 power sudo[2960503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:25:03 power sudo[2960503]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:25:03 power sudo[2960503]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:25:03 power sudo[2960503]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:25:03 power sudo[2960503]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:03 power sudo[2960503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:03 power sudo[2960503]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:04 power sudo[2960598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -exec chmod 644 \'{}\' \';\''
Sep 10 05:25:04 power sudo[2960598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:04 power sudo[2960598]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:04 power sudo[2960603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-admin \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\'
Sep 10 05:25:04 power sudo[2960603]: wp-toolkit : (command continued) -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\'
Sep 10 05:25:04 power sudo[2960603]: wp-toolkit : (command continued) -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\'
Sep 10 05:25:04 power sudo[2960603]: wp-toolkit : (command continued) -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' -exec chmod 755 \'{}\' \';\''
Sep 10 05:25:04 power sudo[2960603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:04 power sudo[2960603]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:04 power sudo[2960608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-admin \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -exec chmod 644 \'{}\' \';\''
Sep 10 05:25:04 power sudo[2960608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:04 power sudo[2960608]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:04 power sudo[2960614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-content \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o
Sep 10 05:25:04 power sudo[2960614]: wp-toolkit : (command continued) \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o
Sep 10 05:25:04 power sudo[2960614]: wp-toolkit : (command continued) \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o
Sep 10 05:25:04 power sudo[2960614]: wp-toolkit : (command continued) \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' -exec chmod 755 \'{}\' \';\''
Sep 10 05:25:04 power sudo[2960614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:04 power sudo[2960614]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:04 power sudo[2960619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-content \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -exec chmod 644 \'{}\' \';\''
Sep 10 05:25:04 power sudo[2960619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:04 power sudo[2960619]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:04 power sudo[2960625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-includes \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o
Sep 10 05:25:04 power sudo[2960625]: wp-toolkit : (command continued) \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o
Sep 10 05:25:04 power sudo[2960625]: wp-toolkit : (command continued) \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o
Sep 10 05:25:04 power sudo[2960625]: wp-toolkit : (command continued) \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' -exec chmod 755 \'{}\' \';\''
Sep 10 05:25:04 power sudo[2960625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:04 power sudo[2960625]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:04 power sudo[2960630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-includes \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -exec chmod 644 \'{}\' \';\''
Sep 10 05:25:04 power sudo[2960630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:04 power sudo[2960630]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:05 power sudo[2960689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:05 power sudo[2960689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:05 power sudo[2960689]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:05 power sudo[2960694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011
Sep 10 05:25:05 power sudo[2960694]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244
Sep 10 05:25:05 power sudo[2960694]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455
Sep 10 05:25:05 power sudo[2960694]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710
Sep 10 05:25:05 power sudo[2960694]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:05 power sudo[2960694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:05 power sudo[2960694]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:05 power sudo[2960699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011
Sep 10 05:25:05 power sudo[2960699]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244
Sep 10 05:25:05 power sudo[2960699]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455
Sep 10 05:25:05 power sudo[2960699]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710
Sep 10 05:25:05 power sudo[2960699]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:05 power sudo[2960699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:05 power sudo[2960699]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:05 power sudo[2960704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011
Sep 10 05:25:05 power sudo[2960704]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244
Sep 10 05:25:05 power sudo[2960704]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455
Sep 10 05:25:05 power sudo[2960704]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710
Sep 10 05:25:05 power sudo[2960704]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:05 power sudo[2960704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:05 power sudo[2960704]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:09 power sudo[2960869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:25:09 power sudo[2960869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:09 power sudo[2960869]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:09 power sudo[2960876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep 10 05:25:09 power sudo[2960876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:09 power sudo[2960876]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:09 power sudo[2960883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:25:09 power sudo[2960883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:09 power sudo[2960883]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:12 power sudo[2960995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DirectoryPrivacy is_directory_protected dir=/home/volkanco/public_html/.wp-toolkit_B --output=json'
Sep 10 05:25:12 power sudo[2960995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:12 power sudo[2960995]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:13 power sudo[2961070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:13 power sudo[2961070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:13 power sudo[2961070]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:13 power sudo[2961075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011
Sep 10 05:25:13 power sudo[2961075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244
Sep 10 05:25:13 power sudo[2961075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455
Sep 10 05:25:13 power sudo[2961075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710
Sep 10 05:25:13 power sudo[2961075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:13 power sudo[2961075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:13 power sudo[2961075]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:13 power sudo[2961080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011
Sep 10 05:25:13 power sudo[2961080]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244
Sep 10 05:25:13 power sudo[2961080]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455
Sep 10 05:25:13 power sudo[2961080]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710
Sep 10 05:25:13 power sudo[2961080]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:13 power sudo[2961080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:13 power sudo[2961080]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:13 power sudo[2961085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html/.wp-toolkit_B && find /home/volkanco/public_html/.wp-toolkit_B/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011
Sep 10 05:25:13 power sudo[2961085]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244
Sep 10 05:25:13 power sudo[2961085]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455
Sep 10 05:25:13 power sudo[2961085]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710
Sep 10 05:25:13 power sudo[2961085]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:25:13 power sudo[2961085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:14 power sudo[2961085]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:17 power sudo[2961269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 05:25:17 power sudo[2961269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:17 power sudo[2961269]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:17 power sudo[2961287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c '/usr/local/cpanel/3rdparty/wp-toolkit/var/user-hooks/site-cloning-completed --source-instance-id=291 --source-site-path=/home/volkanco/public_html --target-instance-id=301 --target-site-path=/home/volkanco/public_html/.wp-toolkit_B'
Sep 10 05:25:17 power sudo[2961287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:17 power sudo[2961334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 05:25:17 power sudo[2961334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:17 power sudo[2961334]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:17 power sudo[2961345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 05:25:17 power sudo[2961345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:17 power sudo[2961345]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:17 power sudo[2961350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 05:25:17 power sudo[2961350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:17 power sudo[2961350]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:17 power sudo[2961357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=enaspotc user-2=trudovop user-3=viewinn user-4=vmro user-5=oouslave user-6=raremk user-7=bauerbg user-8=uhostmk5 user-9=stojnevi user-10=anitermc user-11=youthgua user-12=cajsproc user-13=hotammk user-14=oncolog1 user-15=ekostoc1 user-16=levantmk user-17=nefrolog user-18=caramk user-19=hidrommk user-20=frizered user-21=evolvepl user-22=pelagoni user-23=avtogumi user-24=socioloz user-25=nolimits user-26=kolened1 user-27=centarba user-28=nlpmkorg user-29=seloviro user-30=dikimk12 user-31=enochmk user-32=herbalpl user-33=sprintst user-34=edomcomm user-35=berbermk user-36=holiyayt user-37=rastiraz user-38=pecakome user-39=robustco user-40=stravelm user-41=wondersp user-42=dnevnoin user-43=tradeyou user-44=gjorgeiv user-45=gocruise user-46=goodnews user-47=mstmmk user-48=dadarmk user-49=proverim user-50=tealmk
Sep 10 05:25:17 power sudo[2961357]: wp-toolkit : (command continued) user-51=vezilkac user-52=cabinetm user-53=janiboja user-54=itradeco user-55=bovincom user-56=stojano1 user-57=klimimk user-58=stokovna user-59=sparkupm user-60=custome1 user-61=palenzok user-62=zvskopje user-63=zampmk user-64=busymard user-65=cetplatf user-66=dalmacom user-67=kouzonco user-68=premiuma user-69=daris user-70=butelmk user-71=premiums user-72=karpospo user-73=nasaidni user-74=ideaplus user-75=screenme user-76=arturaco user-77=inotekso user-78=jpparkin user-79=drleomk user-80=rasmorgm user-81=skyapart user-82=bianasho user-83=makoasmk user-84=dhamachi user-85=goartsym user-86=volkanco user-87=mfashion user-88=barececo user-89=simbiome user-90=delcevca user-91=getaldus user-92=workandt user-93=mpbmk user-94=agrosind user-95=univerz1 user-96=kujnamon user-97=velmk user-98=gogovan1 user-99=datalink user-100=polyeste user-101=vfxnestc user-102=sedcmk user-103=ivanjord user-104=groskome user-105=maleshne
Sep 10 05:25:17 power sudo[2961357]: wp-toolkit : (command continued) user-106=datelcom user-107=bizporta user-108=infobadi user-109=mspmk user-110=spdcompu user-111=detskagr user-112=wikicamp user-113=urbanexp user-114=inkigaic user-115=modernar user-116=taneccom user-117=tehnologija user-118=fnjorgmk user-119=darkogor user-120=dslmk user-121=prizmapl user-122=bozinovm user-123=vacuacti user-124=innofabl user-125=premiumi user-126=v5srybi9dcdx user-127=supremel user-128=aquatech user-129=gorsajmk user-130=zdmgpsor user-131=tcieuroc user-132=solemor1 user-133=mapaspla user-134=onlinesh user-135=nationa2 user-136=versusmk user-137=ambitiou user-138=fiziosmk user-139=starluxm user-140=radekrat user-141=fffhpcwr user-142=hausmark user-143=nikolov1 user-144=nikimare user-145=aptekazd user-146=forzares user-147=nucktra1 user-148=lblawcom user-149=mediatag user-150=intelek1 user-151=matratze user-152=euronic2 user-153=kardiome user-154=carrent1 user-155=bogdanos user-156=mediasol
Sep 10 05:25:17 power sudo[2961357]: wp-toolkit : (command continued) user-157=apgrupmk user-158=nutrivim user-159=samasped user-160=chemhemc user-161=elektrot user-162=zapovim1 user-163=euromaki user-164=cosmatob user-165=pravekom user-166=vtranseu user-167=infopor1 user-168=albuname user-169=glammace user-170=imdskopj user-171=kaoilmk user-172=biplmk user-173=bbbustou user-174=pelagini user-175=jaramk user-176=solointe user-177=recorgmk user-178=taktcomm user-179=progress user-180=cleanerm user-181=animatem user-182=sssoluti user-183=atspedco user-184=naksorgm user-185=eliksirz user-186=trigemat user-187=electrol user-188=golakkom user-189=solarinv user-190=eurofarm user-191=wineberr user-192=viplastc user-193=mbmehani user-194=workbenc user-195=ismassag user-196=evberasm user-197=bonitavi user-198=conserva user-199=euronic3 user-200=cupidpro user-201=vegemk1 user-202=bauerin2 user-203=folklore user-204=fxxcom user-205=peshkai1 user-206=eaptekam user-207=dimpalne
Sep 10 05:25:17 power sudo[2961357]: wp-toolkit : (command continued) user-208=gradbai1 user-209=aptekafa user-210=madzomk user-211=evacommk user-212=izzomk user-213=jpkomuna user-214=makdrone user-215=tehnodro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 05:25:17 power sudo[2961357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:18 power sudo[2961357]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:18 power sudo[2961383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 05:25:18 power sudo[2961383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:18 power sudo[2961383]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:18 power sudo[2961388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 05:25:18 power sudo[2961388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:18 power sudo[2961388]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:18 power sudo[2961392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 05:25:18 power sudo[2961392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:19 power sudo[2961392]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:19 power sudo[2961401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=vfxnestc user-2=polyeste user-3=sedcmk user-4=groskome user-5=ivanjord user-6=datelcom user-7=maleshne user-8=bizporta user-9=mspmk user-10=infobadi user-11=spdcompu user-12=detskagr user-13=wikicamp user-14=urbanexp user-15=rasmorgm user-16=makoasmk user-17=bianasho user-18=skyapart user-19=volkanco user-20=goartsym user-21=dhamachi user-22=mfashion user-23=simbiome user-24=delcevca user-25=getaldus user-26=barececo user-27=workandt user-28=agrosind user-29=mpbmk user-30=gogovan1 user-31=velmk user-32=kujnamon user-33=univerz1 user-34=datalink user-35=cetplatf user-36=dalmacom user-37=kouzonco user-38=premiuma user-39=premiums user-40=butelmk user-41=daris user-42=ideaplus user-43=karpospo user-44=nasaidni user-45=screenme user-46=arturaco user-47=jpparkin user-48=inotekso user-49=drleomk user-50=vezilkac
Sep 10 05:25:19 power sudo[2961401]: wp-toolkit : (command continued) user-51=cabinetm user-52=janiboja user-53=itradeco user-54=bovincom user-55=stojano1 user-56=klimimk user-57=sparkupm user-58=stokovna user-59=custome1 user-60=palenzok user-61=zampmk user-62=zvskopje user-63=busymard user-64=holiyayt user-65=rastiraz user-66=pecakome user-67=wondersp user-68=robustco user-69=stravelm user-70=dnevnoin user-71=gjorgeiv user-72=tradeyou user-73=gocruise user-74=goodnews user-75=mstmmk user-76=dadarmk user-77=proverim user-78=tealmk user-79=nolimits user-80=nlpmkorg user-81=centarba user-82=kolened1 user-83=seloviro user-84=dikimk12 user-85=sprintst user-86=enochmk user-87=herbalpl user-88=edomcomm user-89=berbermk user-90=nefrolog user-91=levantmk user-92=ekostoc1 user-93=oncolog1 user-94=caramk user-95=frizered user-96=hidrommk user-97=evolvepl user-98=pelagoni user-99=socioloz user-100=avtogumi user-101=enaspotc user-102=vmro user-103=trudovop user-104=viewinn user-105=raremk
Sep 10 05:25:19 power sudo[2961401]: wp-toolkit : (command continued) user-106=oouslave user-107=uhostmk5 user-108=bauerbg user-109=stojnevi user-110=youthgua user-111=anitermc user-112=cajsproc user-113=hotammk user-114=peshkai1 user-115=fxxcom user-116=eaptekam user-117=dimpalne user-118=gradbai1 user-119=evacommk user-120=madzomk user-121=aptekafa user-122=izzomk user-123=jpkomuna user-124=makdrone user-125=tehnodro user-126=bonitavi user-127=evberasm user-128=conserva user-129=euronic3 user-130=vegemk1 user-131=cupidpro user-132=bauerin2 user-133=folklore user-134=trigemat user-135=naksorgm user-136=eliksirz user-137=electrol user-138=golakkom user-139=solarinv user-140=eurofarm user-141=wineberr user-142=viplastc user-143=mbmehani user-144=workbenc user-145=ismassag user-146=biplmk user-147=kaoilmk user-148=bbbustou user-149=pelagini user-150=jaramk user-151=solointe user-152=recorgmk user-153=taktcomm user-154=progress user-155=animatem user-156=cleanerm user-157=sssoluti
Sep 10 05:25:19 power sudo[2961401]: wp-toolkit : (command continued) user-158=atspedco user-159=nutrivim user-160=samasped user-161=chemhemc user-162=elektrot user-163=zapovim1 user-164=euromaki user-165=cosmatob user-166=pravekom user-167=vtranseu user-168=infopor1 user-169=glammace user-170=albuname user-171=imdskopj user-172=nikolov1 user-173=hausmark user-174=aptekazd user-175=nikimare user-176=forzares user-177=nucktra1 user-178=lblawcom user-179=intelek1 user-180=mediatag user-181=euronic2 user-182=matratze user-183=kardiome user-184=mediasol user-185=bogdanos user-186=carrent1 user-187=apgrupmk user-188=tcieuroc user-189=solemor1 user-190=mapaspla user-191=onlinesh user-192=nationa2 user-193=versusmk user-194=ambitiou user-195=fiziosmk user-196=radekrat user-197=starluxm user-198=fffhpcwr user-199=inkigaic user-200=modernar user-201=taneccom user-202=tehnologija user-203=bozinovm user-204=darkogor user-205=prizmapl user-206=fnjorgmk user-207=dslmk user-208=innofabl
Sep 10 05:25:19 power sudo[2961401]: wp-toolkit : (command continued) user-209=premiumi user-210=vacuacti user-211=v5srybi9dcdx user-212=supremel user-213=gorsajmk user-214=aquatech user-215=zdmgpsor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 05:25:19 power sudo[2961401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:25:19 power sudo[2961401]: pam_unix(sudo:session): session closed for user root
Sep 10 05:25:23 power sudo[2961287]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:00 power sudo[2963693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mysql list_users --output=json'
Sep 10 05:27:00 power sudo[2963693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:00 power sudo[2963693]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:00 power sudo[2963699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mysql delete_user name=volkanco_wp_lvj8e --output=json'
Sep 10 05:27:00 power sudo[2963699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:00 power sudo[2963699]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:00 power sudo[2963707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mysql list_databases --output=json'
Sep 10 05:27:00 power sudo[2963707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:00 power sudo[2963707]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:00 power sudo[2963713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mysql delete_database name=volkanco_wp_plsbn --output=json'
Sep 10 05:27:00 power sudo[2963713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:00 power sudo[2963713]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:01 power sudo[2963740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 05:27:01 power sudo[2963740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:01 power sudo[2963740]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:01 power sudo[2963758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 05:27:01 power sudo[2963758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:01 power sudo[2963758]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:01 power sudo[2963765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep 10 05:27:01 power sudo[2963765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:01 power sudo[2963794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:27:01 power sudo[2963794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:01 power sudo[2963794]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:01 power sudo[2963799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 10 05:27:01 power sudo[2963799]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 10 05:27:01 power sudo[2963799]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 10 05:27:01 power sudo[2963799]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 10 05:27:01 power sudo[2963799]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:27:01 power sudo[2963799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:01 power sudo[2963765]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:01 power sudo[2963799]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:01 power sudo[2963804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco rm -rf /home/volkanco/public_html/.wp-toolkit_B
Sep 10 05:27:01 power sudo[2963806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:27:01 power sudo[2963806]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:27:01 power sudo[2963806]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:27:01 power sudo[2963806]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:27:01 power sudo[2963806]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:27:01 power sudo[2963804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:01 power sudo[2963806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:01 power sudo[2963806]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:01 power sudo[2963815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 10 05:27:01 power sudo[2963815]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 10 05:27:01 power sudo[2963815]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 10 05:27:01 power sudo[2963815]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 10 05:27:01 power sudo[2963815]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 10 05:27:01 power sudo[2963815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:01 power sudo[2963815]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:02 power sudo[2963804]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:02 power sudo[2963867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep 10 05:27:02 power sudo[2963867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:02 power sudo[2963867]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:02 power sudo[2963874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=glammace --output=json'
Sep 10 05:27:02 power sudo[2963874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:03 power sudo[2963874]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:13 power sudo[2964091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace /bin/sh -c 'cd /home/glammace/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:27:14 power sudo[2964091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:14 power sudo[2964091]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:14 power sudo[2964097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user glammace --user-current --json'
Sep 10 05:27:14 power sudo[2964097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:14 power sudo[2964097]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:14 power sudo[2964108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace LangPHP php_get_vhost_versions --output=json'
Sep 10 05:27:14 power sudo[2964108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:14 power sudo[2964108]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:14 power sudo[2964114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:27:14 power sudo[2964114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:14 power sudo[2964114]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:14 power sudo[2964132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DomainInfo single_domain_data domain=wikimedia.mk return_https_redirect_status=1 --output=json'
Sep 10 05:27:14 power sudo[2964132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:14 power sudo[2964132]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:14 power sudo[2964139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace Mime list_redirects --output=json'
Sep 10 05:27:14 power sudo[2964139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:14 power sudo[2964139]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:20 power sudo[2964271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DirectoryPrivacy is_directory_protected dir=/home/glammace/public_html --output=json'
Sep 10 05:27:20 power sudo[2964271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:20 power sudo[2964271]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:30 power sudo[2964668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:27:30 power sudo[2964668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:30 power sudo[2964668]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:30 power sudo[2964674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep 10 05:27:30 power sudo[2964674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:31 power sudo[2964674]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:31 power sudo[2964683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:27:31 power sudo[2964683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:31 power sudo[2964683]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:31 power sudo[2964709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=wineberry.mk return_https_redirect_status=1 --output=json'
Sep 10 05:27:31 power sudo[2964709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:32 power sudo[2964709]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:36 power sudo[2964843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/public_html --output=json'
Sep 10 05:27:36 power sudo[2964843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:36 power sudo[2964843]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:40 power sudo[2965053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep 10 05:27:40 power sudo[2965053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:40 power sudo[2965053]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:40 power sudo[2965071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workbenc --output=json'
Sep 10 05:27:40 power sudo[2965071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:40 power sudo[2965071]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:43 power sudo[2965151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc /bin/sh -c 'cd /home/workbenc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 05:27:43 power sudo[2965151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:43 power sudo[2965151]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:43 power sudo[2965157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workbenc --user-current --json'
Sep 10 05:27:43 power sudo[2965157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:43 power sudo[2965157]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:43 power sudo[2965167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc LangPHP php_get_vhost_versions --output=json'
Sep 10 05:27:43 power sudo[2965167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:43 power sudo[2965167]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:43 power sudo[2965173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 05:27:43 power sudo[2965173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:43 power sudo[2965173]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:44 power sudo[2965195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DomainInfo single_domain_data domain=workbench-ent.com return_https_redirect_status=1 --output=json'
Sep 10 05:27:44 power sudo[2965195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:44 power sudo[2965195]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:44 power sudo[2965202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc Mime list_redirects --output=json'
Sep 10 05:27:44 power sudo[2965202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:44 power sudo[2965202]: pam_unix(sudo:session): session closed for user root
Sep 10 05:27:46 power sudo[2965303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DirectoryPrivacy is_directory_protected dir=/home/workbenc/public_html --output=json'
Sep 10 05:27:46 power sudo[2965303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:27:46 power sudo[2965303]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/hooks
Sep 10 05:28:56 power sudo[2969629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969629]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep 10 05:28:56 power sudo[2969633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969633]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969637]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969641]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969645]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969649]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969653]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969660]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969664]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969669]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969673]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969677]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969682]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969686]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969690]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969694]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969698]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969702]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969706]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969710]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969716]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969721]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/animatem/animate.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969726]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/animatem/animate.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969730]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969734]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969738]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969742]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969747]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969751]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969755]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969760]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969764]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969769]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969773]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969778]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969782]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969786]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969791]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969796]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969800]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969804]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969808]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969812]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969816]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:56 power sudo[2969820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 10 05:28:56 power sudo[2969820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:56 power sudo[2969820]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969824]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969828]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969832]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969836]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969841]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969846]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969851]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969855]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969859]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969863]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969867]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969871]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969876]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969880]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969884]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969888]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969892]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969896]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969900]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969905]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969909]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969913]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969917]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969921]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969925]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969933]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969938]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969943]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969947]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969953]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969957]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969961]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969965]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969969]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969973]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969977]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969982]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969986]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969990]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969994]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2969998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2969998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2969998]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970002]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970006]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970010]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970014]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970018]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970022]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970026]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970030]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970034]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970038]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970043]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970047]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970051]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970055]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970059]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970063]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970067]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970071]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970075]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970079]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970083]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970087]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970092]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970096]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:57 power sudo[2970100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:57 power sudo[2970100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:57 power sudo[2970100]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970104]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970108]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970112]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970116]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970120]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970124]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970128]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970132]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970136]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970140]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970144]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970148]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970152]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970156]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970160]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970164]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970168]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970172]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970176]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970180]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970184]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970188]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970192]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970196]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970202]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970206]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970210]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970218]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970222]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970226]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970230]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970234]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970238]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970242]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970246]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970250]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970254]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970262]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970266]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970270]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970274]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970278]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970282]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970286]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970290]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970294]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970298]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970303]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970307]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970311]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970315]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970319]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970324]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970328]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970332]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970336]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970340]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970344]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep 10 05:28:58 power sudo[2970348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:58 power sudo[2970348]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:58 power sudo[2970352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep 10 05:28:58 power sudo[2970352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970352]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970363]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970371]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970375]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970379]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970383]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970390]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970394]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970398]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970402]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970406]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970411]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970415]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970419]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970423]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970427]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970431]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970435]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970442]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970446]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970451]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970455]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970459]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970463]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970468]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970473]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970477]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970481]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970485]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970489]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970493]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970497]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970501]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970505]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970509]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970514]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970518]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970522]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970526]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970530]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970534]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970538]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970542]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970546]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970550]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970554]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970558]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970562]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970566]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970570]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970576]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970580]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970585]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970589]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970593]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970597]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970601]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 10 05:28:59 power sudo[2970605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:28:59 power sudo[2970605]: pam_unix(sudo:session): session closed for user root
Sep 10 05:28:59 power sudo[2970609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970609]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970613]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970617]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970621]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970625]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970629]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970633]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970637]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970641]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970649]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970653]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970657]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970661]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970665]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970669]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970676]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970680]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970684]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970689]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970693]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970697]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970701]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970705]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970712]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970717]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970721]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970726]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970730]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970734]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970738]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970746]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970750]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970755]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970759]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970763]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970767]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970771]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970775]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970779]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970783]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970787]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970792]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970796]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970800]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970804]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970808]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970812]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970816]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970820]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970824]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970828]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970832]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:00 power sudo[2970836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 10 05:29:00 power sudo[2970836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:00 power sudo[2970836]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970840]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970845]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970850]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970854]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970858]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970862]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970866]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970871]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970875]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970879]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970883]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970887]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970891]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970895]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970899]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970903]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970907]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970911]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970915]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970919]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970923]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970927]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970941]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970945]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970953]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970957]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970961]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970965]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970969]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970973]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970977]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970981]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970985]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970990]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970994]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2970998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2970998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2970998]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971002]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971006]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971010]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971014]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971018]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971022]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971026]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971030]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971034]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971038]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971042]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971047]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971051]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971055]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971059]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971063]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971069]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971073]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971077]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971081]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971085]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971089]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:01 power sudo[2971093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:01 power sudo[2971093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:01 power sudo[2971093]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971097]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971101]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971105]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971110]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971114]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971118]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971122]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971126]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971130]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971134]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971138]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971143]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971147]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971151]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971155]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971159]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971163]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971167]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971171]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971175]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971179]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971183]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971187]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971191]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971195]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971199]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971203]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971207]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971214]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971218]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971222]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971226]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971230]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971234]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971239]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971243]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971247]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971252]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971257]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971261]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971265]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971269]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971273]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971277]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971281]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971285]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971289]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971293]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971297]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971301]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971305]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971309]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971313]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971317]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971321]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971325]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971329]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971333]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971337]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971341]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971345]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971350]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971354]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971358]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:02 power sudo[2971362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 10 05:29:02 power sudo[2971362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:02 power sudo[2971362]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971366]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971370]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971374]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971378]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971382]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971386]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep 10 05:29:03 power sudo[2971390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971390]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971397]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971405]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971409]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971413]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971417]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971424]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971428]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971432]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971436]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971441]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971445]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971449]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971454]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971458]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971462]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971466]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971470]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971474]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971479]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971484]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971488]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971492]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971496]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971500]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971505]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971509]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971513]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971517]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971521]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971525]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971529]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971533]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971537]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971541]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971545]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971549]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971553]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971557]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971561]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971565]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971569]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971573]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971577]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971581]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971585]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep 10 05:29:03 power sudo[2971589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:03 power sudo[2971589]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:03 power sudo[2971593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971593]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971597]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971601]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971605]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971609]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971613]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971618]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971622]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971626]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971630]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971634]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971638]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971642]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971646]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971650]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971654]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971658]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971663]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971668]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971676]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971680]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971684]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971688]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971692]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971696]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971700]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971704]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971708]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971715]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971719]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971723]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971727]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971732]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971736]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971740]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971744]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971748]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971752]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971756]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971760]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971764]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971768]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971772]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971776]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971780]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971784]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971788]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971792]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971796]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971800]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971804]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971808]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971812]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971816]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971820]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971824]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971828]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971832]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971837]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971841]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971954]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971964]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971968]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971972]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971976]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971980]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971985]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:04 power sudo[2971989]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:04 power sudo[2971993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:04 power sudo[2971993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2971993]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2971997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2971997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2971997]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972002]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972006]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972010]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972014]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972018]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972022]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972026]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972030]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972034]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972038]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972042]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972046]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972050]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972054]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972058]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972064]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972068]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972072]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972076]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972080]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972084]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972088]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972092]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972096]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972100]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972104]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972111]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972115]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972120]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972124]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972128]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972132]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972136]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972140]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972145]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972149]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972153]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972157]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972161]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972165]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972170]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972174]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972178]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972182]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972186]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972190]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972194]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972198]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972202]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972207]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972211]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972215]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972219]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972223]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972227]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972231]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972235]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972239]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972243]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972247]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972251]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972255]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972259]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972263]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972268]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972272]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:05 power sudo[2972276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep 10 05:29:05 power sudo[2972276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:05 power sudo[2972276]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972285]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972289]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972293]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972297]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972301]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972306]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972311]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972316]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972320]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972324]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972328]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972332]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972338]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972342]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972346]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972350]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972354]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972358]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972362]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972366]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972371]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972375]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972379]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972383]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972387]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972391]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972396]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972403]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972407]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972412]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972421]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972425]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972429]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972433]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972437]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972441]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972446]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972450]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972454]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972458]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972462]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972466]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972470]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972474]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972479]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972483]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972487]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972491]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972495]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972499]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972504]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972508]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972513]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972517]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972521]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972525]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972529]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972535]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972539]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972543]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972547]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972551]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972556]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972560]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:06 power sudo[2972564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 10 05:29:06 power sudo[2972564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:06 power sudo[2972564]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972568]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972572]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972576]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972580]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972584]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972588]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972593]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972597]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972601]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972605]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972610]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972614]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972618]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972623]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972627]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972631]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972635]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972639]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972643]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972647]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972651]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972655]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972659]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972663]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972667]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972671]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972676]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972680]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972687]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972691]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972695]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972699]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972703]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972707]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972711]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972715]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972720]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972724]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972728]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972732]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972736]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972740]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972744]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972748]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972752]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972756]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972760]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972764]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972768]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972772]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972776]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972780]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972784]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972788]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972792]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972796]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972800]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972804]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972808]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972812]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972816]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972820]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972825]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972829]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972833]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972837]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 10 05:29:07 power sudo[2972841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:07 power sudo[2972841]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:07 power sudo[2972845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972845]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972849]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972853]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972857]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972861]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972865]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972869]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972873]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972877]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972881]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972885]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972889]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972893]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972897]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972901]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972905]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972909]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972913]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972917]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972921]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972927]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972931]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972935]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972939]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972944]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972948]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972952]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972956]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972963]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972967]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972972]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972976]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972980]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972984]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972988]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972992]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2972996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2972996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2972996]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973000]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973004]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973008]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973012]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973016]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973020]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973025]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973029]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973033]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973037]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973041]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973045]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973049]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973053]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973057]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973061]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973065]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973069]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973073]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973077]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973082]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973086]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973090]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973094]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973098]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973102]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973106]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973110]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973114]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 10 05:29:08 power sudo[2973123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:08 power sudo[2973123]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:08 power sudo[2973129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973129]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973135]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973140]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973144]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973148]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973152]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973156]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973160]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973164]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973168]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973172]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973176]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973180]: pam_unix(sudo:session): session closed for user root
Sep 10 05:29:09 power sudo[2973184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 10 05:29:09 power sudo[2973184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:29:09 power sudo[2973184]: pam_unix(sudo:session): session closed for user root
Sep 10 05:30:01 power systemd[2974525]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:30:01 power systemd[2974527]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 05:30:01 power systemd[2974528]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 05:30:01 power systemd[2974530]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 05:35:01 power systemd[2980373]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:35:08 power systemd[2980547]: pam_unix(systemd-user:session): session opened for user madzomk(uid=1125) by madzomk(uid=0)
Sep 10 05:35:09 power su[2980543]: pam_unix(su:session): session opened for user madzomk(uid=1125) by (uid=0)
Sep 10 05:35:09 power su[2980543]: pam_unix(su:session): session closed for user madzomk
Sep 10 05:36:01 power systemd[2981485]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 05:37:01 power systemd[2982579]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 05:40:01 power systemd[2985855]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:42:01 power systemd[2988021]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 05:42:07 power sudo[2988153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 05:42:07 power sudo[2988153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988153]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 05:42:07 power sudo[2988159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988159]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 05:42:07 power sudo[2988163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988163]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=458PL2FcCE'
Sep 10 05:42:07 power sudo[2988167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988167]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 05:42:07 power sudo[2988173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988173]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 05:42:07 power sudo[2988178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988178]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 05:42:07 power sudo[2988182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988182]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 05:42:07 power sudo[2988186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988186]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 05:42:07 power sudo[2988196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988196]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 05:42:07 power sudo[2988201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988201]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 05:42:07 power sudo[2988206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988206]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 05:42:07 power sudo[2988210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988210]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 05:42:07 power sudo[2988215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:07 power sudo[2988215]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:07 power sudo[2988221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 05:42:07 power sudo[2988221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:08 power sudo[2988221]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:10 power sudo[2988282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 05:42:10 power sudo[2988282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:10 power sudo[2988282]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:10 power sudo[2988288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 05:42:10 power sudo[2988288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:10 power sudo[2988288]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:10 power sudo[2988297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mspmk user-2=infobadi user-3=spdcompu user-4=detskagr user-5=wikicamp user-6=urbanexp user-7=vfxnestc user-8=polyeste user-9=sedcmk user-10=ivanjord user-11=groskome user-12=datelcom user-13=maleshne user-14=bizporta user-15=agrosind user-16=mpbmk user-17=gogovan1 user-18=velmk user-19=univerz1 user-20=kujnamon user-21=datalink user-22=rasmorgm user-23=makoasmk user-24=bianasho user-25=skyapart user-26=goartsym user-27=volkanco user-28=dhamachi user-29=mfashion user-30=simbiome user-31=delcevca user-32=getaldus user-33=barececo user-34=workandt user-35=premiums user-36=butelmk user-37=daris user-38=ideaplus user-39=nasaidni user-40=karpospo user-41=screenme user-42=arturaco user-43=jpparkin user-44=inotekso user-45=drleomk user-46=cetplatf user-47=dalmacom user-48=kouzonco user-49=premiuma user-50=klimimk
Sep 10 05:42:10 power sudo[2988297]: wp-toolkit : (command continued) user-51=sparkupm user-52=stokovna user-53=custome1 user-54=palenzok user-55=zampmk user-56=busymard user-57=zvskopje user-58=vezilkac user-59=cabinetm user-60=janiboja user-61=itradeco user-62=bovincom user-63=stojano1 user-64=gocruise user-65=goodnews user-66=mstmmk user-67=dadarmk user-68=proverim user-69=tealmk user-70=holiyayt user-71=rastiraz user-72=pecakome user-73=wondersp user-74=stravelm user-75=robustco user-76=dnevnoin user-77=tradeyou user-78=gjorgeiv user-79=dikimk12 user-80=sprintst user-81=enochmk user-82=herbalpl user-83=edomcomm user-84=berbermk user-85=nolimits user-86=nlpmkorg user-87=centarba user-88=kolened1 user-89=seloviro user-90=evolvepl user-91=pelagoni user-92=socioloz user-93=avtogumi user-94=nefrolog user-95=levantmk user-96=ekostoc1 user-97=oncolog1 user-98=caramk user-99=frizered user-100=hidrommk user-101=youthgua user-102=anitermc user-103=cajsproc user-104=hotammk
Sep 10 05:42:10 power sudo[2988297]: wp-toolkit : (command continued) user-105=enaspotc user-106=vmro user-107=trudovop user-108=viewinn user-109=raremk user-110=oouslave user-111=uhostmk5 user-112=bauerbg user-113=stojnevi user-114=izzomk user-115=jpkomuna user-116=makdrone user-117=tehnodro user-118=peshkai1 user-119=fxxcom user-120=eaptekam user-121=dimpalne user-122=gradbai1 user-123=evacommk user-124=madzomk user-125=aptekafa user-126=bauerin2 user-127=folklore user-128=bonitavi user-129=evberasm user-130=conserva user-131=euronic3 user-132=vegemk1 user-133=cupidpro user-134=wineberr user-135=viplastc user-136=mbmehani user-137=workbenc user-138=ismassag user-139=trigemat user-140=eliksirz user-141=naksorgm user-142=electrol user-143=golakkom user-144=solarinv user-145=eurofarm user-146=jaramk user-147=solointe user-148=taktcomm user-149=recorgmk user-150=progress user-151=animatem user-152=cleanerm user-153=atspedco user-154=sssoluti user-155=kaoilmk user-156=biplmk
Sep 10 05:42:10 power sudo[2988297]: wp-toolkit : (command continued) user-157=bbbustou user-158=pelagini user-159=pravekom user-160=vtranseu user-161=infopor1 user-162=glammace user-163=albuname user-164=imdskopj user-165=nutrivim user-166=samasped user-167=chemhemc user-168=zapovim1 user-169=elektrot user-170=cosmatob user-171=euromaki user-172=euronic2 user-173=matratze user-174=kardiome user-175=mediasol user-176=carrent1 user-177=bogdanos user-178=apgrupmk user-179=nikolov1 user-180=hausmark user-181=aptekazd user-182=nikimare user-183=forzares user-184=nucktra1 user-185=lblawcom user-186=intelek1 user-187=mediatag user-188=versusmk user-189=ambitiou user-190=fiziosmk user-191=radekrat user-192=starluxm user-193=fffhpcwr user-194=tcieuroc user-195=solemor1 user-196=mapaspla user-197=onlinesh user-198=nationa2 user-199=v5srybi9dcdx user-200=supremel user-201=gorsajmk user-202=aquatech user-203=zdmgpsor user-204=inkigaic user-205=modernar user-206=taneccom user-207=tehnologija
Sep 10 05:42:10 power sudo[2988297]: wp-toolkit : (command continued) user-208=bozinovm user-209=prizmapl user-210=darkogor user-211=fnjorgmk user-212=dslmk user-213=innofabl user-214=premiumi user-215=vacuacti feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 05:42:10 power sudo[2988297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:10 power sudo[2988297]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:10 power sudo[2988306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 05:42:10 power sudo[2988306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:10 power sudo[2988306]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:10 power sudo[2988310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JN3dZbueYdbb1Q0O.~
Sep 10 05:42:10 power sudo[2988310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:10 power sudo[2988310]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:10 power sudo[2988314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JN3dZbueYdbb1Q0O.~\''
Sep 10 05:42:10 power sudo[2988314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:10 power sudo[2988314]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:10 power sudo[2988319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JN3dZbueYdbb1Q0O.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 05:42:10 power sudo[2988319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:10 power sudo[2988319]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:10 power sudo[2988323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 05:42:10 power sudo[2988323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:10 power sudo[2988323]: pam_unix(sudo:session): session closed for user root
Sep 10 05:42:11 power sudo[2988866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 05:42:11 power sudo[2988866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 05:42:11 power sudo[2988866]: pam_unix(sudo:session): session closed for user root
Sep 10 05:45:01 power systemd[2992528]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:50:01 power systemd[2998147]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 05:55:01 power systemd[3003908]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:00:01 power systemd[3009845]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:00:01 power systemd[3009851]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 06:00:01 power systemd[3009852]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 06:00:01 power systemd[3009856]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 06:05:01 power systemd[3016061]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:06:01 power systemd[3017533]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 06:06:27 power sshd[3017950]: Connection closed by 181.199.24.92 port 10584 [preauth]
Sep 10 06:06:27 power sshd[3017951]: Connection closed by 181.199.24.92 port 48739 [preauth]
Sep 10 06:06:27 power sshd[3017952]: Connection closed by 181.199.24.92 port 15751 [preauth]
Sep 10 06:06:27 power sshd[3017953]: Connection closed by 181.199.24.92 port 30905 [preauth]
Sep 10 06:06:27 power sshd[3017955]: Connection closed by 181.199.24.92 port 38369 [preauth]
Sep 10 06:06:27 power sshd[3017954]: Connection closed by 181.199.24.92 port 36083 [preauth]
Sep 10 06:07:01 power systemd[3018613]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 06:09:16 power sshd[3021041]: Connection closed by 181.199.24.92 port 48102 [preauth]
Sep 10 06:09:16 power sshd[3021042]: Connection closed by 181.199.24.92 port 53269 [preauth]
Sep 10 06:09:16 power sshd[3021045]: Connection closed by 181.199.24.92 port 11910 [preauth]
Sep 10 06:09:16 power sshd[3021044]: Connection closed by 181.199.24.92 port 4446 [preauth]
Sep 10 06:09:16 power sshd[3021043]: Connection closed by 181.199.24.92 port 22280 [preauth]
Sep 10 06:09:16 power sshd[3021046]: Connection closed by 181.199.24.92 port 9624 [preauth]
Sep 10 06:10:01 power systemd[3021878]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:12:01 power systemd[3024426]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 06:12:05 power sshd[3024495]: Connection closed by 181.199.24.92 port 21644 [preauth]
Sep 10 06:12:05 power sshd[3024496]: Connection closed by 181.199.24.92 port 59799 [preauth]
Sep 10 06:12:05 power sshd[3024497]: Connection closed by 181.199.24.92 port 41965 [preauth]
Sep 10 06:12:05 power sshd[3024498]: Connection closed by 181.199.24.92 port 26811 [preauth]
Sep 10 06:12:05 power sshd[3024500]: Connection closed by 181.199.24.92 port 47143 [preauth]
Sep 10 06:12:05 power sshd[3024502]: Connection closed by 181.199.24.92 port 49429 [preauth]
Sep 10 06:14:54 power sshd[3027795]: Connection closed by 181.199.24.92 port 64326 [preauth]
Sep 10 06:14:54 power sshd[3027796]: Connection closed by 181.199.24.92 port 33339 [preauth]
Sep 10 06:14:54 power sshd[3027799]: Connection closed by 181.199.24.92 port 22968 [preauth]
Sep 10 06:14:54 power sshd[3027797]: Connection closed by 181.199.24.92 port 15505 [preauth]
Sep 10 06:14:54 power sshd[3027798]: Connection closed by 181.199.24.92 port 20681 [preauth]
Sep 10 06:14:54 power sshd[3027800]: Connection closed by 181.199.24.92 port 59160 [preauth]
Sep 10 06:15:01 power systemd[3028054]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:17:43 power sshd[3031547]: Connection closed by 181.199.24.92 port 60487 [preauth]
Sep 10 06:17:43 power sshd[3031545]: Connection closed by 181.199.24.92 port 58201 [preauth]
Sep 10 06:17:43 power sshd[3031546]: Connection closed by 181.199.24.92 port 53023 [preauth]
Sep 10 06:17:43 power sshd[3031549]: Connection closed by 181.199.24.92 port 32702 [preauth]
Sep 10 06:17:43 power sshd[3031548]: Connection closed by 181.199.24.92 port 6880 [preauth]
Sep 10 06:17:43 power sshd[3031550]: Connection closed by 181.199.24.92 port 37869 [preauth]
Sep 10 06:20:02 power systemd[3034140]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:20:31 power sshd[3034802]: Connection closed by 181.199.24.92 port 6249 [preauth]
Sep 10 06:20:31 power sshd[3034803]: Connection closed by 181.199.24.92 port 44404 [preauth]
Sep 10 06:20:31 power sshd[3034804]: Connection closed by 181.199.24.92 port 11416 [preauth]
Sep 10 06:20:31 power sshd[3034805]: Connection closed by 181.199.24.92 port 26570 [preauth]
Sep 10 06:20:31 power sshd[3034806]: Connection closed by 181.199.24.92 port 31748 [preauth]
Sep 10 06:20:31 power sshd[3034807]: Connection closed by 181.199.24.92 port 34034 [preauth]
Sep 10 06:25:01 power systemd[3040035]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:30:01 power systemd[3045565]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:30:01 power systemd[3045567]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 06:30:01 power systemd[3045568]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 06:30:01 power systemd[3045570]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 06:35:01 power systemd[3051854]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:36:01 power systemd[3053205]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 06:37:01 power systemd[3054632]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 06:40:01 power systemd[3057903]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:42:01 power systemd[3059813]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 06:42:07 power sudo[3059896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 06:42:07 power sudo[3059896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059896]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 06:42:07 power sudo[3059900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059900]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 06:42:07 power sudo[3059904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059904]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=oeZ9kOeDaF'
Sep 10 06:42:07 power sudo[3059908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059908]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 06:42:07 power sudo[3059914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059914]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 06:42:07 power sudo[3059918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059918]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 06:42:07 power sudo[3059922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059922]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 06:42:07 power sudo[3059926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059926]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 06:42:07 power sudo[3059933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059933]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 06:42:07 power sudo[3059937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059937]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 06:42:07 power sudo[3059941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059941]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 06:42:07 power sudo[3059945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059945]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 06:42:07 power sudo[3059949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:07 power sudo[3059949]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:07 power sudo[3059954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 06:42:07 power sudo[3059954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:08 power sudo[3059954]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:10 power sudo[3060006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 06:42:10 power sudo[3060006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:10 power sudo[3060006]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:10 power sudo[3060015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 06:42:10 power sudo[3060015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:10 power sudo[3060015]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:10 power sudo[3060021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=hausmark user-2=nikolov1 user-3=forzares user-4=aptekazd user-5=nikimare user-6=lblawcom user-7=nucktra1 user-8=intelek1 user-9=mediatag user-10=euronic2 user-11=matratze user-12=kardiome user-13=apgrupmk user-14=mediasol user-15=bogdanos user-16=carrent1 user-17=nutrivim user-18=chemhemc user-19=samasped user-20=zapovim1 user-21=elektrot user-22=cosmatob user-23=euromaki user-24=pravekom user-25=vtranseu user-26=infopor1 user-27=glammace user-28=albuname user-29=imdskopj user-30=inkigaic user-31=modernar user-32=tehnologija user-33=taneccom user-34=premiumi user-35=innofabl user-36=vacuacti user-37=bozinovm user-38=darkogor user-39=prizmapl user-40=fnjorgmk user-41=dslmk user-42=supremel user-43=v5srybi9dcdx user-44=gorsajmk user-45=aquatech user-46=zdmgpsor user-47=tcieuroc user-48=mapaspla
Sep 10 06:42:10 power sudo[3060021]: wp-toolkit : (command continued) user-49=solemor1 user-50=nationa2 user-51=onlinesh user-52=versusmk user-53=fiziosmk user-54=ambitiou user-55=radekrat user-56=starluxm user-57=fffhpcwr user-58=bonitavi user-59=evberasm user-60=conserva user-61=vegemk1 user-62=cupidpro user-63=euronic3 user-64=bauerin2 user-65=folklore user-66=peshkai1 user-67=fxxcom user-68=dimpalne user-69=eaptekam user-70=gradbai1 user-71=evacommk user-72=madzomk user-73=aptekafa user-74=jpkomuna user-75=izzomk user-76=makdrone user-77=tehnodro user-78=bbbustou user-79=kaoilmk user-80=biplmk user-81=pelagini user-82=solointe user-83=jaramk user-84=recorgmk user-85=taktcomm user-86=animatem user-87=cleanerm user-88=progress user-89=sssoluti user-90=atspedco user-91=electrol user-92=trigemat user-93=naksorgm user-94=eliksirz user-95=golakkom user-96=solarinv user-97=eurofarm user-98=viplastc user-99=wineberr user-100=mbmehani user-101=ismassag user-102=workbenc
Sep 10 06:42:10 power sudo[3060021]: wp-toolkit : (command continued) user-103=nolimits user-104=nlpmkorg user-105=centarba user-106=kolened1 user-107=seloviro user-108=sprintst user-109=herbalpl user-110=enochmk user-111=dikimk12 user-112=berbermk user-113=edomcomm user-114=rastiraz user-115=holiyayt user-116=wondersp user-117=robustco user-118=stravelm user-119=pecakome user-120=dnevnoin user-121=gjorgeiv user-122=tradeyou user-123=gocruise user-124=mstmmk user-125=goodnews user-126=proverim user-127=dadarmk user-128=tealmk user-129=vmro user-130=trudovop user-131=viewinn user-132=enaspotc user-133=uhostmk5 user-134=bauerbg user-135=raremk user-136=oouslave user-137=stojnevi user-138=youthgua user-139=anitermc user-140=hotammk user-141=cajsproc user-142=nefrolog user-143=levantmk user-144=ekostoc1 user-145=oncolog1 user-146=caramk user-147=frizered user-148=hidrommk user-149=evolvepl user-150=pelagoni user-151=socioloz user-152=avtogumi user-153=rasmorgm user-154=bianasho
Sep 10 06:42:10 power sudo[3060021]: wp-toolkit : (command continued) user-155=makoasmk user-156=skyapart user-157=mfashion user-158=volkanco user-159=goartsym user-160=dhamachi user-161=workandt user-162=simbiome user-163=getaldus user-164=delcevca user-165=barececo user-166=agrosind user-167=mpbmk user-168=gogovan1 user-169=velmk user-170=univerz1 user-171=kujnamon user-172=datalink user-173=vfxnestc user-174=polyeste user-175=groskome user-176=ivanjord user-177=sedcmk user-178=datelcom user-179=maleshne user-180=bizporta user-181=infobadi user-182=mspmk user-183=detskagr user-184=spdcompu user-185=urbanexp user-186=wikicamp user-187=cabinetm user-188=vezilkac user-189=itradeco user-190=janiboja user-191=bovincom user-192=stojano1 user-193=klimimk user-194=sparkupm user-195=stokovna user-196=custome1 user-197=zampmk user-198=zvskopje user-199=busymard user-200=palenzok user-201=dalmacom user-202=cetplatf user-203=premiuma user-204=kouzonco user-205=premiums user-206=butelmk
Sep 10 06:42:10 power sudo[3060021]: wp-toolkit : (command continued) user-207=daris user-208=arturaco user-209=screenme user-210=ideaplus user-211=nasaidni user-212=karpospo user-213=drleomk user-214=jpparkin user-215=inotekso feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 06:42:10 power sudo[3060021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:10 power sudo[3060021]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:10 power sudo[3060027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 06:42:10 power sudo[3060027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:10 power sudo[3060027]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:10 power sudo[3060031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-L4DdnmVvVupXaWn8.~
Sep 10 06:42:10 power sudo[3060031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:10 power sudo[3060031]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:10 power sudo[3060035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-L4DdnmVvVupXaWn8.~\''
Sep 10 06:42:10 power sudo[3060035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:10 power sudo[3060035]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:10 power sudo[3060040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-L4DdnmVvVupXaWn8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 06:42:10 power sudo[3060040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:10 power sudo[3060040]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:10 power sudo[3060044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 06:42:10 power sudo[3060044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:10 power sudo[3060044]: pam_unix(sudo:session): session closed for user root
Sep 10 06:42:11 power sudo[3060962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 06:42:11 power sudo[3060962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 06:42:11 power sudo[3060962]: pam_unix(sudo:session): session closed for user root
Sep 10 06:45:01 power systemd[3063802]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:50:01 power systemd[3069003]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 06:55:02 power systemd[3074497]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:00:01 power systemd[3080026]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:00:01 power systemd[3080027]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 07:00:01 power systemd[3080029]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 07:00:01 power systemd[3080030]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 07:05:01 power systemd[3086377]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:06:01 power systemd[3087668]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 07:07:01 power systemd[3088799]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 07:10:01 power systemd[3092610]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:12:01 power systemd[3094998]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 07:15:01 power systemd[3097979]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:20:01 power systemd[3103208]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:21:31 power sudo[3105014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 07:21:31 power sudo[3105014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:21:31 power sudo[3105014]: pam_unix(sudo:session): session closed for user root
Sep 10 07:21:31 power sudo[3105019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep 10 07:21:31 power sudo[3105019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:21:31 power sudo[3105019]: pam_unix(sudo:session): session closed for user root
Sep 10 07:21:31 power sudo[3105026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm Mime list_redirects --output=json'
Sep 10 07:21:31 power sudo[3105026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:21:31 power sudo[3105026]: pam_unix(sudo:session): session closed for user root
Sep 10 07:21:39 power sudo[3105177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 07:21:39 power sudo[3105177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:21:39 power sudo[3105177]: pam_unix(sudo:session): session closed for user root
Sep 10 07:21:39 power sudo[3105183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpkomuna'
Sep 10 07:21:39 power sudo[3105183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:21:39 power sudo[3105183]: pam_unix(sudo:session): session closed for user root
Sep 10 07:21:47 power sudo[3105361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 07:21:47 power sudo[3105361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:21:47 power sudo[3105361]: pam_unix(sudo:session): session closed for user root
Sep 10 07:21:47 power sudo[3105366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep 10 07:21:47 power sudo[3105366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:21:48 power sudo[3105366]: pam_unix(sudo:session): session closed for user root
Sep 10 07:21:48 power sudo[3105371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop Mime list_redirects --output=json'
Sep 10 07:21:48 power sudo[3105371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:21:48 power sudo[3105371]: pam_unix(sudo:session): session closed for user root
Sep 10 07:25:01 power systemd[3109450]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:30:01 power systemd[3114823]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:30:01 power systemd[3114826]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 07:30:01 power systemd[3114828]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 07:30:01 power systemd[3114829]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 07:35:01 power systemd[3121149]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:36:01 power systemd[3122313]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 07:37:01 power systemd[3123522]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 07:38:00 power sshd[3124517]: error: kex_exchange_identification: Connection closed by remote host
Sep 10 07:38:00 power sshd[3124517]: Connection closed by 185.247.137.110 port 57513
Sep 10 07:38:00 power sshd[3124546]: Connection closed by 185.247.137.110 port 46495 [preauth]
Sep 10 07:40:01 power systemd[3126800]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:42:01 power systemd[3129249]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 07:42:07 power sudo[3129424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 07:42:07 power sudo[3129424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129424]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 07:42:07 power sudo[3129428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129428]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 07:42:07 power sudo[3129432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129432]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=HE6ST3HqEM'
Sep 10 07:42:07 power sudo[3129436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129436]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 07:42:07 power sudo[3129441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129441]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 07:42:07 power sudo[3129446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129446]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 07:42:07 power sudo[3129450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129450]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 07:42:07 power sudo[3129454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129454]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 07:42:07 power sudo[3129460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129460]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 07:42:07 power sudo[3129464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129464]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 07:42:07 power sudo[3129468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129468]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 07:42:07 power sudo[3129472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129472]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 07:42:07 power sudo[3129476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:07 power sudo[3129476]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:07 power sudo[3129480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 07:42:07 power sudo[3129480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:08 power sudo[3129480]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:10 power sudo[3129542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 07:42:10 power sudo[3129542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:10 power sudo[3129542]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:10 power sudo[3129548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 07:42:10 power sudo[3129548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:10 power sudo[3129548]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:10 power sudo[3129554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=darkogor user-2=fnjorgmk user-3=dslmk user-4=prizmapl user-5=bozinovm user-6=vacuacti user-7=premiumi user-8=innofabl user-9=taneccom user-10=tehnologija user-11=modernar user-12=inkigaic user-13=zdmgpsor user-14=aquatech user-15=gorsajmk user-16=v5srybi9dcdx user-17=supremel user-18=onlinesh user-19=nationa2 user-20=solemor1 user-21=mapaspla user-22=tcieuroc user-23=fffhpcwr user-24=starluxm user-25=radekrat user-26=ambitiou user-27=fiziosmk user-28=versusmk user-29=mediatag user-30=intelek1 user-31=nucktra1 user-32=lblawcom user-33=nikimare user-34=aptekazd user-35=forzares user-36=nikolov1 user-37=hausmark user-38=bogdanos user-39=carrent1 user-40=mediasol user-41=apgrupmk user-42=kardiome user-43=matratze user-44=euronic2 user-45=cosmatob user-46=euromaki user-47=zapovim1 user-48=elektrot
Sep 10 07:42:10 power sudo[3129554]: wp-toolkit : (command continued) user-49=chemhemc user-50=samasped user-51=nutrivim user-52=imdskopj user-53=albuname user-54=glammace user-55=infopor1 user-56=pravekom user-57=vtranseu user-58=pelagini user-59=biplmk user-60=kaoilmk user-61=bbbustou user-62=atspedco user-63=sssoluti user-64=progress user-65=cleanerm user-66=animatem user-67=recorgmk user-68=taktcomm user-69=jaramk user-70=solointe user-71=eurofarm user-72=solarinv user-73=golakkom user-74=naksorgm user-75=eliksirz user-76=trigemat user-77=electrol user-78=workbenc user-79=ismassag user-80=mbmehani user-81=wineberr user-82=viplastc user-83=euronic3 user-84=cupidpro user-85=vegemk1 user-86=conserva user-87=evberasm user-88=bonitavi user-89=folklore user-90=bauerin2 user-91=aptekafa user-92=madzomk user-93=evacommk user-94=gradbai1 user-95=eaptekam user-96=dimpalne user-97=fxxcom user-98=peshkai1 user-99=tehnodro user-100=makdrone user-101=izzomk user-102=jpkomuna
Sep 10 07:42:10 power sudo[3129554]: wp-toolkit : (command continued) user-103=stojnevi user-104=oouslave user-105=raremk user-106=bauerbg user-107=uhostmk5 user-108=enaspotc user-109=trudovop user-110=viewinn user-111=vmro user-112=cajsproc user-113=hotammk user-114=anitermc user-115=youthgua user-116=hidrommk user-117=frizered user-118=caramk user-119=oncolog1 user-120=ekostoc1 user-121=levantmk user-122=nefrolog user-123=socioloz user-124=avtogumi user-125=pelagoni user-126=evolvepl user-127=seloviro user-128=kolened1 user-129=nlpmkorg user-130=centarba user-131=nolimits user-132=edomcomm user-133=berbermk user-134=dikimk12 user-135=herbalpl user-136=enochmk user-137=sprintst user-138=gjorgeiv user-139=tradeyou user-140=dnevnoin user-141=pecakome user-142=robustco user-143=stravelm user-144=wondersp user-145=holiyayt user-146=rastiraz user-147=tealmk user-148=dadarmk user-149=proverim user-150=goodnews user-151=mstmmk user-152=gocruise user-153=stojano1 user-154=bovincom
Sep 10 07:42:10 power sudo[3129554]: wp-toolkit : (command continued) user-155=janiboja user-156=itradeco user-157=vezilkac user-158=cabinetm user-159=palenzok user-160=zampmk user-161=zvskopje user-162=busymard user-163=custome1 user-164=stokovna user-165=sparkupm user-166=klimimk user-167=kouzonco user-168=premiuma user-169=cetplatf user-170=dalmacom user-171=inotekso user-172=jpparkin user-173=drleomk user-174=nasaidni user-175=karpospo user-176=ideaplus user-177=screenme user-178=arturaco user-179=butelmk user-180=daris user-181=premiums user-182=barececo user-183=getaldus user-184=simbiome user-185=delcevca user-186=workandt user-187=dhamachi user-188=volkanco user-189=goartsym user-190=mfashion user-191=skyapart user-192=bianasho user-193=makoasmk user-194=rasmorgm user-195=datalink user-196=kujnamon user-197=univerz1 user-198=velmk user-199=gogovan1 user-200=mpbmk user-201=agrosind user-202=bizporta user-203=maleshne user-204=datelcom user-205=sedcmk user-206=ivanjord
Sep 10 07:42:10 power sudo[3129554]: wp-toolkit : (command continued) user-207=groskome user-208=polyeste user-209=vfxnestc user-210=wikicamp user-211=urbanexp user-212=spdcompu user-213=detskagr user-214=infobadi user-215=mspmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 07:42:10 power sudo[3129554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:10 power sudo[3129554]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:10 power sudo[3129569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 07:42:10 power sudo[3129569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:10 power sudo[3129569]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:10 power sudo[3129573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-caEzCMUsnJGYb6t5.~
Sep 10 07:42:10 power sudo[3129573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:10 power sudo[3129573]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:10 power sudo[3129577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-caEzCMUsnJGYb6t5.~\''
Sep 10 07:42:10 power sudo[3129577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:10 power sudo[3129577]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:10 power sudo[3129582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-caEzCMUsnJGYb6t5.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 07:42:10 power sudo[3129582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:10 power sudo[3129582]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:11 power sudo[3129586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 07:42:11 power sudo[3129586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:11 power sudo[3129586]: pam_unix(sudo:session): session closed for user root
Sep 10 07:42:15 power sudo[3130305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 07:42:15 power sudo[3130305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 07:42:15 power sudo[3130305]: pam_unix(sudo:session): session closed for user root
Sep 10 07:45:01 power systemd[3133768]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:50:01 power systemd[3139566]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 07:55:01 power systemd[3145513]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:00:01 power systemd[3151613]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:00:01 power systemd[3151619]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 08:00:01 power systemd[3151621]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 08:00:01 power systemd[3151623]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 08:00:01 power systemd[3151625]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 10 08:05:01 power systemd[3158721]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:06:01 power systemd[3159940]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 08:07:01 power systemd[3161346]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 08:10:01 power systemd[3165551]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:12:01 power systemd[3167884]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 08:15:01 power systemd[3171214]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:20:01 power systemd[3177247]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:25:02 power systemd[3183334]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:30:01 power systemd[3189598]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:30:01 power systemd[3189603]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 08:30:01 power systemd[3189604]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 08:30:01 power systemd[3189601]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 08:35:02 power systemd[3196536]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:36:01 power systemd[3198022]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 08:37:01 power systemd[3199472]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 08:40:01 power systemd[3202603]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:42:01 power systemd[3204809]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 08:42:07 power sudo[3204914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 08:42:07 power sudo[3204914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204914]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 08:42:07 power sudo[3204918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204918]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 08:42:07 power sudo[3204922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204922]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=AYyF9fDHo6'
Sep 10 08:42:07 power sudo[3204926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204926]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 08:42:07 power sudo[3204932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204932]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 08:42:07 power sudo[3204937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204937]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 08:42:07 power sudo[3204942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204942]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 08:42:07 power sudo[3204948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204948]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 08:42:07 power sudo[3204957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204957]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 08:42:07 power sudo[3204962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204962]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 08:42:07 power sudo[3204966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204966]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 08:42:07 power sudo[3204971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204971]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 08:42:07 power sudo[3204977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:07 power sudo[3204977]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:07 power sudo[3204981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 08:42:07 power sudo[3204981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:08 power sudo[3204981]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:10 power sudo[3205048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 08:42:10 power sudo[3205048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:10 power sudo[3205048]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:10 power sudo[3205054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 08:42:10 power sudo[3205054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:10 power sudo[3205054]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:10 power sudo[3205060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=fffhpcwr user-2=radekrat user-3=starluxm user-4=fiziosmk user-5=ambitiou user-6=versusmk user-7=nationa2 user-8=onlinesh user-9=mapaspla user-10=solemor1 user-11=tcieuroc user-12=zdmgpsor user-13=gorsajmk user-14=aquatech user-15=supremel user-16=v5srybi9dcdx user-17=innofabl user-18=premiumi user-19=vacuacti user-20=bozinovm user-21=darkogor user-22=prizmapl user-23=fnjorgmk user-24=dslmk user-25=tehnologija user-26=taneccom user-27=modernar user-28=inkigaic user-29=imdskopj user-30=glammace user-31=albuname user-32=infopor1 user-33=pravekom user-34=vtranseu user-35=cosmatob user-36=euromaki user-37=elektrot user-38=zapovim1 user-39=samasped user-40=chemhemc user-41=nutrivim user-42=apgrupmk user-43=mediasol user-44=carrent1 user-45=bogdanos user-46=kardiome user-47=euronic2 user-48=matratze
Sep 10 08:42:10 power sudo[3205060]: wp-toolkit : (command continued) user-49=intelek1 user-50=mediatag user-51=lblawcom user-52=nucktra1 user-53=forzares user-54=aptekazd user-55=nikimare user-56=hausmark user-57=nikolov1 user-58=ismassag user-59=workbenc user-60=mbmehani user-61=viplastc user-62=wineberr user-63=eurofarm user-64=solarinv user-65=golakkom user-66=electrol user-67=trigemat user-68=naksorgm user-69=eliksirz user-70=atspedco user-71=sssoluti user-72=animatem user-73=cleanerm user-74=progress user-75=taktcomm user-76=recorgmk user-77=solointe user-78=jaramk user-79=pelagini user-80=bbbustou user-81=biplmk user-82=kaoilmk user-83=tehnodro user-84=makdrone user-85=jpkomuna user-86=izzomk user-87=evacommk user-88=madzomk user-89=aptekafa user-90=gradbai1 user-91=dimpalne user-92=eaptekam user-93=peshkai1 user-94=fxxcom user-95=folklore user-96=bauerin2 user-97=vegemk1 user-98=cupidpro user-99=euronic3 user-100=conserva user-101=bonitavi user-102=evberasm
Sep 10 08:42:10 power sudo[3205060]: wp-toolkit : (command continued) user-103=avtogumi user-104=socioloz user-105=pelagoni user-106=evolvepl user-107=frizered user-108=hidrommk user-109=caramk user-110=nefrolog user-111=ekostoc1 user-112=oncolog1 user-113=levantmk user-114=hotammk user-115=cajsproc user-116=youthgua user-117=anitermc user-118=stojnevi user-119=uhostmk5 user-120=bauerbg user-121=raremk user-122=oouslave user-123=vmro user-124=viewinn user-125=trudovop user-126=enaspotc user-127=tealmk user-128=proverim user-129=dadarmk user-130=mstmmk user-131=goodnews user-132=gocruise user-133=tradeyou user-134=gjorgeiv user-135=dnevnoin user-136=wondersp user-137=stravelm user-138=robustco user-139=pecakome user-140=rastiraz user-141=holiyayt user-142=berbermk user-143=edomcomm user-144=sprintst user-145=herbalpl user-146=enochmk user-147=dikimk12 user-148=seloviro user-149=centarba user-150=nlpmkorg user-151=kolened1 user-152=nolimits user-153=drleomk user-154=jpparkin
Sep 10 08:42:10 power sudo[3205060]: wp-toolkit : (command continued) user-155=inotekso user-156=arturaco user-157=screenme user-158=ideaplus user-159=karpospo user-160=nasaidni user-161=premiums user-162=butelmk user-163=daris user-164=premiuma user-165=kouzonco user-166=dalmacom user-167=cetplatf user-168=zampmk user-169=zvskopje user-170=busymard user-171=palenzok user-172=custome1 user-173=sparkupm user-174=stokovna user-175=klimimk user-176=stojano1 user-177=bovincom user-178=itradeco user-179=janiboja user-180=cabinetm user-181=vezilkac user-182=urbanexp user-183=wikicamp user-184=detskagr user-185=spdcompu user-186=infobadi user-187=mspmk user-188=bizporta user-189=datelcom user-190=maleshne user-191=groskome user-192=ivanjord user-193=sedcmk user-194=vfxnestc user-195=polyeste user-196=datalink user-197=velmk user-198=gogovan1 user-199=univerz1 user-200=kujnamon user-201=agrosind user-202=mpbmk user-203=workandt user-204=getaldus user-205=delcevca user-206=simbiome
Sep 10 08:42:10 power sudo[3205060]: wp-toolkit : (command continued) user-207=barececo user-208=mfashion user-209=goartsym user-210=volkanco user-211=dhamachi user-212=makoasmk user-213=bianasho user-214=skyapart user-215=rasmorgm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 08:42:10 power sudo[3205060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:10 power sudo[3205060]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:10 power sudo[3205071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 08:42:10 power sudo[3205071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:10 power sudo[3205071]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:10 power sudo[3205076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QFNap4UY192k4lVD.~
Sep 10 08:42:10 power sudo[3205076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:10 power sudo[3205076]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:10 power sudo[3205080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QFNap4UY192k4lVD.~\''
Sep 10 08:42:10 power sudo[3205080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:10 power sudo[3205080]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:10 power sudo[3205085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QFNap4UY192k4lVD.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 08:42:10 power sudo[3205085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:10 power sudo[3205085]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:10 power sudo[3205089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 08:42:11 power sudo[3205089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:11 power sudo[3205089]: pam_unix(sudo:session): session closed for user root
Sep 10 08:42:11 power sudo[3205646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 08:42:11 power sudo[3205646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 08:42:11 power sudo[3205646]: pam_unix(sudo:session): session closed for user root
Sep 10 08:45:01 power systemd[3209088]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:50:01 power systemd[3214365]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 08:55:01 power systemd[3219571]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:00:02 power systemd[3224814]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 09:00:02 power systemd[3224811]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:00:02 power systemd[3224819]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 09:00:02 power systemd[3224820]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 09:00:02 power systemd[3224822]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 10 09:05:01 power systemd[3231365]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:06:01 power systemd[3232303]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 09:07:01 power systemd[3233682]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 09:10:02 power systemd[3236973]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:12:01 power systemd[3239076]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 09:15:01 power systemd[3241981]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:20:01 power systemd[3248192]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:25:01 power systemd[3253870]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:30:02 power systemd[3260199]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:30:02 power systemd[3260200]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 09:30:02 power systemd[3260202]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 09:30:02 power systemd[3260203]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 09:35:01 power systemd[3266718]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:36:01 power systemd[3268113]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 09:37:01 power systemd[3269475]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 09:40:01 power systemd[3279602]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:42:01 power systemd[3297985]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 09:42:07 power sudo[3299057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 09:42:07 power sudo[3299057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299057]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 09:42:07 power sudo[3299061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299061]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 09:42:07 power sudo[3299065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299065]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=GyWc9ERsFn'
Sep 10 09:42:07 power sudo[3299072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299072]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 09:42:07 power sudo[3299087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299087]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 09:42:07 power sudo[3299093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299093]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 09:42:07 power sudo[3299099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299099]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 09:42:07 power sudo[3299106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299106]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 09:42:07 power sudo[3299161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299161]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 09:42:07 power sudo[3299173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299173]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 09:42:07 power sudo[3299183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299183]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 09:42:07 power sudo[3299188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299188]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:07 power sudo[3299193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 09:42:07 power sudo[3299193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:07 power sudo[3299193]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:08 power sudo[3299200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 09:42:08 power sudo[3299200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:08 power sudo[3299200]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:10 power sudo[3299704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 09:42:10 power sudo[3299704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:10 power sudo[3299704]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:10 power sudo[3299726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 09:42:10 power sudo[3299726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:10 power sudo[3299726]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:10 power sudo[3299756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=zampmk user-2=zvskopje user-3=busymard user-4=palenzok user-5=custome1 user-6=stokovna user-7=sparkupm user-8=klimimk user-9=stojano1 user-10=bovincom user-11=itradeco user-12=janiboja user-13=cabinetm user-14=vezilkac user-15=drleomk user-16=inotekso user-17=jpparkin user-18=screenme user-19=arturaco user-20=karpospo user-21=nasaidni user-22=ideaplus user-23=daris user-24=butelmk user-25=premiums user-26=premiuma user-27=kouzonco user-28=dalmacom user-29=cetplatf user-30=datalink user-31=univerz1 user-32=kujnamon user-33=gogovan1 user-34=velmk user-35=mpbmk user-36=agrosind user-37=workandt user-38=barececo user-39=delcevca user-40=simbiome user-41=getaldus user-42=mfashion user-43=dhamachi user-44=goartsym user-45=volkanco user-46=skyapart user-47=makoasmk user-48=bianasho user-49=rasmorgm user-50=urbanexp
Sep 10 09:42:10 power sudo[3299756]: wp-toolkit : (command continued) user-51=wikicamp user-52=detskagr user-53=spdcompu user-54=mspmk user-55=infobadi user-56=bizporta user-57=maleshne user-58=datelcom user-59=groskome user-60=ivanjord user-61=sedcmk user-62=polyeste user-63=vfxnestc user-64=hotammk user-65=cajsproc user-66=anitermc user-67=youthgua user-68=stojnevi user-69=bauerbg user-70=uhostmk5 user-71=oouslave user-72=raremk user-73=trudovop user-74=viewinn user-75=vmro user-76=enaspotc user-77=avtogumi user-78=socioloz user-79=pelagoni user-80=evolvepl user-81=hidrommk user-82=frizered user-83=caramk user-84=ekostoc1 user-85=levantmk user-86=oncolog1 user-87=nefrolog user-88=berbermk user-89=edomcomm user-90=herbalpl user-91=enochmk user-92=sprintst user-93=dikimk12 user-94=seloviro user-95=kolened1 user-96=centarba user-97=nlpmkorg user-98=nolimits user-99=tealmk user-100=proverim user-101=dadarmk user-102=mstmmk user-103=goodnews user-104=gocruise user-105=tradeyou
Sep 10 09:42:10 power sudo[3299756]: wp-toolkit : (command continued) user-106=gjorgeiv user-107=dnevnoin user-108=robustco user-109=stravelm user-110=wondersp user-111=pecakome user-112=rastiraz user-113=holiyayt user-114=sssoluti user-115=atspedco user-116=cleanerm user-117=animatem user-118=progress user-119=recorgmk user-120=taktcomm user-121=solointe user-122=jaramk user-123=pelagini user-124=bbbustou user-125=biplmk user-126=kaoilmk user-127=ismassag user-128=workbenc user-129=mbmehani user-130=viplastc user-131=wineberr user-132=eurofarm user-133=solarinv user-134=golakkom user-135=electrol user-136=eliksirz user-137=naksorgm user-138=trigemat user-139=folklore user-140=bauerin2 user-141=cupidpro user-142=vegemk1 user-143=euronic3 user-144=conserva user-145=evberasm user-146=bonitavi user-147=tehnodro user-148=makdrone user-149=jpkomuna user-150=izzomk user-151=madzomk user-152=aptekafa user-153=evacommk user-154=gradbai1 user-155=dimpalne user-156=eaptekam user-157=fxxcom
Sep 10 09:42:10 power sudo[3299756]: wp-toolkit : (command continued) user-158=peshkai1 user-159=zdmgpsor user-160=aquatech user-161=gorsajmk user-162=supremel user-163=v5srybi9dcdx user-164=vacuacti user-165=innofabl user-166=premiumi user-167=darkogor user-168=prizmapl user-169=fnjorgmk user-170=dslmk user-171=bozinovm user-172=tehnologija user-173=taneccom user-174=modernar user-175=inkigaic user-176=fffhpcwr user-177=starluxm user-178=radekrat user-179=fiziosmk user-180=ambitiou user-181=versusmk user-182=nationa2 user-183=onlinesh user-184=mapaspla user-185=solemor1 user-186=tcieuroc user-187=apgrupmk user-188=carrent1 user-189=bogdanos user-190=mediasol user-191=kardiome user-192=matratze user-193=euronic2 user-194=mediatag user-195=intelek1 user-196=lblawcom user-197=nucktra1 user-198=forzares user-199=nikimare user-200=aptekazd user-201=nikolov1 user-202=hausmark user-203=imdskopj user-204=albuname user-205=glammace user-206=infopor1 user-207=vtranseu user-208=pravekom
Sep 10 09:42:10 power sudo[3299756]: wp-toolkit : (command continued) user-209=euromaki user-210=cosmatob user-211=elektrot user-212=zapovim1 user-213=chemhemc user-214=samasped user-215=nutrivim feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 09:42:10 power sudo[3299756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:11 power sudo[3299756]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:11 power sudo[3299864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 09:42:11 power sudo[3299864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:11 power sudo[3299864]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:11 power sudo[3299871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jxPzHlWkdgZvXQfV.~
Sep 10 09:42:11 power sudo[3299871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:11 power sudo[3299871]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:11 power sudo[3299879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jxPzHlWkdgZvXQfV.~\''
Sep 10 09:42:11 power sudo[3299879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:11 power sudo[3299879]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:11 power sudo[3299889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jxPzHlWkdgZvXQfV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 09:42:11 power sudo[3299889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:11 power sudo[3299889]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:11 power sudo[3299896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 09:42:11 power sudo[3299896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:11 power sudo[3299896]: pam_unix(sudo:session): session closed for user root
Sep 10 09:42:15 power sudo[3301695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 09:42:15 power sudo[3301695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 09:42:16 power sudo[3301695]: pam_unix(sudo:session): session closed for user root
Sep 10 09:45:01 power systemd[3332378]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:50:01 power systemd[3390765]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 09:55:01 power systemd[3447197]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:00:01 power systemd[3502122]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:00:01 power systemd[3502123]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 10:00:01 power systemd[3502124]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 10:00:01 power systemd[3502125]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 10:05:01 power systemd[3514552]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:06:01 power systemd[3515787]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 10:07:01 power systemd[3517382]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 10:10:01 power systemd[3521876]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:12:01 power systemd[3524601]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 10:15:01 power systemd[3528794]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:20:01 power systemd[3535443]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:25:01 power systemd[3542149]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:30:02 power systemd[3548262]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:30:02 power systemd[3548263]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 10:30:02 power systemd[3548264]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 10:30:02 power systemd[3548266]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 10:35:01 power systemd[3554798]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:36:01 power systemd[3555953]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 10:37:01 power systemd[3557327]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 10:40:02 power systemd[3560947]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:42:01 power systemd[3563216]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 10:42:07 power sudo[3563339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 10:42:07 power sudo[3563339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563339]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 10:42:07 power sudo[3563344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563344]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 10:42:07 power sudo[3563348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563348]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=g6RDxUEfkI'
Sep 10 10:42:07 power sudo[3563352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563352]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 10:42:07 power sudo[3563357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563357]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 10:42:07 power sudo[3563363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563363]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 10:42:07 power sudo[3563368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563368]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 10:42:07 power sudo[3563372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563372]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 10:42:07 power sudo[3563386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563386]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 10:42:07 power sudo[3563391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563391]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 10:42:07 power sudo[3563395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563395]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 10:42:07 power sudo[3563399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563399]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 10:42:07 power sudo[3563403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:07 power sudo[3563403]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:07 power sudo[3563407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 10:42:07 power sudo[3563407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:08 power sudo[3563407]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:10 power sudo[3563479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 10:42:10 power sudo[3563479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:10 power sudo[3563479]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:10 power sudo[3563487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 10:42:10 power sudo[3563487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:10 power sudo[3563487]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:10 power sudo[3563496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=infopor1 user-2=vtranseu user-3=pravekom user-4=imdskopj user-5=albuname user-6=glammace user-7=chemhemc user-8=samasped user-9=nutrivim user-10=cosmatob user-11=euromaki user-12=zapovim1 user-13=elektrot user-14=matratze user-15=euronic2 user-16=carrent1 user-17=bogdanos user-18=mediasol user-19=apgrupmk user-20=kardiome user-21=nikimare user-22=aptekazd user-23=forzares user-24=nikolov1 user-25=hausmark user-26=mediatag user-27=intelek1 user-28=nucktra1 user-29=lblawcom user-30=ambitiou user-31=fiziosmk user-32=versusmk user-33=fffhpcwr user-34=starluxm user-35=radekrat user-36=tcieuroc user-37=onlinesh user-38=nationa2 user-39=solemor1 user-40=mapaspla user-41=aquatech user-42=gorsajmk user-43=v5srybi9dcdx user-44=supremel user-45=zdmgpsor user-46=modernar user-47=inkigaic user-48=darkogor user-49=dslmk
Sep 10 10:42:10 power sudo[3563496]: wp-toolkit : (command continued) user-50=fnjorgmk user-51=prizmapl user-52=bozinovm user-53=vacuacti user-54=premiumi user-55=innofabl user-56=taneccom user-57=tehnologija user-58=izzomk user-59=jpkomuna user-60=tehnodro user-61=makdrone user-62=eaptekam user-63=dimpalne user-64=fxxcom user-65=peshkai1 user-66=madzomk user-67=aptekafa user-68=evacommk user-69=gradbai1 user-70=folklore user-71=bauerin2 user-72=evberasm user-73=bonitavi user-74=euronic3 user-75=cupidpro user-76=vegemk1 user-77=conserva user-78=wineberr user-79=viplastc user-80=workbenc user-81=ismassag user-82=mbmehani user-83=golakkom user-84=eliksirz user-85=naksorgm user-86=trigemat user-87=electrol user-88=eurofarm user-89=solarinv user-90=taktcomm user-91=recorgmk user-92=jaramk user-93=solointe user-94=sssoluti user-95=atspedco user-96=progress user-97=cleanerm user-98=animatem user-99=kaoilmk user-100=biplmk user-101=bbbustou user-102=pelagini user-103=goodnews
Sep 10 10:42:10 power sudo[3563496]: wp-toolkit : (command continued) user-104=mstmmk user-105=gocruise user-106=tealmk user-107=dadarmk user-108=proverim user-109=pecakome user-110=robustco user-111=stravelm user-112=wondersp user-113=holiyayt user-114=rastiraz user-115=gjorgeiv user-116=tradeyou user-117=dnevnoin user-118=dikimk12 user-119=enochmk user-120=herbalpl user-121=sprintst user-122=edomcomm user-123=berbermk user-124=kolened1 user-125=nlpmkorg user-126=centarba user-127=nolimits user-128=seloviro user-129=evolvepl user-130=socioloz user-131=avtogumi user-132=pelagoni user-133=levantmk user-134=ekostoc1 user-135=oncolog1 user-136=nefrolog user-137=hidrommk user-138=frizered user-139=caramk user-140=anitermc user-141=youthgua user-142=cajsproc user-143=hotammk user-144=enaspotc user-145=trudovop user-146=viewinn user-147=vmro user-148=stojnevi user-149=oouslave user-150=raremk user-151=bauerbg user-152=uhostmk5 user-153=spdcompu user-154=detskagr user-155=mspmk
Sep 10 10:42:10 power sudo[3563496]: wp-toolkit : (command continued) user-156=infobadi user-157=wikicamp user-158=urbanexp user-159=sedcmk user-160=ivanjord user-161=groskome user-162=polyeste user-163=vfxnestc user-164=bizporta user-165=maleshne user-166=datelcom user-167=mpbmk user-168=agrosind user-169=datalink user-170=kujnamon user-171=univerz1 user-172=velmk user-173=gogovan1 user-174=skyapart user-175=makoasmk user-176=bianasho user-177=rasmorgm user-178=barececo user-179=simbiome user-180=delcevca user-181=getaldus user-182=workandt user-183=dhamachi user-184=volkanco user-185=goartsym user-186=mfashion user-187=nasaidni user-188=karpospo user-189=ideaplus user-190=arturaco user-191=screenme user-192=daris user-193=butelmk user-194=premiums user-195=inotekso user-196=jpparkin user-197=drleomk user-198=kouzonco user-199=premiuma user-200=cetplatf user-201=dalmacom user-202=stokovna user-203=sparkupm user-204=klimimk user-205=palenzok user-206=zvskopje user-207=zampmk
Sep 10 10:42:10 power sudo[3563496]: wp-toolkit : (command continued) user-208=busymard user-209=custome1 user-210=janiboja user-211=itradeco user-212=vezilkac user-213=cabinetm user-214=stojano1 user-215=bovincom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 10:42:10 power sudo[3563496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:10 power sudo[3563496]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:10 power sudo[3563503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 10:42:10 power sudo[3563503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:10 power sudo[3563503]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:10 power sudo[3563507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iEAcPy1kHEaD2l7U.~
Sep 10 10:42:10 power sudo[3563507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:10 power sudo[3563507]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:10 power sudo[3563512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iEAcPy1kHEaD2l7U.~\''
Sep 10 10:42:10 power sudo[3563512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:10 power sudo[3563512]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:10 power sudo[3563518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iEAcPy1kHEaD2l7U.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 10:42:10 power sudo[3563518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:10 power sudo[3563518]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:10 power sudo[3563522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 10:42:10 power sudo[3563522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:10 power sudo[3563522]: pam_unix(sudo:session): session closed for user root
Sep 10 10:42:11 power sudo[3563736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 10:42:11 power sudo[3563736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 10:42:11 power sudo[3563736]: pam_unix(sudo:session): session closed for user root
Sep 10 10:45:01 power systemd[3567711]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:50:01 power systemd[3573861]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 10:55:01 power systemd[3579997]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 10:55:01 power systemd[3579998]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:00:01 power systemd[3585695]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:00:01 power systemd[3585698]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 11:00:01 power systemd[3585697]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:00:01 power systemd[3585701]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 11:00:01 power systemd[3585699]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 11:04:01 power systemd[3591961]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:05:01 power systemd[3593306]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:05:01 power systemd[3593308]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:06:01 power systemd[3595189]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 11:07:01 power systemd[3596393]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 11:09:01 power systemd[3598741]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:10:01 power systemd[3599899]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:10:01 power systemd[3599900]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:12:01 power systemd[3602397]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 11:15:01 power systemd[3605874]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:15:01 power systemd[3605873]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:20:01 power systemd[3611751]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:20:01 power systemd[3611752]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:25:01 power systemd[3617217]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:25:01 power systemd[3617224]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:30:01 power systemd[3623435]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:30:01 power systemd[3623437]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:30:01 power systemd[3623438]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 11:30:01 power systemd[3623441]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 11:30:01 power systemd[3623443]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 11:35:01 power systemd[3629229]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:35:01 power systemd[3629230]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:36:01 power systemd[3630379]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 11:37:01 power systemd[3631585]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 11:39:01 power systemd[3634405]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:40:01 power systemd[3635691]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:40:01 power systemd[3635694]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:42:01 power systemd[3638104]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 11:42:07 power sudo[3638250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 11:42:07 power systemd[3638258]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:42:07 power sudo[3638250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:07 power sudo[3638250]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:07 power sudo[3638278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 11:42:07 power sudo[3638278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:07 power sudo[3638278]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:07 power sudo[3638282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 11:42:07 power sudo[3638282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:07 power sudo[3638282]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:07 power sudo[3638286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=w8rUn6CHPx'
Sep 10 11:42:07 power sudo[3638286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:07 power sudo[3638286]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:07 power sudo[3638292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 11:42:07 power sudo[3638292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:07 power sudo[3638292]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:07 power sudo[3638299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 11:42:07 power sudo[3638299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:07 power sudo[3638299]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:07 power sudo[3638304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 11:42:07 power sudo[3638304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:07 power sudo[3638304]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:07 power sudo[3638308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 11:42:07 power sudo[3638308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:08 power sudo[3638308]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:08 power sudo[3638317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 11:42:08 power sudo[3638317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:08 power sudo[3638317]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:08 power sudo[3638323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 11:42:08 power sudo[3638323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:08 power sudo[3638323]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:08 power sudo[3638328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 11:42:08 power sudo[3638328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:08 power sudo[3638328]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:08 power sudo[3638332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 11:42:08 power sudo[3638332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:08 power sudo[3638332]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:08 power sudo[3638336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 11:42:08 power sudo[3638336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:08 power sudo[3638336]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:08 power sudo[3638340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 11:42:08 power sudo[3638340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:08 power sudo[3638340]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:10 power sudo[3638413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 11:42:10 power sudo[3638413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:10 power sudo[3638413]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:10 power sudo[3638422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 11:42:10 power sudo[3638422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:10 power sudo[3638422]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:10 power sudo[3638430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=seloviro user-2=nlpmkorg user-3=centarba user-4=kolened1 user-5=nolimits user-6=edomcomm user-7=berbermk user-8=dikimk12 user-9=sprintst user-10=enochmk user-11=herbalpl user-12=tradeyou user-13=gjorgeiv user-14=dnevnoin user-15=pecakome user-16=wondersp user-17=robustco user-18=stravelm user-19=holiyayt user-20=rastiraz user-21=tealmk user-22=dadarmk user-23=proverim user-24=goodnews user-25=mstmmk user-26=gocruise user-27=stojnevi user-28=raremk user-29=oouslave user-30=uhostmk5 user-31=bauerbg user-32=enaspotc user-33=vmro user-34=trudovop user-35=viewinn user-36=cajsproc user-37=hotammk user-38=youthgua user-39=anitermc user-40=frizered user-41=hidrommk user-42=caramk user-43=nefrolog user-44=oncolog1 user-45=ekostoc1 user-46=levantmk user-47=avtogumi user-48=socioloz user-49=pelagoni user-50=evolvepl
Sep 10 11:42:10 power sudo[3638430]: wp-toolkit : (command continued) user-51=simbiome user-52=delcevca user-53=getaldus user-54=barececo user-55=workandt user-56=goartsym user-57=volkanco user-58=dhamachi user-59=mfashion user-60=bianasho user-61=makoasmk user-62=skyapart user-63=rasmorgm user-64=datalink user-65=velmk user-66=gogovan1 user-67=univerz1 user-68=kujnamon user-69=agrosind user-70=mpbmk user-71=bizporta user-72=datelcom user-73=maleshne user-74=sedcmk user-75=groskome user-76=ivanjord user-77=vfxnestc user-78=polyeste user-79=wikicamp user-80=urbanexp user-81=spdcompu user-82=detskagr user-83=mspmk user-84=infobadi user-85=stojano1 user-86=bovincom user-87=janiboja user-88=itradeco user-89=vezilkac user-90=cabinetm user-91=palenzok user-92=zampmk user-93=busymard user-94=zvskopje user-95=custome1 user-96=sparkupm user-97=stokovna user-98=klimimk user-99=kouzonco user-100=premiuma user-101=cetplatf user-102=dalmacom user-103=jpparkin user-104=inotekso user-105=drleomk
Sep 10 11:42:10 power sudo[3638430]: wp-toolkit : (command continued) user-106=ideaplus user-107=karpospo user-108=nasaidni user-109=arturaco user-110=screenme user-111=premiums user-112=butelmk user-113=daris user-114=intelek1 user-115=mediatag user-116=nucktra1 user-117=lblawcom user-118=aptekazd user-119=nikimare user-120=forzares user-121=hausmark user-122=nikolov1 user-123=mediasol user-124=carrent1 user-125=bogdanos user-126=apgrupmk user-127=kardiome user-128=euronic2 user-129=matratze user-130=euromaki user-131=cosmatob user-132=elektrot user-133=zapovim1 user-134=samasped user-135=chemhemc user-136=nutrivim user-137=imdskopj user-138=glammace user-139=albuname user-140=infopor1 user-141=pravekom user-142=vtranseu user-143=bozinovm user-144=fnjorgmk user-145=darkogor user-146=prizmapl user-147=dslmk user-148=innofabl user-149=premiumi user-150=vacuacti user-151=taneccom user-152=tehnologija user-153=modernar user-154=inkigaic user-155=zdmgpsor user-156=gorsajmk
Sep 10 11:42:10 power sudo[3638430]: wp-toolkit : (command continued) user-157=aquatech user-158=v5srybi9dcdx user-159=supremel user-160=onlinesh user-161=nationa2 user-162=solemor1 user-163=mapaspla user-164=tcieuroc user-165=fffhpcwr user-166=radekrat user-167=starluxm user-168=ambitiou user-169=fiziosmk user-170=versusmk user-171=euronic3 user-172=vegemk1 user-173=cupidpro user-174=conserva user-175=bonitavi user-176=evberasm user-177=folklore user-178=bauerin2 user-179=evacommk user-180=aptekafa user-181=madzomk user-182=gradbai1 user-183=eaptekam user-184=dimpalne user-185=peshkai1 user-186=fxxcom user-187=tehnodro user-188=makdrone user-189=izzomk user-190=jpkomuna user-191=pelagini user-192=kaoilmk user-193=biplmk user-194=bbbustou user-195=atspedco user-196=sssoluti user-197=progress user-198=animatem user-199=cleanerm user-200=recorgmk user-201=taktcomm user-202=jaramk user-203=solointe user-204=eurofarm user-205=solarinv user-206=golakkom user-207=trigemat
Sep 10 11:42:10 power sudo[3638430]: wp-toolkit : (command continued) user-208=naksorgm user-209=eliksirz user-210=electrol user-211=workbenc user-212=ismassag user-213=mbmehani user-214=wineberr user-215=viplastc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 11:42:10 power sudo[3638430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:11 power sudo[3638430]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:11 power sudo[3638437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 11:42:11 power sudo[3638437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:11 power sudo[3638437]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:11 power sudo[3638441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LpqDAMnvVZzdfWwN.~
Sep 10 11:42:11 power sudo[3638441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:11 power sudo[3638441]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:11 power sudo[3638445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LpqDAMnvVZzdfWwN.~\''
Sep 10 11:42:11 power sudo[3638445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:11 power sudo[3638445]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:11 power sudo[3638450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LpqDAMnvVZzdfWwN.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 11:42:11 power sudo[3638450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:11 power sudo[3638450]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:11 power sudo[3638454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 11:42:11 power sudo[3638454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:11 power sudo[3638454]: pam_unix(sudo:session): session closed for user root
Sep 10 11:42:11 power sudo[3638840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 11:42:11 power sudo[3638840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 11:42:11 power sudo[3638840]: pam_unix(sudo:session): session closed for user root
Sep 10 11:45:01 power systemd[3642662]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:45:01 power systemd[3642663]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:50:01 power systemd[3648715]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:50:01 power systemd[3648716]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 11:53:03 power sshd[3652126]: Connection closed by 172.236.228.208 port 56562 [preauth]
Sep 10 11:53:05 power sshd[3652161]: Connection closed by 172.236.228.208 port 56566 [preauth]
Sep 10 11:53:06 power sshd[3652184]: Connection closed by 172.236.228.208 port 56572 [preauth]
Sep 10 11:55:01 power systemd[3654283]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 11:55:01 power systemd[3654284]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:00:01 power systemd[3659758]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:00:01 power systemd[3659760]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 12:00:01 power systemd[3659759]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:00:01 power systemd[3659764]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 12:00:01 power systemd[3659765]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 12:00:01 power systemd[3659768]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 10 12:04:01 power systemd[3665447]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:05:01 power systemd[3666675]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:05:01 power systemd[3666676]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:06:02 power systemd[3667941]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 12:07:01 power systemd[3669028]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 12:09:02 power systemd[3671118]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:10:01 power systemd[3672480]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:10:01 power systemd[3672481]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:12:01 power systemd[3675196]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 12:13:13 power sshd[3676690]: error: kex_exchange_identification: banner line contains invalid characters
Sep 10 12:13:13 power sshd[3676690]: banner exchange: Connection from 8.211.44.144 port 39750: invalid format
Sep 10 12:13:13 power sshd[3676697]: Invalid user  from 8.211.44.144 port 39764
Sep 10 12:13:13 power sshd[3676697]: Connection closed by invalid user  8.211.44.144 port 39764 [preauth]
Sep 10 12:15:01 power systemd[3678856]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:15:01 power systemd[3678859]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:20:01 power systemd[3685509]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:20:01 power systemd[3685511]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:25:01 power systemd[3691796]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:25:01 power systemd[3691798]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:30:01 power systemd[3698947]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:30:01 power systemd[3698949]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:30:01 power systemd[3698950]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 12:30:01 power systemd[3698952]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 12:30:01 power systemd[3698953]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 12:35:02 power systemd[3706085]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:35:02 power systemd[3706086]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:36:01 power systemd[3707407]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 12:37:01 power systemd[3708429]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 12:39:01 power systemd[3710685]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:40:01 power systemd[3711827]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:40:01 power systemd[3711828]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:42:01 power systemd[3714287]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 12:42:07 power sudo[3714395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 12:42:07 power systemd[3714402]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:42:07 power sudo[3714395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:07 power sudo[3714395]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:07 power sudo[3714418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 12:42:07 power sudo[3714418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:07 power sudo[3714418]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:07 power sudo[3714422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 12:42:07 power sudo[3714422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:07 power sudo[3714422]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:07 power sudo[3714426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=Ff7dg5NmbE'
Sep 10 12:42:07 power sudo[3714426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:07 power sudo[3714426]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:07 power sudo[3714432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 12:42:07 power sudo[3714432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:07 power sudo[3714432]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:07 power sudo[3714436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 12:42:07 power sudo[3714436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:07 power sudo[3714436]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:07 power sudo[3714440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 12:42:07 power sudo[3714440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:07 power sudo[3714440]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:07 power sudo[3714445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 12:42:07 power sudo[3714445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:08 power sudo[3714445]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:08 power sudo[3714458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 12:42:08 power sudo[3714458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:08 power sudo[3714458]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:08 power sudo[3714463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 12:42:08 power sudo[3714463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:08 power sudo[3714463]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:08 power sudo[3714467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 12:42:08 power sudo[3714467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:08 power sudo[3714467]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:08 power sudo[3714471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 12:42:08 power sudo[3714471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:08 power sudo[3714471]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:08 power sudo[3714478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 12:42:08 power sudo[3714478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:08 power sudo[3714478]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:08 power sudo[3714482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 12:42:08 power sudo[3714482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:08 power sudo[3714482]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:11 power sudo[3714631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 12:42:11 power sudo[3714631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:11 power sudo[3714631]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:11 power sudo[3714640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 12:42:11 power sudo[3714640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:11 power sudo[3714640]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:11 power sudo[3714646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=sssoluti user-2=atspedco user-3=progress user-4=cleanerm user-5=animatem user-6=taktcomm user-7=recorgmk user-8=jaramk user-9=solointe user-10=pelagini user-11=kaoilmk user-12=biplmk user-13=bbbustou user-14=workbenc user-15=ismassag user-16=mbmehani user-17=wineberr user-18=viplastc user-19=eurofarm user-20=solarinv user-21=golakkom user-22=eliksirz user-23=naksorgm user-24=trigemat user-25=electrol user-26=folklore user-27=bauerin2 user-28=euronic3 user-29=cupidpro user-30=vegemk1 user-31=conserva user-32=evberasm user-33=bonitavi user-34=tehnodro user-35=makdrone user-36=izzomk user-37=jpkomuna user-38=madzomk user-39=aptekafa user-40=evacommk user-41=gradbai1 user-42=eaptekam user-43=dimpalne user-44=fxxcom user-45=peshkai1 user-46=zdmgpsor user-47=aquatech user-48=gorsajmk user-49=v5srybi9dcdx
Sep 10 12:42:11 power sudo[3714646]: wp-toolkit : (command continued) user-50=supremel user-51=fnjorgmk user-52=darkogor user-53=prizmapl user-54=dslmk user-55=bozinovm user-56=vacuacti user-57=innofabl user-58=premiumi user-59=taneccom user-60=tehnologija user-61=modernar user-62=inkigaic user-63=fffhpcwr user-64=starluxm user-65=radekrat user-66=ambitiou user-67=fiziosmk user-68=versusmk user-69=onlinesh user-70=nationa2 user-71=solemor1 user-72=mapaspla user-73=tcieuroc user-74=bogdanos user-75=carrent1 user-76=mediasol user-77=apgrupmk user-78=kardiome user-79=matratze user-80=euronic2 user-81=mediatag user-82=intelek1 user-83=nucktra1 user-84=lblawcom user-85=nikimare user-86=aptekazd user-87=forzares user-88=nikolov1 user-89=hausmark user-90=imdskopj user-91=albuname user-92=glammace user-93=infopor1 user-94=pravekom user-95=vtranseu user-96=euromaki user-97=cosmatob user-98=zapovim1 user-99=elektrot user-100=samasped user-101=chemhemc user-102=nutrivim user-103=palenzok
Sep 10 12:42:11 power sudo[3714646]: wp-toolkit : (command continued) user-104=zvskopje user-105=zampmk user-106=busymard user-107=custome1 user-108=stokovna user-109=sparkupm user-110=klimimk user-111=stojano1 user-112=bovincom user-113=janiboja user-114=itradeco user-115=vezilkac user-116=cabinetm user-117=inotekso user-118=jpparkin user-119=drleomk user-120=karpospo user-121=nasaidni user-122=ideaplus user-123=screenme user-124=arturaco user-125=daris user-126=butelmk user-127=premiums user-128=kouzonco user-129=premiuma user-130=cetplatf user-131=dalmacom user-132=datalink user-133=kujnamon user-134=univerz1 user-135=gogovan1 user-136=velmk user-137=mpbmk user-138=agrosind user-139=barececo user-140=getaldus user-141=simbiome user-142=delcevca user-143=workandt user-144=dhamachi user-145=volkanco user-146=goartsym user-147=mfashion user-148=skyapart user-149=bianasho user-150=makoasmk user-151=rasmorgm user-152=wikicamp user-153=urbanexp user-154=spdcompu user-155=detskagr
Sep 10 12:42:11 power sudo[3714646]: wp-toolkit : (command continued) user-156=mspmk user-157=infobadi user-158=bizporta user-159=maleshne user-160=datelcom user-161=sedcmk user-162=groskome user-163=ivanjord user-164=polyeste user-165=vfxnestc user-166=cajsproc user-167=hotammk user-168=anitermc user-169=youthgua user-170=stojnevi user-171=oouslave user-172=raremk user-173=bauerbg user-174=uhostmk5 user-175=enaspotc user-176=trudovop user-177=viewinn user-178=vmro user-179=avtogumi user-180=socioloz user-181=pelagoni user-182=evolvepl user-183=hidrommk user-184=frizered user-185=caramk user-186=levantmk user-187=ekostoc1 user-188=oncolog1 user-189=nefrolog user-190=edomcomm user-191=berbermk user-192=dikimk12 user-193=enochmk user-194=herbalpl user-195=sprintst user-196=seloviro user-197=kolened1 user-198=nlpmkorg user-199=centarba user-200=nolimits user-201=tealmk user-202=dadarmk user-203=proverim user-204=goodnews user-205=mstmmk user-206=gocruise user-207=tradeyou
Sep 10 12:42:11 power sudo[3714646]: wp-toolkit : (command continued) user-208=gjorgeiv user-209=dnevnoin user-210=pecakome user-211=robustco user-212=stravelm user-213=wondersp user-214=holiyayt user-215=rastiraz feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 12:42:11 power sudo[3714646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:11 power sudo[3714646]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:11 power sudo[3714660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 12:42:11 power sudo[3714660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:11 power sudo[3714660]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:11 power sudo[3714664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0AllfWqQ5yVYqC5i.~
Sep 10 12:42:11 power sudo[3714664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:11 power sudo[3714664]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:11 power sudo[3714668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0AllfWqQ5yVYqC5i.~\''
Sep 10 12:42:11 power sudo[3714668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:11 power sudo[3714668]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:11 power sudo[3714673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0AllfWqQ5yVYqC5i.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 12:42:11 power sudo[3714673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:11 power sudo[3714673]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:11 power sudo[3714677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 12:42:11 power sudo[3714677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:11 power sudo[3714677]: pam_unix(sudo:session): session closed for user root
Sep 10 12:42:16 power sudo[3715586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 12:42:16 power sudo[3715586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 12:42:16 power sudo[3715586]: pam_unix(sudo:session): session closed for user root
Sep 10 12:45:01 power systemd[3719062]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:45:01 power systemd[3719064]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:50:01 power systemd[3725056]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:50:01 power systemd[3725057]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 12:55:02 power systemd[3731847]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 12:55:02 power systemd[3731849]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:00:01 power systemd[3738828]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:00:01 power systemd[3738829]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:00:01 power systemd[3738830]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 13:00:01 power systemd[3738835]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 13:00:01 power systemd[3738832]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 13:04:01 power systemd[3746001]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:05:02 power systemd[3747227]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:05:02 power systemd[3747228]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:06:01 power systemd[3748437]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 13:07:01 power systemd[3749757]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 13:09:01 power systemd[3752161]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:10:01 power systemd[3753376]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:10:01 power systemd[3753377]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:12:01 power systemd[3756632]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 13:15:01 power systemd[3760813]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:15:01 power systemd[3760814]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:15:39 power sshd[3761640]: error: kex_exchange_identification: read: Connection reset by peer
Sep 10 13:15:39 power sshd[3761640]: Connection reset by 162.142.125.120 port 37854
Sep 10 13:15:57 power sshd[3761817]: Connection closed by 162.142.125.120 port 48802 [preauth]
Sep 10 13:20:01 power systemd[3767517]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:20:01 power systemd[3767520]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:25:01 power systemd[3774274]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:25:01 power systemd[3774275]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:30:01 power systemd[3781611]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:30:01 power systemd[3781612]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:30:01 power systemd[3781614]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 13:30:01 power systemd[3781616]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 13:30:01 power systemd[3781617]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 13:35:01 power systemd[3789030]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:35:01 power systemd[3789031]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:36:01 power systemd[3790379]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 13:37:01 power systemd[3791588]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 13:39:01 power systemd[3793930]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:40:01 power systemd[3795111]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:40:01 power systemd[3795113]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:42:01 power systemd[3797290]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 13:42:07 power sudo[3797443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 13:42:07 power systemd[3797448]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:42:07 power sudo[3797443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:07 power sudo[3797443]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:07 power sudo[3797465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 13:42:07 power sudo[3797465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:07 power sudo[3797465]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:07 power sudo[3797469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 13:42:07 power sudo[3797469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:07 power sudo[3797469]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:07 power sudo[3797473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=airqTZmbwP'
Sep 10 13:42:07 power sudo[3797473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:07 power sudo[3797473]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:07 power sudo[3797478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 13:42:07 power sudo[3797478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:07 power sudo[3797478]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:07 power sudo[3797482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 13:42:07 power sudo[3797482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:07 power sudo[3797482]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:07 power sudo[3797486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 13:42:07 power sudo[3797486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:07 power sudo[3797486]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:07 power sudo[3797490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 13:42:07 power sudo[3797490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:08 power sudo[3797490]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:08 power sudo[3797500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 13:42:08 power sudo[3797500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:08 power sudo[3797500]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:08 power sudo[3797504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 13:42:08 power sudo[3797504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:08 power sudo[3797504]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:08 power sudo[3797508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 13:42:08 power sudo[3797508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:08 power sudo[3797508]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:08 power sudo[3797512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 13:42:08 power sudo[3797512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:08 power sudo[3797512]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:08 power sudo[3797516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 13:42:08 power sudo[3797516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:08 power sudo[3797516]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:08 power sudo[3797521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 13:42:08 power sudo[3797521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:08 power sudo[3797521]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:14 power sudo[3797645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 13:42:14 power sudo[3797645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:14 power sudo[3797645]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:14 power sudo[3797650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 13:42:14 power sudo[3797650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:14 power sudo[3797650]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:14 power sudo[3797661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=chemhemc user-2=samasped user-3=nutrivim user-4=cosmatob user-5=euromaki user-6=zapovim1 user-7=elektrot user-8=infopor1 user-9=pravekom user-10=vtranseu user-11=imdskopj user-12=albuname user-13=glammace user-14=forzares user-15=nikimare user-16=aptekazd user-17=hausmark user-18=nikolov1 user-19=mediatag user-20=intelek1 user-21=lblawcom user-22=nucktra1 user-23=matratze user-24=euronic2 user-25=apgrupmk user-26=bogdanos user-27=carrent1 user-28=mediasol user-29=kardiome user-30=tcieuroc user-31=nationa2 user-32=onlinesh user-33=mapaspla user-34=solemor1 user-35=fiziosmk user-36=ambitiou user-37=versusmk user-38=fffhpcwr user-39=starluxm user-40=radekrat user-41=modernar user-42=inkigaic user-43=vacuacti user-44=innofabl user-45=premiumi user-46=darkogor user-47=dslmk user-48=fnjorgmk user-49=prizmapl
Sep 10 13:42:14 power sudo[3797661]: wp-toolkit : (command continued) user-50=bozinovm user-51=tehnologija user-52=taneccom user-53=aquatech user-54=gorsajmk user-55=supremel user-56=v5srybi9dcdx user-57=zdmgpsor user-58=dimpalne user-59=eaptekam user-60=fxxcom user-61=peshkai1 user-62=madzomk user-63=aptekafa user-64=evacommk user-65=gradbai1 user-66=jpkomuna user-67=izzomk user-68=tehnodro user-69=makdrone user-70=evberasm user-71=bonitavi user-72=cupidpro user-73=vegemk1 user-74=euronic3 user-75=conserva user-76=folklore user-77=bauerin2 user-78=golakkom user-79=electrol user-80=eliksirz user-81=naksorgm user-82=trigemat user-83=eurofarm user-84=solarinv user-85=viplastc user-86=wineberr user-87=ismassag user-88=workbenc user-89=mbmehani user-90=bbbustou user-91=kaoilmk user-92=biplmk user-93=pelagini user-94=recorgmk user-95=taktcomm user-96=solointe user-97=jaramk user-98=sssoluti user-99=atspedco user-100=cleanerm user-101=animatem user-102=progress user-103=robustco
Sep 10 13:42:14 power sudo[3797661]: wp-toolkit : (command continued) user-104=stravelm user-105=wondersp user-106=pecakome user-107=rastiraz user-108=holiyayt user-109=gjorgeiv user-110=tradeyou user-111=dnevnoin user-112=mstmmk user-113=goodnews user-114=gocruise user-115=tealmk user-116=proverim user-117=dadarmk user-118=kolened1 user-119=nlpmkorg user-120=centarba user-121=nolimits user-122=seloviro user-123=herbalpl user-124=enochmk user-125=sprintst user-126=dikimk12 user-127=berbermk user-128=edomcomm user-129=ekostoc1 user-130=oncolog1 user-131=levantmk user-132=nefrolog user-133=hidrommk user-134=frizered user-135=caramk user-136=evolvepl user-137=avtogumi user-138=socioloz user-139=pelagoni user-140=viewinn user-141=trudovop user-142=vmro user-143=enaspotc user-144=stojnevi user-145=bauerbg user-146=uhostmk5 user-147=oouslave user-148=raremk user-149=anitermc user-150=youthgua user-151=hotammk user-152=cajsproc user-153=groskome user-154=ivanjord user-155=sedcmk
Sep 10 13:42:14 power sudo[3797661]: wp-toolkit : (command continued) user-156=polyeste user-157=vfxnestc user-158=bizporta user-159=maleshne user-160=datelcom user-161=detskagr user-162=spdcompu user-163=infobadi user-164=mspmk user-165=urbanexp user-166=wikicamp user-167=skyapart user-168=makoasmk user-169=bianasho user-170=rasmorgm user-171=workandt user-172=barececo user-173=delcevca user-174=simbiome user-175=getaldus user-176=mfashion user-177=dhamachi user-178=goartsym user-179=volkanco user-180=mpbmk user-181=agrosind user-182=datalink user-183=univerz1 user-184=kujnamon user-185=gogovan1 user-186=velmk user-187=premiuma user-188=kouzonco user-189=dalmacom user-190=cetplatf user-191=arturaco user-192=screenme user-193=nasaidni user-194=karpospo user-195=ideaplus user-196=daris user-197=butelmk user-198=premiums user-199=drleomk user-200=inotekso user-201=jpparkin user-202=itradeco user-203=janiboja user-204=cabinetm user-205=vezilkac user-206=stojano1 user-207=bovincom
Sep 10 13:42:14 power sudo[3797661]: wp-toolkit : (command continued) user-208=stokovna user-209=sparkupm user-210=klimimk user-211=zampmk user-212=zvskopje user-213=busymard user-214=palenzok user-215=custome1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 13:42:14 power sudo[3797661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:15 power sudo[3797661]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:15 power sudo[3797675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 13:42:15 power sudo[3797675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:15 power sudo[3797675]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:15 power sudo[3797679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8m2fe45tibqJVyMb.~
Sep 10 13:42:15 power sudo[3797679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:15 power sudo[3797679]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:15 power sudo[3797683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8m2fe45tibqJVyMb.~\''
Sep 10 13:42:15 power sudo[3797683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:15 power sudo[3797683]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:15 power sudo[3797688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8m2fe45tibqJVyMb.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 13:42:15 power sudo[3797688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:15 power sudo[3797688]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:15 power sudo[3797692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 13:42:15 power sudo[3797692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:15 power sudo[3797692]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:19 power sudo[3798542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 13:42:19 power sudo[3798542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:19 power sudo[3798542]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:19 power sudo[3798674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 gethostname --output=json'
Sep 10 13:42:19 power sudo[3798674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:19 power sudo[3798674]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:19 power sudo[3798680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Themes get_theme_base --output=json'
Sep 10 13:42:19 power sudo[3798680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:19 power sudo[3798680]: pam_unix(sudo:session): session closed for user root
Sep 10 13:42:19 power sudo[3798686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc WpToolkitNotification send_admin_vulnerability_found_notification \'message=WP Toolkit has detected new vulnerabilities on WordPress sites under your care. It is strongly recommended to update or disable vulnerable assets on these sites. You can also configure WP Toolkit to perform automatic actions when vulnerabilities are detected. <br/>The following vulnerabilities were found in deactivated assets and have to be addressed manually:<br/>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012
Sep 10 13:42:19 power sudo[3798686]: wp-toolkit : (command continued) <td colspan="2">Site: <span style="color: black">vezilka.com</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/101/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(208, 45, 75); background-color: rgb(255, 240, 241);">#012    High#012</span></td>#012            <td colspan="2">#012                <span style="color: black">WordPress Gravity Theme &lt;= 1.3.0 - Local File Inclusion Vulnerability</span><br/>#012
Sep 10 13:42:19 power sudo[3798686]: wp-toolkit : (command continued) <div style="line-height: 1.5em; font-size: 0.9em">Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) in WordPress Theme Gravity (versions &lt;= 1.3.0)</div>#012                #012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://patchstack.com/database/vulnerability/gravity/wordpress-gravity-theme-1-3-0-local-file-inclusion-vulnerability?_a_id=110\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Patchstack</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table><br/>More vulnerabilities were found, please go to WP Toolkit for the full list. <br/><br/>Automatic actions can be defined on the site autoupdate policy screen.\' --output=json'
Sep 10 13:42:19 power sudo[3798686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 13:42:19 power sudo[3798686]: pam_unix(sudo:session): session closed for user root
Sep 10 13:45:01 power systemd[3802519]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:45:01 power systemd[3802522]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:50:01 power systemd[3809190]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:50:01 power systemd[3809191]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 13:55:01 power systemd[3815222]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 13:55:01 power systemd[3815223]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:00:02 power systemd[3822478]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:00:02 power systemd[3822479]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:00:02 power systemd[3822480]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 14:00:02 power systemd[3822482]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 14:00:02 power systemd[3822483]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 14:04:01 power systemd[3828396]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:05:01 power systemd[3829745]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:05:01 power systemd[3829746]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:06:01 power systemd[3831003]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 14:07:01 power systemd[3832126]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 14:09:01 power systemd[3835117]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:10:01 power systemd[3837093]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:10:01 power systemd[3837094]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:12:01 power systemd[3839533]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 14:15:01 power systemd[3843219]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:15:01 power systemd[3843221]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:16:41 power sshd[3845003]: Connection closed by 167.94.138.199 port 36856 [preauth]
Sep 10 14:20:01 power systemd[3850527]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:20:01 power systemd[3850528]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:25:02 power systemd[3856319]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:25:02 power systemd[3856320]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:30:01 power systemd[3863128]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:30:01 power systemd[3863129]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:30:01 power systemd[3863130]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 14:30:01 power systemd[3863132]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 14:30:01 power systemd[3863134]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 14:35:01 power systemd[3869689]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:35:01 power systemd[3869690]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:36:01 power systemd[3871031]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 14:37:01 power systemd[3872165]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 14:39:01 power systemd[3874679]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:40:01 power systemd[3875865]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:40:01 power systemd[3875870]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:42:01 power systemd[3878091]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 14:42:07 power sudo[3878229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 14:42:07 power systemd[3878235]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:42:07 power sudo[3878229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:07 power sudo[3878229]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:07 power sudo[3878251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 14:42:07 power sudo[3878251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:07 power sudo[3878251]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:07 power sudo[3878255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 14:42:07 power sudo[3878255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:07 power sudo[3878255]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:07 power sudo[3878260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=tw5VFBDcER'
Sep 10 14:42:07 power sudo[3878260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:07 power sudo[3878260]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:07 power sudo[3878266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 14:42:07 power sudo[3878266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:07 power sudo[3878266]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:07 power sudo[3878270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 14:42:07 power sudo[3878270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:07 power sudo[3878270]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:07 power sudo[3878275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 14:42:07 power sudo[3878275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:07 power sudo[3878275]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:07 power sudo[3878279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 14:42:07 power sudo[3878279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:08 power sudo[3878279]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:08 power sudo[3878290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 14:42:08 power sudo[3878290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:08 power sudo[3878290]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:08 power sudo[3878295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 14:42:08 power sudo[3878295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:08 power sudo[3878295]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:08 power sudo[3878299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 14:42:08 power sudo[3878299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:08 power sudo[3878299]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:08 power sudo[3878307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 14:42:08 power sudo[3878307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:08 power sudo[3878307]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:08 power sudo[3878312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 14:42:08 power sudo[3878312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:08 power sudo[3878312]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:08 power sudo[3878316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 14:42:08 power sudo[3878316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:08 power sudo[3878316]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:10 power sudo[3878398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 14:42:10 power sudo[3878398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:10 power sudo[3878398]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:10 power sudo[3878407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 14:42:10 power sudo[3878407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:10 power sudo[3878407]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:10 power sudo[3878415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=makdrone user-2=tehnodro user-3=izzomk user-4=jpkomuna user-5=gradbai1 user-6=aptekafa user-7=madzomk user-8=evacommk user-9=fxxcom user-10=peshkai1 user-11=eaptekam user-12=dimpalne user-13=bauerin2 user-14=folklore user-15=conserva user-16=euronic3 user-17=cupidpro user-18=vegemk1 user-19=evberasm user-20=bonitavi user-21=mbmehani user-22=workbenc user-23=ismassag user-24=wineberr user-25=viplastc user-26=solarinv user-27=eurofarm user-28=naksorgm user-29=eliksirz user-30=trigemat user-31=electrol user-32=golakkom user-33=progress user-34=cleanerm user-35=animatem user-36=atspedco user-37=sssoluti user-38=jaramk user-39=solointe user-40=taktcomm user-41=recorgmk user-42=pelagini user-43=biplmk user-44=kaoilmk user-45=bbbustou user-46=albuname user-47=glammace user-48=imdskopj user-49=pravekom
Sep 10 14:42:10 power sudo[3878415]: wp-toolkit : (command continued) user-50=vtranseu user-51=infopor1 user-52=zapovim1 user-53=elektrot user-54=cosmatob user-55=euromaki user-56=nutrivim user-57=samasped user-58=chemhemc user-59=kardiome user-60=bogdanos user-61=carrent1 user-62=mediasol user-63=apgrupmk user-64=matratze user-65=euronic2 user-66=nucktra1 user-67=lblawcom user-68=mediatag user-69=intelek1 user-70=nikolov1 user-71=hausmark user-72=nikimare user-73=aptekazd user-74=forzares user-75=starluxm user-76=radekrat user-77=fffhpcwr user-78=versusmk user-79=ambitiou user-80=fiziosmk user-81=solemor1 user-82=mapaspla user-83=onlinesh user-84=nationa2 user-85=tcieuroc user-86=zdmgpsor user-87=v5srybi9dcdx user-88=supremel user-89=aquatech user-90=gorsajmk user-91=taneccom user-92=tehnologija user-93=dslmk user-94=darkogor user-95=fnjorgmk user-96=prizmapl user-97=bozinovm user-98=vacuacti user-99=innofabl user-100=premiumi user-101=inkigaic user-102=modernar user-103=wikicamp
Sep 10 14:42:10 power sudo[3878415]: wp-toolkit : (command continued) user-104=urbanexp user-105=infobadi user-106=mspmk user-107=spdcompu user-108=detskagr user-109=maleshne user-110=datelcom user-111=bizporta user-112=polyeste user-113=vfxnestc user-114=sedcmk user-115=ivanjord user-116=groskome user-117=kujnamon user-118=univerz1 user-119=velmk user-120=gogovan1 user-121=datalink user-122=mpbmk user-123=agrosind user-124=dhamachi user-125=goartsym user-126=volkanco user-127=mfashion user-128=barececo user-129=getaldus user-130=delcevca user-131=simbiome user-132=workandt user-133=rasmorgm user-134=skyapart user-135=makoasmk user-136=bianasho user-137=inotekso user-138=jpparkin user-139=drleomk user-140=daris user-141=butelmk user-142=premiums user-143=karpospo user-144=nasaidni user-145=ideaplus user-146=screenme user-147=arturaco user-148=cetplatf user-149=dalmacom user-150=kouzonco user-151=premiuma user-152=custome1 user-153=palenzok user-154=zampmk user-155=busymard
Sep 10 14:42:10 power sudo[3878415]: wp-toolkit : (command continued) user-156=zvskopje user-157=klimimk user-158=stokovna user-159=sparkupm user-160=bovincom user-161=stojano1 user-162=vezilkac user-163=cabinetm user-164=janiboja user-165=itradeco user-166=dadarmk user-167=proverim user-168=tealmk user-169=gocruise user-170=goodnews user-171=mstmmk user-172=dnevnoin user-173=gjorgeiv user-174=tradeyou user-175=holiyayt user-176=rastiraz user-177=pecakome user-178=robustco user-179=stravelm user-180=wondersp user-181=edomcomm user-182=berbermk user-183=dikimk12 user-184=enochmk user-185=herbalpl user-186=sprintst user-187=seloviro user-188=nolimits user-189=kolened1 user-190=nlpmkorg user-191=centarba user-192=pelagoni user-193=avtogumi user-194=socioloz user-195=evolvepl user-196=caramk user-197=hidrommk user-198=frizered user-199=oncolog1 user-200=ekostoc1 user-201=levantmk user-202=nefrolog user-203=cajsproc user-204=hotammk user-205=anitermc user-206=youthgua user-207=oouslave
Sep 10 14:42:10 power sudo[3878415]: wp-toolkit : (command continued) user-208=raremk user-209=bauerbg user-210=uhostmk5 user-211=stojnevi user-212=enaspotc user-213=trudovop user-214=viewinn user-215=vmro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 14:42:10 power sudo[3878415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:11 power sudo[3878415]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:11 power sudo[3878426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep 10 14:42:11 power sudo[3878426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:11 power sudo[3878426]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:11 power sudo[3878438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro test -e /home/vmro/wordpress-backups
Sep 10 14:42:11 power sudo[3878438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:11 power sudo[3878438]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:11 power sudo[3878460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep 10 14:42:11 power sudo[3878460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:11 power sudo[3878460]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:11 power sudo[3878497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep 10 14:42:11 power sudo[3878497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:11 power sudo[3878497]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:11 power sudo[3878509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep 10 14:42:11 power sudo[3878509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:11 power sudo[3878509]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:12 power sudo[3878519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind test -e /home/agrosind/wordpress-backups
Sep 10 14:42:12 power sudo[3878519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:12 power sudo[3878519]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:12 power sudo[3878530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep 10 14:42:12 power sudo[3878530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:12 power sudo[3878530]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:12 power sudo[3878537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep 10 14:42:12 power sudo[3878537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:12 power sudo[3878537]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:12 power sudo[3878548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep 10 14:42:12 power sudo[3878548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:12 power sudo[3878548]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:12 power sudo[3878568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep 10 14:42:12 power sudo[3878568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:12 power sudo[3878568]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:12 power sudo[3878583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep 10 14:42:12 power sudo[3878583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:12 power sudo[3878583]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:12 power sudo[3878593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem test -e /home/animatem/wordpress-backups
Sep 10 14:42:12 power sudo[3878593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:12 power sudo[3878593]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:12 power sudo[3878604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep 10 14:42:12 power sudo[3878604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:13 power sudo[3878604]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:13 power sudo[3878618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc test -e /home/anitermc/wordpress-backups
Sep 10 14:42:13 power sudo[3878618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:13 power sudo[3878618]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:13 power sudo[3878629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep 10 14:42:13 power sudo[3878629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:13 power sudo[3878629]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:13 power sudo[3878640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep 10 14:42:13 power sudo[3878640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:13 power sudo[3878640]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:13 power sudo[3878651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep 10 14:42:13 power sudo[3878651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:13 power sudo[3878651]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:13 power sudo[3878658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd test -e /home/aptekazd/wordpress-backups
Sep 10 14:42:13 power sudo[3878658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:13 power sudo[3878658]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:13 power sudo[3878669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep 10 14:42:13 power sudo[3878669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:13 power sudo[3878669]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:13 power sudo[3878674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress test -e /home/progress/wordpress-backups
Sep 10 14:42:13 power sudo[3878674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:13 power sudo[3878674]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:13 power sudo[3878685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep 10 14:42:13 power sudo[3878685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:14 power sudo[3878685]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:14 power sudo[3878698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep 10 14:42:14 power sudo[3878698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:14 power sudo[3878698]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:14 power sudo[3878709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep 10 14:42:14 power sudo[3878709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:14 power sudo[3878709]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:14 power sudo[3878714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 test -e /home/nationa2/wordpress-backups
Sep 10 14:42:14 power sudo[3878714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:14 power sudo[3878714]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:14 power sudo[3878725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep 10 14:42:14 power sudo[3878725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:14 power sudo[3878725]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:14 power sudo[3878733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 10 14:42:14 power sudo[3878733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:14 power sudo[3878733]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:14 power sudo[3878744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep 10 14:42:14 power sudo[3878744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:14 power sudo[3878744]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:14 power sudo[3878751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho test -e /home/bianasho/wordpress-backups
Sep 10 14:42:14 power sudo[3878751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:14 power sudo[3878751]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:14 power sudo[3878763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep 10 14:42:14 power sudo[3878763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:15 power sudo[3878763]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:15 power sudo[3878786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk test -e /home/velmk/wordpress-backups
Sep 10 14:42:15 power sudo[3878786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:15 power sudo[3878786]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:15 power sudo[3878797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep 10 14:42:15 power sudo[3878797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:15 power sudo[3878797]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:15 power sudo[3878808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep 10 14:42:15 power sudo[3878808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:15 power sudo[3878808]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:15 power sudo[3878819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep 10 14:42:15 power sudo[3878819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:15 power sudo[3878819]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:15 power sudo[3878829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi test -e /home/bonitavi/wordpress-backups
Sep 10 14:42:15 power sudo[3878829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:15 power sudo[3878829]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:15 power sudo[3878842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep 10 14:42:15 power sudo[3878842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:15 power sudo[3878842]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:15 power sudo[3878850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom test -e /home/bovincom/wordpress-backups
Sep 10 14:42:15 power sudo[3878850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:15 power sudo[3878850]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:15 power sudo[3878862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep 10 14:42:15 power sudo[3878862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878862]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:16 power sudo[3878873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk test -e /home/butelmk/wordpress-backups
Sep 10 14:42:16 power sudo[3878873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878873]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:16 power sudo[3878885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep 10 14:42:16 power sudo[3878885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878885]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:16 power sudo[3878893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep 10 14:42:16 power sudo[3878893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878893]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:16 power sudo[3878907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 10 14:42:16 power sudo[3878907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878907]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:16 power sudo[3878918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 10 14:42:16 power sudo[3878918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878918]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:16 power sudo[3878929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep 10 14:42:16 power sudo[3878929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878929]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:16 power sudo[3878939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep 10 14:42:16 power sudo[3878939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878939]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:16 power sudo[3878950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep 10 14:42:16 power sudo[3878950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878950]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:16 power sudo[3878956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob test -e /home/cosmatob/wordpress-backups
Sep 10 14:42:16 power sudo[3878956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:16 power sudo[3878956]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3878967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep 10 14:42:17 power sudo[3878967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:17 power sudo[3878967]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3878981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep 10 14:42:17 power sudo[3878981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:17 power sudo[3878981]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3878987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca test -e /home/delcevca/wordpress-backups
Sep 10 14:42:17 power sudo[3878987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:17 power sudo[3878987]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3878998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep 10 14:42:17 power sudo[3878998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:17 power sudo[3878998]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3879006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 10 14:42:17 power sudo[3879006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:17 power sudo[3879006]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3879018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 10 14:42:17 power sudo[3879018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:17 power sudo[3879018]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3879029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 10 14:42:17 power sudo[3879029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:17 power sudo[3879029]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3879040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep 10 14:42:17 power sudo[3879040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:17 power sudo[3879040]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3879047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr test -e /home/detskagr/wordpress-backups
Sep 10 14:42:17 power sudo[3879047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:17 power sudo[3879047]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:17 power sudo[3879063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep 10 14:42:17 power sudo[3879063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:18 power sudo[3879063]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:18 power sudo[3879073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam test -e /home/eaptekam/wordpress-backups
Sep 10 14:42:18 power sudo[3879073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:18 power sudo[3879073]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:18 power sudo[3879084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep 10 14:42:18 power sudo[3879084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:18 power sudo[3879084]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:18 power sudo[3879093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne test -e /home/dimpalne/wordpress-backups
Sep 10 14:42:18 power sudo[3879093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:18 power sudo[3879093]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:18 power sudo[3879105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep 10 14:42:18 power sudo[3879105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:18 power sudo[3879105]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:18 power sudo[3879114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin test -e /home/dnevnoin/wordpress-backups
Sep 10 14:42:18 power sudo[3879114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:18 power sudo[3879114]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:18 power sudo[3879125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep 10 14:42:18 power sudo[3879125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:18 power sudo[3879125]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:18 power sudo[3879136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep 10 14:42:18 power sudo[3879136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:18 power sudo[3879136]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:18 power sudo[3879145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk test -e /home/drleomk/wordpress-backups
Sep 10 14:42:18 power sudo[3879145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:18 power sudo[3879145]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:18 power sudo[3879156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep 10 14:42:18 power sudo[3879156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:19 power sudo[3879156]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:19 power sudo[3879169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 10 14:42:19 power sudo[3879169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:19 power sudo[3879169]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:19 power sudo[3879180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep 10 14:42:19 power sudo[3879180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:19 power sudo[3879180]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:19 power sudo[3879190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol test -e /home/electrol/wordpress-backups
Sep 10 14:42:19 power sudo[3879190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:19 power sudo[3879190]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:19 power sudo[3879201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep 10 14:42:19 power sudo[3879201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:19 power sudo[3879201]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:19 power sudo[3879209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot test -e /home/elektrot/wordpress-backups
Sep 10 14:42:19 power sudo[3879209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:19 power sudo[3879209]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:19 power sudo[3879220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep 10 14:42:19 power sudo[3879220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:19 power sudo[3879220]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:19 power sudo[3879231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep 10 14:42:19 power sudo[3879231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:19 power sudo[3879231]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:19 power sudo[3879237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk test -e /home/enochmk/wordpress-backups
Sep 10 14:42:20 power sudo[3879237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:20 power sudo[3879237]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:20 power sudo[3879252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 10 14:42:20 power sudo[3879252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:20 power sudo[3879252]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:20 power sudo[3879265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep 10 14:42:20 power sudo[3879265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:20 power sudo[3879265]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:20 power sudo[3879275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm test -e /home/eurofarm/wordpress-backups
Sep 10 14:42:20 power sudo[3879275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:20 power sudo[3879275]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:20 power sudo[3879287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep 10 14:42:20 power sudo[3879287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:20 power sudo[3879287]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:20 power sudo[3879299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki test -e /home/euromaki/wordpress-backups
Sep 10 14:42:20 power sudo[3879299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:20 power sudo[3879299]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:20 power sudo[3879314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep 10 14:42:20 power sudo[3879314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:20 power sudo[3879314]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:20 power sudo[3879325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm test -e /home/evberasm/wordpress-backups
Sep 10 14:42:20 power sudo[3879325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:20 power sudo[3879325]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:20 power sudo[3879336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep 10 14:42:20 power sudo[3879336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:21 power sudo[3879336]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:21 power sudo[3879349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl test -e /home/evolvepl/wordpress-backups
Sep 10 14:42:21 power sudo[3879349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:21 power sudo[3879349]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:21 power sudo[3879365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 10 14:42:21 power sudo[3879365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:21 power sudo[3879365]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:21 power sudo[3879376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep 10 14:42:21 power sudo[3879376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:21 power sudo[3879376]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:21 power sudo[3879385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 10 14:42:21 power sudo[3879385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:21 power sudo[3879385]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:21 power sudo[3879396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep 10 14:42:21 power sudo[3879396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:21 power sudo[3879396]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:21 power sudo[3879403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep 10 14:42:21 power sudo[3879403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:21 power sudo[3879403]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:21 power sudo[3879414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep 10 14:42:21 power sudo[3879414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:21 power sudo[3879414]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:21 power sudo[3879420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore test -e /home/folklore/wordpress-backups
Sep 10 14:42:21 power sudo[3879420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:21 power sudo[3879420]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:21 power sudo[3879432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep 10 14:42:21 power sudo[3879432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:22 power sudo[3879432]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:22 power sudo[3879441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares test -e /home/forzares/wordpress-backups
Sep 10 14:42:22 power sudo[3879441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:22 power sudo[3879441]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:22 power sudo[3879454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep 10 14:42:22 power sudo[3879454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:22 power sudo[3879454]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:22 power sudo[3879467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus test -e /home/getaldus/wordpress-backups
Sep 10 14:42:22 power sudo[3879467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:22 power sudo[3879467]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:22 power sudo[3879478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep 10 14:42:22 power sudo[3879478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:22 power sudo[3879478]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:22 power sudo[3879490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise test -e /home/gocruise/wordpress-backups
Sep 10 14:42:22 power sudo[3879490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:22 power sudo[3879490]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:22 power sudo[3879503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep 10 14:42:22 power sudo[3879503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:22 power sudo[3879503]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:22 power sudo[3879508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 test -e /home/gogovan1/wordpress-backups
Sep 10 14:42:22 power sudo[3879508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:22 power sudo[3879508]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:22 power sudo[3879519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep 10 14:42:22 power sudo[3879519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879519]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom test -e /home/golakkom/wordpress-backups
Sep 10 14:42:23 power sudo[3879529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879529]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 10 14:42:23 power sudo[3879540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879540]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep 10 14:42:23 power sudo[3879551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879551]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl test -e /home/herbalpl/wordpress-backups
Sep 10 14:42:23 power sudo[3879557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879557]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 10 14:42:23 power sudo[3879568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879568]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 10 14:42:23 power sudo[3879579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879579]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep 10 14:42:23 power sudo[3879590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879590]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 10 14:42:23 power sudo[3879599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879599]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 10 14:42:23 power sudo[3879610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879610]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 10 14:42:23 power sudo[3879621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879621]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 10 14:42:23 power sudo[3879632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879632]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 10 14:42:23 power sudo[3879643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:23 power sudo[3879643]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:23 power sudo[3879654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep 10 14:42:23 power sudo[3879654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:24 power sudo[3879654]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:24 power sudo[3879666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk test -e /home/madzomk/wordpress-backups
Sep 10 14:42:24 power sudo[3879666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:24 power sudo[3879666]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:24 power sudo[3879677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep 10 14:42:24 power sudo[3879677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:24 power sudo[3879677]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:24 power sudo[3879682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj test -e /home/imdskopj/wordpress-backups
Sep 10 14:42:24 power sudo[3879682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:24 power sudo[3879682]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:24 power sudo[3879693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep 10 14:42:24 power sudo[3879693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:24 power sudo[3879693]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:24 power sudo[3879700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 test -e /home/infopor1/wordpress-backups
Sep 10 14:42:24 power sudo[3879700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:24 power sudo[3879700]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:24 power sudo[3879711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep 10 14:42:24 power sudo[3879711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:24 power sudo[3879711]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:24 power sudo[3879717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user inkigaic test -e /home/inkigaic/wordpress-backups
Sep 10 14:42:24 power sudo[3879717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:24 power sudo[3879717]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:24 power sudo[3879728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep 10 14:42:24 power sudo[3879728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:25 power sudo[3879728]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:25 power sudo[3879737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 test -e /home/intelek1/wordpress-backups
Sep 10 14:42:25 power sudo[3879737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:25 power sudo[3879737]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:25 power sudo[3879748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 10 14:42:25 power sudo[3879748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:25 power sudo[3879748]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:25 power sudo[3879759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep 10 14:42:25 power sudo[3879759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:25 power sudo[3879759]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:25 power sudo[3879765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin test -e /home/jpparkin/wordpress-backups
Sep 10 14:42:25 power sudo[3879765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:25 power sudo[3879765]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:25 power sudo[3879778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep 10 14:42:25 power sudo[3879778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:25 power sudo[3879778]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:25 power sudo[3879788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo test -e /home/karpospo/wordpress-backups
Sep 10 14:42:25 power sudo[3879788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:25 power sudo[3879788]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:25 power sudo[3879801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 10 14:42:25 power sudo[3879801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:25 power sudo[3879801]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:25 power sudo[3879812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 10 14:42:25 power sudo[3879812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:25 power sudo[3879812]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:25 power sudo[3879824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep 10 14:42:25 power sudo[3879824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:26 power sudo[3879824]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:26 power sudo[3879834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 test -e /home/kolened1/wordpress-backups
Sep 10 14:42:26 power sudo[3879834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:26 power sudo[3879834]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:26 power sudo[3879846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep 10 14:42:26 power sudo[3879846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:26 power sudo[3879846]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:26 power sudo[3879855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco test -e /home/kouzonco/wordpress-backups
Sep 10 14:42:26 power sudo[3879855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:26 power sudo[3879855]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:26 power sudo[3879869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep 10 14:42:26 power sudo[3879869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:26 power sudo[3879869]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:26 power sudo[3879878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst test -e /home/sprintst/wordpress-backups
Sep 10 14:42:26 power sudo[3879878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:26 power sudo[3879878]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:26 power sudo[3879890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep 10 14:42:26 power sudo[3879890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:26 power sudo[3879890]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:26 power sudo[3879897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon test -e /home/kujnamon/wordpress-backups
Sep 10 14:42:26 power sudo[3879897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:26 power sudo[3879897]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:26 power sudo[3879908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 10 14:42:26 power sudo[3879908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:26 power sudo[3879908]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:26 power sudo[3879919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep 10 14:42:26 power sudo[3879919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3879919]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3879930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone test -e /home/makdrone/wordpress-backups
Sep 10 14:42:27 power sudo[3879930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3879930]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3879943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep 10 14:42:27 power sudo[3879943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3879943]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3879954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk test -e /home/makoasmk/wordpress-backups
Sep 10 14:42:27 power sudo[3879954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3879954]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3879965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep 10 14:42:27 power sudo[3879965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3879965]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3879976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 10 14:42:27 power sudo[3879976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3879976]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3879989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep 10 14:42:27 power sudo[3879989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3879989]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3879994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar test -e /home/modernar/wordpress-backups
Sep 10 14:42:27 power sudo[3879994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3879994]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3880006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep 10 14:42:27 power sudo[3880006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3880006]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3880017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep 10 14:42:27 power sudo[3880017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:27 power sudo[3880017]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:27 power sudo[3880024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk test -e /home/mpbmk/wordpress-backups
Sep 10 14:42:27 power sudo[3880024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:28 power sudo[3880024]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:28 power sudo[3880035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep 10 14:42:28 power sudo[3880035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:28 power sudo[3880035]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:28 power sudo[3880043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk test -e /home/mspmk/wordpress-backups
Sep 10 14:42:28 power sudo[3880043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:28 power sudo[3880043]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:31 power sudo[3880089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep 10 14:42:31 power sudo[3880089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880089]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:32 power sudo[3880099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk test -e /home/mstmmk/wordpress-backups
Sep 10 14:42:32 power sudo[3880099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880099]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:32 power sudo[3880110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep 10 14:42:32 power sudo[3880110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880110]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:32 power sudo[3880120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm test -e /home/naksorgm/wordpress-backups
Sep 10 14:42:32 power sudo[3880120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880120]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:32 power sudo[3880132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep 10 14:42:32 power sudo[3880132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880132]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:32 power sudo[3880137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep 10 14:42:32 power sudo[3880137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880137]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:32 power sudo[3880148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep 10 14:42:32 power sudo[3880148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880148]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:32 power sudo[3880159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep 10 14:42:32 power sudo[3880159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880159]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:32 power sudo[3880167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag test -e /home/ismassag/wordpress-backups
Sep 10 14:42:32 power sudo[3880167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880167]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:32 power sudo[3880179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep 10 14:42:32 power sudo[3880179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:32 power sudo[3880179]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:33 power sudo[3880190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep 10 14:42:33 power sudo[3880190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:33 power sudo[3880190]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:33 power sudo[3880201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 test -e /home/nikolov1/wordpress-backups
Sep 10 14:42:33 power sudo[3880201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:33 power sudo[3880201]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:33 power sudo[3880215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep 10 14:42:33 power sudo[3880215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:33 power sudo[3880215]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:33 power sudo[3880237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits test -e /home/nolimits/wordpress-backups
Sep 10 14:42:33 power sudo[3880237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:33 power sudo[3880237]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:33 power sudo[3880252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep 10 14:42:33 power sudo[3880252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:33 power sudo[3880252]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:33 power sudo[3880280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh test -e /home/onlinesh/wordpress-backups
Sep 10 14:42:33 power sudo[3880280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:33 power sudo[3880280]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:33 power sudo[3880294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep 10 14:42:33 power sudo[3880294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:34 power sudo[3880294]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:34 power sudo[3880331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok test -e /home/palenzok/wordpress-backups
Sep 10 14:42:34 power sudo[3880331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:34 power sudo[3880331]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:34 power sudo[3880345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep 10 14:42:34 power sudo[3880345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:34 power sudo[3880345]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:34 power sudo[3880362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni test -e /home/pelagoni/wordpress-backups
Sep 10 14:42:34 power sudo[3880362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:34 power sudo[3880362]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:34 power sudo[3880374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep 10 14:42:34 power sudo[3880374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:34 power sudo[3880374]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:34 power sudo[3880380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk test -e /home/biplmk/wordpress-backups
Sep 10 14:42:34 power sudo[3880380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:34 power sudo[3880380]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:34 power sudo[3880393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep 10 14:42:34 power sudo[3880393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:34 power sudo[3880393]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:34 power sudo[3880398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi test -e /home/premiumi/wordpress-backups
Sep 10 14:42:34 power sudo[3880398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:34 power sudo[3880398]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:34 power sudo[3880409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep 10 14:42:34 power sudo[3880409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:34 power sudo[3880409]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:34 power sudo[3880420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep 10 14:42:34 power sudo[3880420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:35 power sudo[3880420]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:35 power sudo[3880429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat test -e /home/radekrat/wordpress-backups
Sep 10 14:42:35 power sudo[3880429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:35 power sudo[3880429]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:35 power sudo[3880443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep 10 14:42:35 power sudo[3880443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:35 power sudo[3880443]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:35 power sudo[3880451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm test -e /home/rasmorgm/wordpress-backups
Sep 10 14:42:35 power sudo[3880451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:35 power sudo[3880451]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:35 power sudo[3880462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep 10 14:42:35 power sudo[3880462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:35 power sudo[3880462]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:35 power sudo[3880469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk test -e /home/recorgmk/wordpress-backups
Sep 10 14:42:35 power sudo[3880469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:35 power sudo[3880469]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:35 power sudo[3880481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep 10 14:42:35 power sudo[3880481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:35 power sudo[3880481]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:35 power sudo[3880491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm test -e /home/stravelm/wordpress-backups
Sep 10 14:42:35 power sudo[3880491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:35 power sudo[3880491]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:35 power sudo[3880505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep 10 14:42:35 power sudo[3880505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880505]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:36 power sudo[3880518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome test -e /home/simbiome/wordpress-backups
Sep 10 14:42:36 power sudo[3880518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880518]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:36 power sudo[3880535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 10 14:42:36 power sudo[3880535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880535]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:36 power sudo[3880549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 10 14:42:36 power sudo[3880549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880549]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:36 power sudo[3880561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep 10 14:42:36 power sudo[3880561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880561]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:36 power sudo[3880574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep 10 14:42:36 power sudo[3880574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880574]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:36 power sudo[3880590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep 10 14:42:36 power sudo[3880590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880590]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:36 power sudo[3880624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti test -e /home/sssoluti/wordpress-backups
Sep 10 14:42:36 power sudo[3880624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880624]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:36 power sudo[3880638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep 10 14:42:36 power sudo[3880638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880638]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:36 power sudo[3880656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep 10 14:42:36 power sudo[3880656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:36 power sudo[3880656]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:37 power sudo[3880668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep 10 14:42:37 power sudo[3880668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:37 power sudo[3880668]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:37 power sudo[3880676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro test -e /home/tehnodro/wordpress-backups
Sep 10 14:42:37 power sudo[3880676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:37 power sudo[3880676]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:37 power sudo[3880688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep 10 14:42:37 power sudo[3880688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:37 power sudo[3880688]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:37 power sudo[3880699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep 10 14:42:37 power sudo[3880699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:37 power sudo[3880699]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:37 power sudo[3880710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn test -e /home/viewinn/wordpress-backups
Sep 10 14:42:37 power sudo[3880710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:37 power sudo[3880710]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:37 power sudo[3880721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep 10 14:42:37 power sudo[3880721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:37 power sudo[3880721]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:37 power sudo[3880729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp test -e /home/wikicamp/wordpress-backups
Sep 10 14:42:37 power sudo[3880729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:37 power sudo[3880729]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:37 power sudo[3880740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep 10 14:42:37 power sudo[3880740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880740]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:38 power sudo[3880756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt test -e /home/workandt/wordpress-backups
Sep 10 14:42:38 power sudo[3880756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880756]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:38 power sudo[3880767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 10 14:42:38 power sudo[3880767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880767]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:38 power sudo[3880779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep 10 14:42:38 power sudo[3880779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880779]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:38 power sudo[3880789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua test -e /home/youthgua/wordpress-backups
Sep 10 14:42:38 power sudo[3880789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880789]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:38 power sudo[3880801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep 10 14:42:38 power sudo[3880801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880801]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:38 power sudo[3880809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk test -e /home/zampmk/wordpress-backups
Sep 10 14:42:38 power sudo[3880809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880809]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:38 power sudo[3880822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep 10 14:42:38 power sudo[3880822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880822]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:38 power sudo[3880834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord test -e /home/ivanjord/wordpress-backups
Sep 10 14:42:38 power sudo[3880834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880834]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:38 power sudo[3880845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep 10 14:42:38 power sudo[3880845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:38 power sudo[3880845]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:39 power sudo[3880858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep 10 14:42:39 power sudo[3880858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:39 power sudo[3880858]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:39 power sudo[3880872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja test -e /home/janiboja/wordpress-backups
Sep 10 14:42:39 power sudo[3880872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:39 power sudo[3880872]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:39 power sudo[3880885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep 10 14:42:39 power sudo[3880885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:39 power sudo[3880885]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:39 power sudo[3880897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk test -e /home/jaramk/wordpress-backups
Sep 10 14:42:39 power sudo[3880897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:39 power sudo[3880897]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:39 power sudo[3880909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep 10 14:42:39 power sudo[3880909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:39 power sudo[3880909]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:39 power sudo[3880919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep 10 14:42:39 power sudo[3880919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:39 power sudo[3880919]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:39 power sudo[3880931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep 10 14:42:39 power sudo[3880931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3880931]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3880950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep 10 14:42:40 power sudo[3880950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3880950]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3880970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep 10 14:42:40 power sudo[3880970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3880970]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3880982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep 10 14:42:40 power sudo[3880982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3880982]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3880992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag test -e /home/mediatag/wordpress-backups
Sep 10 14:42:40 power sudo[3880992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3880992]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3881004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep 10 14:42:40 power sudo[3881004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3881004]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3881016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep 10 14:42:40 power sudo[3881016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3881016]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3881034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog test -e /home/nefrolog/wordpress-backups
Sep 10 14:42:40 power sudo[3881034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3881034]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3881045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep 10 14:42:40 power sudo[3881045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3881045]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3881052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep 10 14:42:40 power sudo[3881052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3881052]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3881064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep 10 14:42:40 power sudo[3881064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:40 power sudo[3881064]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:40 power sudo[3881075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep 10 14:42:40 power sudo[3881075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:41 power sudo[3881075]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:41 power sudo[3881088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep 10 14:42:41 power sudo[3881088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:41 power sudo[3881088]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:41 power sudo[3881100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep 10 14:42:41 power sudo[3881100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:41 power sudo[3881100]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:41 power sudo[3881106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom test -e /home/pravekom/wordpress-backups
Sep 10 14:42:41 power sudo[3881106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:41 power sudo[3881106]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:41 power sudo[3881118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep 10 14:42:41 power sudo[3881118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:41 power sudo[3881118]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:41 power sudo[3881127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim test -e /home/proverim/wordpress-backups
Sep 10 14:42:41 power sudo[3881127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:41 power sudo[3881127]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:41 power sudo[3881142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep 10 14:42:41 power sudo[3881142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:41 power sudo[3881142]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:41 power sudo[3881156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz test -e /home/rastiraz/wordpress-backups
Sep 10 14:42:41 power sudo[3881156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:41 power sudo[3881156]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:42 power sudo[3881169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep 10 14:42:42 power sudo[3881169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:42 power sudo[3881169]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:42 power sudo[3881186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva test -e /home/conserva/wordpress-backups
Sep 10 14:42:42 power sudo[3881186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:42 power sudo[3881186]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:42 power sudo[3881197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep 10 14:42:42 power sudo[3881197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:42 power sudo[3881197]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:42 power sudo[3881204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne test -e /home/maleshne/wordpress-backups
Sep 10 14:42:42 power sudo[3881204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:42 power sudo[3881204]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:42 power sudo[3881215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep 10 14:42:42 power sudo[3881215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:42 power sudo[3881215]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:42 power sudo[3881223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped test -e /home/samasped/wordpress-backups
Sep 10 14:42:42 power sudo[3881223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:42 power sudo[3881223]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:42 power sudo[3881235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep 10 14:42:42 power sudo[3881235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:43 power sudo[3881235]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:43 power sudo[3881244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro test -e /home/seloviro/wordpress-backups
Sep 10 14:42:43 power sudo[3881244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:43 power sudo[3881244]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:43 power sudo[3881259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep 10 14:42:43 power sudo[3881259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:43 power sudo[3881259]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:43 power sudo[3881267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart test -e /home/skyapart/wordpress-backups
Sep 10 14:42:43 power sudo[3881267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:43 power sudo[3881267]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:43 power sudo[3881279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep 10 14:42:43 power sudo[3881279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:43 power sudo[3881279]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:43 power sudo[3881285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz test -e /home/socioloz/wordpress-backups
Sep 10 14:42:43 power sudo[3881285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:43 power sudo[3881285]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:43 power sudo[3881297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep 10 14:42:43 power sudo[3881297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:43 power sudo[3881297]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:43 power sudo[3881311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi test -e /home/stojnevi/wordpress-backups
Sep 10 14:42:43 power sudo[3881311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:43 power sudo[3881311]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:43 power sudo[3881323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep 10 14:42:43 power sudo[3881323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:43 power sudo[3881323]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:43 power sudo[3881334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep 10 14:42:43 power sudo[3881334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:44 power sudo[3881334]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:44 power sudo[3881349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop test -e /home/trudovop/wordpress-backups
Sep 10 14:42:44 power sudo[3881349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:44 power sudo[3881349]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:44 power sudo[3881361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep 10 14:42:44 power sudo[3881361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:44 power sudo[3881361]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:44 power sudo[3881383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp test -e /home/urbanexp/wordpress-backups
Sep 10 14:42:44 power sudo[3881383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:44 power sudo[3881383]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:44 power sudo[3881395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep 10 14:42:44 power sudo[3881395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:44 power sudo[3881395]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:44 power sudo[3881408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc test -e /home/vfxnestc/wordpress-backups
Sep 10 14:42:44 power sudo[3881408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:44 power sudo[3881408]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:44 power sudo[3881419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep 10 14:42:44 power sudo[3881419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:44 power sudo[3881419]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:44 power sudo[3881427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/wordpress-backups
Sep 10 14:42:45 power sudo[3881427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:45 power sudo[3881427]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:45 power sudo[3881442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep 10 14:42:45 power sudo[3881442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:45 power sudo[3881442]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:45 power sudo[3881453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace test -e /home/glammace/wordpress-backups
Sep 10 14:42:45 power sudo[3881453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:45 power sudo[3881453]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:45 power sudo[3881465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep 10 14:42:45 power sudo[3881465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:45 power sudo[3881465]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:45 power sudo[3881477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep 10 14:42:45 power sudo[3881477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:45 power sudo[3881477]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:45 power sudo[3881493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc test -e /home/workbenc/wordpress-backups
Sep 10 14:42:45 power sudo[3881493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:45 power sudo[3881493]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:45 power sudo[3881509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 10 14:42:45 power sudo[3881509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:45 power sudo[3881509]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:46 power sudo[3882859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json'
Sep 10 14:42:46 power sudo[3882859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:46 power sudo[3882859]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:46 power sudo[3882864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=5.9.96.240 --output=json'
Sep 10 14:42:46 power sudo[3882864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:46 power sudo[3882864]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:49 power sudo[3882915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 14:42:49 power sudo[3882915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:49 power sudo[3882915]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:49 power sudo[3882920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JA6JkzF4WkCfC2IN.~
Sep 10 14:42:49 power sudo[3882920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:49 power sudo[3882920]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:49 power sudo[3882924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JA6JkzF4WkCfC2IN.~\''
Sep 10 14:42:49 power sudo[3882924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:49 power sudo[3882924]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:49 power sudo[3882929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JA6JkzF4WkCfC2IN.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 14:42:49 power sudo[3882929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:49 power sudo[3882929]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:49 power sudo[3882933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 14:42:49 power sudo[3882933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:49 power sudo[3882933]: pam_unix(sudo:session): session closed for user root
Sep 10 14:42:53 power sudo[3883922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 14:42:53 power sudo[3883922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 14:42:53 power sudo[3883922]: pam_unix(sudo:session): session closed for user root
Sep 10 14:45:01 power systemd[3886852]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:45:01 power systemd[3886853]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:50:01 power systemd[3892812]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:50:01 power systemd[3892813]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 14:55:02 power systemd[3898258]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 14:55:02 power systemd[3898259]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:00:01 power systemd[3903687]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:00:01 power systemd[3903688]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:00:01 power systemd[3903689]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 15:00:01 power systemd[3903691]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 15:00:01 power systemd[3903693]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 15:04:01 power systemd[3909740]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:05:01 power systemd[3911121]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:05:01 power systemd[3911122]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:06:01 power systemd[3912373]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 15:07:01 power systemd[3913559]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 15:09:01 power systemd[3916012]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:10:01 power systemd[3917020]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:10:01 power systemd[3917021]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:12:02 power systemd[3928529]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 15:15:01 power systemd[3932211]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:15:01 power systemd[3932212]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:15:46 power sshd[3933413]: error: kex_exchange_identification: banner line contains invalid characters
Sep 10 15:15:46 power sshd[3933413]: banner exchange: Connection from 91.196.152.102 port 44305: invalid format
Sep 10 15:15:51 power sshd[3933454]: error: kex_exchange_identification: Connection closed by remote host
Sep 10 15:15:51 power sshd[3933454]: Connection closed by 91.196.152.15 port 37461
Sep 10 15:20:01 power systemd[3938586]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:20:01 power systemd[3938587]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:23:51 power sshd[3943151]: Connection closed by 91.196.152.111 port 53113 [preauth]
Sep 10 15:25:01 power systemd[3944461]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:25:01 power systemd[3944462]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:30:01 power systemd[3950112]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:30:01 power systemd[3950111]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:30:01 power systemd[3950114]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 15:30:01 power systemd[3950117]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 15:30:01 power systemd[3950115]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 15:35:01 power systemd[3956882]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:35:01 power systemd[3956883]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:35:17 power sshd[3956960]: Connection closed by 206.168.34.212 port 49746 [preauth]
Sep 10 15:36:01 power systemd[3958264]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 15:37:01 power systemd[3959492]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 15:39:01 power systemd[3961858]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:40:01 power systemd[3962996]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:40:01 power systemd[3962994]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:42:01 power systemd[3965182]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 15:42:07 power sudo[3965310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 15:42:07 power systemd[3965315]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:42:07 power sudo[3965310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:07 power sudo[3965310]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:07 power sudo[3965335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 15:42:07 power sudo[3965335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:07 power sudo[3965335]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:07 power sudo[3965339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 15:42:07 power sudo[3965339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:07 power sudo[3965339]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:07 power sudo[3965343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=ifGjLs2gRK'
Sep 10 15:42:07 power sudo[3965343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:07 power sudo[3965343]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:07 power sudo[3965348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 15:42:07 power sudo[3965348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:07 power sudo[3965348]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:07 power sudo[3965352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 15:42:07 power sudo[3965352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:07 power sudo[3965352]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:07 power sudo[3965356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 15:42:07 power sudo[3965356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:07 power sudo[3965356]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:07 power sudo[3965360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 15:42:07 power sudo[3965360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:08 power sudo[3965360]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:08 power sudo[3965367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 15:42:08 power sudo[3965367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:08 power sudo[3965367]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:08 power sudo[3965372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 15:42:08 power sudo[3965372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:08 power sudo[3965372]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:08 power sudo[3965376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 15:42:08 power sudo[3965376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:08 power sudo[3965376]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:08 power sudo[3965380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 15:42:08 power sudo[3965380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:08 power sudo[3965380]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:08 power sudo[3965384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 15:42:08 power sudo[3965384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:08 power sudo[3965384]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:08 power sudo[3965388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 15:42:08 power sudo[3965388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:08 power sudo[3965388]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:10 power sudo[3965447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 15:42:10 power sudo[3965447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:10 power sudo[3965447]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:10 power sudo[3965452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 15:42:10 power sudo[3965452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:10 power sudo[3965452]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:10 power sudo[3965458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=infobadi user-2=mspmk user-3=detskagr user-4=spdcompu user-5=urbanexp user-6=wikicamp user-7=polyeste user-8=vfxnestc user-9=groskome user-10=ivanjord user-11=sedcmk user-12=maleshne user-13=datelcom user-14=bizporta user-15=mpbmk user-16=agrosind user-17=kujnamon user-18=univerz1 user-19=gogovan1 user-20=velmk user-21=datalink user-22=rasmorgm user-23=skyapart user-24=bianasho user-25=makoasmk user-26=mfashion user-27=dhamachi user-28=goartsym user-29=volkanco user-30=workandt user-31=barececo user-32=delcevca user-33=getaldus user-34=simbiome user-35=butelmk user-36=daris user-37=premiums user-38=screenme user-39=arturaco user-40=nasaidni user-41=karpospo user-42=ideaplus user-43=drleomk user-44=inotekso user-45=jpparkin user-46=dalmacom user-47=cetplatf user-48=premiuma user-49=kouzonco user-50=klimimk
Sep 10 15:42:10 power sudo[3965458]: wp-toolkit : (command continued) user-51=stokovna user-52=sparkupm user-53=custome1 user-54=busymard user-55=zampmk user-56=zvskopje user-57=palenzok user-58=cabinetm user-59=vezilkac user-60=itradeco user-61=janiboja user-62=bovincom user-63=stojano1 user-64=gocruise user-65=mstmmk user-66=goodnews user-67=proverim user-68=dadarmk user-69=tealmk user-70=rastiraz user-71=holiyayt user-72=robustco user-73=stravelm user-74=wondersp user-75=pecakome user-76=dnevnoin user-77=tradeyou user-78=gjorgeiv user-79=herbalpl user-80=enochmk user-81=sprintst user-82=dikimk12 user-83=berbermk user-84=edomcomm user-85=nolimits user-86=kolened1 user-87=nlpmkorg user-88=centarba user-89=seloviro user-90=evolvepl user-91=pelagoni user-92=avtogumi user-93=socioloz user-94=ekostoc1 user-95=oncolog1 user-96=levantmk user-97=nefrolog user-98=caramk user-99=hidrommk user-100=frizered user-101=anitermc user-102=youthgua user-103=hotammk user-104=cajsproc
Sep 10 15:42:10 power sudo[3965458]: wp-toolkit : (command continued) user-105=trudovop user-106=viewinn user-107=vmro user-108=enaspotc user-109=bauerbg user-110=uhostmk5 user-111=oouslave user-112=raremk user-113=stojnevi user-114=jpkomuna user-115=izzomk user-116=makdrone user-117=tehnodro user-118=fxxcom user-119=peshkai1 user-120=dimpalne user-121=eaptekam user-122=gradbai1 user-123=aptekafa user-124=madzomk user-125=evacommk user-126=bauerin2 user-127=folklore user-128=evberasm user-129=bonitavi user-130=conserva user-131=cupidpro user-132=vegemk1 user-133=euronic3 user-134=viplastc user-135=wineberr user-136=mbmehani user-137=ismassag user-138=workbenc user-139=electrol user-140=naksorgm user-141=eliksirz user-142=trigemat user-143=golakkom user-144=solarinv user-145=eurofarm user-146=solointe user-147=jaramk user-148=taktcomm user-149=recorgmk user-150=cleanerm user-151=animatem user-152=progress user-153=sssoluti user-154=atspedco user-155=bbbustou user-156=kaoilmk
Sep 10 15:42:10 power sudo[3965458]: wp-toolkit : (command continued) user-157=biplmk user-158=pelagini user-159=pravekom user-160=vtranseu user-161=infopor1 user-162=albuname user-163=glammace user-164=imdskopj user-165=nutrivim user-166=chemhemc user-167=samasped user-168=elektrot user-169=zapovim1 user-170=euromaki user-171=cosmatob user-172=matratze user-173=euronic2 user-174=kardiome user-175=apgrupmk user-176=bogdanos user-177=carrent1 user-178=mediasol user-179=hausmark user-180=nikolov1 user-181=forzares user-182=nikimare user-183=aptekazd user-184=lblawcom user-185=nucktra1 user-186=mediatag user-187=intelek1 user-188=versusmk user-189=fiziosmk user-190=ambitiou user-191=starluxm user-192=radekrat user-193=fffhpcwr user-194=tcieuroc user-195=mapaspla user-196=solemor1 user-197=nationa2 user-198=onlinesh user-199=supremel user-200=v5srybi9dcdx user-201=aquatech user-202=gorsajmk user-203=zdmgpsor user-204=inkigaic user-205=modernar user-206=tehnologija user-207=taneccom
Sep 10 15:42:10 power sudo[3965458]: wp-toolkit : (command continued) user-208=vacuacti user-209=premiumi user-210=innofabl user-211=fnjorgmk user-212=darkogor user-213=dslmk user-214=prizmapl user-215=bozinovm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 15:42:10 power sudo[3965458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:11 power sudo[3965458]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:11 power sudo[3965472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 15:42:11 power sudo[3965472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:11 power sudo[3965472]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:11 power sudo[3965476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cpR5tiDo9fiGSrYH.~
Sep 10 15:42:11 power sudo[3965476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:11 power sudo[3965476]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:11 power sudo[3965480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cpR5tiDo9fiGSrYH.~\''
Sep 10 15:42:11 power sudo[3965480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:11 power sudo[3965480]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:11 power sudo[3965485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cpR5tiDo9fiGSrYH.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 15:42:11 power sudo[3965485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:11 power sudo[3965485]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:11 power sudo[3965489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 15:42:11 power sudo[3965489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:11 power sudo[3965489]: pam_unix(sudo:session): session closed for user root
Sep 10 15:42:16 power sudo[3966485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 15:42:16 power sudo[3966485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 15:42:16 power sudo[3966485]: pam_unix(sudo:session): session closed for user root
Sep 10 15:45:01 power systemd[3969692]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:45:01 power systemd[3969693]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:50:01 power systemd[3976506]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:50:01 power systemd[3976508]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 15:55:01 power systemd[3981954]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 15:55:01 power systemd[3981956]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:00:01 power systemd[3987813]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:00:01 power systemd[3987819]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:00:01 power systemd[3987820]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 16:00:01 power systemd[3987822]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 16:00:01 power systemd[3987824]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 16:04:01 power systemd[3993623]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:05:01 power systemd[3994607]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:05:01 power systemd[3994608]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:06:01 power systemd[3995625]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 16:07:01 power systemd[3996587]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 16:09:01 power systemd[3998418]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:10:01 power systemd[3999289]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:10:01 power systemd[3999290]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:12:01 power systemd[4001046]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 16:15:01 power systemd[4003892]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:15:01 power systemd[4003894]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:20:01 power systemd[4009135]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:20:01 power systemd[4009136]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:25:01 power systemd[4014046]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:25:01 power systemd[4014048]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:30:01 power systemd[4018556]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:30:01 power systemd[4018554]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:30:01 power systemd[4018559]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 16:30:01 power systemd[4018558]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 16:30:01 power systemd[4018561]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 16:35:01 power systemd[4023986]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:35:01 power systemd[4023987]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:36:01 power systemd[4024955]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 16:37:01 power systemd[4025862]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 16:39:01 power systemd[4027989]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:40:01 power systemd[4028978]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:40:01 power systemd[4028979]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:42:01 power systemd[4031463]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 16:42:07 power sudo[4031578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 16:42:07 power systemd[4031583]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:42:07 power sudo[4031578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:07 power sudo[4031578]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:07 power sudo[4031598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 16:42:07 power sudo[4031598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:07 power sudo[4031598]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:07 power sudo[4031602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 16:42:07 power sudo[4031602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:07 power sudo[4031602]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:07 power sudo[4031606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=0M1rlh0uU2'
Sep 10 16:42:07 power sudo[4031606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:07 power sudo[4031606]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:07 power sudo[4031613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 16:42:07 power sudo[4031613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:07 power sudo[4031613]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:07 power sudo[4031617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 16:42:07 power sudo[4031617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:07 power sudo[4031617]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:07 power sudo[4031622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 16:42:07 power sudo[4031622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:07 power sudo[4031622]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:07 power sudo[4031627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:42:07 power sudo[4031627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:08 power sudo[4031627]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:08 power sudo[4031635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 16:42:08 power sudo[4031635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:08 power sudo[4031635]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:08 power sudo[4031640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 16:42:08 power sudo[4031640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:08 power sudo[4031640]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:08 power sudo[4031644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 16:42:08 power sudo[4031644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:08 power sudo[4031644]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:08 power sudo[4031648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 16:42:08 power sudo[4031648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:08 power sudo[4031648]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:08 power sudo[4031652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 16:42:08 power sudo[4031652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:08 power sudo[4031652]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:08 power sudo[4031656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 16:42:08 power sudo[4031656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:08 power sudo[4031656]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:10 power sudo[4031727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:42:10 power sudo[4031727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:10 power sudo[4031727]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:10 power sudo[4031735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:42:10 power sudo[4031735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:10 power sudo[4031735]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:10 power sudo[4031744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=rastiraz user-2=holiyayt user-3=robustco user-4=stravelm user-5=wondersp user-6=pecakome user-7=dnevnoin user-8=gjorgeiv user-9=tradeyou user-10=gocruise user-11=mstmmk user-12=goodnews user-13=proverim user-14=dadarmk user-15=tealmk user-16=nolimits user-17=kolened1 user-18=nlpmkorg user-19=centarba user-20=seloviro user-21=herbalpl user-22=enochmk user-23=sprintst user-24=dikimk12 user-25=berbermk user-26=edomcomm user-27=levantmk user-28=ekostoc1 user-29=oncolog1 user-30=nefrolog user-31=caramk user-32=hidrommk user-33=frizered user-34=evolvepl user-35=pelagoni user-36=socioloz user-37=avtogumi user-38=viewinn user-39=trudovop user-40=vmro user-41=enaspotc user-42=bauerbg user-43=uhostmk5 user-44=oouslave user-45=raremk user-46=stojnevi user-47=anitermc user-48=youthgua user-49=hotammk user-50=cajsproc
Sep 10 16:42:10 power sudo[4031744]: wp-toolkit : (command continued) user-51=polyeste user-52=vfxnestc user-53=ivanjord user-54=groskome user-55=sedcmk user-56=maleshne user-57=datelcom user-58=bizporta user-59=mspmk user-60=infobadi user-61=detskagr user-62=spdcompu user-63=urbanexp user-64=wikicamp user-65=rasmorgm user-66=skyapart user-67=bianasho user-68=makoasmk user-69=mfashion user-70=dhamachi user-71=volkanco user-72=goartsym user-73=workandt user-74=barececo user-75=simbiome user-76=delcevca user-77=getaldus user-78=mpbmk user-79=agrosind user-80=kujnamon user-81=univerz1 user-82=gogovan1 user-83=velmk user-84=datalink user-85=dalmacom user-86=cetplatf user-87=premiuma user-88=kouzonco user-89=butelmk user-90=daris user-91=premiums user-92=arturaco user-93=screenme user-94=nasaidni user-95=karpospo user-96=ideaplus user-97=drleomk user-98=inotekso user-99=jpparkin user-100=cabinetm user-101=vezilkac user-102=itradeco user-103=janiboja user-104=bovincom user-105=stojano1
Sep 10 16:42:10 power sudo[4031744]: wp-toolkit : (command continued) user-106=klimimk user-107=stokovna user-108=sparkupm user-109=custome1 user-110=busymard user-111=zampmk user-112=zvskopje user-113=palenzok user-114=nutrivim user-115=chemhemc user-116=samasped user-117=elektrot user-118=zapovim1 user-119=cosmatob user-120=euromaki user-121=pravekom user-122=vtranseu user-123=infopor1 user-124=albuname user-125=glammace user-126=imdskopj user-127=hausmark user-128=nikolov1 user-129=forzares user-130=nikimare user-131=aptekazd user-132=lblawcom user-133=nucktra1 user-134=mediatag user-135=intelek1 user-136=matratze user-137=euronic2 user-138=kardiome user-139=apgrupmk user-140=bogdanos user-141=carrent1 user-142=mediasol user-143=tcieuroc user-144=mapaspla user-145=solemor1 user-146=nationa2 user-147=onlinesh user-148=versusmk user-149=fiziosmk user-150=ambitiou user-151=starluxm user-152=radekrat user-153=fffhpcwr user-154=inkigaic user-155=modernar user-156=tehnologija
Sep 10 16:42:10 power sudo[4031744]: wp-toolkit : (command continued) user-157=taneccom user-158=vacuacti user-159=innofabl user-160=premiumi user-161=darkogor user-162=fnjorgmk user-163=prizmapl user-164=dslmk user-165=bozinovm user-166=supremel user-167=v5srybi9dcdx user-168=aquatech user-169=gorsajmk user-170=zdmgpsor user-171=fxxcom user-172=peshkai1 user-173=dimpalne user-174=eaptekam user-175=gradbai1 user-176=madzomk user-177=aptekafa user-178=evacommk user-179=jpkomuna user-180=izzomk user-181=makdrone user-182=tehnodro user-183=evberasm user-184=bonitavi user-185=conserva user-186=cupidpro user-187=vegemk1 user-188=euronic3 user-189=bauerin2 user-190=folklore user-191=electrol user-192=eliksirz user-193=naksorgm user-194=trigemat user-195=golakkom user-196=solarinv user-197=eurofarm user-198=viplastc user-199=wineberr user-200=mbmehani user-201=ismassag user-202=workbenc user-203=bbbustou user-204=biplmk user-205=kaoilmk user-206=pelagini user-207=solointe user-208=jaramk
Sep 10 16:42:10 power sudo[4031744]: wp-toolkit : (command continued) user-209=taktcomm user-210=recorgmk user-211=cleanerm user-212=animatem user-213=progress user-214=atspedco user-215=sssoluti feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:42:10 power sudo[4031744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:10 power sudo[4031744]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:11 power sudo[4031752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 16:42:11 power sudo[4031752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:11 power sudo[4031752]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:11 power sudo[4031757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ThNfNjJhE8zWu4Jv.~
Sep 10 16:42:11 power sudo[4031757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:11 power sudo[4031757]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:11 power sudo[4031761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ThNfNjJhE8zWu4Jv.~\''
Sep 10 16:42:11 power sudo[4031761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:11 power sudo[4031761]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:11 power sudo[4031766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ThNfNjJhE8zWu4Jv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 16:42:11 power sudo[4031766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:11 power sudo[4031766]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:11 power sudo[4031770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 16:42:11 power sudo[4031770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:11 power sudo[4031770]: pam_unix(sudo:session): session closed for user root
Sep 10 16:42:15 power sudo[4032719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 16:42:15 power sudo[4032719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:42:15 power sudo[4032719]: pam_unix(sudo:session): session closed for user root
Sep 10 16:45:01 power systemd[4035389]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:45:01 power systemd[4035390]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:50:01 power systemd[4040497]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:50:01 power systemd[4040498]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:55:02 power systemd[4045056]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:55:02 power systemd[4045057]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 16:57:05 power sudo[4046954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:05 power systemd[4046961]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:57:05 power sudo[4046954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:05 power sudo[4046954]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:05 power sudo[4046978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:05 power sudo[4046978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:05 power sudo[4046978]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:05 power sudo[4046990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:05 power sudo[4046990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:05 power sudo[4046990]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:05 power sudo[4046995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:57:05 power sudo[4046995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:05 power sudo[4046995]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:05 power sudo[4047001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=holiyayt user-2=rastiraz user-3=pecakome user-4=robustco user-5=stravelm user-6=wondersp user-7=dnevnoin user-8=tradeyou user-9=gjorgeiv user-10=gocruise user-11=goodnews user-12=mstmmk user-13=dadarmk user-14=proverim user-15=tealmk user-16=nolimits user-17=kolened1 user-18=centarba user-19=nlpmkorg user-20=seloviro user-21=dikimk12 user-22=herbalpl user-23=enochmk user-24=sprintst user-25=edomcomm user-26=berbermk user-27=levantmk user-28=ekostoc1 user-29=oncolog1 user-30=nefrolog user-31=caramk user-32=hidrommk user-33=frizered user-34=evolvepl user-35=pelagoni user-36=socioloz user-37=avtogumi user-38=enaspotc user-39=viewinn user-40=trudovop user-41=vmro user-42=oouslave user-43=raremk user-44=bauerbg user-45=uhostmk5 user-46=stojnevi user-47=anitermc user-48=youthgua user-49=cajsproc user-50=hotammk
Sep 10 16:57:05 power sudo[4047001]: wp-toolkit : (command continued) user-51=polyeste user-52=vfxnestc user-53=sedcmk user-54=groskome user-55=ivanjord user-56=maleshne user-57=datelcom user-58=bizporta user-59=infobadi user-60=mspmk user-61=spdcompu user-62=detskagr user-63=wikicamp user-64=urbanexp user-65=rasmorgm user-66=skyapart user-67=bianasho user-68=makoasmk user-69=dhamachi user-70=goartsym user-71=volkanco user-72=mfashion user-73=barececo user-74=getaldus user-75=delcevca user-76=simbiome user-77=workandt user-78=mpbmk user-79=agrosind user-80=univerz1 user-81=kujnamon user-82=velmk user-83=gogovan1 user-84=datalink user-85=cetplatf user-86=dalmacom user-87=kouzonco user-88=premiuma user-89=butelmk user-90=daris user-91=premiums user-92=karpospo user-93=nasaidni user-94=ideaplus user-95=arturaco user-96=screenme user-97=inotekso user-98=jpparkin user-99=drleomk user-100=vezilkac user-101=cabinetm user-102=janiboja user-103=itradeco user-104=bovincom user-105=stojano1
Sep 10 16:57:05 power sudo[4047001]: wp-toolkit : (command continued) user-106=klimimk user-107=stokovna user-108=sparkupm user-109=custome1 user-110=palenzok user-111=zvskopje user-112=zampmk user-113=busymard user-114=nutrivim user-115=samasped user-116=chemhemc user-117=zapovim1 user-118=elektrot user-119=cosmatob user-120=euromaki user-121=vtranseu user-122=pravekom user-123=infopor1 user-124=albuname user-125=glammace user-126=imdskopj user-127=hausmark user-128=nikolov1 user-129=nikimare user-130=aptekazd user-131=forzares user-132=nucktra1 user-133=lblawcom user-134=mediatag user-135=intelek1 user-136=matratze user-137=euronic2 user-138=kardiome user-139=bogdanos user-140=carrent1 user-141=mediasol user-142=apgrupmk user-143=tcieuroc user-144=solemor1 user-145=mapaspla user-146=onlinesh user-147=nationa2 user-148=versusmk user-149=ambitiou user-150=fiziosmk user-151=starluxm user-152=radekrat user-153=fffhpcwr user-154=inkigaic user-155=modernar user-156=taneccom
Sep 10 16:57:05 power sudo[4047001]: wp-toolkit : (command continued) user-157=tehnologija user-158=prizmapl user-159=darkogor user-160=fnjorgmk user-161=dslmk user-162=bozinovm user-163=vacuacti user-164=innofabl user-165=premiumi user-166=v5srybi9dcdx user-167=supremel user-168=aquatech user-169=gorsajmk user-170=zdmgpsor user-171=fxxcom user-172=peshkai1 user-173=eaptekam user-174=dimpalne user-175=gradbai1 user-176=aptekafa user-177=madzomk user-178=evacommk user-179=izzomk user-180=jpkomuna user-181=makdrone user-182=tehnodro user-183=evberasm user-184=bonitavi user-185=conserva user-186=euronic3 user-187=cupidpro user-188=vegemk1 user-189=bauerin2 user-190=folklore user-191=eliksirz user-192=naksorgm user-193=trigemat user-194=electrol user-195=golakkom user-196=solarinv user-197=eurofarm user-198=wineberr user-199=viplastc user-200=mbmehani user-201=workbenc user-202=ismassag user-203=biplmk user-204=kaoilmk user-205=bbbustou user-206=pelagini user-207=jaramk
Sep 10 16:57:05 power sudo[4047001]: wp-toolkit : (command continued) user-208=solointe user-209=taktcomm user-210=recorgmk user-211=progress user-212=cleanerm user-213=animatem user-214=sssoluti user-215=atspedco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:57:05 power sudo[4047001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:06 power sudo[4047001]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:06 power sudo[4047028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:06 power sudo[4047028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:06 power sudo[4047028]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:06 power sudo[4047034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:06 power sudo[4047034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:06 power sudo[4047034]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:15 power sudo[4047207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:15 power sudo[4047207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:15 power sudo[4047207]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:15 power sudo[4047212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:15 power sudo[4047212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:16 power sudo[4047212]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:16 power sudo[4047220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:16 power sudo[4047220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:16 power sudo[4047220]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:16 power sudo[4047225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:57:16 power sudo[4047225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:16 power sudo[4047225]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:16 power sudo[4047234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=sssoluti user-2=atspedco user-3=progress user-4=cleanerm user-5=animatem user-6=recorgmk user-7=taktcomm user-8=jaramk user-9=solointe user-10=pelagini user-11=kaoilmk user-12=biplmk user-13=bbbustou user-14=workbenc user-15=ismassag user-16=mbmehani user-17=wineberr user-18=viplastc user-19=eurofarm user-20=solarinv user-21=golakkom user-22=naksorgm user-23=eliksirz user-24=trigemat user-25=electrol user-26=folklore user-27=bauerin2 user-28=euronic3 user-29=cupidpro user-30=vegemk1 user-31=conserva user-32=evberasm user-33=bonitavi user-34=tehnodro user-35=makdrone user-36=izzomk user-37=jpkomuna user-38=madzomk user-39=aptekafa user-40=evacommk user-41=gradbai1 user-42=eaptekam user-43=dimpalne user-44=fxxcom user-45=peshkai1 user-46=zdmgpsor user-47=aquatech user-48=gorsajmk user-49=v5srybi9dcdx
Sep 10 16:57:16 power sudo[4047234]: wp-toolkit : (command continued) user-50=supremel user-51=darkogor user-52=dslmk user-53=fnjorgmk user-54=prizmapl user-55=bozinovm user-56=vacuacti user-57=innofabl user-58=premiumi user-59=taneccom user-60=tehnologija user-61=modernar user-62=inkigaic user-63=fffhpcwr user-64=starluxm user-65=radekrat user-66=ambitiou user-67=fiziosmk user-68=versusmk user-69=onlinesh user-70=nationa2 user-71=solemor1 user-72=mapaspla user-73=tcieuroc user-74=bogdanos user-75=carrent1 user-76=mediasol user-77=apgrupmk user-78=kardiome user-79=matratze user-80=euronic2 user-81=mediatag user-82=intelek1 user-83=nucktra1 user-84=lblawcom user-85=nikimare user-86=aptekazd user-87=forzares user-88=nikolov1 user-89=hausmark user-90=imdskopj user-91=albuname user-92=glammace user-93=infopor1 user-94=vtranseu user-95=pravekom user-96=cosmatob user-97=euromaki user-98=zapovim1 user-99=elektrot user-100=chemhemc user-101=samasped user-102=nutrivim user-103=palenzok
Sep 10 16:57:16 power sudo[4047234]: wp-toolkit : (command continued) user-104=busymard user-105=zampmk user-106=zvskopje user-107=custome1 user-108=stokovna user-109=sparkupm user-110=klimimk user-111=stojano1 user-112=bovincom user-113=janiboja user-114=itradeco user-115=vezilkac user-116=cabinetm user-117=inotekso user-118=jpparkin user-119=drleomk user-120=karpospo user-121=nasaidni user-122=ideaplus user-123=screenme user-124=arturaco user-125=butelmk user-126=daris user-127=premiums user-128=kouzonco user-129=premiuma user-130=cetplatf user-131=dalmacom user-132=datalink user-133=univerz1 user-134=kujnamon user-135=velmk user-136=gogovan1 user-137=mpbmk user-138=agrosind user-139=barececo user-140=delcevca user-141=simbiome user-142=getaldus user-143=workandt user-144=dhamachi user-145=goartsym user-146=volkanco user-147=mfashion user-148=skyapart user-149=bianasho user-150=makoasmk user-151=rasmorgm user-152=wikicamp user-153=urbanexp user-154=spdcompu user-155=detskagr
Sep 10 16:57:16 power sudo[4047234]: wp-toolkit : (command continued) user-156=infobadi user-157=mspmk user-158=bizporta user-159=maleshne user-160=datelcom user-161=sedcmk user-162=groskome user-163=ivanjord user-164=polyeste user-165=vfxnestc user-166=cajsproc user-167=hotammk user-168=anitermc user-169=youthgua user-170=stojnevi user-171=oouslave user-172=raremk user-173=bauerbg user-174=uhostmk5 user-175=enaspotc user-176=trudovop user-177=viewinn user-178=vmro user-179=avtogumi user-180=socioloz user-181=pelagoni user-182=evolvepl user-183=hidrommk user-184=frizered user-185=caramk user-186=oncolog1 user-187=ekostoc1 user-188=levantmk user-189=nefrolog user-190=edomcomm user-191=berbermk user-192=dikimk12 user-193=enochmk user-194=herbalpl user-195=sprintst user-196=seloviro user-197=kolened1 user-198=nlpmkorg user-199=centarba user-200=nolimits user-201=tealmk user-202=dadarmk user-203=proverim user-204=goodnews user-205=mstmmk user-206=gocruise user-207=tradeyou
Sep 10 16:57:16 power sudo[4047234]: wp-toolkit : (command continued) user-208=gjorgeiv user-209=dnevnoin user-210=pecakome user-211=robustco user-212=stravelm user-213=wondersp user-214=holiyayt user-215=rastiraz feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:57:16 power sudo[4047234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:16 power sudo[4047234]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:17 power sudo[4047250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:17 power sudo[4047250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:17 power sudo[4047250]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:17 power sudo[4047255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:17 power sudo[4047255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:17 power sudo[4047255]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:19 power sudo[4047309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:19 power sudo[4047309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:19 power sudo[4047309]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:20 power sudo[4047316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:20 power sudo[4047316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:20 power sudo[4047316]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:20 power sudo[4047321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:20 power sudo[4047321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:20 power sudo[4047321]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:20 power sudo[4047326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:57:20 power sudo[4047326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:20 power sudo[4047326]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:20 power sudo[4047336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=matratze user-2=euronic2 user-3=apgrupmk user-4=bogdanos user-5=carrent1 user-6=mediasol user-7=kardiome user-8=forzares user-9=nikimare user-10=aptekazd user-11=nikolov1 user-12=hausmark user-13=mediatag user-14=intelek1 user-15=lblawcom user-16=nucktra1 user-17=infopor1 user-18=vtranseu user-19=pravekom user-20=imdskopj user-21=albuname user-22=glammace user-23=samasped user-24=chemhemc user-25=nutrivim user-26=euromaki user-27=cosmatob user-28=zapovim1 user-29=elektrot user-30=aquatech user-31=gorsajmk user-32=supremel user-33=v5srybi9dcdx user-34=zdmgpsor user-35=modernar user-36=inkigaic user-37=vacuacti user-38=premiumi user-39=innofabl user-40=dslmk user-41=darkogor user-42=fnjorgmk user-43=prizmapl user-44=bozinovm user-45=tehnologija user-46=taneccom user-47=fiziosmk user-48=ambitiou
Sep 10 16:57:20 power sudo[4047336]: wp-toolkit : (command continued) user-49=versusmk user-50=fffhpcwr user-51=starluxm user-52=radekrat user-53=tcieuroc user-54=nationa2 user-55=onlinesh user-56=mapaspla user-57=solemor1 user-58=folklore user-59=bauerin2 user-60=evberasm user-61=bonitavi user-62=cupidpro user-63=vegemk1 user-64=euronic3 user-65=conserva user-66=jpkomuna user-67=izzomk user-68=tehnodro user-69=makdrone user-70=dimpalne user-71=eaptekam user-72=fxxcom user-73=peshkai1 user-74=aptekafa user-75=madzomk user-76=evacommk user-77=gradbai1 user-78=taktcomm user-79=recorgmk user-80=solointe user-81=jaramk user-82=atspedco user-83=sssoluti user-84=cleanerm user-85=animatem user-86=progress user-87=bbbustou user-88=kaoilmk user-89=biplmk user-90=pelagini user-91=viplastc user-92=wineberr user-93=ismassag user-94=workbenc user-95=mbmehani user-96=golakkom user-97=electrol user-98=eliksirz user-99=naksorgm user-100=trigemat user-101=eurofarm user-102=solarinv
Sep 10 16:57:20 power sudo[4047336]: wp-toolkit : (command continued) user-103=herbalpl user-104=enochmk user-105=sprintst user-106=dikimk12 user-107=berbermk user-108=edomcomm user-109=kolened1 user-110=nlpmkorg user-111=centarba user-112=nolimits user-113=seloviro user-114=mstmmk user-115=goodnews user-116=gocruise user-117=tealmk user-118=proverim user-119=dadarmk user-120=robustco user-121=stravelm user-122=wondersp user-123=pecakome user-124=rastiraz user-125=holiyayt user-126=tradeyou user-127=gjorgeiv user-128=dnevnoin user-129=anitermc user-130=youthgua user-131=hotammk user-132=cajsproc user-133=viewinn user-134=trudovop user-135=vmro user-136=enaspotc user-137=stojnevi user-138=bauerbg user-139=uhostmk5 user-140=oouslave user-141=raremk user-142=evolvepl user-143=socioloz user-144=avtogumi user-145=pelagoni user-146=ekostoc1 user-147=oncolog1 user-148=levantmk user-149=nefrolog user-150=hidrommk user-151=frizered user-152=caramk user-153=mpbmk user-154=agrosind
Sep 10 16:57:20 power sudo[4047336]: wp-toolkit : (command continued) user-155=datalink user-156=univerz1 user-157=kujnamon user-158=gogovan1 user-159=velmk user-160=skyapart user-161=bianasho user-162=makoasmk user-163=rasmorgm user-164=workandt user-165=barececo user-166=delcevca user-167=simbiome user-168=getaldus user-169=mfashion user-170=dhamachi user-171=goartsym user-172=volkanco user-173=detskagr user-174=spdcompu user-175=mspmk user-176=infobadi user-177=urbanexp user-178=wikicamp user-179=groskome user-180=ivanjord user-181=sedcmk user-182=polyeste user-183=vfxnestc user-184=bizporta user-185=maleshne user-186=datelcom user-187=stokovna user-188=sparkupm user-189=klimimk user-190=busymard user-191=zampmk user-192=zvskopje user-193=palenzok user-194=custome1 user-195=itradeco user-196=janiboja user-197=cabinetm user-198=vezilkac user-199=stojano1 user-200=bovincom user-201=screenme user-202=arturaco user-203=karpospo user-204=nasaidni user-205=ideaplus user-206=daris
Sep 10 16:57:20 power sudo[4047336]: wp-toolkit : (command continued) user-207=butelmk user-208=premiums user-209=drleomk user-210=inotekso user-211=jpparkin user-212=premiuma user-213=kouzonco user-214=dalmacom user-215=cetplatf feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:57:20 power sudo[4047336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:20 power sudo[4047336]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:20 power sudo[4047347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'find -H /home/berbermk/public_html -type d -name wp-includes -printf \'%h\\0\''
Sep 10 16:57:20 power sudo[4047347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:20 power sudo[4047347]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:20 power sudo[4047359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/wp-content
Sep 10 16:57:20 power sudo[4047359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:20 power sudo[4047359]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:20 power sudo[4047364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/wp-config.php
Sep 10 16:57:20 power sudo[4047364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:20 power sudo[4047364]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:20 power sudo[4047368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/.wp-toolkit-ignore
Sep 10 16:57:20 power sudo[4047368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:20 power sudo[4047368]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:20 power sudo[4047372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/.wp-toolkit-ignore
Sep 10 16:57:20 power sudo[4047372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:20 power sudo[4047372]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:21 power sudo[4047377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Variables get_user_information --output=json'
Sep 10 16:57:21 power sudo[4047377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:21 power sudo[4047377]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:21 power sudo[4047382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 16:57:21 power sudo[4047382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:21 power sudo[4047382]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:21 power sudo[4047386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 16:57:21 power sudo[4047386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:21 power sudo[4047386]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:21 power sudo[4047397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:21 power sudo[4047398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 16:57:21 power sudo[4047397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:21 power sudo[4047398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:21 power sudo[4047397]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:21 power sudo[4047398]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:21 power sudo[4047414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=berbermk --output=json'
Sep 10 16:57:21 power sudo[4047414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:21 power sudo[4047414]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:21 power sudo[4047442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:21 power sudo[4047442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:21 power sudo[4047442]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:22 power sudo[4047450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:22 power sudo[4047450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:22 power sudo[4047450]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:22 power sudo[4047455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:22 power sudo[4047455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:22 power sudo[4047455]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:22 power sudo[4047461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:57:22 power sudo[4047461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:22 power sudo[4047461]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:22 power sudo[4047474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mbmehani user-2=workbenc user-3=ismassag user-4=wineberr user-5=viplastc user-6=solarinv user-7=eurofarm user-8=trigemat user-9=naksorgm user-10=eliksirz user-11=electrol user-12=golakkom user-13=progress user-14=animatem user-15=cleanerm user-16=atspedco user-17=sssoluti user-18=jaramk user-19=solointe user-20=recorgmk user-21=taktcomm user-22=pelagini user-23=biplmk user-24=kaoilmk user-25=bbbustou user-26=makdrone user-27=tehnodro user-28=izzomk user-29=jpkomuna user-30=gradbai1 user-31=evacommk user-32=aptekafa user-33=madzomk user-34=peshkai1 user-35=fxxcom user-36=eaptekam user-37=dimpalne user-38=bauerin2 user-39=folklore user-40=conserva user-41=euronic3 user-42=vegemk1 user-43=cupidpro user-44=bonitavi user-45=evberasm user-46=radekrat user-47=starluxm user-48=fffhpcwr user-49=versusmk
Sep 10 16:57:22 power sudo[4047474]: wp-toolkit : (command continued) user-50=ambitiou user-51=fiziosmk user-52=solemor1 user-53=mapaspla user-54=onlinesh user-55=nationa2 user-56=tcieuroc user-57=zdmgpsor user-58=v5srybi9dcdx user-59=supremel user-60=gorsajmk user-61=aquatech user-62=taneccom user-63=tehnologija user-64=bozinovm user-65=darkogor user-66=dslmk user-67=fnjorgmk user-68=prizmapl user-69=innofabl user-70=premiumi user-71=vacuacti user-72=inkigaic user-73=modernar user-74=glammace user-75=albuname user-76=imdskopj user-77=vtranseu user-78=pravekom user-79=infopor1 user-80=elektrot user-81=zapovim1 user-82=euromaki user-83=cosmatob user-84=nutrivim user-85=samasped user-86=chemhemc user-87=kardiome user-88=mediasol user-89=bogdanos user-90=carrent1 user-91=apgrupmk user-92=euronic2 user-93=matratze user-94=nucktra1 user-95=lblawcom user-96=intelek1 user-97=mediatag user-98=nikolov1 user-99=hausmark user-100=aptekazd user-101=nikimare user-102=forzares user-103=jpparkin
Sep 10 16:57:22 power sudo[4047474]: wp-toolkit : (command continued) user-104=inotekso user-105=drleomk user-106=premiums user-107=daris user-108=butelmk user-109=ideaplus user-110=nasaidni user-111=karpospo user-112=screenme user-113=arturaco user-114=cetplatf user-115=dalmacom user-116=kouzonco user-117=premiuma user-118=custome1 user-119=palenzok user-120=zampmk user-121=zvskopje user-122=busymard user-123=klimimk user-124=sparkupm user-125=stokovna user-126=bovincom user-127=stojano1 user-128=vezilkac user-129=cabinetm user-130=janiboja user-131=itradeco user-132=wikicamp user-133=urbanexp user-134=infobadi user-135=mspmk user-136=spdcompu user-137=detskagr user-138=datelcom user-139=maleshne user-140=bizporta user-141=vfxnestc user-142=polyeste user-143=sedcmk user-144=groskome user-145=ivanjord user-146=gogovan1 user-147=velmk user-148=univerz1 user-149=kujnamon user-150=datalink user-151=agrosind user-152=mpbmk user-153=goartsym user-154=volkanco user-155=dhamachi
Sep 10 16:57:22 power sudo[4047474]: wp-toolkit : (command continued) user-156=mfashion user-157=delcevca user-158=simbiome user-159=getaldus user-160=barececo user-161=workandt user-162=rasmorgm user-163=makoasmk user-164=bianasho user-165=skyapart user-166=pelagoni user-167=socioloz user-168=avtogumi user-169=evolvepl user-170=caramk user-171=frizered user-172=hidrommk user-173=nefrolog user-174=ekostoc1 user-175=levantmk user-176=oncolog1 user-177=cajsproc user-178=hotammk user-179=youthgua user-180=anitermc user-181=raremk user-182=oouslave user-183=uhostmk5 user-184=bauerbg user-185=stojnevi user-186=enaspotc user-187=vmro user-188=viewinn user-189=trudovop user-190=dadarmk user-191=proverim user-192=tealmk user-193=gocruise user-194=goodnews user-195=mstmmk user-196=dnevnoin user-197=gjorgeiv user-198=tradeyou user-199=holiyayt user-200=rastiraz user-201=pecakome user-202=wondersp user-203=stravelm user-204=robustco user-205=edomcomm user-206=berbermk user-207=dikimk12
Sep 10 16:57:22 power sudo[4047474]: wp-toolkit : (command continued) user-208=sprintst user-209=herbalpl user-210=enochmk user-211=seloviro user-212=nolimits user-213=nlpmkorg user-214=centarba user-215=kolened1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:57:22 power sudo[4047474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:22 power sudo[4047474]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:22 power sudo[4047482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'find -H /home/berbermk/public_html -type d -name wp-includes -printf \'%h\\0\''
Sep 10 16:57:22 power sudo[4047482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:22 power sudo[4047482]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:22 power sudo[4047487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/wp-content
Sep 10 16:57:22 power sudo[4047487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:22 power sudo[4047487]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:22 power sudo[4047492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/wp-config.php
Sep 10 16:57:22 power sudo[4047492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:22 power sudo[4047492]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:22 power sudo[4047496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/.wp-toolkit-ignore
Sep 10 16:57:22 power sudo[4047496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:22 power sudo[4047496]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:23 power sudo[4047500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 16:57:23 power sudo[4047500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:23 power sudo[4047500]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:23 power sudo[4047504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 16:57:23 power sudo[4047504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:23 power sudo[4047504]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:23 power sudo[4047513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 16:57:23 power sudo[4047513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:23 power sudo[4047513]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:23 power sudo[4047535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:23 power sudo[4047535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:23 power sudo[4047535]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:23 power sudo[4047548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:23 power sudo[4047548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:23 power sudo[4047548]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:23 power sudo[4047554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:23 power sudo[4047554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:23 power sudo[4047554]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:23 power sudo[4047561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:23 power sudo[4047561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:23 power sudo[4047573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:23 power sudo[4047573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:23 power sudo[4047561]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:23 power sudo[4047587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:57:23 power sudo[4047587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:23 power sudo[4047573]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:23 power sudo[4047592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:23 power sudo[4047592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:24 power sudo[4047592]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:24 power sudo[4047602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:57:24 power sudo[4047602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:24 power sudo[4047587]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:24 power sudo[4047608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tehnodro user-2=makdrone user-3=izzomk user-4=jpkomuna user-5=evacommk user-6=madzomk user-7=aptekafa user-8=gradbai1 user-9=eaptekam user-10=dimpalne user-11=peshkai1 user-12=fxxcom user-13=folklore user-14=bauerin2 user-15=euronic3 user-16=vegemk1 user-17=cupidpro user-18=conserva user-19=bonitavi user-20=evberasm user-21=workbenc user-22=ismassag user-23=mbmehani user-24=wineberr user-25=viplastc user-26=eurofarm user-27=solarinv user-28=golakkom user-29=trigemat user-30=eliksirz user-31=naksorgm user-32=electrol user-33=atspedco user-34=sssoluti user-35=progress user-36=animatem user-37=cleanerm user-38=recorgmk user-39=taktcomm user-40=jaramk user-41=solointe user-42=pelagini user-43=biplmk user-44=kaoilmk user-45=bbbustou user-46=imdskopj user-47=glammace user-48=albuname user-49=infopor1
Sep 10 16:57:24 power sudo[4047608]: wp-toolkit : (command continued) user-50=pravekom user-51=vtranseu user-52=cosmatob user-53=euromaki user-54=zapovim1 user-55=elektrot user-56=samasped user-57=chemhemc user-58=nutrivim user-59=mediasol user-60=bogdanos user-61=carrent1 user-62=apgrupmk user-63=kardiome user-64=euronic2 user-65=matratze user-66=intelek1 user-67=mediatag user-68=nucktra1 user-69=lblawcom user-70=aptekazd user-71=nikimare user-72=forzares user-73=hausmark user-74=nikolov1 user-75=fffhpcwr user-76=radekrat user-77=starluxm user-78=ambitiou user-79=fiziosmk user-80=versusmk user-81=onlinesh user-82=nationa2 user-83=solemor1 user-84=mapaspla user-85=tcieuroc user-86=zdmgpsor user-87=gorsajmk user-88=aquatech user-89=v5srybi9dcdx user-90=supremel user-91=bozinovm user-92=fnjorgmk user-93=darkogor user-94=dslmk user-95=prizmapl user-96=premiumi user-97=innofabl user-98=vacuacti user-99=taneccom user-100=tehnologija user-101=modernar user-102=inkigaic user-103=wikicamp
Sep 10 16:57:24 power sudo[4047608]: wp-toolkit : (command continued) user-104=urbanexp user-105=spdcompu user-106=detskagr user-107=infobadi user-108=mspmk user-109=bizporta user-110=datelcom user-111=maleshne user-112=sedcmk user-113=groskome user-114=ivanjord user-115=vfxnestc user-116=polyeste user-117=datalink user-118=velmk user-119=gogovan1 user-120=kujnamon user-121=univerz1 user-122=agrosind user-123=mpbmk user-124=simbiome user-125=delcevca user-126=getaldus user-127=barececo user-128=workandt user-129=volkanco user-130=goartsym user-131=dhamachi user-132=mfashion user-133=makoasmk user-134=bianasho user-135=skyapart user-136=rasmorgm user-137=jpparkin user-138=inotekso user-139=drleomk user-140=ideaplus user-141=karpospo user-142=nasaidni user-143=screenme user-144=arturaco user-145=premiums user-146=butelmk user-147=daris user-148=kouzonco user-149=premiuma user-150=cetplatf user-151=dalmacom user-152=palenzok user-153=busymard user-154=zampmk user-155=zvskopje
Sep 10 16:57:24 power sudo[4047608]: wp-toolkit : (command continued) user-156=custome1 user-157=sparkupm user-158=stokovna user-159=klimimk user-160=stojano1 user-161=bovincom user-162=janiboja user-163=itradeco user-164=vezilkac user-165=cabinetm user-166=tealmk user-167=dadarmk user-168=proverim user-169=goodnews user-170=mstmmk user-171=gocruise user-172=tradeyou user-173=gjorgeiv user-174=dnevnoin user-175=pecakome user-176=wondersp user-177=stravelm user-178=robustco user-179=holiyayt user-180=rastiraz user-181=edomcomm user-182=berbermk user-183=dikimk12 user-184=sprintst user-185=herbalpl user-186=enochmk user-187=seloviro user-188=centarba user-189=nlpmkorg user-190=kolened1 user-191=nolimits user-192=socioloz user-193=avtogumi user-194=pelagoni user-195=evolvepl user-196=frizered user-197=hidrommk user-198=caramk user-199=nefrolog user-200=ekostoc1 user-201=levantmk user-202=oncolog1 user-203=cajsproc user-204=hotammk user-205=youthgua user-206=anitermc user-207=stojnevi
Sep 10 16:57:24 power sudo[4047608]: wp-toolkit : (command continued) user-208=raremk user-209=oouslave user-210=uhostmk5 user-211=bauerbg user-212=enaspotc user-213=vmro user-214=trudovop user-215=viewinn feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:57:24 power sudo[4047608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:24 power sudo[4047602]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:24 power sudo[4047615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bauerin2 user-2=folklore user-3=bonitavi user-4=evberasm user-5=conserva user-6=vegemk1 user-7=cupidpro user-8=euronic3 user-9=jpkomuna user-10=izzomk user-11=makdrone user-12=tehnodro user-13=peshkai1 user-14=fxxcom user-15=dimpalne user-16=eaptekam user-17=gradbai1 user-18=evacommk user-19=aptekafa user-20=madzomk user-21=solointe user-22=jaramk user-23=taktcomm user-24=recorgmk user-25=animatem user-26=cleanerm user-27=progress user-28=atspedco user-29=sssoluti user-30=bbbustou user-31=biplmk user-32=kaoilmk user-33=pelagini user-34=viplastc user-35=wineberr user-36=mbmehani user-37=ismassag user-38=workbenc user-39=electrol user-40=trigemat user-41=naksorgm user-42=eliksirz user-43=golakkom user-44=solarinv user-45=eurofarm user-46=euronic2 user-47=matratze user-48=kardiome user-49=apgrupmk
Sep 10 16:57:24 power sudo[4047615]: wp-toolkit : (command continued) user-50=mediasol user-51=carrent1 user-52=bogdanos user-53=hausmark user-54=nikolov1 user-55=forzares user-56=aptekazd user-57=nikimare user-58=lblawcom user-59=nucktra1 user-60=intelek1 user-61=mediatag user-62=pravekom user-63=vtranseu user-64=infopor1 user-65=glammace user-66=albuname user-67=imdskopj user-68=nutrivim user-69=chemhemc user-70=samasped user-71=elektrot user-72=zapovim1 user-73=euromaki user-74=cosmatob user-75=supremel user-76=v5srybi9dcdx user-77=gorsajmk user-78=aquatech user-79=zdmgpsor user-80=inkigaic user-81=modernar user-82=tehnologija user-83=taneccom user-84=premiumi user-85=innofabl user-86=vacuacti user-87=bozinovm user-88=darkogor user-89=prizmapl user-90=fnjorgmk user-91=dslmk user-92=versusmk user-93=fiziosmk user-94=ambitiou user-95=radekrat user-96=starluxm user-97=fffhpcwr user-98=tcieuroc user-99=mapaspla user-100=solemor1 user-101=nationa2 user-102=onlinesh user-103=agrosind
Sep 10 16:57:24 power sudo[4047615]: wp-toolkit : (command continued) user-104=mpbmk user-105=gogovan1 user-106=velmk user-107=kujnamon user-108=univerz1 user-109=datalink user-110=rasmorgm user-111=bianasho user-112=makoasmk user-113=skyapart user-114=mfashion user-115=volkanco user-116=goartsym user-117=dhamachi user-118=workandt user-119=delcevca user-120=simbiome user-121=getaldus user-122=barececo user-123=infobadi user-124=mspmk user-125=detskagr user-126=spdcompu user-127=urbanexp user-128=wikicamp user-129=vfxnestc user-130=polyeste user-131=groskome user-132=ivanjord user-133=sedcmk user-134=datelcom user-135=maleshne user-136=bizporta user-137=klimimk user-138=sparkupm user-139=stokovna user-140=custome1 user-141=zampmk user-142=zvskopje user-143=busymard user-144=palenzok user-145=cabinetm user-146=vezilkac user-147=itradeco user-148=janiboja user-149=bovincom user-150=stojano1 user-151=premiums user-152=butelmk user-153=daris user-154=screenme user-155=arturaco
Sep 10 16:57:24 power sudo[4047615]: wp-toolkit : (command continued) user-156=ideaplus user-157=nasaidni user-158=karpospo user-159=drleomk user-160=jpparkin user-161=inotekso user-162=dalmacom user-163=cetplatf user-164=premiuma user-165=kouzonco user-166=sprintst user-167=herbalpl user-168=enochmk user-169=dikimk12 user-170=berbermk user-171=edomcomm user-172=nolimits user-173=centarba user-174=nlpmkorg user-175=kolened1 user-176=seloviro user-177=gocruise user-178=mstmmk user-179=goodnews user-180=proverim user-181=dadarmk user-182=tealmk user-183=rastiraz user-184=holiyayt user-185=wondersp user-186=stravelm user-187=robustco user-188=pecakome user-189=dnevnoin user-190=gjorgeiv user-191=tradeyou user-192=youthgua user-193=anitermc user-194=hotammk user-195=cajsproc user-196=vmro user-197=viewinn user-198=trudovop user-199=enaspotc user-200=uhostmk5 user-201=bauerbg user-202=raremk user-203=oouslave user-204=stojnevi user-205=evolvepl user-206=pelagoni user-207=avtogumi
Sep 10 16:57:24 power sudo[4047615]: wp-toolkit : (command continued) user-208=socioloz user-209=nefrolog user-210=ekostoc1 user-211=levantmk user-212=oncolog1 user-213=caramk user-214=frizered user-215=hidrommk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:57:24 power sudo[4047615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:24 power sudo[4047608]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:24 power sudo[4047615]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:25 power sudo[4047668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:25 power sudo[4047668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:25 power sudo[4047668]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:27 power sudo[4047721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 16:57:27 power sudo[4047721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:27 power sudo[4047721]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:27 power sudo[4047729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user berbermk --user-current --json'
Sep 10 16:57:27 power sudo[4047729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:27 power sudo[4047738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:27 power sudo[4047738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:27 power sudo[4047738]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:28 power sudo[4047729]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:28 power sudo[4047750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk LangPHP php_get_vhost_versions --output=json'
Sep 10 16:57:28 power sudo[4047750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:28 power sudo[4047750]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:28 power sudo[4047757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep 10 16:57:28 power sudo[4047757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:28 power sudo[4047757]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:28 power sudo[4047776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 16:57:28 power sudo[4047776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:28 power sudo[4047776]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:29 power sudo[4047819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:29 power sudo[4047819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:30 power sudo[4047819]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:30 power sudo[4047832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:30 power sudo[4047839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:30 power sudo[4047832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:30 power sudo[4047839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:30 power sudo[4047832]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:30 power sudo[4047839]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:30 power sudo[4047847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:30 power sudo[4047847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:30 power sudo[4047856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:30 power sudo[4047856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:30 power sudo[4047847]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:30 power sudo[4047861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:30 power sudo[4047856]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:30 power sudo[4047861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:30 power sudo[4047861]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:30 power sudo[4047869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:57:30 power sudo[4047869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:30 power sudo[4047869]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:30 power sudo[4047875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=proverim user-2=dadarmk user-3=tealmk user-4=gocruise user-5=mstmmk user-6=goodnews user-7=dnevnoin user-8=gjorgeiv user-9=tradeyou user-10=rastiraz user-11=holiyayt user-12=stravelm user-13=robustco user-14=wondersp user-15=pecakome user-16=berbermk user-17=edomcomm user-18=enochmk user-19=herbalpl user-20=sprintst user-21=dikimk12 user-22=seloviro user-23=nolimits user-24=kolened1 user-25=centarba user-26=nlpmkorg user-27=pelagoni user-28=socioloz user-29=avtogumi user-30=evolvepl user-31=caramk user-32=hidrommk user-33=frizered user-34=ekostoc1 user-35=oncolog1 user-36=levantmk user-37=nefrolog user-38=hotammk user-39=cajsproc user-40=anitermc user-41=youthgua user-42=bauerbg user-43=uhostmk5 user-44=oouslave user-45=raremk user-46=stojnevi user-47=viewinn user-48=trudovop user-49=vmro user-50=enaspotc
Sep 10 16:57:30 power sudo[4047875]: wp-toolkit : (command continued) user-51=urbanexp user-52=wikicamp user-53=infobadi user-54=mspmk user-55=detskagr user-56=spdcompu user-57=maleshne user-58=datelcom user-59=bizporta user-60=polyeste user-61=vfxnestc user-62=ivanjord user-63=groskome user-64=sedcmk user-65=univerz1 user-66=kujnamon user-67=velmk user-68=gogovan1 user-69=datalink user-70=mpbmk user-71=agrosind user-72=mfashion user-73=dhamachi user-74=goartsym user-75=volkanco user-76=workandt user-77=barececo user-78=delcevca user-79=getaldus user-80=simbiome user-81=rasmorgm user-82=skyapart user-83=makoasmk user-84=bianasho user-85=drleomk user-86=inotekso user-87=jpparkin user-88=butelmk user-89=daris user-90=premiums user-91=arturaco user-92=screenme user-93=karpospo user-94=nasaidni user-95=ideaplus user-96=dalmacom user-97=cetplatf user-98=premiuma user-99=kouzonco user-100=custome1 user-101=zampmk user-102=busymard user-103=zvskopje user-104=palenzok user-105=klimimk
Sep 10 16:57:30 power sudo[4047875]: wp-toolkit : (command continued) user-106=stokovna user-107=sparkupm user-108=bovincom user-109=stojano1 user-110=cabinetm user-111=vezilkac user-112=itradeco user-113=janiboja user-114=albuname user-115=glammace user-116=imdskopj user-117=pravekom user-118=vtranseu user-119=infopor1 user-120=zapovim1 user-121=elektrot user-122=cosmatob user-123=euromaki user-124=nutrivim user-125=samasped user-126=chemhemc user-127=kardiome user-128=apgrupmk user-129=bogdanos user-130=carrent1 user-131=mediasol user-132=matratze user-133=euronic2 user-134=lblawcom user-135=nucktra1 user-136=mediatag user-137=intelek1 user-138=nikolov1 user-139=hausmark user-140=forzares user-141=nikimare user-142=aptekazd user-143=starluxm user-144=radekrat user-145=fffhpcwr user-146=versusmk user-147=fiziosmk user-148=ambitiou user-149=mapaspla user-150=solemor1 user-151=nationa2 user-152=onlinesh user-153=tcieuroc user-154=zdmgpsor user-155=supremel user-156=v5srybi9dcdx
Sep 10 16:57:30 power sudo[4047875]: wp-toolkit : (command continued) user-157=aquatech user-158=gorsajmk user-159=tehnologija user-160=taneccom user-161=vacuacti user-162=innofabl user-163=premiumi user-164=fnjorgmk user-165=darkogor user-166=dslmk user-167=prizmapl user-168=bozinovm user-169=inkigaic user-170=modernar user-171=makdrone user-172=tehnodro user-173=jpkomuna user-174=izzomk user-175=gradbai1 user-176=aptekafa user-177=madzomk user-178=evacommk user-179=fxxcom user-180=peshkai1 user-181=dimpalne user-182=eaptekam user-183=bauerin2 user-184=folklore user-185=conserva user-186=cupidpro user-187=vegemk1 user-188=euronic3 user-189=evberasm user-190=bonitavi user-191=mbmehani user-192=ismassag user-193=workbenc user-194=viplastc user-195=wineberr user-196=solarinv user-197=eurofarm user-198=electrol user-199=eliksirz user-200=naksorgm user-201=trigemat user-202=golakkom user-203=cleanerm user-204=animatem user-205=progress user-206=atspedco user-207=sssoluti
Sep 10 16:57:30 power sudo[4047875]: wp-toolkit : (command continued) user-208=solointe user-209=jaramk user-210=recorgmk user-211=taktcomm user-212=pelagini user-213=bbbustou user-214=kaoilmk user-215=biplmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:57:30 power sudo[4047875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:31 power sudo[4047875]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:37 power sudo[4047965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:37 power sudo[4047965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:37 power sudo[4047965]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:37 power sudo[4047971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:37 power sudo[4047971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:37 power sudo[4047971]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:38 power sudo[4047976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:38 power sudo[4047976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:38 power sudo[4047976]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:39 power sudo[4048022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:57:39 power sudo[4048022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:39 power sudo[4048022]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:39 power sudo[4048030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:39 power sudo[4048030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:39 power sudo[4048030]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:39 power sudo[4048035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:39 power sudo[4048035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:39 power sudo[4048035]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:40 power sudo[4048080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:57:40 power sudo[4048080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:40 power sudo[4048080]: pam_unix(sudo:session): session closed for user root
Sep 10 16:57:40 power sudo[4048087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:57:40 power sudo[4048087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:57:40 power sudo[4048087]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:22 power sudo[4048934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:58:22 power systemd[4048939]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:58:22 power sudo[4048934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:22 power sudo[4048934]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:22 power sudo[4048960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:58:22 power sudo[4048960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:22 power sudo[4048960]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:22 power sudo[4048965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:58:22 power sudo[4048965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:22 power sudo[4048965]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:22 power sudo[4048971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:58:22 power sudo[4048971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:22 power sudo[4048971]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:22 power sudo[4048977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=solointe user-2=jaramk user-3=recorgmk user-4=taktcomm user-5=animatem user-6=cleanerm user-7=progress user-8=sssoluti user-9=atspedco user-10=bbbustou user-11=biplmk user-12=kaoilmk user-13=pelagini user-14=viplastc user-15=wineberr user-16=mbmehani user-17=ismassag user-18=workbenc user-19=electrol user-20=trigemat user-21=naksorgm user-22=eliksirz user-23=golakkom user-24=solarinv user-25=eurofarm user-26=bauerin2 user-27=folklore user-28=bonitavi user-29=evberasm user-30=conserva user-31=vegemk1 user-32=cupidpro user-33=euronic3 user-34=jpkomuna user-35=izzomk user-36=makdrone user-37=tehnodro user-38=peshkai1 user-39=fxxcom user-40=dimpalne user-41=eaptekam user-42=gradbai1 user-43=evacommk user-44=madzomk user-45=aptekafa user-46=supremel user-47=v5srybi9dcdx user-48=gorsajmk user-49=aquatech
Sep 10 16:58:22 power sudo[4048977]: wp-toolkit : (command continued) user-50=zdmgpsor user-51=inkigaic user-52=modernar user-53=tehnologija user-54=taneccom user-55=innofabl user-56=premiumi user-57=vacuacti user-58=bozinovm user-59=darkogor user-60=fnjorgmk user-61=prizmapl user-62=dslmk user-63=versusmk user-64=fiziosmk user-65=ambitiou user-66=radekrat user-67=starluxm user-68=fffhpcwr user-69=tcieuroc user-70=mapaspla user-71=solemor1 user-72=nationa2 user-73=onlinesh user-74=euronic2 user-75=matratze user-76=kardiome user-77=apgrupmk user-78=mediasol user-79=bogdanos user-80=carrent1 user-81=hausmark user-82=nikolov1 user-83=forzares user-84=aptekazd user-85=nikimare user-86=lblawcom user-87=nucktra1 user-88=intelek1 user-89=mediatag user-90=vtranseu user-91=pravekom user-92=infopor1 user-93=glammace user-94=albuname user-95=imdskopj user-96=nutrivim user-97=samasped user-98=chemhemc user-99=elektrot user-100=zapovim1 user-101=euromaki user-102=cosmatob user-103=klimimk
Sep 10 16:58:22 power sudo[4048977]: wp-toolkit : (command continued) user-104=sparkupm user-105=stokovna user-106=custome1 user-107=busymard user-108=zampmk user-109=zvskopje user-110=palenzok user-111=cabinetm user-112=vezilkac user-113=itradeco user-114=janiboja user-115=bovincom user-116=stojano1 user-117=premiums user-118=daris user-119=butelmk user-120=arturaco user-121=screenme user-122=ideaplus user-123=nasaidni user-124=karpospo user-125=drleomk user-126=jpparkin user-127=inotekso user-128=dalmacom user-129=cetplatf user-130=premiuma user-131=kouzonco user-132=agrosind user-133=mpbmk user-134=velmk user-135=gogovan1 user-136=univerz1 user-137=kujnamon user-138=datalink user-139=rasmorgm user-140=bianasho user-141=makoasmk user-142=skyapart user-143=mfashion user-144=goartsym user-145=volkanco user-146=dhamachi user-147=workandt user-148=delcevca user-149=getaldus user-150=simbiome user-151=barececo user-152=infobadi user-153=mspmk user-154=detskagr user-155=spdcompu
Sep 10 16:58:22 power sudo[4048977]: wp-toolkit : (command continued) user-156=urbanexp user-157=wikicamp user-158=vfxnestc user-159=polyeste user-160=ivanjord user-161=groskome user-162=sedcmk user-163=datelcom user-164=maleshne user-165=bizporta user-166=youthgua user-167=anitermc user-168=hotammk user-169=cajsproc user-170=vmro user-171=viewinn user-172=trudovop user-173=enaspotc user-174=uhostmk5 user-175=bauerbg user-176=raremk user-177=oouslave user-178=stojnevi user-179=evolvepl user-180=pelagoni user-181=socioloz user-182=avtogumi user-183=nefrolog user-184=ekostoc1 user-185=oncolog1 user-186=levantmk user-187=caramk user-188=frizered user-189=hidrommk user-190=sprintst user-191=herbalpl user-192=enochmk user-193=dikimk12 user-194=berbermk user-195=edomcomm user-196=nolimits user-197=nlpmkorg user-198=centarba user-199=kolened1 user-200=seloviro user-201=gocruise user-202=mstmmk user-203=goodnews user-204=proverim user-205=dadarmk user-206=tealmk user-207=rastiraz
Sep 10 16:58:22 power sudo[4048977]: wp-toolkit : (command continued) user-208=holiyayt user-209=wondersp user-210=robustco user-211=stravelm user-212=pecakome user-213=dnevnoin user-214=gjorgeiv user-215=tradeyou feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:58:22 power sudo[4048977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:23 power sudo[4048977]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:23 power sudo[4048999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:58:23 power sudo[4048999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:23 power sudo[4048999]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:23 power sudo[4049006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:58:23 power sudo[4049006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:23 power sudo[4049006]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:32 power sudo[4049115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:58:32 power sudo[4049115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:32 power sudo[4049115]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:36 power sudo[4049187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:58:36 power sudo[4049187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:36 power sudo[4049187]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:36 power sudo[4049195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:58:36 power sudo[4049195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:36 power sudo[4049195]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:40 power sudo[4049280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:58:40 power sudo[4049280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:40 power sudo[4049280]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:41 power sudo[4049285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:58:41 power sudo[4049285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:41 power sudo[4049285]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:41 power sudo[4049291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:58:41 power sudo[4049291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:41 power sudo[4049291]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:41 power sudo[4049296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:58:41 power sudo[4049296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:41 power sudo[4049296]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:41 power sudo[4049306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=makdrone user-2=tehnodro user-3=jpkomuna user-4=izzomk user-5=gradbai1 user-6=aptekafa user-7=madzomk user-8=evacommk user-9=fxxcom user-10=peshkai1 user-11=dimpalne user-12=eaptekam user-13=bauerin2 user-14=folklore user-15=conserva user-16=cupidpro user-17=vegemk1 user-18=euronic3 user-19=evberasm user-20=bonitavi user-21=mbmehani user-22=ismassag user-23=workbenc user-24=viplastc user-25=wineberr user-26=solarinv user-27=eurofarm user-28=electrol user-29=eliksirz user-30=naksorgm user-31=trigemat user-32=golakkom user-33=cleanerm user-34=animatem user-35=progress user-36=atspedco user-37=sssoluti user-38=solointe user-39=jaramk user-40=recorgmk user-41=taktcomm user-42=pelagini user-43=bbbustou user-44=biplmk user-45=kaoilmk user-46=albuname user-47=glammace user-48=imdskopj user-49=vtranseu
Sep 10 16:58:41 power sudo[4049306]: wp-toolkit : (command continued) user-50=pravekom user-51=infopor1 user-52=zapovim1 user-53=elektrot user-54=cosmatob user-55=euromaki user-56=nutrivim user-57=samasped user-58=chemhemc user-59=kardiome user-60=apgrupmk user-61=carrent1 user-62=bogdanos user-63=mediasol user-64=matratze user-65=euronic2 user-66=lblawcom user-67=nucktra1 user-68=mediatag user-69=intelek1 user-70=hausmark user-71=nikolov1 user-72=forzares user-73=nikimare user-74=aptekazd user-75=starluxm user-76=radekrat user-77=fffhpcwr user-78=versusmk user-79=fiziosmk user-80=ambitiou user-81=mapaspla user-82=solemor1 user-83=nationa2 user-84=onlinesh user-85=tcieuroc user-86=zdmgpsor user-87=supremel user-88=v5srybi9dcdx user-89=aquatech user-90=gorsajmk user-91=tehnologija user-92=taneccom user-93=vacuacti user-94=innofabl user-95=premiumi user-96=dslmk user-97=darkogor user-98=fnjorgmk user-99=prizmapl user-100=bozinovm user-101=inkigaic user-102=modernar user-103=urbanexp
Sep 10 16:58:41 power sudo[4049306]: wp-toolkit : (command continued) user-104=wikicamp user-105=infobadi user-106=mspmk user-107=detskagr user-108=spdcompu user-109=maleshne user-110=datelcom user-111=bizporta user-112=polyeste user-113=vfxnestc user-114=ivanjord user-115=groskome user-116=sedcmk user-117=univerz1 user-118=kujnamon user-119=gogovan1 user-120=velmk user-121=datalink user-122=mpbmk user-123=agrosind user-124=mfashion user-125=dhamachi user-126=goartsym user-127=volkanco user-128=workandt user-129=barececo user-130=delcevca user-131=simbiome user-132=getaldus user-133=rasmorgm user-134=skyapart user-135=makoasmk user-136=bianasho user-137=drleomk user-138=inotekso user-139=jpparkin user-140=daris user-141=butelmk user-142=premiums user-143=screenme user-144=arturaco user-145=nasaidni user-146=karpospo user-147=ideaplus user-148=dalmacom user-149=cetplatf user-150=premiuma user-151=kouzonco user-152=custome1 user-153=zampmk user-154=zvskopje user-155=busymard
Sep 10 16:58:41 power sudo[4049306]: wp-toolkit : (command continued) user-156=palenzok user-157=klimimk user-158=stokovna user-159=sparkupm user-160=bovincom user-161=stojano1 user-162=cabinetm user-163=vezilkac user-164=itradeco user-165=janiboja user-166=proverim user-167=dadarmk user-168=tealmk user-169=gocruise user-170=mstmmk user-171=goodnews user-172=dnevnoin user-173=gjorgeiv user-174=tradeyou user-175=rastiraz user-176=holiyayt user-177=stravelm user-178=robustco user-179=wondersp user-180=pecakome user-181=berbermk user-182=edomcomm user-183=herbalpl user-184=enochmk user-185=sprintst user-186=dikimk12 user-187=seloviro user-188=nolimits user-189=kolened1 user-190=centarba user-191=nlpmkorg user-192=pelagoni user-193=socioloz user-194=avtogumi user-195=evolvepl user-196=caramk user-197=hidrommk user-198=frizered user-199=ekostoc1 user-200=levantmk user-201=oncolog1 user-202=nefrolog user-203=hotammk user-204=cajsproc user-205=anitermc user-206=youthgua user-207=bauerbg
Sep 10 16:58:41 power sudo[4049306]: wp-toolkit : (command continued) user-208=uhostmk5 user-209=oouslave user-210=raremk user-211=stojnevi user-212=viewinn user-213=trudovop user-214=vmro user-215=enaspotc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:58:41 power sudo[4049306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:41 power sudo[4049306]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:41 power sudo[4049313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'find -H /home/berbermk/public_html -type d -name wp-includes -printf \'%h\\0\''
Sep 10 16:58:41 power sudo[4049313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049313]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/wp-content
Sep 10 16:58:42 power sudo[4049317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049317]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/wp-config.php
Sep 10 16:58:42 power sudo[4049323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049323]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/.wp-toolkit-ignore
Sep 10 16:58:42 power sudo[4049327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049327]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/.wp-toolkit-ignore
Sep 10 16:58:42 power sudo[4049332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049332]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Variables get_user_information --output=json'
Sep 10 16:58:42 power sudo[4049337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049337]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 16:58:42 power sudo[4049342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049342]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 16:58:42 power sudo[4049346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049346]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 16:58:42 power sudo[4049355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049355]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=berbermk --output=json'
Sep 10 16:58:42 power sudo[4049364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049364]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:42 power sudo[4049384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:58:42 power sudo[4049384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:42 power sudo[4049384]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:44 power sudo[4049432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:58:44 power sudo[4049432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:44 power sudo[4049432]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:46 power sudo[4049502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:58:46 power sudo[4049502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:46 power sudo[4049502]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:47 power sudo[4049529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 16:58:47 power sudo[4049529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:48 power sudo[4049529]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:48 power sudo[4049535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user berbermk --user-current --json'
Sep 10 16:58:48 power sudo[4049535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:48 power sudo[4049535]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:48 power sudo[4049544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk LangPHP php_get_vhost_versions --output=json'
Sep 10 16:58:48 power sudo[4049544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:48 power sudo[4049544]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:48 power sudo[4049553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep 10 16:58:48 power sudo[4049553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:49 power sudo[4049568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:58:49 power sudo[4049568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:49 power sudo[4049568]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:49 power sudo[4049553]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:49 power sudo[4049577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 16:58:49 power sudo[4049577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:49 power sudo[4049577]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:51 power sudo[4049616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:58:51 power sudo[4049616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:51 power sudo[4049616]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:51 power sudo[4049632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:58:51 power sudo[4049632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:51 power sudo[4049632]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:51 power sudo[4049639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:58:51 power sudo[4049639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:51 power sudo[4049639]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:51 power sudo[4049657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:58:51 power sudo[4049657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:51 power sudo[4049657]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:51 power sudo[4049668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 16:58:51 power sudo[4049668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:51 power sudo[4049688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:58:51 power sudo[4049688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:51 power sudo[4049688]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:51 power sudo[4049694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:58:51 power sudo[4049694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:51 power sudo[4049694]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:51 power sudo[4049668]: pam_unix(sudo:session): session closed for user root
Sep 10 16:58:51 power sudo[4049719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=stojano1 user-2=bovincom user-3=janiboja user-4=itradeco user-5=vezilkac user-6=cabinetm user-7=palenzok user-8=zampmk user-9=busymard user-10=zvskopje user-11=custome1 user-12=stokovna user-13=sparkupm user-14=klimimk user-15=kouzonco user-16=premiuma user-17=cetplatf user-18=dalmacom user-19=inotekso user-20=jpparkin user-21=drleomk user-22=nasaidni user-23=karpospo user-24=ideaplus user-25=screenme user-26=arturaco user-27=butelmk user-28=daris user-29=premiums user-30=barececo user-31=getaldus user-32=delcevca user-33=simbiome user-34=workandt user-35=dhamachi user-36=volkanco user-37=goartsym user-38=mfashion user-39=skyapart user-40=bianasho user-41=makoasmk user-42=rasmorgm user-43=datalink user-44=kujnamon user-45=univerz1 user-46=gogovan1 user-47=velmk user-48=mpbmk user-49=agrosind user-50=bizporta
Sep 10 16:58:51 power sudo[4049719]: wp-toolkit : (command continued) user-51=maleshne user-52=datelcom user-53=sedcmk user-54=ivanjord user-55=groskome user-56=polyeste user-57=vfxnestc user-58=wikicamp user-59=urbanexp user-60=spdcompu user-61=detskagr user-62=mspmk user-63=infobadi user-64=stojnevi user-65=oouslave user-66=raremk user-67=bauerbg user-68=uhostmk5 user-69=enaspotc user-70=trudovop user-71=viewinn user-72=vmro user-73=cajsproc user-74=hotammk user-75=anitermc user-76=youthgua user-77=hidrommk user-78=frizered user-79=caramk user-80=oncolog1 user-81=ekostoc1 user-82=levantmk user-83=nefrolog user-84=avtogumi user-85=socioloz user-86=pelagoni user-87=evolvepl user-88=seloviro user-89=kolened1 user-90=centarba user-91=nlpmkorg user-92=nolimits user-93=edomcomm user-94=berbermk user-95=dikimk12 user-96=herbalpl user-97=enochmk user-98=sprintst user-99=tradeyou user-100=gjorgeiv user-101=dnevnoin user-102=pecakome user-103=robustco user-104=stravelm user-105=wondersp
Sep 10 16:58:51 power sudo[4049719]: wp-toolkit : (command continued) user-106=holiyayt user-107=rastiraz user-108=tealmk user-109=dadarmk user-110=proverim user-111=goodnews user-112=mstmmk user-113=gocruise user-114=pelagini user-115=biplmk user-116=kaoilmk user-117=bbbustou user-118=sssoluti user-119=atspedco user-120=progress user-121=cleanerm user-122=animatem user-123=taktcomm user-124=recorgmk user-125=jaramk user-126=solointe user-127=eurofarm user-128=solarinv user-129=golakkom user-130=eliksirz user-131=naksorgm user-132=trigemat user-133=electrol user-134=workbenc user-135=ismassag user-136=mbmehani user-137=wineberr user-138=viplastc user-139=euronic3 user-140=cupidpro user-141=vegemk1 user-142=conserva user-143=evberasm user-144=bonitavi user-145=folklore user-146=bauerin2 user-147=aptekafa user-148=madzomk user-149=evacommk user-150=gradbai1 user-151=eaptekam user-152=dimpalne user-153=fxxcom user-154=peshkai1 user-155=tehnodro user-156=makdrone user-157=izzomk
Sep 10 16:58:51 power sudo[4049719]: wp-toolkit : (command continued) user-158=jpkomuna user-159=darkogor user-160=dslmk user-161=fnjorgmk user-162=prizmapl user-163=bozinovm user-164=vacuacti user-165=premiumi user-166=innofabl user-167=taneccom user-168=tehnologija user-169=modernar user-170=inkigaic user-171=zdmgpsor user-172=aquatech user-173=gorsajmk user-174=v5srybi9dcdx user-175=supremel user-176=onlinesh user-177=nationa2 user-178=solemor1 user-179=mapaspla user-180=tcieuroc user-181=fffhpcwr user-182=starluxm user-183=radekrat user-184=ambitiou user-185=fiziosmk user-186=versusmk user-187=mediatag user-188=intelek1 user-189=nucktra1 user-190=lblawcom user-191=nikimare user-192=aptekazd user-193=forzares user-194=nikolov1 user-195=hausmark user-196=carrent1 user-197=bogdanos user-198=mediasol user-199=apgrupmk user-200=kardiome user-201=matratze user-202=euronic2 user-203=euromaki user-204=cosmatob user-205=elektrot user-206=zapovim1 user-207=chemhemc user-208=samasped
Sep 10 16:58:51 power sudo[4049719]: wp-toolkit : (command continued) user-209=nutrivim user-210=imdskopj user-211=albuname user-212=glammace user-213=infopor1 user-214=vtranseu user-215=pravekom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 16:58:51 power sudo[4049719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:58:52 power sudo[4049719]: pam_unix(sudo:session): session closed for user root
Sep 10 16:59:11 power sudo[4050019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:59:11 power systemd[4050024]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 16:59:11 power sudo[4050019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:59:11 power sudo[4050019]: pam_unix(sudo:session): session closed for user root
Sep 10 16:59:11 power sudo[4050040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:59:11 power sudo[4050040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:59:11 power sudo[4050040]: pam_unix(sudo:session): session closed for user root
Sep 10 16:59:11 power sudo[4050045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:59:11 power sudo[4050045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:59:12 power sudo[4050045]: pam_unix(sudo:session): session closed for user root
Sep 10 16:59:12 power sudo[4050068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 16:59:12 power sudo[4050068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:59:12 power sudo[4050068]: pam_unix(sudo:session): session closed for user root
Sep 10 16:59:12 power sudo[4050073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:59:12 power sudo[4050073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:59:12 power sudo[4050073]: pam_unix(sudo:session): session closed for user root
Sep 10 16:59:12 power sudo[4050079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:59:12 power sudo[4050079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:59:12 power sudo[4050079]: pam_unix(sudo:session): session closed for user root
Sep 10 16:59:13 power sudo[4050098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 16:59:13 power sudo[4050098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:59:13 power sudo[4050098]: pam_unix(sudo:session): session closed for user root
Sep 10 16:59:13 power sudo[4050106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 16:59:13 power sudo[4050106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 16:59:13 power sudo[4050106]: pam_unix(sudo:session): session closed for user root
Sep 10 17:00:01 power systemd[4051047]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:00:01 power systemd[4051049]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 17:00:01 power systemd[4051050]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 17:00:01 power systemd[4051046]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:00:01 power systemd[4051053]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 17:04:01 power systemd[4056106]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:05:01 power systemd[4057042]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:05:01 power systemd[4057043]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:06:01 power systemd[4057991]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 17:07:01 power systemd[4059162]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 17:09:01 power systemd[4061252]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:10:01 power systemd[4062288]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:10:01 power systemd[4062287]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:12:01 power systemd[4064063]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 17:15:01 power systemd[4067355]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:15:01 power systemd[4067356]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:20:01 power systemd[4072580]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:20:01 power systemd[4072581]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:20:06 power sudo[4072737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:20:07 power sudo[4072737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:07 power sudo[4072737]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:07 power sudo[4072751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:20:07 power sudo[4072751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:07 power sudo[4072751]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:07 power sudo[4072769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:20:07 power sudo[4072769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:07 power sudo[4072769]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:07 power sudo[4072774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:20:07 power sudo[4072774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:07 power sudo[4072774]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:07 power sudo[4072799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pelagoni user-2=avtogumi user-3=socioloz user-4=evolvepl user-5=caramk user-6=frizered user-7=hidrommk user-8=nefrolog user-9=ekostoc1 user-10=levantmk user-11=oncolog1 user-12=hotammk user-13=cajsproc user-14=youthgua user-15=anitermc user-16=uhostmk5 user-17=bauerbg user-18=raremk user-19=oouslave user-20=stojnevi user-21=vmro user-22=viewinn user-23=trudovop user-24=enaspotc user-25=proverim user-26=dadarmk user-27=tealmk user-28=gocruise user-29=mstmmk user-30=goodnews user-31=dnevnoin user-32=gjorgeiv user-33=tradeyou user-34=rastiraz user-35=holiyayt user-36=wondersp user-37=stravelm user-38=robustco user-39=pecakome user-40=berbermk user-41=edomcomm user-42=sprintst user-43=enochmk user-44=herbalpl user-45=dikimk12 user-46=seloviro user-47=nolimits user-48=centarba user-49=nlpmkorg user-50=kolened1
Sep 10 17:20:07 power sudo[4072799]: wp-toolkit : (command continued) user-51=drleomk user-52=jpparkin user-53=inotekso user-54=premiums user-55=butelmk user-56=daris user-57=arturaco user-58=screenme user-59=ideaplus user-60=karpospo user-61=nasaidni user-62=dalmacom user-63=cetplatf user-64=premiuma user-65=kouzonco user-66=custome1 user-67=busymard user-68=zampmk user-69=zvskopje user-70=palenzok user-71=klimimk user-72=sparkupm user-73=stokovna user-74=bovincom user-75=stojano1 user-76=cabinetm user-77=vezilkac user-78=itradeco user-79=janiboja user-80=urbanexp user-81=wikicamp user-82=mspmk user-83=infobadi user-84=detskagr user-85=spdcompu user-86=datelcom user-87=maleshne user-88=bizporta user-89=vfxnestc user-90=polyeste user-91=groskome user-92=ivanjord user-93=sedcmk user-94=velmk user-95=gogovan1 user-96=univerz1 user-97=kujnamon user-98=datalink user-99=agrosind user-100=mpbmk user-101=mfashion user-102=goartsym user-103=volkanco user-104=dhamachi user-105=workandt
Sep 10 17:20:07 power sudo[4072799]: wp-toolkit : (command continued) user-106=simbiome user-107=getaldus user-108=delcevca user-109=barececo user-110=rasmorgm user-111=makoasmk user-112=bianasho user-113=skyapart user-114=radekrat user-115=starluxm user-116=fffhpcwr user-117=versusmk user-118=fiziosmk user-119=ambitiou user-120=mapaspla user-121=solemor1 user-122=nationa2 user-123=onlinesh user-124=tcieuroc user-125=zdmgpsor user-126=supremel user-127=v5srybi9dcdx user-128=gorsajmk user-129=aquatech user-130=tehnologija user-131=taneccom user-132=innofabl user-133=premiumi user-134=vacuacti user-135=bozinovm user-136=darkogor user-137=fnjorgmk user-138=prizmapl user-139=dslmk user-140=inkigaic user-141=modernar user-142=glammace user-143=albuname user-144=imdskopj user-145=vtranseu user-146=pravekom user-147=infopor1 user-148=zapovim1 user-149=elektrot user-150=cosmatob user-151=euromaki user-152=nutrivim user-153=samasped user-154=chemhemc user-155=kardiome user-156=apgrupmk
Sep 10 17:20:07 power sudo[4072799]: wp-toolkit : (command continued) user-157=mediasol user-158=carrent1 user-159=bogdanos user-160=euronic2 user-161=matratze user-162=lblawcom user-163=nucktra1 user-164=intelek1 user-165=mediatag user-166=nikolov1 user-167=hausmark user-168=forzares user-169=aptekazd user-170=nikimare user-171=mbmehani user-172=ismassag user-173=workbenc user-174=viplastc user-175=wineberr user-176=solarinv user-177=eurofarm user-178=electrol user-179=trigemat user-180=eliksirz user-181=naksorgm user-182=golakkom user-183=animatem user-184=cleanerm user-185=progress user-186=atspedco user-187=sssoluti user-188=solointe user-189=jaramk user-190=recorgmk user-191=taktcomm user-192=pelagini user-193=bbbustou user-194=biplmk user-195=kaoilmk user-196=makdrone user-197=tehnodro user-198=jpkomuna user-199=izzomk user-200=gradbai1 user-201=evacommk user-202=aptekafa user-203=madzomk user-204=peshkai1 user-205=fxxcom user-206=dimpalne user-207=eaptekam user-208=bauerin2
Sep 10 17:20:07 power sudo[4072799]: wp-toolkit : (command continued) user-209=folklore user-210=conserva user-211=vegemk1 user-212=cupidpro user-213=euronic3 user-214=bonitavi user-215=evberasm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:20:07 power sudo[4072799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:07 power sudo[4072799]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:08 power sudo[4072819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:20:08 power sudo[4072819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:08 power sudo[4072819]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:08 power sudo[4072828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:20:08 power sudo[4072828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:08 power sudo[4072828]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:14 power sudo[4072938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:20:14 power sudo[4072938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:14 power sudo[4072938]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:14 power sudo[4072947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:20:14 power sudo[4072947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:14 power sudo[4072947]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:14 power sudo[4072953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:20:14 power sudo[4072953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:14 power sudo[4072953]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:14 power sudo[4072965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=nucktra1 user-2=lblawcom user-3=intelek1 user-4=mediatag user-5=hausmark user-6=nikolov1 user-7=aptekazd user-8=nikimare user-9=forzares user-10=kardiome user-11=mediasol user-12=carrent1 user-13=bogdanos user-14=apgrupmk user-15=euronic2 user-16=matratze user-17=elektrot user-18=zapovim1 user-19=euromaki user-20=cosmatob user-21=nutrivim user-22=samasped user-23=chemhemc user-24=glammace user-25=albuname user-26=imdskopj user-27=pravekom user-28=vtranseu user-29=infopor1 user-30=taneccom user-31=tehnologija user-32=bozinovm user-33=fnjorgmk user-34=darkogor user-35=dslmk user-36=prizmapl user-37=innofabl user-38=premiumi user-39=vacuacti user-40=inkigaic user-41=modernar user-42=zdmgpsor user-43=v5srybi9dcdx user-44=supremel user-45=gorsajmk user-46=aquatech user-47=solemor1 user-48=mapaspla user-49=onlinesh
Sep 10 17:20:14 power sudo[4072965]: wp-toolkit : (command continued) user-50=nationa2 user-51=tcieuroc user-52=radekrat user-53=starluxm user-54=fffhpcwr user-55=versusmk user-56=ambitiou user-57=fiziosmk user-58=conserva user-59=euronic3 user-60=vegemk1 user-61=cupidpro user-62=bonitavi user-63=evberasm user-64=bauerin2 user-65=folklore user-66=gradbai1 user-67=evacommk user-68=madzomk user-69=aptekafa user-70=peshkai1 user-71=fxxcom user-72=eaptekam user-73=dimpalne user-74=makdrone user-75=tehnodro user-76=izzomk user-77=jpkomuna user-78=pelagini user-79=biplmk user-80=kaoilmk user-81=bbbustou user-82=progress user-83=animatem user-84=cleanerm user-85=atspedco user-86=sssoluti user-87=jaramk user-88=solointe user-89=taktcomm user-90=recorgmk user-91=solarinv user-92=eurofarm user-93=trigemat user-94=eliksirz user-95=naksorgm user-96=electrol user-97=golakkom user-98=mbmehani user-99=workbenc user-100=ismassag user-101=wineberr user-102=viplastc user-103=seloviro
Sep 10 17:20:14 power sudo[4072965]: wp-toolkit : (command continued) user-104=nolimits user-105=nlpmkorg user-106=centarba user-107=kolened1 user-108=edomcomm user-109=berbermk user-110=dikimk12 user-111=sprintst user-112=herbalpl user-113=enochmk user-114=dnevnoin user-115=tradeyou user-116=gjorgeiv user-117=holiyayt user-118=rastiraz user-119=pecakome user-120=wondersp user-121=stravelm user-122=robustco user-123=dadarmk user-124=proverim user-125=tealmk user-126=gocruise user-127=goodnews user-128=mstmmk user-129=raremk user-130=oouslave user-131=uhostmk5 user-132=bauerbg user-133=stojnevi user-134=enaspotc user-135=vmro user-136=trudovop user-137=viewinn user-138=cajsproc user-139=hotammk user-140=youthgua user-141=anitermc user-142=caramk user-143=frizered user-144=hidrommk user-145=nefrolog user-146=ekostoc1 user-147=levantmk user-148=oncolog1 user-149=pelagoni user-150=avtogumi user-151=socioloz user-152=evolvepl user-153=goartsym user-154=volkanco user-155=dhamachi
Sep 10 17:20:14 power sudo[4072965]: wp-toolkit : (command continued) user-156=mfashion user-157=simbiome user-158=delcevca user-159=getaldus user-160=barececo user-161=workandt user-162=rasmorgm user-163=makoasmk user-164=bianasho user-165=skyapart user-166=velmk user-167=gogovan1 user-168=kujnamon user-169=univerz1 user-170=datalink user-171=agrosind user-172=mpbmk user-173=datelcom user-174=maleshne user-175=bizporta user-176=vfxnestc user-177=polyeste user-178=sedcmk user-179=groskome user-180=ivanjord user-181=wikicamp user-182=urbanexp user-183=mspmk user-184=infobadi user-185=spdcompu user-186=detskagr user-187=bovincom user-188=stojano1 user-189=vezilkac user-190=cabinetm user-191=janiboja user-192=itradeco user-193=custome1 user-194=palenzok user-195=busymard user-196=zampmk user-197=zvskopje user-198=klimimk user-199=sparkupm user-200=stokovna user-201=cetplatf user-202=dalmacom user-203=kouzonco user-204=premiuma user-205=jpparkin user-206=inotekso user-207=drleomk
Sep 10 17:20:14 power sudo[4072965]: wp-toolkit : (command continued) user-208=premiums user-209=daris user-210=butelmk user-211=ideaplus user-212=karpospo user-213=nasaidni user-214=screenme user-215=arturaco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:20:14 power sudo[4072965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:15 power sudo[4072965]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:15 power sudo[4072983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk ResourceUsage get_usages --output=json'
Sep 10 17:20:15 power sudo[4072983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:15 power sudo[4072983]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:15 power sudo[4073001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=database_prefix --output=json'
Sep 10 17:20:15 power sudo[4073001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:15 power sudo[4073001]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:15 power sudo[4073006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql get_restrictions --output=json'
Sep 10 17:20:15 power sudo[4073006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:16 power sudo[4073006]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:16 power sudo[4073020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:20:16 power sudo[4073020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:16 power sudo[4073020]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:16 power sudo[4073029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/
Sep 10 17:20:16 power sudo[4073029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:16 power sudo[4073029]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:16 power sudo[4073034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk find /home/berbermk/public_html/ -mindepth 1 -maxdepth 1 -printf %f\\0
Sep 10 17:20:16 power sudo[4073034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:16 power sudo[4073034]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:16 power sudo[4073039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/wordpress
Sep 10 17:20:16 power sudo[4073039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:16 power sudo[4073039]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:16 power sudo[4073046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:20:16 power sudo[4073046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:16 power sudo[4073046]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:16 power sudo[4073054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql list_databases --output=json'
Sep 10 17:20:16 power sudo[4073054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:16 power sudo[4073054]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:17 power sudo[4073070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:20:17 power sudo[4073070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:17 power sudo[4073070]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:17 power sudo[4073075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:20:17 power sudo[4073075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:17 power sudo[4073075]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:17 power sudo[4073080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:20:17 power sudo[4073080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:17 power sudo[4073080]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:17 power sudo[4073089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=kaoilmk user-2=biplmk user-3=bbbustou user-4=pelagini user-5=jaramk user-6=solointe user-7=recorgmk user-8=taktcomm user-9=progress user-10=cleanerm user-11=animatem user-12=sssoluti user-13=atspedco user-14=naksorgm user-15=eliksirz user-16=trigemat user-17=electrol user-18=golakkom user-19=solarinv user-20=eurofarm user-21=wineberr user-22=viplastc user-23=mbmehani user-24=workbenc user-25=ismassag user-26=evberasm user-27=bonitavi user-28=conserva user-29=euronic3 user-30=cupidpro user-31=vegemk1 user-32=bauerin2 user-33=folklore user-34=fxxcom user-35=peshkai1 user-36=eaptekam user-37=dimpalne user-38=gradbai1 user-39=aptekafa user-40=madzomk user-41=evacommk user-42=izzomk user-43=jpkomuna user-44=makdrone user-45=tehnodro user-46=inkigaic user-47=modernar user-48=taneccom user-49=tehnologija
Sep 10 17:20:17 power sudo[4073089]: wp-toolkit : (command continued) user-50=darkogor user-51=prizmapl user-52=fnjorgmk user-53=dslmk user-54=bozinovm user-55=vacuacti user-56=innofabl user-57=premiumi user-58=v5srybi9dcdx user-59=supremel user-60=aquatech user-61=gorsajmk user-62=zdmgpsor user-63=tcieuroc user-64=solemor1 user-65=mapaspla user-66=onlinesh user-67=nationa2 user-68=versusmk user-69=ambitiou user-70=fiziosmk user-71=starluxm user-72=radekrat user-73=fffhpcwr user-74=hausmark user-75=nikolov1 user-76=nikimare user-77=aptekazd user-78=forzares user-79=nucktra1 user-80=lblawcom user-81=mediatag user-82=intelek1 user-83=matratze user-84=euronic2 user-85=kardiome user-86=carrent1 user-87=bogdanos user-88=mediasol user-89=apgrupmk user-90=nutrivim user-91=chemhemc user-92=samasped user-93=zapovim1 user-94=elektrot user-95=cosmatob user-96=euromaki user-97=pravekom user-98=vtranseu user-99=infopor1 user-100=albuname user-101=glammace user-102=imdskopj user-103=vezilkac
Sep 10 17:20:17 power sudo[4073089]: wp-toolkit : (command continued) user-104=cabinetm user-105=janiboja user-106=itradeco user-107=bovincom user-108=stojano1 user-109=klimimk user-110=stokovna user-111=sparkupm user-112=custome1 user-113=palenzok user-114=zvskopje user-115=zampmk user-116=busymard user-117=cetplatf user-118=dalmacom user-119=kouzonco user-120=premiuma user-121=butelmk user-122=daris user-123=premiums user-124=nasaidni user-125=karpospo user-126=ideaplus user-127=screenme user-128=arturaco user-129=inotekso user-130=jpparkin user-131=drleomk user-132=rasmorgm user-133=skyapart user-134=makoasmk user-135=bianasho user-136=dhamachi user-137=goartsym user-138=volkanco user-139=mfashion user-140=barececo user-141=delcevca user-142=simbiome user-143=getaldus user-144=workandt user-145=mpbmk user-146=agrosind user-147=kujnamon user-148=univerz1 user-149=gogovan1 user-150=velmk user-151=datalink user-152=polyeste user-153=vfxnestc user-154=sedcmk user-155=ivanjord
Sep 10 17:20:17 power sudo[4073089]: wp-toolkit : (command continued) user-156=groskome user-157=maleshne user-158=datelcom user-159=bizporta user-160=mspmk user-161=infobadi user-162=spdcompu user-163=detskagr user-164=wikicamp user-165=urbanexp user-166=enaspotc user-167=trudovop user-168=viewinn user-169=vmro user-170=oouslave user-171=raremk user-172=bauerbg user-173=uhostmk5 user-174=stojnevi user-175=anitermc user-176=youthgua user-177=cajsproc user-178=hotammk user-179=ekostoc1 user-180=oncolog1 user-181=levantmk user-182=nefrolog user-183=caramk user-184=hidrommk user-185=frizered user-186=evolvepl user-187=pelagoni user-188=socioloz user-189=avtogumi user-190=nolimits user-191=kolened1 user-192=centarba user-193=nlpmkorg user-194=seloviro user-195=dikimk12 user-196=enochmk user-197=herbalpl user-198=sprintst user-199=edomcomm user-200=berbermk user-201=holiyayt user-202=rastiraz user-203=pecakome user-204=stravelm user-205=robustco user-206=wondersp user-207=dnevnoin
Sep 10 17:20:17 power sudo[4073089]: wp-toolkit : (command continued) user-208=gjorgeiv user-209=tradeyou user-210=gocruise user-211=goodnews user-212=mstmmk user-213=dadarmk user-214=proverim user-215=tealmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:20:17 power sudo[4073089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:17 power sudo[4073089]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:17 power sudo[4073101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:20:18 power sudo[4073101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:18 power sudo[4073101]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:18 power sudo[4073105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/wordpress
Sep 10 17:20:18 power sudo[4073105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:18 power sudo[4073105]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:26 power sudo[4073310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:20:26 power sudo[4073310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:26 power sudo[4073310]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:26 power sudo[4073315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:20:26 power sudo[4073315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:26 power sudo[4073315]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:26 power sudo[4073321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:20:26 power sudo[4073321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:26 power sudo[4073321]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:27 power sudo[4073365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:20:27 power sudo[4073365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:27 power sudo[4073365]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:27 power sudo[4073373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:20:27 power sudo[4073373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:27 power sudo[4073373]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:31 power sudo[4073443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:20:31 power sudo[4073443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:31 power sudo[4073443]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:31 power sudo[4073455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:20:31 power sudo[4073455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:31 power sudo[4073455]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:31 power sudo[4073463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:20:31 power sudo[4073463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:31 power sudo[4073463]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:31 power sudo[4073476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=ivanjord user-2=groskome user-3=sedcmk user-4=vfxnestc user-5=polyeste user-6=bizporta user-7=datelcom user-8=maleshne user-9=detskagr user-10=spdcompu user-11=mspmk user-12=infobadi user-13=urbanexp user-14=wikicamp user-15=bianasho user-16=makoasmk user-17=skyapart user-18=rasmorgm user-19=workandt user-20=simbiome user-21=delcevca user-22=getaldus user-23=barececo user-24=mfashion user-25=volkanco user-26=goartsym user-27=dhamachi user-28=agrosind user-29=mpbmk user-30=datalink user-31=gogovan1 user-32=velmk user-33=kujnamon user-34=univerz1 user-35=premiuma user-36=kouzonco user-37=dalmacom user-38=cetplatf user-39=screenme user-40=arturaco user-41=ideaplus user-42=karpospo user-43=nasaidni user-44=premiums user-45=butelmk user-46=daris user-47=drleomk user-48=jpparkin user-49=inotekso user-50=itradeco
Sep 10 17:20:31 power sudo[4073476]: wp-toolkit : (command continued) user-51=janiboja user-52=cabinetm user-53=vezilkac user-54=stojano1 user-55=bovincom user-56=sparkupm user-57=stokovna user-58=klimimk user-59=zampmk user-60=zvskopje user-61=busymard user-62=palenzok user-63=custome1 user-64=wondersp user-65=stravelm user-66=robustco user-67=pecakome user-68=rastiraz user-69=holiyayt user-70=tradeyou user-71=gjorgeiv user-72=dnevnoin user-73=mstmmk user-74=goodnews user-75=gocruise user-76=tealmk user-77=proverim user-78=dadarmk user-79=centarba user-80=nlpmkorg user-81=kolened1 user-82=nolimits user-83=seloviro user-84=sprintst user-85=enochmk user-86=herbalpl user-87=dikimk12 user-88=berbermk user-89=edomcomm user-90=nefrolog user-91=oncolog1 user-92=ekostoc1 user-93=levantmk user-94=frizered user-95=hidrommk user-96=caramk user-97=evolvepl user-98=avtogumi user-99=socioloz user-100=pelagoni user-101=vmro user-102=trudovop user-103=viewinn user-104=enaspotc user-105=stojnevi
Sep 10 17:20:31 power sudo[4073476]: wp-toolkit : (command continued) user-106=uhostmk5 user-107=bauerbg user-108=raremk user-109=oouslave user-110=youthgua user-111=anitermc user-112=hotammk user-113=cajsproc user-114=dimpalne user-115=eaptekam user-116=peshkai1 user-117=fxxcom user-118=evacommk user-119=madzomk user-120=aptekafa user-121=gradbai1 user-122=jpkomuna user-123=izzomk user-124=tehnodro user-125=makdrone user-126=bonitavi user-127=evberasm user-128=vegemk1 user-129=cupidpro user-130=euronic3 user-131=conserva user-132=folklore user-133=bauerin2 user-134=golakkom user-135=electrol user-136=trigemat user-137=eliksirz user-138=naksorgm user-139=eurofarm user-140=solarinv user-141=viplastc user-142=wineberr user-143=ismassag user-144=workbenc user-145=mbmehani user-146=bbbustou user-147=kaoilmk user-148=biplmk user-149=pelagini user-150=recorgmk user-151=taktcomm user-152=solointe user-153=jaramk user-154=sssoluti user-155=atspedco user-156=animatem user-157=cleanerm
Sep 10 17:20:31 power sudo[4073476]: wp-toolkit : (command continued) user-158=progress user-159=chemhemc user-160=samasped user-161=nutrivim user-162=euromaki user-163=cosmatob user-164=zapovim1 user-165=elektrot user-166=infopor1 user-167=pravekom user-168=vtranseu user-169=imdskopj user-170=glammace user-171=albuname user-172=forzares user-173=aptekazd user-174=nikimare user-175=hausmark user-176=nikolov1 user-177=intelek1 user-178=mediatag user-179=lblawcom user-180=nucktra1 user-181=euronic2 user-182=matratze user-183=apgrupmk user-184=mediasol user-185=carrent1 user-186=bogdanos user-187=kardiome user-188=tcieuroc user-189=nationa2 user-190=onlinesh user-191=mapaspla user-192=solemor1 user-193=fiziosmk user-194=ambitiou user-195=versusmk user-196=fffhpcwr user-197=radekrat user-198=starluxm user-199=modernar user-200=inkigaic user-201=innofabl user-202=premiumi user-203=vacuacti user-204=bozinovm user-205=darkogor user-206=prizmapl user-207=fnjorgmk user-208=dslmk
Sep 10 17:20:31 power sudo[4073476]: wp-toolkit : (command continued) user-209=tehnologija user-210=taneccom user-211=gorsajmk user-212=aquatech user-213=supremel user-214=v5srybi9dcdx user-215=zdmgpsor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:20:31 power sudo[4073476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:31 power sudo[4073476]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:31 power sudo[4073495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk ResourceUsage get_usages --output=json'
Sep 10 17:20:31 power sudo[4073495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:32 power sudo[4073495]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:32 power sudo[4073512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=database_prefix --output=json'
Sep 10 17:20:32 power sudo[4073512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:32 power sudo[4073512]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:32 power sudo[4073519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql get_restrictions --output=json'
Sep 10 17:20:32 power sudo[4073519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:32 power sudo[4073519]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:32 power sudo[4073529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:20:32 power sudo[4073529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:32 power sudo[4073529]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:32 power sudo[4073534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/
Sep 10 17:20:32 power sudo[4073534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:32 power sudo[4073534]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:32 power sudo[4073539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk find /home/berbermk/public_html/ -mindepth 1 -maxdepth 1 -printf %f\\0
Sep 10 17:20:32 power sudo[4073539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:33 power sudo[4073539]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:33 power sudo[4073544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/wordpress
Sep 10 17:20:33 power sudo[4073544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:33 power sudo[4073544]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:33 power sudo[4073549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:20:33 power sudo[4073549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:33 power sudo[4073549]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:33 power sudo[4073555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql list_databases --output=json'
Sep 10 17:20:33 power sudo[4073555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:33 power sudo[4073555]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:33 power sudo[4073578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:20:33 power sudo[4073578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:33 power sudo[4073578]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:33 power sudo[4073585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:20:33 power sudo[4073585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:33 power sudo[4073585]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:34 power sudo[4073592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:20:34 power sudo[4073592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:34 power sudo[4073592]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:34 power sudo[4073600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pelagini user-2=biplmk user-3=kaoilmk user-4=bbbustou user-5=sssoluti user-6=atspedco user-7=progress user-8=animatem user-9=cleanerm user-10=taktcomm user-11=recorgmk user-12=jaramk user-13=solointe user-14=eurofarm user-15=solarinv user-16=golakkom user-17=trigemat user-18=eliksirz user-19=naksorgm user-20=electrol user-21=workbenc user-22=ismassag user-23=mbmehani user-24=wineberr user-25=viplastc user-26=euronic3 user-27=vegemk1 user-28=cupidpro user-29=conserva user-30=bonitavi user-31=evberasm user-32=folklore user-33=bauerin2 user-34=evacommk user-35=madzomk user-36=aptekafa user-37=gradbai1 user-38=eaptekam user-39=dimpalne user-40=peshkai1 user-41=fxxcom user-42=tehnodro user-43=makdrone user-44=izzomk user-45=jpkomuna user-46=bozinovm user-47=fnjorgmk user-48=darkogor user-49=dslmk user-50=prizmapl
Sep 10 17:20:34 power sudo[4073600]: wp-toolkit : (command continued) user-51=premiumi user-52=innofabl user-53=vacuacti user-54=taneccom user-55=tehnologija user-56=modernar user-57=inkigaic user-58=zdmgpsor user-59=gorsajmk user-60=aquatech user-61=v5srybi9dcdx user-62=supremel user-63=onlinesh user-64=nationa2 user-65=solemor1 user-66=mapaspla user-67=tcieuroc user-68=fffhpcwr user-69=radekrat user-70=starluxm user-71=ambitiou user-72=fiziosmk user-73=versusmk user-74=intelek1 user-75=mediatag user-76=nucktra1 user-77=lblawcom user-78=aptekazd user-79=nikimare user-80=forzares user-81=nikolov1 user-82=hausmark user-83=mediasol user-84=bogdanos user-85=carrent1 user-86=apgrupmk user-87=kardiome user-88=euronic2 user-89=matratze user-90=euromaki user-91=cosmatob user-92=zapovim1 user-93=elektrot user-94=chemhemc user-95=samasped user-96=nutrivim user-97=imdskopj user-98=glammace user-99=albuname user-100=infopor1 user-101=pravekom user-102=vtranseu user-103=stojano1
Sep 10 17:20:34 power sudo[4073600]: wp-toolkit : (command continued) user-104=bovincom user-105=janiboja user-106=itradeco user-107=vezilkac user-108=cabinetm user-109=palenzok user-110=zvskopje user-111=zampmk user-112=busymard user-113=custome1 user-114=sparkupm user-115=stokovna user-116=klimimk user-117=kouzonco user-118=premiuma user-119=cetplatf user-120=dalmacom user-121=jpparkin user-122=inotekso user-123=drleomk user-124=ideaplus user-125=nasaidni user-126=karpospo user-127=arturaco user-128=screenme user-129=premiums user-130=butelmk user-131=daris user-132=delcevca user-133=simbiome user-134=getaldus user-135=barececo user-136=workandt user-137=goartsym user-138=volkanco user-139=dhamachi user-140=mfashion user-141=bianasho user-142=makoasmk user-143=skyapart user-144=rasmorgm user-145=datalink user-146=velmk user-147=gogovan1 user-148=univerz1 user-149=kujnamon user-150=agrosind user-151=mpbmk user-152=bizporta user-153=datelcom user-154=maleshne user-155=sedcmk
Sep 10 17:20:34 power sudo[4073600]: wp-toolkit : (command continued) user-156=groskome user-157=ivanjord user-158=vfxnestc user-159=polyeste user-160=wikicamp user-161=urbanexp user-162=spdcompu user-163=detskagr user-164=mspmk user-165=infobadi user-166=stojnevi user-167=raremk user-168=oouslave user-169=uhostmk5 user-170=bauerbg user-171=enaspotc user-172=vmro user-173=viewinn user-174=trudovop user-175=cajsproc user-176=hotammk user-177=youthgua user-178=anitermc user-179=frizered user-180=hidrommk user-181=caramk user-182=nefrolog user-183=ekostoc1 user-184=oncolog1 user-185=levantmk user-186=avtogumi user-187=socioloz user-188=pelagoni user-189=evolvepl user-190=seloviro user-191=nlpmkorg user-192=centarba user-193=kolened1 user-194=nolimits user-195=edomcomm user-196=berbermk user-197=dikimk12 user-198=sprintst user-199=enochmk user-200=herbalpl user-201=gjorgeiv user-202=tradeyou user-203=dnevnoin user-204=pecakome user-205=wondersp user-206=stravelm user-207=robustco
Sep 10 17:20:34 power sudo[4073600]: wp-toolkit : (command continued) user-208=holiyayt user-209=rastiraz user-210=tealmk user-211=dadarmk user-212=proverim user-213=goodnews user-214=mstmmk user-215=gocruise feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:20:34 power sudo[4073600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:34 power sudo[4073600]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:34 power sudo[4073612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:20:34 power sudo[4073612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:34 power sudo[4073612]: pam_unix(sudo:session): session closed for user root
Sep 10 17:20:34 power sudo[4073617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/wordpress
Sep 10 17:20:34 power sudo[4073617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:20:34 power sudo[4073617]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:00 power sudo[4074141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:21:00 power systemd[4074146]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:21:00 power sudo[4074141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:00 power sudo[4074141]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:00 power sudo[4074161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:21:00 power sudo[4074161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:00 power sudo[4074161]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:00 power sudo[4074166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:21:00 power sudo[4074166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:00 power sudo[4074166]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:00 power sudo[4074171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:21:00 power sudo[4074171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074171]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=radekrat user-2=starluxm user-3=fffhpcwr user-4=versusmk user-5=fiziosmk user-6=ambitiou user-7=mapaspla user-8=solemor1 user-9=nationa2 user-10=onlinesh user-11=tcieuroc user-12=zdmgpsor user-13=supremel user-14=v5srybi9dcdx user-15=gorsajmk user-16=aquatech user-17=tehnologija user-18=taneccom user-19=premiumi user-20=innofabl user-21=vacuacti user-22=bozinovm user-23=prizmapl user-24=darkogor user-25=fnjorgmk user-26=dslmk user-27=inkigaic user-28=modernar user-29=glammace user-30=albuname user-31=imdskopj user-32=vtranseu user-33=pravekom user-34=infopor1 user-35=elektrot user-36=zapovim1 user-37=cosmatob user-38=euromaki user-39=nutrivim user-40=chemhemc user-41=samasped user-42=kardiome user-43=apgrupmk user-44=mediasol user-45=carrent1 user-46=bogdanos user-47=euronic2 user-48=matratze
Sep 10 17:21:01 power sudo[4074178]: wp-toolkit : (command continued) user-49=lblawcom user-50=nucktra1 user-51=intelek1 user-52=mediatag user-53=hausmark user-54=nikolov1 user-55=forzares user-56=aptekazd user-57=nikimare user-58=mbmehani user-59=ismassag user-60=workbenc user-61=viplastc user-62=wineberr user-63=solarinv user-64=eurofarm user-65=electrol user-66=trigemat user-67=naksorgm user-68=eliksirz user-69=golakkom user-70=animatem user-71=cleanerm user-72=progress user-73=atspedco user-74=sssoluti user-75=solointe user-76=jaramk user-77=recorgmk user-78=taktcomm user-79=pelagini user-80=bbbustou user-81=biplmk user-82=kaoilmk user-83=makdrone user-84=tehnodro user-85=jpkomuna user-86=izzomk user-87=gradbai1 user-88=evacommk user-89=aptekafa user-90=madzomk user-91=peshkai1 user-92=fxxcom user-93=dimpalne user-94=eaptekam user-95=bauerin2 user-96=folklore user-97=conserva user-98=vegemk1 user-99=cupidpro user-100=euronic3 user-101=bonitavi user-102=evberasm
Sep 10 17:21:01 power sudo[4074178]: wp-toolkit : (command continued) user-103=pelagoni user-104=avtogumi user-105=socioloz user-106=evolvepl user-107=caramk user-108=frizered user-109=hidrommk user-110=nefrolog user-111=ekostoc1 user-112=oncolog1 user-113=levantmk user-114=hotammk user-115=cajsproc user-116=youthgua user-117=anitermc user-118=uhostmk5 user-119=bauerbg user-120=raremk user-121=oouslave user-122=stojnevi user-123=vmro user-124=trudovop user-125=viewinn user-126=enaspotc user-127=proverim user-128=dadarmk user-129=tealmk user-130=gocruise user-131=mstmmk user-132=goodnews user-133=dnevnoin user-134=tradeyou user-135=gjorgeiv user-136=rastiraz user-137=holiyayt user-138=wondersp user-139=robustco user-140=stravelm user-141=pecakome user-142=berbermk user-143=edomcomm user-144=sprintst user-145=herbalpl user-146=enochmk user-147=dikimk12 user-148=seloviro user-149=nolimits user-150=nlpmkorg user-151=centarba user-152=kolened1 user-153=drleomk user-154=jpparkin
Sep 10 17:21:01 power sudo[4074178]: wp-toolkit : (command continued) user-155=inotekso user-156=premiums user-157=butelmk user-158=daris user-159=screenme user-160=arturaco user-161=ideaplus user-162=nasaidni user-163=karpospo user-164=dalmacom user-165=cetplatf user-166=premiuma user-167=kouzonco user-168=custome1 user-169=busymard user-170=zampmk user-171=zvskopje user-172=palenzok user-173=klimimk user-174=sparkupm user-175=stokovna user-176=bovincom user-177=stojano1 user-178=cabinetm user-179=vezilkac user-180=itradeco user-181=janiboja user-182=urbanexp user-183=wikicamp user-184=mspmk user-185=infobadi user-186=detskagr user-187=spdcompu user-188=datelcom user-189=maleshne user-190=bizporta user-191=vfxnestc user-192=polyeste user-193=ivanjord user-194=groskome user-195=sedcmk user-196=velmk user-197=gogovan1 user-198=univerz1 user-199=kujnamon user-200=datalink user-201=agrosind user-202=mpbmk user-203=mfashion user-204=volkanco user-205=goartsym user-206=dhamachi
Sep 10 17:21:01 power sudo[4074178]: wp-toolkit : (command continued) user-207=workandt user-208=delcevca user-209=simbiome user-210=getaldus user-211=barececo user-212=rasmorgm user-213=bianasho user-214=makoasmk user-215=skyapart feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:21:01 power sudo[4074178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074178]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'find -H /home/berbermk/public_html -type d -name wp-includes -printf \'%h\\0\''
Sep 10 17:21:01 power sudo[4074195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074195]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/wp-content
Sep 10 17:21:01 power sudo[4074199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074199]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/wp-config.php
Sep 10 17:21:01 power sudo[4074203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074203]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/.wp-toolkit-ignore
Sep 10 17:21:01 power sudo[4074208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074208]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/.wp-toolkit-ignore
Sep 10 17:21:01 power sudo[4074213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074213]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:21:01 power sudo[4074226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Variables get_user_information --output=json'
Sep 10 17:21:01 power sudo[4074224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074224]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074226]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 17:21:01 power sudo[4074235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:01 power sudo[4074235]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:01 power sudo[4074239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:21:01 power sudo[4074239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:02 power sudo[4074239]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:02 power sudo[4074245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 17:21:02 power sudo[4074245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:02 power sudo[4074245]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:02 power sudo[4074253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=berbermk --output=json'
Sep 10 17:21:02 power sudo[4074253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:02 power sudo[4074253]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:03 power sudo[4074307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:21:03 power sudo[4074307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:03 power sudo[4074307]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:06 power sudo[4074376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:21:06 power sudo[4074376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:06 power sudo[4074376]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:06 power sudo[4074381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:21:06 power sudo[4074381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:06 power sudo[4074381]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:06 power sudo[4074388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:21:06 power sudo[4074388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:06 power sudo[4074388]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:06 power sudo[4074397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:21:06 power sudo[4074397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:06 power sudo[4074397]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:06 power sudo[4074405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=conserva user-2=euronic3 user-3=cupidpro user-4=vegemk1 user-5=evberasm user-6=bonitavi user-7=bauerin2 user-8=folklore user-9=gradbai1 user-10=aptekafa user-11=madzomk user-12=evacommk user-13=fxxcom user-14=peshkai1 user-15=eaptekam user-16=dimpalne user-17=makdrone user-18=tehnodro user-19=izzomk user-20=jpkomuna user-21=pelagini user-22=kaoilmk user-23=biplmk user-24=bbbustou user-25=progress user-26=cleanerm user-27=animatem user-28=sssoluti user-29=atspedco user-30=jaramk user-31=solointe user-32=taktcomm user-33=recorgmk user-34=solarinv user-35=eurofarm user-36=eliksirz user-37=naksorgm user-38=trigemat user-39=electrol user-40=golakkom user-41=mbmehani user-42=workbenc user-43=ismassag user-44=wineberr user-45=viplastc user-46=nucktra1 user-47=lblawcom user-48=mediatag user-49=intelek1
Sep 10 17:21:06 power sudo[4074405]: wp-toolkit : (command continued) user-50=nikolov1 user-51=hausmark user-52=nikimare user-53=aptekazd user-54=forzares user-55=kardiome user-56=bogdanos user-57=carrent1 user-58=mediasol user-59=apgrupmk user-60=matratze user-61=euronic2 user-62=zapovim1 user-63=elektrot user-64=cosmatob user-65=euromaki user-66=nutrivim user-67=samasped user-68=chemhemc user-69=albuname user-70=glammace user-71=imdskopj user-72=vtranseu user-73=pravekom user-74=infopor1 user-75=taneccom user-76=tehnologija user-77=dslmk user-78=darkogor user-79=fnjorgmk user-80=prizmapl user-81=bozinovm user-82=vacuacti user-83=innofabl user-84=premiumi user-85=inkigaic user-86=modernar user-87=zdmgpsor user-88=v5srybi9dcdx user-89=supremel user-90=aquatech user-91=gorsajmk user-92=solemor1 user-93=mapaspla user-94=onlinesh user-95=nationa2 user-96=tcieuroc user-97=starluxm user-98=radekrat user-99=fffhpcwr user-100=versusmk user-101=ambitiou user-102=fiziosmk user-103=dhamachi
Sep 10 17:21:06 power sudo[4074405]: wp-toolkit : (command continued) user-104=goartsym user-105=volkanco user-106=mfashion user-107=barececo user-108=simbiome user-109=delcevca user-110=getaldus user-111=workandt user-112=rasmorgm user-113=skyapart user-114=makoasmk user-115=bianasho user-116=univerz1 user-117=kujnamon user-118=velmk user-119=gogovan1 user-120=datalink user-121=mpbmk user-122=agrosind user-123=maleshne user-124=datelcom user-125=bizporta user-126=polyeste user-127=vfxnestc user-128=sedcmk user-129=groskome user-130=ivanjord user-131=wikicamp user-132=urbanexp user-133=infobadi user-134=mspmk user-135=spdcompu user-136=detskagr user-137=bovincom user-138=stojano1 user-139=vezilkac user-140=cabinetm user-141=janiboja user-142=itradeco user-143=custome1 user-144=palenzok user-145=zampmk user-146=zvskopje user-147=busymard user-148=klimimk user-149=stokovna user-150=sparkupm user-151=cetplatf user-152=dalmacom user-153=kouzonco user-154=premiuma user-155=inotekso
Sep 10 17:21:06 power sudo[4074405]: wp-toolkit : (command continued) user-156=jpparkin user-157=drleomk user-158=daris user-159=butelmk user-160=premiums user-161=nasaidni user-162=karpospo user-163=ideaplus user-164=screenme user-165=arturaco user-166=seloviro user-167=nolimits user-168=kolened1 user-169=centarba user-170=nlpmkorg user-171=edomcomm user-172=berbermk user-173=dikimk12 user-174=enochmk user-175=herbalpl user-176=sprintst user-177=dnevnoin user-178=tradeyou user-179=gjorgeiv user-180=holiyayt user-181=rastiraz user-182=pecakome user-183=robustco user-184=stravelm user-185=wondersp user-186=dadarmk user-187=proverim user-188=tealmk user-189=gocruise user-190=goodnews user-191=mstmmk user-192=oouslave user-193=raremk user-194=bauerbg user-195=uhostmk5 user-196=stojnevi user-197=enaspotc user-198=viewinn user-199=trudovop user-200=vmro user-201=cajsproc user-202=hotammk user-203=anitermc user-204=youthgua user-205=caramk user-206=hidrommk user-207=frizered
Sep 10 17:21:06 power sudo[4074405]: wp-toolkit : (command continued) user-208=ekostoc1 user-209=oncolog1 user-210=levantmk user-211=nefrolog user-212=pelagoni user-213=socioloz user-214=avtogumi user-215=evolvepl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:21:06 power sudo[4074405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:07 power sudo[4074405]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:07 power sudo[4074454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:21:07 power sudo[4074454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:07 power sudo[4074454]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:07 power sudo[4074473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:21:07 power sudo[4074473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:07 power sudo[4074478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 10 17:21:07 power sudo[4074478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:07 power sudo[4074473]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:07 power sudo[4074491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:21:07 power sudo[4074491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:08 power sudo[4074478]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:08 power sudo[4074505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user berbermk --user-current --json'
Sep 10 17:21:08 power sudo[4074505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:08 power sudo[4074491]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:08 power sudo[4074513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=onlinesh user-2=nationa2 user-3=solemor1 user-4=mapaspla user-5=tcieuroc user-6=fffhpcwr user-7=radekrat user-8=starluxm user-9=ambitiou user-10=fiziosmk user-11=versusmk user-12=bozinovm user-13=darkogor user-14=dslmk user-15=fnjorgmk user-16=prizmapl user-17=innofabl user-18=premiumi user-19=vacuacti user-20=taneccom user-21=tehnologija user-22=modernar user-23=inkigaic user-24=zdmgpsor user-25=gorsajmk user-26=aquatech user-27=v5srybi9dcdx user-28=supremel user-29=cosmatob user-30=euromaki user-31=zapovim1 user-32=elektrot user-33=samasped user-34=chemhemc user-35=nutrivim user-36=imdskopj user-37=glammace user-38=albuname user-39=infopor1 user-40=vtranseu user-41=pravekom user-42=intelek1 user-43=mediatag user-44=nucktra1 user-45=lblawcom user-46=aptekazd user-47=nikimare user-48=forzares user-49=nikolov1
Sep 10 17:21:08 power sudo[4074513]: wp-toolkit : (command continued) user-50=hausmark user-51=mediasol user-52=bogdanos user-53=carrent1 user-54=apgrupmk user-55=kardiome user-56=euronic2 user-57=matratze user-58=eurofarm user-59=solarinv user-60=golakkom user-61=trigemat user-62=naksorgm user-63=eliksirz user-64=electrol user-65=workbenc user-66=ismassag user-67=mbmehani user-68=wineberr user-69=viplastc user-70=pelagini user-71=biplmk user-72=kaoilmk user-73=bbbustou user-74=sssoluti user-75=atspedco user-76=progress user-77=animatem user-78=cleanerm user-79=recorgmk user-80=taktcomm user-81=jaramk user-82=solointe user-83=evacommk user-84=aptekafa user-85=madzomk user-86=gradbai1 user-87=eaptekam user-88=dimpalne user-89=peshkai1 user-90=fxxcom user-91=tehnodro user-92=makdrone user-93=izzomk user-94=jpkomuna user-95=euronic3 user-96=vegemk1 user-97=cupidpro user-98=conserva user-99=bonitavi user-100=evberasm user-101=folklore user-102=bauerin2 user-103=frizered
Sep 10 17:21:08 power sudo[4074513]: wp-toolkit : (command continued) user-104=hidrommk user-105=caramk user-106=nefrolog user-107=ekostoc1 user-108=levantmk user-109=oncolog1 user-110=socioloz user-111=avtogumi user-112=pelagoni user-113=evolvepl user-114=stojnevi user-115=raremk user-116=oouslave user-117=uhostmk5 user-118=bauerbg user-119=enaspotc user-120=vmro user-121=viewinn user-122=trudovop user-123=cajsproc user-124=hotammk user-125=youthgua user-126=anitermc user-127=tradeyou user-128=gjorgeiv user-129=dnevnoin user-130=pecakome user-131=wondersp user-132=robustco user-133=stravelm user-134=holiyayt user-135=rastiraz user-136=tealmk user-137=dadarmk user-138=proverim user-139=goodnews user-140=mstmmk user-141=gocruise user-142=seloviro user-143=nlpmkorg user-144=centarba user-145=kolened1 user-146=nolimits user-147=edomcomm user-148=berbermk user-149=dikimk12 user-150=sprintst user-151=enochmk user-152=herbalpl user-153=kouzonco user-154=premiuma user-155=cetplatf
Sep 10 17:21:08 power sudo[4074513]: wp-toolkit : (command continued) user-156=dalmacom user-157=jpparkin user-158=inotekso user-159=drleomk user-160=ideaplus user-161=nasaidni user-162=karpospo user-163=arturaco user-164=screenme user-165=premiums user-166=butelmk user-167=daris user-168=stojano1 user-169=bovincom user-170=janiboja user-171=itradeco user-172=vezilkac user-173=cabinetm user-174=palenzok user-175=zvskopje user-176=zampmk user-177=busymard user-178=custome1 user-179=sparkupm user-180=stokovna user-181=klimimk user-182=bizporta user-183=datelcom user-184=maleshne user-185=sedcmk user-186=groskome user-187=ivanjord user-188=vfxnestc user-189=polyeste user-190=wikicamp user-191=urbanexp user-192=spdcompu user-193=detskagr user-194=mspmk user-195=infobadi user-196=simbiome user-197=delcevca user-198=getaldus user-199=barececo user-200=workandt user-201=volkanco user-202=goartsym user-203=dhamachi user-204=mfashion user-205=bianasho user-206=makoasmk user-207=skyapart
Sep 10 17:21:08 power sudo[4074513]: wp-toolkit : (command continued) user-208=rasmorgm user-209=datalink user-210=gogovan1 user-211=velmk user-212=kujnamon user-213=univerz1 user-214=agrosind user-215=mpbmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:21:08 power sudo[4074513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:08 power sudo[4074505]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:08 power sudo[4074522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk LangPHP php_get_vhost_versions --output=json'
Sep 10 17:21:08 power sudo[4074522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:08 power sudo[4074522]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:08 power sudo[4074527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep 10 17:21:08 power sudo[4074527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:08 power sudo[4074513]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:09 power sudo[4074527]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:09 power sudo[4074539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 10 17:21:09 power sudo[4074539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:09 power sudo[4074539]: pam_unix(sudo:session): session closed for user root
Sep 10 17:21:10 power sudo[4074581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:21:10 power sudo[4074581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:21:10 power sudo[4074581]: pam_unix(sudo:session): session closed for user root
Sep 10 17:23:48 power sudo[4077071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:23:48 power systemd[4077076]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:23:48 power sudo[4077071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:23:48 power sudo[4077071]: pam_unix(sudo:session): session closed for user root
Sep 10 17:23:48 power sudo[4077093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:23:48 power sudo[4077093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:23:49 power sudo[4077093]: pam_unix(sudo:session): session closed for user root
Sep 10 17:23:49 power sudo[4077099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:23:49 power sudo[4077099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:23:49 power sudo[4077099]: pam_unix(sudo:session): session closed for user root
Sep 10 17:23:49 power sudo[4077104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:23:49 power sudo[4077104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:23:49 power sudo[4077104]: pam_unix(sudo:session): session closed for user root
Sep 10 17:23:49 power sudo[4077113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=delcevca user-2=simbiome user-3=getaldus user-4=barececo user-5=workandt user-6=volkanco user-7=goartsym user-8=dhamachi user-9=mfashion user-10=makoasmk user-11=bianasho user-12=skyapart user-13=rasmorgm user-14=datalink user-15=gogovan1 user-16=velmk user-17=univerz1 user-18=kujnamon user-19=agrosind user-20=mpbmk user-21=bizporta user-22=datelcom user-23=maleshne user-24=sedcmk user-25=ivanjord user-26=groskome user-27=vfxnestc user-28=polyeste user-29=wikicamp user-30=urbanexp user-31=spdcompu user-32=detskagr user-33=mspmk user-34=infobadi user-35=stojano1 user-36=bovincom user-37=janiboja user-38=itradeco user-39=vezilkac user-40=cabinetm user-41=palenzok user-42=zampmk user-43=busymard user-44=zvskopje user-45=custome1 user-46=sparkupm user-47=stokovna user-48=klimimk user-49=kouzonco user-50=premiuma
Sep 10 17:23:49 power sudo[4077113]: wp-toolkit : (command continued) user-51=cetplatf user-52=dalmacom user-53=jpparkin user-54=inotekso user-55=drleomk user-56=ideaplus user-57=nasaidni user-58=karpospo user-59=arturaco user-60=screenme user-61=premiums user-62=daris user-63=butelmk user-64=seloviro user-65=centarba user-66=nlpmkorg user-67=kolened1 user-68=nolimits user-69=edomcomm user-70=berbermk user-71=dikimk12 user-72=sprintst user-73=enochmk user-74=herbalpl user-75=gjorgeiv user-76=tradeyou user-77=dnevnoin user-78=pecakome user-79=wondersp user-80=stravelm user-81=robustco user-82=holiyayt user-83=rastiraz user-84=tealmk user-85=dadarmk user-86=proverim user-87=goodnews user-88=mstmmk user-89=gocruise user-90=stojnevi user-91=raremk user-92=oouslave user-93=uhostmk5 user-94=bauerbg user-95=enaspotc user-96=vmro user-97=viewinn user-98=trudovop user-99=cajsproc user-100=hotammk user-101=youthgua user-102=anitermc user-103=frizered user-104=hidrommk user-105=caramk
Sep 10 17:23:49 power sudo[4077113]: wp-toolkit : (command continued) user-106=nefrolog user-107=ekostoc1 user-108=levantmk user-109=oncolog1 user-110=avtogumi user-111=socioloz user-112=pelagoni user-113=evolvepl user-114=euronic3 user-115=vegemk1 user-116=cupidpro user-117=conserva user-118=bonitavi user-119=evberasm user-120=folklore user-121=bauerin2 user-122=evacommk user-123=aptekafa user-124=madzomk user-125=gradbai1 user-126=eaptekam user-127=dimpalne user-128=peshkai1 user-129=fxxcom user-130=tehnodro user-131=makdrone user-132=izzomk user-133=jpkomuna user-134=pelagini user-135=biplmk user-136=kaoilmk user-137=bbbustou user-138=sssoluti user-139=atspedco user-140=progress user-141=animatem user-142=cleanerm user-143=taktcomm user-144=recorgmk user-145=jaramk user-146=solointe user-147=eurofarm user-148=solarinv user-149=golakkom user-150=trigemat user-151=eliksirz user-152=naksorgm user-153=electrol user-154=workbenc user-155=ismassag user-156=mbmehani user-157=wineberr
Sep 10 17:23:49 power sudo[4077113]: wp-toolkit : (command continued) user-158=viplastc user-159=intelek1 user-160=mediatag user-161=nucktra1 user-162=lblawcom user-163=aptekazd user-164=nikimare user-165=forzares user-166=hausmark user-167=nikolov1 user-168=mediasol user-169=carrent1 user-170=bogdanos user-171=apgrupmk user-172=kardiome user-173=euronic2 user-174=matratze user-175=euromaki user-176=cosmatob user-177=elektrot user-178=zapovim1 user-179=samasped user-180=chemhemc user-181=nutrivim user-182=imdskopj user-183=glammace user-184=albuname user-185=infopor1 user-186=pravekom user-187=vtranseu user-188=bozinovm user-189=darkogor user-190=fnjorgmk user-191=dslmk user-192=prizmapl user-193=premiumi user-194=innofabl user-195=vacuacti user-196=taneccom user-197=tehnologija user-198=modernar user-199=inkigaic user-200=zdmgpsor user-201=gorsajmk user-202=aquatech user-203=v5srybi9dcdx user-204=supremel user-205=onlinesh user-206=nationa2 user-207=solemor1 user-208=mapaspla
Sep 10 17:23:49 power sudo[4077113]: wp-toolkit : (command continued) user-209=tcieuroc user-210=fffhpcwr user-211=radekrat user-212=starluxm user-213=ambitiou user-214=fiziosmk user-215=versusmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:23:49 power sudo[4077113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:23:49 power sudo[4077113]: pam_unix(sudo:session): session closed for user root
Sep 10 17:23:50 power sudo[4077138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:23:50 power sudo[4077138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:23:50 power sudo[4077138]: pam_unix(sudo:session): session closed for user root
Sep 10 17:23:50 power sudo[4077143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:23:50 power sudo[4077143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:23:50 power sudo[4077143]: pam_unix(sudo:session): session closed for user root
Sep 10 17:25:01 power systemd[4078399]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:25:01 power systemd[4078400]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:30:01 power systemd[4083309]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:30:01 power systemd[4083310]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:30:01 power systemd[4083311]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 17:30:01 power systemd[4083313]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 17:30:01 power systemd[4083315]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 17:33:59 power sudo[4087391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:33:59 power systemd[4087397]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:33:59 power sudo[4087391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:33:59 power sudo[4087391]: pam_unix(sudo:session): session closed for user root
Sep 10 17:33:59 power sudo[4087415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:33:59 power sudo[4087415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:34:00 power sudo[4087415]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:01 power systemd[4088923]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:35:01 power systemd[4088924]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:35:17 power sudo[4089268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:35:17 power systemd[4089273]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:35:17 power sudo[4089268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:17 power sudo[4089268]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:17 power sudo[4089290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:35:17 power sudo[4089290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:17 power sudo[4089290]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:17 power sudo[4089297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:35:17 power sudo[4089297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:17 power sudo[4089297]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:17 power sudo[4089306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:35:17 power sudo[4089306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:18 power sudo[4089306]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:18 power sudo[4089329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=custome1 user-2=palenzok user-3=zvskopje user-4=zampmk user-5=busymard user-6=klimimk user-7=sparkupm user-8=stokovna user-9=bovincom user-10=stojano1 user-11=vezilkac user-12=cabinetm user-13=janiboja user-14=itradeco user-15=jpparkin user-16=inotekso user-17=drleomk user-18=premiums user-19=daris user-20=butelmk user-21=ideaplus user-22=karpospo user-23=nasaidni user-24=arturaco user-25=screenme user-26=cetplatf user-27=dalmacom user-28=kouzonco user-29=premiuma user-30=gogovan1 user-31=velmk user-32=univerz1 user-33=kujnamon user-34=datalink user-35=agrosind user-36=mpbmk user-37=volkanco user-38=goartsym user-39=dhamachi user-40=mfashion user-41=getaldus user-42=simbiome user-43=delcevca user-44=barececo user-45=workandt user-46=rasmorgm user-47=bianasho user-48=makoasmk user-49=skyapart user-50=wikicamp
Sep 10 17:35:18 power sudo[4089329]: wp-toolkit : (command continued) user-51=urbanexp user-52=mspmk user-53=infobadi user-54=spdcompu user-55=detskagr user-56=datelcom user-57=maleshne user-58=bizporta user-59=vfxnestc user-60=polyeste user-61=sedcmk user-62=groskome user-63=ivanjord user-64=cajsproc user-65=hotammk user-66=youthgua user-67=anitermc user-68=raremk user-69=oouslave user-70=uhostmk5 user-71=bauerbg user-72=stojnevi user-73=enaspotc user-74=vmro user-75=trudovop user-76=viewinn user-77=pelagoni user-78=avtogumi user-79=socioloz user-80=evolvepl user-81=caramk user-82=frizered user-83=hidrommk user-84=nefrolog user-85=levantmk user-86=ekostoc1 user-87=oncolog1 user-88=edomcomm user-89=berbermk user-90=dikimk12 user-91=sprintst user-92=herbalpl user-93=enochmk user-94=seloviro user-95=nolimits user-96=nlpmkorg user-97=centarba user-98=kolened1 user-99=dadarmk user-100=proverim user-101=tealmk user-102=gocruise user-103=goodnews user-104=mstmmk user-105=dnevnoin
Sep 10 17:35:18 power sudo[4089329]: wp-toolkit : (command continued) user-106=tradeyou user-107=gjorgeiv user-108=holiyayt user-109=rastiraz user-110=pecakome user-111=wondersp user-112=robustco user-113=stravelm user-114=progress user-115=animatem user-116=cleanerm user-117=sssoluti user-118=atspedco user-119=jaramk user-120=solointe user-121=recorgmk user-122=taktcomm user-123=pelagini user-124=biplmk user-125=kaoilmk user-126=bbbustou user-127=mbmehani user-128=workbenc user-129=ismassag user-130=wineberr user-131=viplastc user-132=solarinv user-133=eurofarm user-134=trigemat user-135=eliksirz user-136=naksorgm user-137=electrol user-138=golakkom user-139=bauerin2 user-140=folklore user-141=conserva user-142=euronic3 user-143=vegemk1 user-144=cupidpro user-145=bonitavi user-146=evberasm user-147=makdrone user-148=tehnodro user-149=izzomk user-150=jpkomuna user-151=gradbai1 user-152=evacommk user-153=aptekafa user-154=madzomk user-155=peshkai1 user-156=fxxcom user-157=eaptekam
Sep 10 17:35:18 power sudo[4089329]: wp-toolkit : (command continued) user-158=dimpalne user-159=zdmgpsor user-160=v5srybi9dcdx user-161=supremel user-162=gorsajmk user-163=aquatech user-164=taneccom user-165=tehnologija user-166=bozinovm user-167=darkogor user-168=prizmapl user-169=fnjorgmk user-170=dslmk user-171=innofabl user-172=premiumi user-173=vacuacti user-174=inkigaic user-175=modernar user-176=radekrat user-177=starluxm user-178=fffhpcwr user-179=versusmk user-180=ambitiou user-181=fiziosmk user-182=solemor1 user-183=mapaspla user-184=onlinesh user-185=nationa2 user-186=tcieuroc user-187=kardiome user-188=mediasol user-189=bogdanos user-190=carrent1 user-191=apgrupmk user-192=euronic2 user-193=matratze user-194=nucktra1 user-195=lblawcom user-196=intelek1 user-197=mediatag user-198=nikolov1 user-199=hausmark user-200=aptekazd user-201=nikimare user-202=forzares user-203=glammace user-204=albuname user-205=imdskopj user-206=vtranseu user-207=pravekom user-208=infopor1
Sep 10 17:35:18 power sudo[4089329]: wp-toolkit : (command continued) user-209=zapovim1 user-210=elektrot user-211=cosmatob user-212=euromaki user-213=nutrivim user-214=chemhemc user-215=samasped feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:35:18 power sudo[4089329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:18 power sudo[4089329]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:19 power sudo[4089389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:35:19 power sudo[4089389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:19 power sudo[4089389]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:19 power sudo[4089395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:35:19 power sudo[4089395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:19 power sudo[4089395]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:23 power sudo[4089450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:35:23 power sudo[4089450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:23 power sudo[4089450]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:23 power sudo[4089455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:35:23 power sudo[4089455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:23 power sudo[4089455]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:23 power sudo[4089461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:35:23 power sudo[4089461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:23 power sudo[4089461]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:23 power sudo[4089476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=klimimk user-2=sparkupm user-3=stokovna user-4=custome1 user-5=zvskopje user-6=zampmk user-7=busymard user-8=palenzok user-9=cabinetm user-10=vezilkac user-11=itradeco user-12=janiboja user-13=bovincom user-14=stojano1 user-15=premiums user-16=daris user-17=butelmk user-18=screenme user-19=arturaco user-20=ideaplus user-21=nasaidni user-22=karpospo user-23=drleomk user-24=jpparkin user-25=inotekso user-26=dalmacom user-27=cetplatf user-28=premiuma user-29=kouzonco user-30=agrosind user-31=mpbmk user-32=gogovan1 user-33=velmk user-34=univerz1 user-35=kujnamon user-36=datalink user-37=rasmorgm user-38=bianasho user-39=makoasmk user-40=skyapart user-41=mfashion user-42=goartsym user-43=volkanco user-44=dhamachi user-45=workandt user-46=delcevca user-47=simbiome user-48=getaldus user-49=barececo user-50=mspmk
Sep 10 17:35:23 power sudo[4089476]: wp-toolkit : (command continued) user-51=infobadi user-52=detskagr user-53=spdcompu user-54=urbanexp user-55=wikicamp user-56=vfxnestc user-57=polyeste user-58=groskome user-59=ivanjord user-60=sedcmk user-61=datelcom user-62=maleshne user-63=bizporta user-64=youthgua user-65=anitermc user-66=hotammk user-67=cajsproc user-68=vmro user-69=viewinn user-70=trudovop user-71=enaspotc user-72=uhostmk5 user-73=bauerbg user-74=raremk user-75=oouslave user-76=stojnevi user-77=evolvepl user-78=pelagoni user-79=avtogumi user-80=socioloz user-81=nefrolog user-82=levantmk user-83=ekostoc1 user-84=oncolog1 user-85=caramk user-86=frizered user-87=hidrommk user-88=sprintst user-89=herbalpl user-90=enochmk user-91=dikimk12 user-92=berbermk user-93=edomcomm user-94=nolimits user-95=centarba user-96=nlpmkorg user-97=kolened1 user-98=seloviro user-99=gocruise user-100=mstmmk user-101=goodnews user-102=proverim user-103=dadarmk user-104=tealmk user-105=rastiraz
Sep 10 17:35:23 power sudo[4089476]: wp-toolkit : (command continued) user-106=holiyayt user-107=wondersp user-108=stravelm user-109=robustco user-110=pecakome user-111=dnevnoin user-112=gjorgeiv user-113=tradeyou user-114=solointe user-115=jaramk user-116=taktcomm user-117=recorgmk user-118=animatem user-119=cleanerm user-120=progress user-121=atspedco user-122=sssoluti user-123=bbbustou user-124=biplmk user-125=kaoilmk user-126=pelagini user-127=viplastc user-128=wineberr user-129=mbmehani user-130=ismassag user-131=workbenc user-132=electrol user-133=trigemat user-134=eliksirz user-135=naksorgm user-136=golakkom user-137=solarinv user-138=eurofarm user-139=bauerin2 user-140=folklore user-141=bonitavi user-142=evberasm user-143=conserva user-144=vegemk1 user-145=cupidpro user-146=euronic3 user-147=jpkomuna user-148=izzomk user-149=makdrone user-150=tehnodro user-151=peshkai1 user-152=fxxcom user-153=dimpalne user-154=eaptekam user-155=gradbai1 user-156=evacommk user-157=madzomk
Sep 10 17:35:23 power sudo[4089476]: wp-toolkit : (command continued) user-158=aptekafa user-159=supremel user-160=v5srybi9dcdx user-161=gorsajmk user-162=aquatech user-163=zdmgpsor user-164=inkigaic user-165=modernar user-166=tehnologija user-167=taneccom user-168=premiumi user-169=innofabl user-170=vacuacti user-171=bozinovm user-172=dslmk user-173=darkogor user-174=fnjorgmk user-175=prizmapl user-176=versusmk user-177=fiziosmk user-178=ambitiou user-179=radekrat user-180=starluxm user-181=fffhpcwr user-182=tcieuroc user-183=mapaspla user-184=solemor1 user-185=nationa2 user-186=onlinesh user-187=euronic2 user-188=matratze user-189=kardiome user-190=apgrupmk user-191=mediasol user-192=carrent1 user-193=bogdanos user-194=hausmark user-195=nikolov1 user-196=forzares user-197=aptekazd user-198=nikimare user-199=lblawcom user-200=nucktra1 user-201=intelek1 user-202=mediatag user-203=vtranseu user-204=pravekom user-205=infopor1 user-206=glammace user-207=albuname user-208=imdskopj
Sep 10 17:35:23 power sudo[4089476]: wp-toolkit : (command continued) user-209=nutrivim user-210=chemhemc user-211=samasped user-212=zapovim1 user-213=elektrot user-214=euromaki user-215=cosmatob feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:35:23 power sudo[4089476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:24 power sudo[4089476]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:24 power sudo[4089498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk ResourceUsage get_usages --output=json'
Sep 10 17:35:24 power sudo[4089498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:24 power sudo[4089498]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:24 power sudo[4089515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=database_prefix --output=json'
Sep 10 17:35:24 power sudo[4089515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:24 power sudo[4089515]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:24 power sudo[4089521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql get_restrictions --output=json'
Sep 10 17:35:24 power sudo[4089521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:24 power sudo[4089521]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:24 power sudo[4089533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:35:24 power sudo[4089533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:25 power sudo[4089533]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:25 power sudo[4089541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/
Sep 10 17:35:25 power sudo[4089541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:25 power sudo[4089541]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:25 power sudo[4089546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk find /home/berbermk/public_html/ -mindepth 1 -maxdepth 1 -printf %f\\0
Sep 10 17:35:25 power sudo[4089546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:25 power sudo[4089546]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:25 power sudo[4089551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/wordpress
Sep 10 17:35:25 power sudo[4089551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:25 power sudo[4089551]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:25 power sudo[4089556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:35:25 power sudo[4089556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:25 power sudo[4089556]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:25 power sudo[4089561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql list_databases --output=json'
Sep 10 17:35:25 power sudo[4089561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:25 power sudo[4089561]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:26 power sudo[4089581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:35:26 power sudo[4089581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:26 power sudo[4089581]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:26 power sudo[4089586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:35:26 power sudo[4089586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:26 power sudo[4089586]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:26 power sudo[4089591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:35:26 power sudo[4089591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:26 power sudo[4089591]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:26 power sudo[4089600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=premiuma user-2=kouzonco user-3=dalmacom user-4=cetplatf user-5=arturaco user-6=screenme user-7=ideaplus user-8=nasaidni user-9=karpospo user-10=premiums user-11=butelmk user-12=daris user-13=drleomk user-14=jpparkin user-15=inotekso user-16=itradeco user-17=janiboja user-18=cabinetm user-19=vezilkac user-20=stojano1 user-21=bovincom user-22=sparkupm user-23=stokovna user-24=klimimk user-25=zvskopje user-26=zampmk user-27=busymard user-28=palenzok user-29=custome1 user-30=ivanjord user-31=groskome user-32=sedcmk user-33=vfxnestc user-34=polyeste user-35=bizporta user-36=datelcom user-37=maleshne user-38=detskagr user-39=spdcompu user-40=mspmk user-41=infobadi user-42=urbanexp user-43=wikicamp user-44=makoasmk user-45=bianasho user-46=skyapart user-47=rasmorgm user-48=workandt user-49=getaldus user-50=simbiome
Sep 10 17:35:26 power sudo[4089600]: wp-toolkit : (command continued) user-51=delcevca user-52=barececo user-53=mfashion user-54=volkanco user-55=goartsym user-56=dhamachi user-57=agrosind user-58=mpbmk user-59=datalink user-60=gogovan1 user-61=velmk user-62=kujnamon user-63=univerz1 user-64=nefrolog user-65=ekostoc1 user-66=oncolog1 user-67=levantmk user-68=frizered user-69=hidrommk user-70=caramk user-71=evolvepl user-72=avtogumi user-73=socioloz user-74=pelagoni user-75=vmro user-76=viewinn user-77=trudovop user-78=enaspotc user-79=stojnevi user-80=uhostmk5 user-81=bauerbg user-82=raremk user-83=oouslave user-84=youthgua user-85=anitermc user-86=hotammk user-87=cajsproc user-88=wondersp user-89=stravelm user-90=robustco user-91=pecakome user-92=rastiraz user-93=holiyayt user-94=gjorgeiv user-95=tradeyou user-96=dnevnoin user-97=mstmmk user-98=goodnews user-99=gocruise user-100=tealmk user-101=proverim user-102=dadarmk user-103=nlpmkorg user-104=centarba user-105=kolened1
Sep 10 17:35:26 power sudo[4089600]: wp-toolkit : (command continued) user-106=nolimits user-107=seloviro user-108=sprintst user-109=herbalpl user-110=enochmk user-111=dikimk12 user-112=berbermk user-113=edomcomm user-114=golakkom user-115=electrol user-116=trigemat user-117=naksorgm user-118=eliksirz user-119=eurofarm user-120=solarinv user-121=viplastc user-122=wineberr user-123=ismassag user-124=workbenc user-125=mbmehani user-126=bbbustou user-127=kaoilmk user-128=biplmk user-129=pelagini user-130=taktcomm user-131=recorgmk user-132=solointe user-133=jaramk user-134=sssoluti user-135=atspedco user-136=animatem user-137=cleanerm user-138=progress user-139=dimpalne user-140=eaptekam user-141=peshkai1 user-142=fxxcom user-143=evacommk user-144=madzomk user-145=aptekafa user-146=gradbai1 user-147=jpkomuna user-148=izzomk user-149=tehnodro user-150=makdrone user-151=bonitavi user-152=evberasm user-153=vegemk1 user-154=cupidpro user-155=euronic3 user-156=conserva user-157=folklore
Sep 10 17:35:26 power sudo[4089600]: wp-toolkit : (command continued) user-158=bauerin2 user-159=tcieuroc user-160=nationa2 user-161=onlinesh user-162=mapaspla user-163=solemor1 user-164=fiziosmk user-165=ambitiou user-166=versusmk user-167=fffhpcwr user-168=radekrat user-169=starluxm user-170=modernar user-171=inkigaic user-172=innofabl user-173=premiumi user-174=vacuacti user-175=bozinovm user-176=dslmk user-177=darkogor user-178=fnjorgmk user-179=prizmapl user-180=tehnologija user-181=taneccom user-182=gorsajmk user-183=aquatech user-184=supremel user-185=v5srybi9dcdx user-186=zdmgpsor user-187=samasped user-188=chemhemc user-189=nutrivim user-190=cosmatob user-191=euromaki user-192=zapovim1 user-193=elektrot user-194=infopor1 user-195=vtranseu user-196=pravekom user-197=imdskopj user-198=glammace user-199=albuname user-200=forzares user-201=aptekazd user-202=nikimare user-203=hausmark user-204=nikolov1 user-205=intelek1 user-206=mediatag user-207=lblawcom user-208=nucktra1
Sep 10 17:35:26 power sudo[4089600]: wp-toolkit : (command continued) user-209=euronic2 user-210=matratze user-211=apgrupmk user-212=mediasol user-213=carrent1 user-214=bogdanos user-215=kardiome feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:35:26 power sudo[4089600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:26 power sudo[4089600]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:26 power sudo[4089608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:35:26 power sudo[4089608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:27 power sudo[4089608]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:27 power sudo[4089614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/wordpress
Sep 10 17:35:27 power sudo[4089614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:27 power sudo[4089614]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:46 power sudo[4089946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:35:46 power systemd[4089951]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:35:46 power sudo[4089946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:46 power sudo[4089946]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:46 power sudo[4089966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:35:46 power sudo[4089966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:46 power sudo[4089966]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:46 power sudo[4089971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:35:46 power sudo[4089971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:47 power sudo[4089971]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:48 power sudo[4090002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:35:48 power sudo[4090002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:48 power sudo[4090002]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:48 power sudo[4090007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:35:48 power sudo[4090007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:48 power sudo[4090007]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:48 power sudo[4090012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:35:48 power sudo[4090012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:48 power sudo[4090012]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:49 power sudo[4090047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:35:49 power sudo[4090047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:49 power sudo[4090047]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:49 power sudo[4090052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:35:49 power sudo[4090052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:49 power sudo[4090052]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:52 power sudo[4090097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:35:52 power sudo[4090097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:52 power sudo[4090097]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:52 power sudo[4090103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:35:52 power sudo[4090103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:52 power sudo[4090103]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:52 power sudo[4090108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:35:52 power sudo[4090108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:52 power sudo[4090108]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:52 power sudo[4090113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:35:52 power sudo[4090113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:52 power sudo[4090113]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:52 power sudo[4090124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mfashion user-2=volkanco user-3=goartsym user-4=dhamachi user-5=workandt user-6=delcevca user-7=simbiome user-8=getaldus user-9=barececo user-10=rasmorgm user-11=bianasho user-12=makoasmk user-13=skyapart user-14=velmk user-15=gogovan1 user-16=kujnamon user-17=univerz1 user-18=datalink user-19=agrosind user-20=mpbmk user-21=datelcom user-22=maleshne user-23=bizporta user-24=vfxnestc user-25=polyeste user-26=groskome user-27=ivanjord user-28=sedcmk user-29=urbanexp user-30=wikicamp user-31=mspmk user-32=infobadi user-33=detskagr user-34=spdcompu user-35=bovincom user-36=stojano1 user-37=cabinetm user-38=vezilkac user-39=itradeco user-40=janiboja user-41=custome1 user-42=zampmk user-43=zvskopje user-44=busymard user-45=palenzok user-46=klimimk user-47=sparkupm user-48=stokovna user-49=dalmacom user-50=cetplatf
Sep 10 17:35:52 power sudo[4090124]: wp-toolkit : (command continued) user-51=premiuma user-52=kouzonco user-53=drleomk user-54=jpparkin user-55=inotekso user-56=premiums user-57=butelmk user-58=daris user-59=arturaco user-60=screenme user-61=ideaplus user-62=nasaidni user-63=karpospo user-64=seloviro user-65=nolimits user-66=nlpmkorg user-67=centarba user-68=kolened1 user-69=berbermk user-70=edomcomm user-71=sprintst user-72=enochmk user-73=herbalpl user-74=dikimk12 user-75=dnevnoin user-76=gjorgeiv user-77=tradeyou user-78=rastiraz user-79=holiyayt user-80=wondersp user-81=stravelm user-82=robustco user-83=pecakome user-84=proverim user-85=dadarmk user-86=tealmk user-87=gocruise user-88=mstmmk user-89=goodnews user-90=uhostmk5 user-91=bauerbg user-92=raremk user-93=oouslave user-94=stojnevi user-95=vmro user-96=trudovop user-97=viewinn user-98=enaspotc user-99=hotammk user-100=cajsproc user-101=youthgua user-102=anitermc user-103=caramk user-104=frizered user-105=hidrommk
Sep 10 17:35:52 power sudo[4090124]: wp-toolkit : (command continued) user-106=nefrolog user-107=ekostoc1 user-108=levantmk user-109=oncolog1 user-110=pelagoni user-111=avtogumi user-112=socioloz user-113=evolvepl user-114=conserva user-115=vegemk1 user-116=cupidpro user-117=euronic3 user-118=bonitavi user-119=evberasm user-120=bauerin2 user-121=folklore user-122=gradbai1 user-123=evacommk user-124=aptekafa user-125=madzomk user-126=peshkai1 user-127=fxxcom user-128=dimpalne user-129=eaptekam user-130=makdrone user-131=tehnodro user-132=jpkomuna user-133=izzomk user-134=pelagini user-135=bbbustou user-136=kaoilmk user-137=biplmk user-138=animatem user-139=cleanerm user-140=progress user-141=atspedco user-142=sssoluti user-143=solointe user-144=jaramk user-145=recorgmk user-146=taktcomm user-147=solarinv user-148=eurofarm user-149=electrol user-150=trigemat user-151=eliksirz user-152=naksorgm user-153=golakkom user-154=mbmehani user-155=ismassag user-156=workbenc user-157=viplastc
Sep 10 17:35:52 power sudo[4090124]: wp-toolkit : (command continued) user-158=wineberr user-159=lblawcom user-160=nucktra1 user-161=intelek1 user-162=mediatag user-163=hausmark user-164=nikolov1 user-165=forzares user-166=aptekazd user-167=nikimare user-168=kardiome user-169=apgrupmk user-170=mediasol user-171=carrent1 user-172=bogdanos user-173=euronic2 user-174=matratze user-175=elektrot user-176=zapovim1 user-177=euromaki user-178=cosmatob user-179=nutrivim user-180=samasped user-181=chemhemc user-182=glammace user-183=albuname user-184=imdskopj user-185=vtranseu user-186=pravekom user-187=infopor1 user-188=tehnologija user-189=taneccom user-190=premiumi user-191=innofabl user-192=vacuacti user-193=bozinovm user-194=prizmapl user-195=darkogor user-196=fnjorgmk user-197=dslmk user-198=inkigaic user-199=modernar user-200=zdmgpsor user-201=supremel user-202=v5srybi9dcdx user-203=gorsajmk user-204=aquatech user-205=mapaspla user-206=solemor1 user-207=nationa2 user-208=onlinesh
Sep 10 17:35:52 power sudo[4090124]: wp-toolkit : (command continued) user-209=tcieuroc user-210=radekrat user-211=starluxm user-212=fffhpcwr user-213=versusmk user-214=fiziosmk user-215=ambitiou feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:35:52 power sudo[4090124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:52 power sudo[4090124]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:53 power sudo[4090145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:35:53 power sudo[4090145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:53 power sudo[4090145]: pam_unix(sudo:session): session closed for user root
Sep 10 17:35:53 power sudo[4090150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:35:53 power sudo[4090150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:35:53 power sudo[4090150]: pam_unix(sudo:session): session closed for user root
Sep 10 17:36:01 power systemd[4090320]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 17:37:01 power systemd[4091382]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 17:39:01 power systemd[4093260]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:40:01 power systemd[4094264]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:40:01 power systemd[4094265]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:42:01 power systemd[4096031]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 17:42:07 power sudo[4096131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 17:42:07 power systemd[4096136]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:42:07 power sudo[4096131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:07 power sudo[4096131]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:07 power sudo[4096150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 17:42:07 power sudo[4096150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:07 power sudo[4096150]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:07 power sudo[4096154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 17:42:07 power sudo[4096154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:07 power sudo[4096154]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:07 power sudo[4096158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=7qBpcs15n5'
Sep 10 17:42:07 power sudo[4096158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:07 power sudo[4096158]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:07 power sudo[4096164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 17:42:07 power sudo[4096164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:07 power sudo[4096164]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:07 power sudo[4096168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 17:42:07 power sudo[4096168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:07 power sudo[4096168]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:07 power sudo[4096173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 17:42:07 power sudo[4096173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:07 power sudo[4096173]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:07 power sudo[4096177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:42:07 power sudo[4096177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:08 power sudo[4096177]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:08 power sudo[4096184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 17:42:08 power sudo[4096184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:08 power sudo[4096184]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:08 power sudo[4096188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 17:42:08 power sudo[4096188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:08 power sudo[4096188]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:08 power sudo[4096192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 17:42:08 power sudo[4096192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:08 power sudo[4096192]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:08 power sudo[4096197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 17:42:08 power sudo[4096197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:08 power sudo[4096197]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:08 power sudo[4096201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 17:42:08 power sudo[4096201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:08 power sudo[4096201]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:08 power sudo[4096205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 17:42:08 power sudo[4096205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:08 power sudo[4096205]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:10 power sudo[4096264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:42:10 power sudo[4096264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:10 power sudo[4096264]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:10 power sudo[4096269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:42:10 power sudo[4096269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:10 power sudo[4096269]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:10 power sudo[4096279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bizporta user-2=maleshne user-3=datelcom user-4=sedcmk user-5=ivanjord user-6=groskome user-7=polyeste user-8=vfxnestc user-9=wikicamp user-10=urbanexp user-11=spdcompu user-12=detskagr user-13=mspmk user-14=infobadi user-15=barececo user-16=getaldus user-17=delcevca user-18=simbiome user-19=workandt user-20=dhamachi user-21=volkanco user-22=goartsym user-23=mfashion user-24=skyapart user-25=bianasho user-26=makoasmk user-27=rasmorgm user-28=datalink user-29=kujnamon user-30=univerz1 user-31=gogovan1 user-32=velmk user-33=mpbmk user-34=agrosind user-35=kouzonco user-36=premiuma user-37=cetplatf user-38=dalmacom user-39=inotekso user-40=jpparkin user-41=drleomk user-42=karpospo user-43=nasaidni user-44=ideaplus user-45=arturaco user-46=screenme user-47=daris user-48=butelmk user-49=premiums user-50=stojano1
Sep 10 17:42:10 power sudo[4096279]: wp-toolkit : (command continued) user-51=bovincom user-52=janiboja user-53=itradeco user-54=vezilkac user-55=cabinetm user-56=palenzok user-57=zvskopje user-58=zampmk user-59=busymard user-60=custome1 user-61=stokovna user-62=sparkupm user-63=klimimk user-64=gjorgeiv user-65=tradeyou user-66=dnevnoin user-67=pecakome user-68=stravelm user-69=robustco user-70=wondersp user-71=holiyayt user-72=rastiraz user-73=tealmk user-74=dadarmk user-75=proverim user-76=goodnews user-77=mstmmk user-78=gocruise user-79=seloviro user-80=kolened1 user-81=centarba user-82=nlpmkorg user-83=nolimits user-84=edomcomm user-85=berbermk user-86=dikimk12 user-87=herbalpl user-88=enochmk user-89=sprintst user-90=hidrommk user-91=frizered user-92=caramk user-93=levantmk user-94=ekostoc1 user-95=oncolog1 user-96=nefrolog user-97=socioloz user-98=avtogumi user-99=pelagoni user-100=evolvepl user-101=stojnevi user-102=oouslave user-103=raremk user-104=bauerbg user-105=uhostmk5
Sep 10 17:42:10 power sudo[4096279]: wp-toolkit : (command continued) user-106=enaspotc user-107=viewinn user-108=trudovop user-109=vmro user-110=cajsproc user-111=hotammk user-112=anitermc user-113=youthgua user-114=aptekafa user-115=madzomk user-116=evacommk user-117=gradbai1 user-118=eaptekam user-119=dimpalne user-120=fxxcom user-121=peshkai1 user-122=tehnodro user-123=makdrone user-124=izzomk user-125=jpkomuna user-126=euronic3 user-127=cupidpro user-128=vegemk1 user-129=conserva user-130=evberasm user-131=bonitavi user-132=folklore user-133=bauerin2 user-134=eurofarm user-135=solarinv user-136=golakkom user-137=naksorgm user-138=eliksirz user-139=trigemat user-140=electrol user-141=workbenc user-142=ismassag user-143=mbmehani user-144=wineberr user-145=viplastc user-146=pelagini user-147=biplmk user-148=kaoilmk user-149=bbbustou user-150=sssoluti user-151=atspedco user-152=progress user-153=cleanerm user-154=animatem user-155=taktcomm user-156=recorgmk user-157=jaramk
Sep 10 17:42:10 power sudo[4096279]: wp-toolkit : (command continued) user-158=solointe user-159=euromaki user-160=cosmatob user-161=zapovim1 user-162=elektrot user-163=samasped user-164=chemhemc user-165=nutrivim user-166=imdskopj user-167=albuname user-168=glammace user-169=infopor1 user-170=vtranseu user-171=pravekom user-172=mediatag user-173=intelek1 user-174=nucktra1 user-175=lblawcom user-176=nikimare user-177=aptekazd user-178=forzares user-179=nikolov1 user-180=hausmark user-181=bogdanos user-182=carrent1 user-183=mediasol user-184=apgrupmk user-185=kardiome user-186=matratze user-187=euronic2 user-188=onlinesh user-189=nationa2 user-190=solemor1 user-191=mapaspla user-192=tcieuroc user-193=fffhpcwr user-194=starluxm user-195=radekrat user-196=ambitiou user-197=fiziosmk user-198=versusmk user-199=prizmapl user-200=darkogor user-201=fnjorgmk user-202=dslmk user-203=bozinovm user-204=vacuacti user-205=premiumi user-206=innofabl user-207=taneccom user-208=tehnologija
Sep 10 17:42:10 power sudo[4096279]: wp-toolkit : (command continued) user-209=modernar user-210=inkigaic user-211=zdmgpsor user-212=aquatech user-213=gorsajmk user-214=v5srybi9dcdx user-215=supremel feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:42:10 power sudo[4096279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:11 power sudo[4096279]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:11 power sudo[4096286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 17:42:11 power sudo[4096286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:11 power sudo[4096286]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:11 power sudo[4096290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s0XwJIyVnrLddXRv.~
Sep 10 17:42:11 power sudo[4096290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:11 power sudo[4096290]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:11 power sudo[4096294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s0XwJIyVnrLddXRv.~\''
Sep 10 17:42:11 power sudo[4096294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:11 power sudo[4096294]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:11 power sudo[4096299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s0XwJIyVnrLddXRv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 17:42:11 power sudo[4096299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:11 power sudo[4096299]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:11 power sudo[4096303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 17:42:11 power sudo[4096303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:11 power sudo[4096303]: pam_unix(sudo:session): session closed for user root
Sep 10 17:42:11 power sudo[4097015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 17:42:11 power sudo[4097015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:42:12 power sudo[4097015]: pam_unix(sudo:session): session closed for user root
Sep 10 17:45:01 power systemd[4099948]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:45:01 power systemd[4099950]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:48:54 power sudo[4104287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:48:54 power systemd[4104296]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:48:54 power sudo[4104287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:54 power sudo[4104287]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:55 power sudo[4104312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:48:55 power sudo[4104312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:55 power sudo[4104312]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:55 power sudo[4104319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:48:55 power sudo[4104319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:55 power sudo[4104319]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:55 power sudo[4104324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=viewinn user-2=trudovop user-3=vmro user-4=enaspotc user-5=stojnevi user-6=bauerbg user-7=uhostmk5 user-8=oouslave user-9=raremk user-10=anitermc user-11=youthgua user-12=hotammk user-13=cajsproc user-14=oncolog1 user-15=ekostoc1 user-16=levantmk user-17=nefrolog user-18=hidrommk user-19=frizered user-20=caramk user-21=evolvepl user-22=avtogumi user-23=socioloz user-24=pelagoni user-25=kolened1 user-26=nlpmkorg user-27=centarba user-28=nolimits user-29=seloviro user-30=enochmk user-31=herbalpl user-32=sprintst user-33=dikimk12 user-34=berbermk user-35=edomcomm user-36=robustco user-37=stravelm user-38=wondersp user-39=pecakome user-40=rastiraz user-41=holiyayt user-42=gjorgeiv user-43=tradeyou user-44=dnevnoin user-45=mstmmk user-46=goodnews user-47=gocruise user-48=tealmk user-49=proverim user-50=dadarmk
Sep 10 17:48:55 power sudo[4104324]: wp-toolkit : (command continued) user-51=itradeco user-52=janiboja user-53=cabinetm user-54=vezilkac user-55=stojano1 user-56=bovincom user-57=stokovna user-58=sparkupm user-59=klimimk user-60=zampmk user-61=zvskopje user-62=busymard user-63=palenzok user-64=custome1 user-65=premiuma user-66=kouzonco user-67=dalmacom user-68=cetplatf user-69=screenme user-70=arturaco user-71=nasaidni user-72=karpospo user-73=ideaplus user-74=butelmk user-75=daris user-76=premiums user-77=drleomk user-78=inotekso user-79=jpparkin user-80=skyapart user-81=bianasho user-82=makoasmk user-83=rasmorgm user-84=workandt user-85=barececo user-86=getaldus user-87=simbiome user-88=delcevca user-89=mfashion user-90=dhamachi user-91=volkanco user-92=goartsym user-93=mpbmk user-94=agrosind user-95=datalink user-96=kujnamon user-97=univerz1 user-98=velmk user-99=gogovan1 user-100=groskome user-101=ivanjord user-102=sedcmk user-103=polyeste user-104=vfxnestc user-105=bizporta
Sep 10 17:48:55 power sudo[4104324]: wp-toolkit : (command continued) user-106=maleshne user-107=datelcom user-108=detskagr user-109=spdcompu user-110=infobadi user-111=mspmk user-112=urbanexp user-113=wikicamp user-114=modernar user-115=inkigaic user-116=vacuacti user-117=innofabl user-118=premiumi user-119=darkogor user-120=dslmk user-121=fnjorgmk user-122=prizmapl user-123=bozinovm user-124=tehnologija user-125=taneccom user-126=aquatech user-127=gorsajmk user-128=supremel user-129=v5srybi9dcdx user-130=zdmgpsor user-131=tcieuroc user-132=nationa2 user-133=onlinesh user-134=mapaspla user-135=solemor1 user-136=fiziosmk user-137=ambitiou user-138=versusmk user-139=fffhpcwr user-140=starluxm user-141=radekrat user-142=forzares user-143=nikimare user-144=aptekazd user-145=nikolov1 user-146=hausmark user-147=mediatag user-148=intelek1 user-149=lblawcom user-150=nucktra1 user-151=matratze user-152=euronic2 user-153=apgrupmk user-154=bogdanos user-155=carrent1 user-156=mediasol
Sep 10 17:48:55 power sudo[4104324]: wp-toolkit : (command continued) user-157=kardiome user-158=chemhemc user-159=samasped user-160=nutrivim user-161=cosmatob user-162=euromaki user-163=elektrot user-164=zapovim1 user-165=infopor1 user-166=vtranseu user-167=pravekom user-168=imdskopj user-169=albuname user-170=glammace user-171=bbbustou user-172=kaoilmk user-173=biplmk user-174=pelagini user-175=taktcomm user-176=recorgmk user-177=solointe user-178=jaramk user-179=sssoluti user-180=atspedco user-181=cleanerm user-182=animatem user-183=progress user-184=golakkom user-185=electrol user-186=naksorgm user-187=eliksirz user-188=trigemat user-189=eurofarm user-190=solarinv user-191=viplastc user-192=wineberr user-193=ismassag user-194=workbenc user-195=mbmehani user-196=evberasm user-197=bonitavi user-198=cupidpro user-199=vegemk1 user-200=euronic3 user-201=conserva user-202=folklore user-203=bauerin2 user-204=dimpalne user-205=eaptekam user-206=fxxcom user-207=peshkai1 user-208=madzomk
Sep 10 17:48:55 power sudo[4104324]: wp-toolkit : (command continued) user-209=aptekafa user-210=evacommk user-211=gradbai1 user-212=jpkomuna user-213=izzomk user-214=tehnodro user-215=makdrone feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:48:55 power sudo[4104324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:55 power sudo[4104324]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:55 power sudo[4104339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk ResourceUsage get_usages --output=json'
Sep 10 17:48:55 power sudo[4104339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:56 power sudo[4104339]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:56 power sudo[4104352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=database_prefix --output=json'
Sep 10 17:48:56 power sudo[4104352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:56 power sudo[4104352]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:56 power sudo[4104362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql get_restrictions --output=json'
Sep 10 17:48:56 power sudo[4104362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:56 power sudo[4104362]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:56 power sudo[4104379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:48:56 power sudo[4104379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:56 power sudo[4104379]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:56 power sudo[4104388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/
Sep 10 17:48:56 power sudo[4104388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:56 power sudo[4104388]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:56 power sudo[4104395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk find /home/berbermk/public_html/ -mindepth 1 -maxdepth 1 -printf %f\\0
Sep 10 17:48:56 power sudo[4104395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:56 power sudo[4104395]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:56 power sudo[4104401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/wordpress
Sep 10 17:48:56 power sudo[4104401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:56 power sudo[4104401]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:56 power sudo[4104408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 10 17:48:56 power sudo[4104408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:56 power sudo[4104408]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:56 power sudo[4104413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql list_databases --output=json'
Sep 10 17:48:57 power sudo[4104413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:57 power sudo[4104413]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:57 power sudo[4104443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 17:48:57 power sudo[4104443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:57 power sudo[4104443]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:57 power sudo[4104449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 17:48:57 power sudo[4104449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:57 power sudo[4104449]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:57 power sudo[4104457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 17:48:58 power sudo[4104457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:58 power sudo[4104457]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:58 power sudo[4104465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mbmehani user-2=workbenc user-3=ismassag user-4=wineberr user-5=viplastc user-6=solarinv user-7=eurofarm user-8=eliksirz user-9=naksorgm user-10=trigemat user-11=electrol user-12=golakkom user-13=progress user-14=cleanerm user-15=animatem user-16=sssoluti user-17=atspedco user-18=jaramk user-19=solointe user-20=taktcomm user-21=recorgmk user-22=pelagini user-23=kaoilmk user-24=biplmk user-25=bbbustou user-26=makdrone user-27=tehnodro user-28=izzomk user-29=jpkomuna user-30=gradbai1 user-31=aptekafa user-32=madzomk user-33=evacommk user-34=fxxcom user-35=peshkai1 user-36=eaptekam user-37=dimpalne user-38=bauerin2 user-39=folklore user-40=conserva user-41=euronic3 user-42=cupidpro user-43=vegemk1 user-44=evberasm user-45=bonitavi user-46=starluxm user-47=radekrat user-48=fffhpcwr user-49=versusmk
Sep 10 17:48:58 power sudo[4104465]: wp-toolkit : (command continued) user-50=ambitiou user-51=fiziosmk user-52=solemor1 user-53=mapaspla user-54=onlinesh user-55=nationa2 user-56=tcieuroc user-57=zdmgpsor user-58=v5srybi9dcdx user-59=supremel user-60=aquatech user-61=gorsajmk user-62=taneccom user-63=tehnologija user-64=darkogor user-65=dslmk user-66=fnjorgmk user-67=prizmapl user-68=bozinovm user-69=vacuacti user-70=premiumi user-71=innofabl user-72=inkigaic user-73=modernar user-74=albuname user-75=glammace user-76=imdskopj user-77=vtranseu user-78=pravekom user-79=infopor1 user-80=elektrot user-81=zapovim1 user-82=euromaki user-83=cosmatob user-84=nutrivim user-85=samasped user-86=chemhemc user-87=kardiome user-88=bogdanos user-89=carrent1 user-90=mediasol user-91=apgrupmk user-92=matratze user-93=euronic2 user-94=nucktra1 user-95=lblawcom user-96=mediatag user-97=intelek1 user-98=hausmark user-99=nikolov1 user-100=nikimare user-101=aptekazd user-102=forzares user-103=inotekso
Sep 10 17:48:58 power sudo[4104465]: wp-toolkit : (command continued) user-104=jpparkin user-105=drleomk user-106=butelmk user-107=daris user-108=premiums user-109=nasaidni user-110=karpospo user-111=ideaplus user-112=arturaco user-113=screenme user-114=cetplatf user-115=dalmacom user-116=kouzonco user-117=premiuma user-118=custome1 user-119=palenzok user-120=busymard user-121=zampmk user-122=zvskopje user-123=klimimk user-124=stokovna user-125=sparkupm user-126=bovincom user-127=stojano1 user-128=vezilkac user-129=cabinetm user-130=janiboja user-131=itradeco user-132=wikicamp user-133=urbanexp user-134=mspmk user-135=infobadi user-136=spdcompu user-137=detskagr user-138=maleshne user-139=datelcom user-140=bizporta user-141=polyeste user-142=vfxnestc user-143=sedcmk user-144=ivanjord user-145=groskome user-146=univerz1 user-147=kujnamon user-148=velmk user-149=gogovan1 user-150=datalink user-151=mpbmk user-152=agrosind user-153=dhamachi user-154=volkanco user-155=goartsym
Sep 10 17:48:58 power sudo[4104465]: wp-toolkit : (command continued) user-156=mfashion user-157=barececo user-158=delcevca user-159=simbiome user-160=getaldus user-161=workandt user-162=rasmorgm user-163=skyapart user-164=bianasho user-165=makoasmk user-166=pelagoni user-167=socioloz user-168=avtogumi user-169=evolvepl user-170=caramk user-171=hidrommk user-172=frizered user-173=ekostoc1 user-174=oncolog1 user-175=levantmk user-176=nefrolog user-177=cajsproc user-178=hotammk user-179=anitermc user-180=youthgua user-181=oouslave user-182=raremk user-183=bauerbg user-184=uhostmk5 user-185=stojnevi user-186=enaspotc user-187=trudovop user-188=viewinn user-189=vmro user-190=dadarmk user-191=proverim user-192=tealmk user-193=gocruise user-194=goodnews user-195=mstmmk user-196=dnevnoin user-197=tradeyou user-198=gjorgeiv user-199=holiyayt user-200=rastiraz user-201=pecakome user-202=stravelm user-203=robustco user-204=wondersp user-205=edomcomm user-206=berbermk user-207=dikimk12
Sep 10 17:48:58 power sudo[4104465]: wp-toolkit : (command continued) user-208=enochmk user-209=herbalpl user-210=sprintst user-211=seloviro user-212=nolimits user-213=kolened1 user-214=centarba user-215=nlpmkorg feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 17:48:58 power sudo[4104465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:58 power sudo[4104465]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:58 power sudo[4104477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 10 17:48:58 power sudo[4104477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:58 power sudo[4104477]: pam_unix(sudo:session): session closed for user root
Sep 10 17:48:58 power sudo[4104484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/wordpress
Sep 10 17:48:58 power sudo[4104484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 17:48:58 power sudo[4104484]: pam_unix(sudo:session): session closed for user root
Sep 10 17:50:01 power systemd[4105978]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:50:01 power systemd[4105979]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:55:01 power systemd[4110744]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 17:55:01 power systemd[4110749]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 17:55:02 power sshd[4110822]: Connection closed by 89.248.168.227 port 49438 [preauth]
Sep 10 18:00:01 power systemd[4115599]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:00:01 power systemd[4115598]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:00:01 power systemd[4115600]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 18:00:01 power systemd[4115601]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 18:00:01 power systemd[4115604]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 18:04:01 power systemd[4120450]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:05:01 power systemd[4121386]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:05:01 power systemd[4121387]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:06:01 power systemd[4122411]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 18:07:01 power systemd[4123324]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 18:09:01 power systemd[4125186]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:10:02 power systemd[4126318]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:10:02 power systemd[4126317]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:12:01 power systemd[4128061]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 18:15:01 power systemd[4130942]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:15:01 power systemd[4130943]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:20:01 power systemd[4135935]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:20:01 power systemd[4135936]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:25:01 power systemd[4142435]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:25:01 power systemd[4142437]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:30:01 power systemd[4147161]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:30:01 power systemd[4147163]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:30:01 power systemd[4147165]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 18:30:01 power systemd[4147167]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 18:30:01 power systemd[4147168]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 18:35:01 power systemd[4153751]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:35:01 power systemd[4153752]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:36:01 power systemd[4154729]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 18:37:02 power systemd[4155732]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 18:39:01 power systemd[4157584]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:40:01 power systemd[4158548]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:40:01 power systemd[4158549]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:40:30 power pam_imunify[2590184]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 212.102.33.162 has been locked due to Imunify RBL
Sep 10 18:42:01 power systemd[4160722]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 18:42:07 power sudo[4160855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 18:42:07 power systemd[4160862]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:42:07 power sudo[4160855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:07 power sudo[4160855]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:07 power sudo[4160879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 18:42:07 power sudo[4160879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:07 power sudo[4160879]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:07 power sudo[4160883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 18:42:07 power sudo[4160883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:07 power sudo[4160883]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:07 power sudo[4160887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=L55UdXHEzT'
Sep 10 18:42:07 power sudo[4160887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:07 power sudo[4160887]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:07 power sudo[4160893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 18:42:07 power sudo[4160893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:07 power sudo[4160893]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:07 power sudo[4160897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 18:42:07 power sudo[4160897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:08 power sudo[4160897]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:08 power sudo[4160901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 18:42:08 power sudo[4160901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:08 power sudo[4160901]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:08 power sudo[4160905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 18:42:08 power sudo[4160905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:08 power sudo[4160905]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:08 power sudo[4160913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 18:42:08 power sudo[4160913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:08 power sudo[4160913]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:08 power sudo[4160919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 18:42:08 power sudo[4160919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:08 power sudo[4160919]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:08 power sudo[4160923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 18:42:08 power sudo[4160923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:08 power sudo[4160923]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:08 power sudo[4160927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 18:42:08 power sudo[4160927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:08 power sudo[4160927]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:08 power sudo[4160931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 18:42:08 power sudo[4160931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:08 power sudo[4160931]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:08 power sudo[4160936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 18:42:08 power sudo[4160936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:08 power sudo[4160936]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:10 power sudo[4160986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 18:42:10 power sudo[4160986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:10 power sudo[4160986]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:10 power sudo[4160994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 18:42:10 power sudo[4160994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:10 power sudo[4160994]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:10 power sudo[4161003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=viewinn user-2=trudovop user-3=vmro user-4=enaspotc user-5=bauerbg user-6=uhostmk5 user-7=oouslave user-8=raremk user-9=stojnevi user-10=anitermc user-11=youthgua user-12=hotammk user-13=cajsproc user-14=levantmk user-15=ekostoc1 user-16=oncolog1 user-17=nefrolog user-18=caramk user-19=hidrommk user-20=frizered user-21=evolvepl user-22=pelagoni user-23=socioloz user-24=avtogumi user-25=nolimits user-26=kolened1 user-27=nlpmkorg user-28=centarba user-29=seloviro user-30=enochmk user-31=herbalpl user-32=sprintst user-33=dikimk12 user-34=berbermk user-35=edomcomm user-36=rastiraz user-37=holiyayt user-38=stravelm user-39=robustco user-40=wondersp user-41=pecakome user-42=dnevnoin user-43=tradeyou user-44=gjorgeiv user-45=gocruise user-46=mstmmk user-47=goodnews user-48=proverim user-49=dadarmk user-50=tealmk
Sep 10 18:42:10 power sudo[4161003]: wp-toolkit : (command continued) user-51=cabinetm user-52=vezilkac user-53=itradeco user-54=janiboja user-55=bovincom user-56=stojano1 user-57=klimimk user-58=stokovna user-59=sparkupm user-60=custome1 user-61=zampmk user-62=zvskopje user-63=busymard user-64=palenzok user-65=dalmacom user-66=cetplatf user-67=premiuma user-68=kouzonco user-69=butelmk user-70=daris user-71=premiums user-72=arturaco user-73=screenme user-74=karpospo user-75=nasaidni user-76=ideaplus user-77=drleomk user-78=inotekso user-79=jpparkin user-80=rasmorgm user-81=skyapart user-82=makoasmk user-83=bianasho user-84=mfashion user-85=dhamachi user-86=volkanco user-87=goartsym user-88=workandt user-89=barececo user-90=simbiome user-91=delcevca user-92=getaldus user-93=mpbmk user-94=agrosind user-95=univerz1 user-96=kujnamon user-97=velmk user-98=gogovan1 user-99=datalink user-100=polyeste user-101=vfxnestc user-102=ivanjord user-103=groskome user-104=sedcmk user-105=maleshne
Sep 10 18:42:10 power sudo[4161003]: wp-toolkit : (command continued) user-106=datelcom user-107=bizporta user-108=mspmk user-109=infobadi user-110=detskagr user-111=spdcompu user-112=urbanexp user-113=wikicamp user-114=inkigaic user-115=modernar user-116=tehnologija user-117=taneccom user-118=vacuacti user-119=innofabl user-120=premiumi user-121=prizmapl user-122=darkogor user-123=fnjorgmk user-124=dslmk user-125=bozinovm user-126=supremel user-127=v5srybi9dcdx user-128=aquatech user-129=gorsajmk user-130=zdmgpsor user-131=tcieuroc user-132=mapaspla user-133=solemor1 user-134=nationa2 user-135=onlinesh user-136=versusmk user-137=fiziosmk user-138=ambitiou user-139=starluxm user-140=radekrat user-141=fffhpcwr user-142=nikolov1 user-143=hausmark user-144=forzares user-145=nikimare user-146=aptekazd user-147=lblawcom user-148=nucktra1 user-149=mediatag user-150=intelek1 user-151=matratze user-152=euronic2 user-153=kardiome user-154=apgrupmk user-155=carrent1 user-156=bogdanos
Sep 10 18:42:10 power sudo[4161003]: wp-toolkit : (command continued) user-157=mediasol user-158=nutrivim user-159=chemhemc user-160=samasped user-161=elektrot user-162=zapovim1 user-163=euromaki user-164=cosmatob user-165=pravekom user-166=vtranseu user-167=infopor1 user-168=albuname user-169=glammace user-170=imdskopj user-171=bbbustou user-172=biplmk user-173=kaoilmk user-174=pelagini user-175=solointe user-176=jaramk user-177=recorgmk user-178=taktcomm user-179=cleanerm user-180=animatem user-181=progress user-182=sssoluti user-183=atspedco user-184=electrol user-185=eliksirz user-186=naksorgm user-187=trigemat user-188=golakkom user-189=solarinv user-190=eurofarm user-191=viplastc user-192=wineberr user-193=mbmehani user-194=ismassag user-195=workbenc user-196=evberasm user-197=bonitavi user-198=conserva user-199=cupidpro user-200=vegemk1 user-201=euronic3 user-202=bauerin2 user-203=folklore user-204=fxxcom user-205=peshkai1 user-206=dimpalne user-207=eaptekam
Sep 10 18:42:10 power sudo[4161003]: wp-toolkit : (command continued) user-208=gradbai1 user-209=aptekafa user-210=madzomk user-211=evacommk user-212=jpkomuna user-213=izzomk user-214=makdrone user-215=tehnodro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 18:42:10 power sudo[4161003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:10 power sudo[4161003]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:10 power sudo[4161016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 18:42:10 power sudo[4161016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:10 power sudo[4161016]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:10 power sudo[4161020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c90x51NcR6gqAurA.~
Sep 10 18:42:10 power sudo[4161020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:10 power sudo[4161020]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:11 power sudo[4161024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c90x51NcR6gqAurA.~\''
Sep 10 18:42:11 power sudo[4161024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:11 power sudo[4161024]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:11 power sudo[4161029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c90x51NcR6gqAurA.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 18:42:11 power sudo[4161029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:11 power sudo[4161029]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:11 power sudo[4161033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 18:42:11 power sudo[4161033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:11 power sudo[4161033]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:11 power sudo[4161038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_licenses --output=json'
Sep 10 18:42:11 power sudo[4161038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:11 power sudo[4161038]: pam_unix(sudo:session): session closed for user root
Sep 10 18:42:15 power sudo[4161184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 18:42:15 power sudo[4161184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 18:42:15 power sudo[4161184]: pam_unix(sudo:session): session closed for user root
Sep 10 18:45:02 power systemd[4165032]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:45:02 power systemd[4165033]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:50:01 power systemd[4169980]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:50:01 power systemd[4169981]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 18:55:01 power systemd[4176574]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 18:55:01 power systemd[4176575]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:00:01 power systemd[4182856]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:00:01 power systemd[4182857]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:00:01 power systemd[4182858]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 19:00:01 power systemd[4182860]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 19:00:01 power systemd[4182861]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 19:04:01 power systemd[4188642]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:05:01 power systemd[4189858]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:05:01 power systemd[4189859]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:06:01 power systemd[4191138]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 19:07:01 power systemd[4192438]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 19:09:01 power systemd[643]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:10:01 power systemd[1852]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:10:01 power systemd[1853]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:12:01 power systemd[3851]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 19:15:01 power systemd[6515]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:15:01 power systemd[6516]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:20:01 power systemd[11510]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:20:02 power systemd[11511]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:25:01 power systemd[16092]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:25:01 power systemd[16093]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:30:01 power systemd[20875]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:30:01 power systemd[20876]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:30:01 power systemd[20877]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 19:30:01 power systemd[20880]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 19:30:01 power systemd[20881]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 19:35:01 power systemd[25363]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:35:01 power systemd[25364]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:36:01 power systemd[26670]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 19:37:01 power systemd[27450]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 19:39:01 power systemd[29729]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:40:01 power systemd[30744]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:40:01 power systemd[30745]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:42:01 power systemd[32600]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 19:42:07 power sudo[32680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 19:42:07 power systemd[32686]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:42:07 power sudo[32680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:07 power sudo[32680]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:07 power sudo[32702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 19:42:07 power sudo[32702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:07 power sudo[32702]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:07 power sudo[32706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 19:42:07 power sudo[32706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:07 power sudo[32706]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:07 power sudo[32710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=WgSNg0pZa5'
Sep 10 19:42:07 power sudo[32710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:07 power sudo[32710]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:07 power sudo[32715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 19:42:07 power sudo[32715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:07 power sudo[32715]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:08 power sudo[32719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 19:42:08 power sudo[32719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:08 power sudo[32719]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:08 power sudo[32723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 19:42:08 power sudo[32723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:08 power sudo[32723]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:08 power sudo[32727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 19:42:08 power sudo[32727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:08 power sudo[32727]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:08 power sudo[32735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 19:42:08 power sudo[32735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:08 power sudo[32735]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:08 power sudo[32739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 19:42:08 power sudo[32739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:08 power sudo[32739]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:08 power sudo[32744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 19:42:08 power sudo[32744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:08 power sudo[32744]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:08 power sudo[32748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 19:42:08 power sudo[32748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:08 power sudo[32748]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:08 power sudo[32752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 19:42:08 power sudo[32752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:08 power sudo[32752]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:08 power sudo[32756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 19:42:08 power sudo[32756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:08 power sudo[32756]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:10 power sudo[32796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 19:42:10 power sudo[32796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:10 power sudo[32796]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:10 power sudo[32802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 19:42:10 power sudo[32802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:10 power sudo[32802]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:10 power sudo[32810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=fffhpcwr user-2=starluxm user-3=radekrat user-4=fiziosmk user-5=ambitiou user-6=versusmk user-7=nationa2 user-8=onlinesh user-9=mapaspla user-10=solemor1 user-11=tcieuroc user-12=zdmgpsor user-13=aquatech user-14=gorsajmk user-15=supremel user-16=v5srybi9dcdx user-17=vacuacti user-18=premiumi user-19=innofabl user-20=darkogor user-21=prizmapl user-22=fnjorgmk user-23=dslmk user-24=bozinovm user-25=tehnologija user-26=taneccom user-27=modernar user-28=inkigaic user-29=imdskopj user-30=albuname user-31=glammace user-32=infopor1 user-33=pravekom user-34=vtranseu user-35=euromaki user-36=cosmatob user-37=elektrot user-38=zapovim1 user-39=chemhemc user-40=samasped user-41=nutrivim user-42=apgrupmk user-43=bogdanos user-44=carrent1 user-45=mediasol user-46=kardiome user-47=matratze user-48=euronic2
Sep 10 19:42:10 power sudo[32810]: wp-toolkit : (command continued) user-49=mediatag user-50=intelek1 user-51=lblawcom user-52=nucktra1 user-53=forzares user-54=nikimare user-55=aptekazd user-56=nikolov1 user-57=hausmark user-58=ismassag user-59=workbenc user-60=mbmehani user-61=viplastc user-62=wineberr user-63=eurofarm user-64=solarinv user-65=golakkom user-66=electrol user-67=eliksirz user-68=naksorgm user-69=trigemat user-70=atspedco user-71=sssoluti user-72=cleanerm user-73=animatem user-74=progress user-75=recorgmk user-76=taktcomm user-77=solointe user-78=jaramk user-79=pelagini user-80=bbbustou user-81=kaoilmk user-82=biplmk user-83=tehnodro user-84=makdrone user-85=jpkomuna user-86=izzomk user-87=madzomk user-88=aptekafa user-89=evacommk user-90=gradbai1 user-91=dimpalne user-92=eaptekam user-93=fxxcom user-94=peshkai1 user-95=folklore user-96=bauerin2 user-97=cupidpro user-98=vegemk1 user-99=euronic3 user-100=conserva user-101=evberasm user-102=bonitavi
Sep 10 19:42:10 power sudo[32810]: wp-toolkit : (command continued) user-103=avtogumi user-104=socioloz user-105=pelagoni user-106=evolvepl user-107=hidrommk user-108=frizered user-109=caramk user-110=ekostoc1 user-111=levantmk user-112=oncolog1 user-113=nefrolog user-114=hotammk user-115=cajsproc user-116=anitermc user-117=youthgua user-118=stojnevi user-119=bauerbg user-120=uhostmk5 user-121=oouslave user-122=raremk user-123=trudovop user-124=viewinn user-125=vmro user-126=enaspotc user-127=tealmk user-128=proverim user-129=dadarmk user-130=mstmmk user-131=goodnews user-132=gocruise user-133=tradeyou user-134=gjorgeiv user-135=dnevnoin user-136=robustco user-137=stravelm user-138=wondersp user-139=pecakome user-140=rastiraz user-141=holiyayt user-142=berbermk user-143=edomcomm user-144=enochmk user-145=herbalpl user-146=sprintst user-147=dikimk12 user-148=seloviro user-149=kolened1 user-150=nlpmkorg user-151=centarba user-152=nolimits user-153=drleomk user-154=inotekso
Sep 10 19:42:10 power sudo[32810]: wp-toolkit : (command continued) user-155=jpparkin user-156=arturaco user-157=screenme user-158=karpospo user-159=nasaidni user-160=ideaplus user-161=butelmk user-162=daris user-163=premiums user-164=premiuma user-165=kouzonco user-166=dalmacom user-167=cetplatf user-168=zvskopje user-169=zampmk user-170=busymard user-171=palenzok user-172=custome1 user-173=stokovna user-174=sparkupm user-175=klimimk user-176=stojano1 user-177=bovincom user-178=itradeco user-179=janiboja user-180=cabinetm user-181=vezilkac user-182=urbanexp user-183=wikicamp user-184=detskagr user-185=spdcompu user-186=mspmk user-187=infobadi user-188=bizporta user-189=maleshne user-190=datelcom user-191=groskome user-192=ivanjord user-193=sedcmk user-194=polyeste user-195=vfxnestc user-196=datalink user-197=kujnamon user-198=univerz1 user-199=velmk user-200=gogovan1 user-201=mpbmk user-202=agrosind user-203=workandt user-204=barececo user-205=delcevca user-206=getaldus
Sep 10 19:42:10 power sudo[32810]: wp-toolkit : (command continued) user-207=simbiome user-208=mfashion user-209=dhamachi user-210=goartsym user-211=volkanco user-212=skyapart user-213=bianasho user-214=makoasmk user-215=rasmorgm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 19:42:10 power sudo[32810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:11 power sudo[32810]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:11 power sudo[32817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 19:42:11 power sudo[32817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:11 power sudo[32817]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:11 power sudo[32821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R5TRoVDLzU5oxjDG.~
Sep 10 19:42:11 power sudo[32821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:11 power sudo[32821]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:11 power sudo[32825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R5TRoVDLzU5oxjDG.~\''
Sep 10 19:42:11 power sudo[32825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:11 power sudo[32825]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:11 power sudo[32830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R5TRoVDLzU5oxjDG.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 19:42:11 power sudo[32830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:11 power sudo[32830]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:11 power sudo[32837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 19:42:11 power sudo[32837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:11 power sudo[32837]: pam_unix(sudo:session): session closed for user root
Sep 10 19:42:11 power sudo[33123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 19:42:11 power sudo[33123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 19:42:11 power sudo[33123]: pam_unix(sudo:session): session closed for user root
Sep 10 19:45:01 power systemd[36658]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:45:01 power systemd[36660]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:50:01 power systemd[41520]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:50:01 power systemd[41521]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:55:01 power systemd[45884]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 19:55:01 power systemd[45885]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 19:56:41 power sshd[47282]: error: kex_exchange_identification: client sent invalid protocol identifier "\026\003\001\001"
Sep 10 19:56:41 power sshd[47282]: banner exchange: Connection from 45.79.181.223 port 32446: invalid format
Sep 10 19:56:41 power sshd[47284]: error: kex_exchange_identification: client sent invalid protocol identifier "\026\003\001\001"
Sep 10 19:56:41 power sshd[47284]: banner exchange: Connection from 45.79.181.223 port 32458: invalid format
Sep 10 20:00:01 power systemd[51333]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:00:01 power systemd[51334]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:00:01 power systemd[51335]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 20:00:01 power systemd[51337]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 20:00:01 power systemd[51338]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 20:04:01 power systemd[55794]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:05:01 power systemd[56870]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:05:01 power systemd[56872]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:06:02 power systemd[57922]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 20:07:01 power systemd[59004]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 20:09:01 power systemd[60967]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:10:01 power systemd[61914]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:10:01 power systemd[61916]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:12:01 power systemd[63833]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 20:15:01 power systemd[66562]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:15:01 power systemd[66563]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:20:01 power systemd[72067]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:20:01 power systemd[72069]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:25:02 power systemd[76744]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:25:02 power systemd[76745]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:30:01 power systemd[80892]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:30:01 power systemd[80891]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:30:01 power systemd[80894]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 20:30:01 power systemd[80895]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 20:30:01 power systemd[80897]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 20:35:01 power systemd[85883]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:35:01 power systemd[85884]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:36:01 power systemd[87139]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 20:37:01 power systemd[87899]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 20:39:01 power systemd[89379]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:39:27 power sshd[89856]: error: kex_exchange_identification: Connection closed by remote host
Sep 10 20:39:27 power sshd[89856]: Connection closed by 185.247.137.186 port 56427
Sep 10 20:39:27 power sshd[89899]: Connection closed by 185.247.137.186 port 56555 [preauth]
Sep 10 20:40:01 power systemd[90497]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:40:01 power systemd[90498]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:42:01 power systemd[92214]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 20:42:07 power sudo[92327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 20:42:07 power systemd[92334]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:42:07 power sudo[92327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:07 power sudo[92327]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:07 power sudo[92349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 20:42:07 power sudo[92349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:07 power sudo[92349]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:07 power sudo[92353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 20:42:07 power sudo[92353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:07 power sudo[92353]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:07 power sudo[92357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=HlqR3FHMNm'
Sep 10 20:42:07 power sudo[92357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92357]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 20:42:08 power sudo[92364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92364]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 20:42:08 power sudo[92369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92369]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 20:42:08 power sudo[92373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92373]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 20:42:08 power sudo[92377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92377]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 20:42:08 power sudo[92383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92383]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 20:42:08 power sudo[92388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92388]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 20:42:08 power sudo[92392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92392]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 20:42:08 power sudo[92396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92396]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 20:42:08 power sudo[92403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92403]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:08 power sudo[92407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 20:42:08 power sudo[92407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:08 power sudo[92407]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:10 power sudo[92445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 20:42:10 power sudo[92445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:10 power sudo[92445]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:10 power sudo[92451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 20:42:10 power sudo[92451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:10 power sudo[92451]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:10 power sudo[92457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=sssoluti user-2=atspedco user-3=progress user-4=animatem user-5=cleanerm user-6=taktcomm user-7=recorgmk user-8=jaramk user-9=solointe user-10=pelagini user-11=kaoilmk user-12=biplmk user-13=bbbustou user-14=workbenc user-15=ismassag user-16=mbmehani user-17=wineberr user-18=viplastc user-19=eurofarm user-20=solarinv user-21=golakkom user-22=trigemat user-23=eliksirz user-24=naksorgm user-25=electrol user-26=folklore user-27=bauerin2 user-28=euronic3 user-29=vegemk1 user-30=cupidpro user-31=conserva user-32=bonitavi user-33=evberasm user-34=tehnodro user-35=makdrone user-36=izzomk user-37=jpkomuna user-38=evacommk user-39=aptekafa user-40=madzomk user-41=gradbai1 user-42=eaptekam user-43=dimpalne user-44=peshkai1 user-45=fxxcom user-46=zdmgpsor user-47=gorsajmk user-48=aquatech user-49=v5srybi9dcdx
Sep 10 20:42:10 power sudo[92457]: wp-toolkit : (command continued) user-50=supremel user-51=bozinovm user-52=fnjorgmk user-53=darkogor user-54=prizmapl user-55=dslmk user-56=premiumi user-57=innofabl user-58=vacuacti user-59=taneccom user-60=tehnologija user-61=modernar user-62=inkigaic user-63=fffhpcwr user-64=radekrat user-65=starluxm user-66=ambitiou user-67=fiziosmk user-68=versusmk user-69=onlinesh user-70=nationa2 user-71=solemor1 user-72=mapaspla user-73=tcieuroc user-74=mediasol user-75=bogdanos user-76=carrent1 user-77=apgrupmk user-78=kardiome user-79=euronic2 user-80=matratze user-81=intelek1 user-82=mediatag user-83=nucktra1 user-84=lblawcom user-85=aptekazd user-86=nikimare user-87=forzares user-88=hausmark user-89=nikolov1 user-90=imdskopj user-91=glammace user-92=albuname user-93=infopor1 user-94=vtranseu user-95=pravekom user-96=euromaki user-97=cosmatob user-98=zapovim1 user-99=elektrot user-100=chemhemc user-101=samasped user-102=nutrivim user-103=palenzok
Sep 10 20:42:10 power sudo[92457]: wp-toolkit : (command continued) user-104=busymard user-105=zampmk user-106=zvskopje user-107=custome1 user-108=sparkupm user-109=stokovna user-110=klimimk user-111=stojano1 user-112=bovincom user-113=janiboja user-114=itradeco user-115=vezilkac user-116=cabinetm user-117=jpparkin user-118=inotekso user-119=drleomk user-120=ideaplus user-121=karpospo user-122=nasaidni user-123=arturaco user-124=screenme user-125=premiums user-126=butelmk user-127=daris user-128=kouzonco user-129=premiuma user-130=cetplatf user-131=dalmacom user-132=datalink user-133=velmk user-134=gogovan1 user-135=kujnamon user-136=univerz1 user-137=agrosind user-138=mpbmk user-139=getaldus user-140=simbiome user-141=delcevca user-142=barececo user-143=workandt user-144=volkanco user-145=goartsym user-146=dhamachi user-147=mfashion user-148=bianasho user-149=makoasmk user-150=skyapart user-151=rasmorgm user-152=wikicamp user-153=urbanexp user-154=spdcompu user-155=detskagr
Sep 10 20:42:10 power sudo[92457]: wp-toolkit : (command continued) user-156=infobadi user-157=mspmk user-158=bizporta user-159=datelcom user-160=maleshne user-161=sedcmk user-162=ivanjord user-163=groskome user-164=vfxnestc user-165=polyeste user-166=cajsproc user-167=hotammk user-168=youthgua user-169=anitermc user-170=stojnevi user-171=raremk user-172=oouslave user-173=uhostmk5 user-174=bauerbg user-175=enaspotc user-176=vmro user-177=trudovop user-178=viewinn user-179=avtogumi user-180=socioloz user-181=pelagoni user-182=evolvepl user-183=frizered user-184=hidrommk user-185=caramk user-186=nefrolog user-187=oncolog1 user-188=ekostoc1 user-189=levantmk user-190=edomcomm user-191=berbermk user-192=dikimk12 user-193=sprintst user-194=herbalpl user-195=enochmk user-196=seloviro user-197=centarba user-198=nlpmkorg user-199=kolened1 user-200=nolimits user-201=tealmk user-202=dadarmk user-203=proverim user-204=goodnews user-205=mstmmk user-206=gocruise user-207=gjorgeiv
Sep 10 20:42:10 power sudo[92457]: wp-toolkit : (command continued) user-208=tradeyou user-209=dnevnoin user-210=pecakome user-211=wondersp user-212=robustco user-213=stravelm user-214=holiyayt user-215=rastiraz feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 20:42:10 power sudo[92457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:11 power sudo[92457]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:11 power sudo[92465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 20:42:11 power sudo[92465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:11 power sudo[92465]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:11 power sudo[92471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tVKinZPZndKz7Wpv.~
Sep 10 20:42:11 power sudo[92471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:11 power sudo[92471]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:11 power sudo[92475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tVKinZPZndKz7Wpv.~\''
Sep 10 20:42:11 power sudo[92475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:11 power sudo[92475]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:11 power sudo[92480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tVKinZPZndKz7Wpv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 20:42:11 power sudo[92480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:11 power sudo[92480]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:11 power sudo[92484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 20:42:11 power sudo[92484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:11 power sudo[92484]: pam_unix(sudo:session): session closed for user root
Sep 10 20:42:12 power sudo[93366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 20:42:12 power sudo[93366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 20:42:12 power sudo[93366]: pam_unix(sudo:session): session closed for user root
Sep 10 20:45:02 power systemd[95960]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:45:02 power systemd[95961]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:50:01 power systemd[101155]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:50:01 power systemd[101156]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 20:55:01 power systemd[106404]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 20:55:01 power systemd[106405]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:00:01 power systemd[111137]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:00:01 power systemd[111143]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:00:01 power systemd[111144]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 21:00:01 power systemd[111146]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 21:00:01 power systemd[111148]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 21:04:01 power systemd[115538]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:05:01 power systemd[116665]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:05:01 power systemd[116666]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:06:01 power systemd[117539]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 21:07:01 power systemd[118460]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 21:09:01 power systemd[120262]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:10:01 power systemd[121824]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:10:01 power systemd[121825]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:12:01 power systemd[125065]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 21:15:01 power systemd[127876]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:15:01 power systemd[127878]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:15:01 power systemd[127879]: pam_unix(systemd-user:session): session opened for user polyeste(uid=1217) by polyeste(uid=0)
Sep 10 21:20:01 power systemd[132925]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:20:01 power systemd[132927]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:22:34 power sshd[135892]: Connection closed by 206.168.34.91 port 53588 [preauth]
Sep 10 21:25:01 power systemd[138375]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:25:01 power systemd[138376]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:30:01 power systemd[143304]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:30:01 power systemd[143305]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:30:01 power systemd[143308]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 21:30:01 power systemd[143306]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 21:30:01 power systemd[143307]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 21:32:37 power sshd[146530]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
Sep 10 21:32:37 power sshd[146530]: banner exchange: Connection from 66.228.53.157 port 64690: invalid format
Sep 10 21:32:37 power sshd[146539]: error: kex_exchange_identification: banner line contains invalid characters
Sep 10 21:32:37 power sshd[146539]: banner exchange: Connection from 66.228.53.157 port 64692: invalid format
Sep 10 21:35:01 power systemd[149084]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:35:01 power systemd[149086]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:36:02 power systemd[150192]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 21:37:01 power systemd[151515]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 21:39:01 power systemd[153476]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:40:02 power systemd[154647]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:40:02 power systemd[154648]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:42:01 power systemd[156695]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 21:42:07 power sudo[156807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 21:42:07 power systemd[156812]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:42:07 power sudo[156807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:07 power sudo[156807]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:07 power sudo[156828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 21:42:07 power sudo[156828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:07 power sudo[156828]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 21:42:08 power sudo[156832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156832]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=DZ1SCRqiQD'
Sep 10 21:42:08 power sudo[156836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156836]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 21:42:08 power sudo[156843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156843]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 21:42:08 power sudo[156849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156849]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 21:42:08 power sudo[156854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156854]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 21:42:08 power sudo[156858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156858]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 21:42:08 power sudo[156864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156864]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 21:42:08 power sudo[156869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156869]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 21:42:08 power sudo[156873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156873]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 21:42:08 power sudo[156877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156877]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 21:42:08 power sudo[156884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156884]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:08 power sudo[156889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 21:42:08 power sudo[156889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:08 power sudo[156889]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:10 power sudo[157005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 21:42:10 power sudo[157005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:10 power sudo[157005]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:10 power sudo[157012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 21:42:10 power sudo[157012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:10 power sudo[157012]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:10 power sudo[157018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mediatag user-2=intelek1 user-3=nucktra1 user-4=lblawcom user-5=nikimare user-6=aptekazd user-7=forzares user-8=nikolov1 user-9=hausmark user-10=carrent1 user-11=bogdanos user-12=mediasol user-13=apgrupmk user-14=kardiome user-15=matratze user-16=euronic2 user-17=cosmatob user-18=euromaki user-19=elektrot user-20=zapovim1 user-21=samasped user-22=chemhemc user-23=nutrivim user-24=imdskopj user-25=albuname user-26=glammace user-27=infopor1 user-28=vtranseu user-29=pravekom user-30=prizmapl user-31=darkogor user-32=fnjorgmk user-33=dslmk user-34=bozinovm user-35=vacuacti user-36=premiumi user-37=innofabl user-38=taneccom user-39=tehnologija user-40=modernar user-41=inkigaic user-42=zdmgpsor user-43=aquatech user-44=gorsajmk user-45=v5srybi9dcdx user-46=supremel user-47=onlinesh user-48=nationa2
Sep 10 21:42:10 power sudo[157018]: wp-toolkit : (command continued) user-49=solemor1 user-50=mapaspla user-51=tcieuroc user-52=fffhpcwr user-53=starluxm user-54=radekrat user-55=ambitiou user-56=fiziosmk user-57=versusmk user-58=euronic3 user-59=cupidpro user-60=vegemk1 user-61=conserva user-62=evberasm user-63=bonitavi user-64=folklore user-65=bauerin2 user-66=madzomk user-67=aptekafa user-68=evacommk user-69=gradbai1 user-70=eaptekam user-71=dimpalne user-72=fxxcom user-73=peshkai1 user-74=tehnodro user-75=makdrone user-76=izzomk user-77=jpkomuna user-78=pelagini user-79=kaoilmk user-80=biplmk user-81=bbbustou user-82=atspedco user-83=sssoluti user-84=progress user-85=cleanerm user-86=animatem user-87=taktcomm user-88=recorgmk user-89=jaramk user-90=solointe user-91=eurofarm user-92=solarinv user-93=golakkom user-94=eliksirz user-95=naksorgm user-96=trigemat user-97=electrol user-98=workbenc user-99=ismassag user-100=mbmehani user-101=wineberr user-102=viplastc
Sep 10 21:42:10 power sudo[157018]: wp-toolkit : (command continued) user-103=seloviro user-104=kolened1 user-105=nlpmkorg user-106=centarba user-107=nolimits user-108=edomcomm user-109=berbermk user-110=dikimk12 user-111=enochmk user-112=herbalpl user-113=sprintst user-114=gjorgeiv user-115=tradeyou user-116=dnevnoin user-117=pecakome user-118=robustco user-119=stravelm user-120=wondersp user-121=holiyayt user-122=rastiraz user-123=tealmk user-124=dadarmk user-125=proverim user-126=goodnews user-127=mstmmk user-128=gocruise user-129=stojnevi user-130=oouslave user-131=raremk user-132=bauerbg user-133=uhostmk5 user-134=enaspotc user-135=trudovop user-136=viewinn user-137=vmro user-138=cajsproc user-139=hotammk user-140=anitermc user-141=youthgua user-142=hidrommk user-143=frizered user-144=caramk user-145=ekostoc1 user-146=levantmk user-147=oncolog1 user-148=nefrolog user-149=avtogumi user-150=socioloz user-151=pelagoni user-152=evolvepl user-153=barececo user-154=delcevca
Sep 10 21:42:10 power sudo[157018]: wp-toolkit : (command continued) user-155=simbiome user-156=getaldus user-157=workandt user-158=dhamachi user-159=volkanco user-160=goartsym user-161=mfashion user-162=skyapart user-163=bianasho user-164=makoasmk user-165=rasmorgm user-166=datalink user-167=kujnamon user-168=univerz1 user-169=gogovan1 user-170=velmk user-171=mpbmk user-172=agrosind user-173=bizporta user-174=maleshne user-175=datelcom user-176=sedcmk user-177=ivanjord user-178=groskome user-179=polyeste user-180=vfxnestc user-181=wikicamp user-182=urbanexp user-183=spdcompu user-184=detskagr user-185=infobadi user-186=mspmk user-187=stojano1 user-188=bovincom user-189=janiboja user-190=itradeco user-191=vezilkac user-192=cabinetm user-193=palenzok user-194=busymard user-195=zampmk user-196=zvskopje user-197=custome1 user-198=stokovna user-199=sparkupm user-200=klimimk user-201=kouzonco user-202=premiuma user-203=cetplatf user-204=dalmacom user-205=inotekso user-206=jpparkin
Sep 10 21:42:10 power sudo[157018]: wp-toolkit : (command continued) user-207=drleomk user-208=nasaidni user-209=karpospo user-210=ideaplus user-211=arturaco user-212=screenme user-213=daris user-214=butelmk user-215=premiums feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 21:42:10 power sudo[157018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:11 power sudo[157018]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:11 power sudo[157055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 21:42:11 power sudo[157055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:11 power sudo[157055]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:11 power sudo[157059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ryC7cKWL50dvF4Xe.~
Sep 10 21:42:11 power sudo[157059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:11 power sudo[157059]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:11 power sudo[157063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ryC7cKWL50dvF4Xe.~\''
Sep 10 21:42:11 power sudo[157063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:11 power sudo[157063]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:11 power sudo[157068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ryC7cKWL50dvF4Xe.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 21:42:11 power sudo[157068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:11 power sudo[157068]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:11 power sudo[157072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 21:42:11 power sudo[157072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:11 power sudo[157072]: pam_unix(sudo:session): session closed for user root
Sep 10 21:42:15 power sudo[157733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 21:42:15 power sudo[157733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 21:42:15 power sudo[157733]: pam_unix(sudo:session): session closed for user root
Sep 10 21:45:01 power systemd[160640]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:45:01 power systemd[160641]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:50:01 power systemd[178767]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:50:01 power systemd[178770]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 21:55:02 power systemd[201067]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 21:55:02 power systemd[201068]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:00:01 power systemd[205727]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:00:01 power systemd[205732]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 22:00:01 power systemd[205729]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:00:01 power systemd[205735]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 22:00:01 power systemd[205738]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 22:04:01 power systemd[210498]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:05:01 power systemd[211560]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:05:01 power systemd[211561]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:06:01 power systemd[212597]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 22:07:01 power systemd[213493]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 22:09:01 power systemd[215160]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:09:01 power systemd[215161]: pam_unix(systemd-user:session): session opened for user chemhemc(uid=1006) by chemhemc(uid=0)
Sep 10 22:10:01 power systemd[216230]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:10:01 power systemd[216231]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:12:01 power systemd[217976]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 22:15:01 power systemd[220825]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:15:01 power systemd[220826]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:20:01 power systemd[225606]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:20:01 power systemd[225608]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:25:01 power systemd[230297]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:25:01 power systemd[230299]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:30:01 power systemd[234839]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:30:01 power systemd[234841]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:30:01 power systemd[234842]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 22:30:01 power systemd[234845]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 22:30:01 power systemd[234843]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 22:35:01 power systemd[241287]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:35:01 power systemd[241288]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep 10 22:35:01 power systemd[241289]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:36:01 power systemd[242180]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 22:37:01 power systemd[243155]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 22:39:01 power systemd[244923]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:40:01 power systemd[246342]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:40:01 power systemd[246343]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:42:01 power systemd[248396]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 22:42:07 power sudo[248494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 22:42:07 power systemd[248499]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:42:07 power sudo[248494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:07 power sudo[248494]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:07 power sudo[248516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 22:42:07 power sudo[248516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:07 power sudo[248516]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 22:42:08 power sudo[248520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248520]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=qUDylWxv6j'
Sep 10 22:42:08 power sudo[248524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248524]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 22:42:08 power sudo[248530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248530]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 22:42:08 power sudo[248535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248535]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 22:42:08 power sudo[248539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248539]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 22:42:08 power sudo[248543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248543]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 22:42:08 power sudo[248554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248554]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 22:42:08 power sudo[248558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248558]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 22:42:08 power sudo[248562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248562]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 22:42:08 power sudo[248566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248566]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 22:42:08 power sudo[248573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248573]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:08 power sudo[248577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 22:42:08 power sudo[248577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:08 power sudo[248577]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:10 power sudo[248638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 22:42:10 power sudo[248638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:10 power sudo[248638]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:10 power sudo[248646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 22:42:10 power sudo[248646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:10 power sudo[248646]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:10 power sudo[248656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=ideaplus user-2=karpospo user-3=nasaidni user-4=arturaco user-5=screenme user-6=premiums user-7=butelmk user-8=daris user-9=jpparkin user-10=inotekso user-11=drleomk user-12=kouzonco user-13=premiuma user-14=cetplatf user-15=dalmacom user-16=sparkupm user-17=stokovna user-18=klimimk user-19=palenzok user-20=zampmk user-21=zvskopje user-22=busymard user-23=custome1 user-24=janiboja user-25=itradeco user-26=vezilkac user-27=cabinetm user-28=stojano1 user-29=bovincom user-30=spdcompu user-31=detskagr user-32=infobadi user-33=mspmk user-34=wikicamp user-35=urbanexp user-36=sedcmk user-37=ivanjord user-38=groskome user-39=vfxnestc user-40=polyeste user-41=bizporta user-42=datelcom user-43=maleshne user-44=agrosind user-45=mpbmk user-46=datalink user-47=velmk user-48=gogovan1 user-49=kujnamon user-50=univerz1
Sep 10 22:42:10 power sudo[248656]: wp-toolkit : (command continued) user-51=bianasho user-52=makoasmk user-53=skyapart user-54=rasmorgm user-55=simbiome user-56=delcevca user-57=getaldus user-58=barececo user-59=workandt user-60=volkanco user-61=goartsym user-62=dhamachi user-63=mfashion user-64=evolvepl user-65=avtogumi user-66=socioloz user-67=pelagoni user-68=nefrolog user-69=ekostoc1 user-70=levantmk user-71=oncolog1 user-72=frizered user-73=hidrommk user-74=caramk user-75=youthgua user-76=anitermc user-77=cajsproc user-78=hotammk user-79=enaspotc user-80=vmro user-81=viewinn user-82=trudovop user-83=stojnevi user-84=raremk user-85=oouslave user-86=uhostmk5 user-87=bauerbg user-88=goodnews user-89=mstmmk user-90=gocruise user-91=tealmk user-92=dadarmk user-93=proverim user-94=pecakome user-95=wondersp user-96=stravelm user-97=robustco user-98=holiyayt user-99=rastiraz user-100=tradeyou user-101=gjorgeiv user-102=dnevnoin user-103=dikimk12 user-104=sprintst user-105=enochmk
Sep 10 22:42:10 power sudo[248656]: wp-toolkit : (command continued) user-106=herbalpl user-107=edomcomm user-108=berbermk user-109=nlpmkorg user-110=centarba user-111=kolened1 user-112=nolimits user-113=seloviro user-114=wineberr user-115=viplastc user-116=workbenc user-117=ismassag user-118=mbmehani user-119=golakkom user-120=trigemat user-121=naksorgm user-122=eliksirz user-123=electrol user-124=eurofarm user-125=solarinv user-126=recorgmk user-127=taktcomm user-128=jaramk user-129=solointe user-130=atspedco user-131=sssoluti user-132=progress user-133=animatem user-134=cleanerm user-135=biplmk user-136=kaoilmk user-137=bbbustou user-138=pelagini user-139=izzomk user-140=jpkomuna user-141=tehnodro user-142=makdrone user-143=eaptekam user-144=dimpalne user-145=peshkai1 user-146=fxxcom user-147=evacommk user-148=madzomk user-149=aptekafa user-150=gradbai1 user-151=folklore user-152=bauerin2 user-153=bonitavi user-154=evberasm user-155=euronic3 user-156=vegemk1 user-157=cupidpro
Sep 10 22:42:10 power sudo[248656]: wp-toolkit : (command continued) user-158=conserva user-159=ambitiou user-160=fiziosmk user-161=versusmk user-162=fffhpcwr user-163=radekrat user-164=starluxm user-165=tcieuroc user-166=onlinesh user-167=nationa2 user-168=solemor1 user-169=mapaspla user-170=gorsajmk user-171=aquatech user-172=v5srybi9dcdx user-173=supremel user-174=zdmgpsor user-175=modernar user-176=inkigaic user-177=bozinovm user-178=dslmk user-179=darkogor user-180=fnjorgmk user-181=prizmapl user-182=innofabl user-183=premiumi user-184=vacuacti user-185=taneccom user-186=tehnologija user-187=infopor1 user-188=pravekom user-189=vtranseu user-190=imdskopj user-191=glammace user-192=albuname user-193=chemhemc user-194=samasped user-195=nutrivim user-196=euromaki user-197=cosmatob user-198=elektrot user-199=zapovim1 user-200=euronic2 user-201=matratze user-202=mediasol user-203=bogdanos user-204=carrent1 user-205=apgrupmk user-206=kardiome user-207=aptekazd user-208=nikimare
Sep 10 22:42:10 power sudo[248656]: wp-toolkit : (command continued) user-209=forzares user-210=hausmark user-211=nikolov1 user-212=intelek1 user-213=mediatag user-214=nucktra1 user-215=lblawcom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 22:42:10 power sudo[248656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:11 power sudo[248656]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:11 power sudo[248665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 22:42:11 power sudo[248665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:11 power sudo[248665]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:11 power sudo[248670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rvRHFMdTpg7J31k3.~
Sep 10 22:42:11 power sudo[248670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:11 power sudo[248670]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:11 power sudo[248675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rvRHFMdTpg7J31k3.~\''
Sep 10 22:42:11 power sudo[248675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:11 power sudo[248675]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:11 power sudo[248680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rvRHFMdTpg7J31k3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 22:42:11 power sudo[248680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:11 power sudo[248680]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:11 power sudo[248684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 22:42:11 power sudo[248684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:11 power sudo[248684]: pam_unix(sudo:session): session closed for user root
Sep 10 22:42:15 power sudo[249666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 22:42:15 power sudo[249666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 22:42:15 power sudo[249666]: pam_unix(sudo:session): session closed for user root
Sep 10 22:45:01 power systemd[252718]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:45:01 power systemd[252719]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:50:01 power systemd[258179]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 22:50:01 power systemd[258180]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:55:01 power systemd[262528]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 22:55:01 power systemd[262527]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:00:01 power systemd[266998]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:00:01 power systemd[267002]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 23:00:01 power systemd[267001]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:00:01 power systemd[267004]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 23:00:01 power systemd[267006]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 23:04:01 power systemd[271618]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:05:01 power systemd[272968]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:05:01 power systemd[272969]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:06:01 power systemd[274250]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 23:07:01 power systemd[275502]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 23:09:01 power systemd[277300]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:10:01 power systemd[278465]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:10:01 power systemd[278466]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep 10 23:10:01 power systemd[278467]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:12:01 power systemd[280595]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 23:15:01 power systemd[283258]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:15:01 power systemd[283259]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:20:01 power systemd[288971]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:20:01 power systemd[288976]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:25:01 power systemd[293462]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:25:01 power systemd[293461]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:30:01 power systemd[298703]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:30:01 power systemd[298705]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 10 23:30:01 power systemd[298704]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:30:01 power systemd[298707]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 10 23:30:01 power systemd[298709]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 10 23:35:01 power systemd[304862]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:35:01 power systemd[304860]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:36:01 power systemd[306120]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 10 23:37:01 power systemd[307184]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 23:39:01 power systemd[309565]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:40:01 power systemd[310874]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:40:01 power systemd[310875]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:42:01 power systemd[313221]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 10 23:42:07 power sudo[313338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 10 23:42:07 power systemd[313343]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:42:08 power sudo[313338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313338]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 10 23:42:08 power sudo[313360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313360]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 10 23:42:08 power sudo[313364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313364]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=t3e1lq5qPy'
Sep 10 23:42:08 power sudo[313368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313368]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 10 23:42:08 power sudo[313373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313373]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 10 23:42:08 power sudo[313379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313379]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 10 23:42:08 power sudo[313383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313383]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 10 23:42:08 power sudo[313387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313387]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 10 23:42:08 power sudo[313394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313394]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 10 23:42:08 power sudo[313400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313400]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 10 23:42:08 power sudo[313408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313408]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 23:42:08 power sudo[313412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313412]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 10 23:42:08 power sudo[313417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:08 power sudo[313417]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:08 power sudo[313421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 10 23:42:08 power sudo[313421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:09 power sudo[313421]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:12 power sudo[313502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 10 23:42:12 power sudo[313502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:12 power sudo[313502]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:12 power sudo[313508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 10 23:42:12 power sudo[313508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:12 power sudo[313508]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:12 power sudo[313514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=edomcomm user-2=berbermk user-3=dikimk12 user-4=herbalpl user-5=enochmk user-6=sprintst user-7=seloviro user-8=kolened1 user-9=nlpmkorg user-10=centarba user-11=nolimits user-12=tealmk user-13=dadarmk user-14=proverim user-15=goodnews user-16=mstmmk user-17=gocruise user-18=gjorgeiv user-19=tradeyou user-20=dnevnoin user-21=pecakome user-22=stravelm user-23=robustco user-24=wondersp user-25=holiyayt user-26=rastiraz user-27=cajsproc user-28=hotammk user-29=anitermc user-30=youthgua user-31=stojnevi user-32=oouslave user-33=raremk user-34=bauerbg user-35=uhostmk5 user-36=enaspotc user-37=trudovop user-38=viewinn user-39=vmro user-40=socioloz user-41=avtogumi user-42=pelagoni user-43=evolvepl user-44=hidrommk user-45=frizered user-46=caramk user-47=levantmk user-48=ekostoc1 user-49=oncolog1 user-50=nefrolog
Sep 10 23:42:12 power sudo[313514]: wp-toolkit : (command continued) user-51=datalink user-52=kujnamon user-53=univerz1 user-54=velmk user-55=gogovan1 user-56=mpbmk user-57=agrosind user-58=barececo user-59=simbiome user-60=delcevca user-61=getaldus user-62=workandt user-63=dhamachi user-64=volkanco user-65=goartsym user-66=mfashion user-67=skyapart user-68=makoasmk user-69=bianasho user-70=rasmorgm user-71=wikicamp user-72=urbanexp user-73=spdcompu user-74=detskagr user-75=mspmk user-76=infobadi user-77=bizporta user-78=maleshne user-79=datelcom user-80=sedcmk user-81=groskome user-82=ivanjord user-83=polyeste user-84=vfxnestc user-85=palenzok user-86=busymard user-87=zampmk user-88=zvskopje user-89=custome1 user-90=stokovna user-91=sparkupm user-92=klimimk user-93=stojano1 user-94=bovincom user-95=janiboja user-96=itradeco user-97=vezilkac user-98=cabinetm user-99=inotekso user-100=jpparkin user-101=drleomk user-102=nasaidni user-103=karpospo user-104=ideaplus user-105=screenme
Sep 10 23:42:12 power sudo[313514]: wp-toolkit : (command continued) user-106=arturaco user-107=daris user-108=butelmk user-109=premiums user-110=kouzonco user-111=premiuma user-112=cetplatf user-113=dalmacom user-114=carrent1 user-115=bogdanos user-116=mediasol user-117=apgrupmk user-118=kardiome user-119=matratze user-120=euronic2 user-121=mediatag user-122=intelek1 user-123=nucktra1 user-124=lblawcom user-125=nikimare user-126=aptekazd user-127=forzares user-128=hausmark user-129=nikolov1 user-130=imdskopj user-131=albuname user-132=glammace user-133=infopor1 user-134=pravekom user-135=vtranseu user-136=euromaki user-137=cosmatob user-138=elektrot user-139=zapovim1 user-140=chemhemc user-141=samasped user-142=nutrivim user-143=zdmgpsor user-144=aquatech user-145=gorsajmk user-146=v5srybi9dcdx user-147=supremel user-148=dslmk user-149=darkogor user-150=fnjorgmk user-151=prizmapl user-152=bozinovm user-153=vacuacti user-154=premiumi user-155=innofabl user-156=taneccom
Sep 10 23:42:12 power sudo[313514]: wp-toolkit : (command continued) user-157=tehnologija user-158=modernar user-159=inkigaic user-160=fffhpcwr user-161=starluxm user-162=radekrat user-163=ambitiou user-164=fiziosmk user-165=versusmk user-166=onlinesh user-167=nationa2 user-168=solemor1 user-169=mapaspla user-170=tcieuroc user-171=folklore user-172=bauerin2 user-173=euronic3 user-174=cupidpro user-175=vegemk1 user-176=conserva user-177=evberasm user-178=bonitavi user-179=tehnodro user-180=makdrone user-181=izzomk user-182=jpkomuna user-183=aptekafa user-184=madzomk user-185=evacommk user-186=gradbai1 user-187=eaptekam user-188=dimpalne user-189=fxxcom user-190=peshkai1 user-191=atspedco user-192=sssoluti user-193=progress user-194=cleanerm user-195=animatem user-196=recorgmk user-197=taktcomm user-198=jaramk user-199=solointe user-200=pelagini user-201=biplmk user-202=kaoilmk user-203=bbbustou user-204=workbenc user-205=ismassag user-206=mbmehani user-207=wineberr
Sep 10 23:42:12 power sudo[313514]: wp-toolkit : (command continued) user-208=viplastc user-209=eurofarm user-210=solarinv user-211=golakkom user-212=naksorgm user-213=eliksirz user-214=trigemat user-215=electrol feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 10 23:42:12 power sudo[313514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:13 power sudo[313514]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:13 power sudo[313526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 23:42:13 power sudo[313526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:13 power sudo[313526]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:13 power sudo[313530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WFlt2fpYgx7Xr1hH.~
Sep 10 23:42:13 power sudo[313530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:13 power sudo[313530]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:13 power sudo[313534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WFlt2fpYgx7Xr1hH.~\''
Sep 10 23:42:13 power sudo[313534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:13 power sudo[313534]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:13 power sudo[313539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WFlt2fpYgx7Xr1hH.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 10 23:42:13 power sudo[313539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:13 power sudo[313539]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:13 power sudo[313543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 10 23:42:13 power sudo[313543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:13 power sudo[313543]: pam_unix(sudo:session): session closed for user root
Sep 10 23:42:17 power sudo[313958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 10 23:42:17 power sudo[313958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 10 23:42:17 power sudo[313958]: pam_unix(sudo:session): session closed for user root
Sep 10 23:45:01 power systemd[316688]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:45:01 power systemd[316689]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:50:01 power systemd[321599]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:50:01 power systemd[321601]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 10 23:55:01 power systemd[325849]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 10 23:55:01 power systemd[325850]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:00:01 power systemd[330957]: pam_unix(systemd-user:session): session opened for user fffhpcwr(uid=1010) by fffhpcwr(uid=0)
Sep 11 00:00:01 power systemd[330950]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:00:01 power systemd[330958]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:00:01 power systemd[330962]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 00:00:01 power systemd[330960]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 00:00:01 power systemd[330965]: pam_unix(systemd-user:session): session opened for user tcieuroc(uid=1184) by tcieuroc(uid=0)
Sep 11 00:00:01 power systemd[330964]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 00:04:01 power systemd[336963]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:05:01 power systemd[338069]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:05:01 power systemd[338070]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:06:01 power systemd[339324]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 00:07:01 power systemd[340436]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 00:09:01 power systemd[342147]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:10:01 power systemd[343120]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:10:01 power systemd[343122]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:12:01 power systemd[345431]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 00:15:02 power systemd[348224]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:15:02 power systemd[348225]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:20:01 power systemd[353324]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:20:01 power systemd[353325]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:25:01 power systemd[357918]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:25:01 power systemd[357919]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:26:01 power systemd[358982]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:26:24 power polkitd[360354]: Loading rules from directory /etc/polkit-1/rules.d
Sep 11 00:26:24 power polkitd[360354]: Loading rules from directory /usr/share/polkit-1/rules.d
Sep 11 00:26:24 power polkitd[360354]: Finished loading, compiling and executing 5 rules
Sep 11 00:26:24 power polkitd[360354]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Sep 11 00:30:01 power systemd[370859]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:30:01 power systemd[370860]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:30:01 power systemd[370863]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 00:30:01 power systemd[370861]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 00:30:01 power systemd[370865]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 00:35:01 power systemd[375755]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:35:01 power systemd[375757]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:36:01 power systemd[376978]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 00:37:01 power systemd[377825]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 00:39:01 power systemd[379530]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:40:01 power systemd[380642]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:40:01 power systemd[380643]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:42:01 power systemd[382317]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 00:42:07 power sudo[382401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 00:42:07 power systemd[382406]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:42:07 power sudo[382401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382401]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 00:42:07 power sudo[382422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382422]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 00:42:07 power sudo[382427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382427]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=ddf7N2aeDm'
Sep 11 00:42:07 power sudo[382432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382432]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 00:42:07 power sudo[382438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382438]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 00:42:07 power sudo[382442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382442]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 00:42:07 power sudo[382446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382446]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 00:42:07 power sudo[382450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382450]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 00:42:07 power sudo[382456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382456]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 00:42:07 power sudo[382460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382460]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 00:42:07 power sudo[382465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382465]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 00:42:07 power sudo[382469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382469]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 00:42:07 power sudo[382473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:07 power sudo[382473]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:07 power sudo[382478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 00:42:07 power sudo[382478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:08 power sudo[382478]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:09 power sudo[382518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 00:42:09 power sudo[382518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:09 power sudo[382518]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:09 power sudo[382524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 00:42:09 power sudo[382524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:09 power sudo[382524]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:09 power sudo[382532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=rastiraz user-2=holiyayt user-3=stravelm user-4=robustco user-5=wondersp user-6=pecakome user-7=dnevnoin user-8=tradeyou user-9=gjorgeiv user-10=gocruise user-11=mstmmk user-12=goodnews user-13=proverim user-14=dadarmk user-15=tealmk user-16=nolimits user-17=kolened1 user-18=centarba user-19=nlpmkorg user-20=seloviro user-21=herbalpl user-22=enochmk user-23=sprintst user-24=dikimk12 user-25=berbermk user-26=edomcomm user-27=ekostoc1 user-28=levantmk user-29=oncolog1 user-30=nefrolog user-31=caramk user-32=hidrommk user-33=frizered user-34=evolvepl user-35=pelagoni user-36=avtogumi user-37=socioloz user-38=trudovop user-39=viewinn user-40=vmro user-41=enaspotc user-42=bauerbg user-43=uhostmk5 user-44=oouslave user-45=raremk user-46=stojnevi user-47=anitermc user-48=youthgua user-49=hotammk user-50=cajsproc
Sep 11 00:42:09 power sudo[382532]: wp-toolkit : (command continued) user-51=polyeste user-52=vfxnestc user-53=groskome user-54=ivanjord user-55=sedcmk user-56=maleshne user-57=datelcom user-58=bizporta user-59=infobadi user-60=mspmk user-61=detskagr user-62=spdcompu user-63=urbanexp user-64=wikicamp user-65=rasmorgm user-66=skyapart user-67=bianasho user-68=makoasmk user-69=mfashion user-70=dhamachi user-71=volkanco user-72=goartsym user-73=workandt user-74=barececo user-75=getaldus user-76=delcevca user-77=simbiome user-78=mpbmk user-79=agrosind user-80=univerz1 user-81=kujnamon user-82=velmk user-83=gogovan1 user-84=datalink user-85=dalmacom user-86=cetplatf user-87=premiuma user-88=kouzonco user-89=butelmk user-90=daris user-91=premiums user-92=arturaco user-93=screenme user-94=nasaidni user-95=karpospo user-96=ideaplus user-97=drleomk user-98=inotekso user-99=jpparkin user-100=cabinetm user-101=vezilkac user-102=itradeco user-103=janiboja user-104=bovincom user-105=stojano1
Sep 11 00:42:09 power sudo[382532]: wp-toolkit : (command continued) user-106=klimimk user-107=stokovna user-108=sparkupm user-109=custome1 user-110=zvskopje user-111=zampmk user-112=busymard user-113=palenzok user-114=nutrivim user-115=chemhemc user-116=samasped user-117=elektrot user-118=zapovim1 user-119=cosmatob user-120=euromaki user-121=vtranseu user-122=pravekom user-123=infopor1 user-124=albuname user-125=glammace user-126=imdskopj user-127=hausmark user-128=nikolov1 user-129=forzares user-130=nikimare user-131=aptekazd user-132=lblawcom user-133=nucktra1 user-134=mediatag user-135=intelek1 user-136=matratze user-137=euronic2 user-138=kardiome user-139=apgrupmk user-140=bogdanos user-141=carrent1 user-142=mediasol user-143=tcieuroc user-144=mapaspla user-145=solemor1 user-146=nationa2 user-147=onlinesh user-148=versusmk user-149=fiziosmk user-150=ambitiou user-151=starluxm user-152=radekrat user-153=fffhpcwr user-154=inkigaic user-155=modernar user-156=tehnologija
Sep 11 00:42:09 power sudo[382532]: wp-toolkit : (command continued) user-157=taneccom user-158=vacuacti user-159=premiumi user-160=innofabl user-161=darkogor user-162=prizmapl user-163=dslmk user-164=fnjorgmk user-165=bozinovm user-166=supremel user-167=v5srybi9dcdx user-168=aquatech user-169=gorsajmk user-170=zdmgpsor user-171=fxxcom user-172=peshkai1 user-173=dimpalne user-174=eaptekam user-175=gradbai1 user-176=aptekafa user-177=madzomk user-178=evacommk user-179=jpkomuna user-180=izzomk user-181=makdrone user-182=tehnodro user-183=evberasm user-184=bonitavi user-185=conserva user-186=cupidpro user-187=vegemk1 user-188=euronic3 user-189=bauerin2 user-190=folklore user-191=electrol user-192=naksorgm user-193=eliksirz user-194=trigemat user-195=golakkom user-196=solarinv user-197=eurofarm user-198=viplastc user-199=wineberr user-200=mbmehani user-201=ismassag user-202=workbenc user-203=bbbustou user-204=biplmk user-205=kaoilmk user-206=pelagini user-207=solointe user-208=jaramk
Sep 11 00:42:09 power sudo[382532]: wp-toolkit : (command continued) user-209=recorgmk user-210=taktcomm user-211=cleanerm user-212=animatem user-213=progress user-214=atspedco user-215=sssoluti feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 00:42:09 power sudo[382532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:10 power sudo[382532]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:10 power sudo[382545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 00:42:10 power sudo[382545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:10 power sudo[382545]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:10 power sudo[382549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VkPmcUIYSFkMNfpQ.~
Sep 11 00:42:10 power sudo[382549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:10 power sudo[382549]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:10 power sudo[382553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VkPmcUIYSFkMNfpQ.~\''
Sep 11 00:42:10 power sudo[382553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:10 power sudo[382553]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:10 power sudo[382558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VkPmcUIYSFkMNfpQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 00:42:10 power sudo[382558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:10 power sudo[382558]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:10 power sudo[382562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 00:42:10 power sudo[382562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:10 power sudo[382562]: pam_unix(sudo:session): session closed for user root
Sep 11 00:42:14 power sudo[382999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 00:42:14 power sudo[382999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 00:42:14 power sudo[382999]: pam_unix(sudo:session): session closed for user root
Sep 11 00:45:01 power systemd[386252]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:45:01 power systemd[386253]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:50:01 power systemd[391406]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:50:01 power systemd[391408]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 00:55:02 power systemd[395853]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 00:55:02 power systemd[395854]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:00:01 power systemd[400465]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:00:01 power systemd[400470]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:00:01 power systemd[400471]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 01:00:01 power systemd[400473]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 01:00:01 power systemd[400474]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 01:04:01 power systemd[404958]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:05:01 power systemd[405794]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:05:01 power systemd[405795]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:06:01 power systemd[407101]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 01:07:01 power systemd[408116]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 01:09:01 power systemd[409788]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:10:01 power systemd[410841]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:10:01 power systemd[410842]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:12:01 power systemd[412683]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 01:15:01 power systemd[415475]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:15:01 power systemd[415476]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:20:01 power systemd[420438]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:20:01 power systemd[420441]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:23:35 power sshd[423889]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
Sep 11 01:23:35 power sshd[423889]: banner exchange: Connection from 147.185.132.200 port 59816: invalid format
Sep 11 01:25:01 power systemd[425043]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:25:01 power systemd[425044]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:30:01 power systemd[429377]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:30:01 power systemd[429379]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 01:30:01 power systemd[429378]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:30:01 power systemd[429381]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 01:30:01 power systemd[429382]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 01:35:01 power systemd[434175]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:35:01 power systemd[434176]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:36:01 power systemd[435489]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 01:37:01 power systemd[436326]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 01:39:01 power systemd[438377]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:40:01 power systemd[439338]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:40:01 power systemd[439339]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:42:01 power systemd[441041]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 01:42:07 power sudo[441131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 01:42:07 power systemd[441137]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:42:07 power sudo[441131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441131]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 01:42:07 power sudo[441152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441152]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 01:42:07 power sudo[441156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441156]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=nmz3BjDa4q'
Sep 11 01:42:07 power sudo[441160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441160]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 01:42:07 power sudo[441166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441166]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 01:42:07 power sudo[441170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441170]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 01:42:07 power sudo[441174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441174]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 01:42:07 power sudo[441178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441178]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 01:42:07 power sudo[441185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441185]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 01:42:07 power sudo[441189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441189]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 01:42:07 power sudo[441194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441194]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 01:42:07 power sudo[441198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441198]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 01:42:07 power sudo[441202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:07 power sudo[441202]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:07 power sudo[441206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 01:42:07 power sudo[441206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:08 power sudo[441206]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:10 power sudo[441300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 01:42:10 power sudo[441300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:10 power sudo[441300]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:10 power sudo[441306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 01:42:10 power sudo[441306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:10 power sudo[441306]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:10 power sudo[441310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=matratze user-2=euronic2 user-3=kardiome user-4=carrent1 user-5=bogdanos user-6=mediasol user-7=apgrupmk user-8=hausmark user-9=nikolov1 user-10=nikimare user-11=aptekazd user-12=forzares user-13=nucktra1 user-14=lblawcom user-15=mediatag user-16=intelek1 user-17=pravekom user-18=vtranseu user-19=infopor1 user-20=albuname user-21=glammace user-22=imdskopj user-23=nutrivim user-24=samasped user-25=chemhemc user-26=zapovim1 user-27=elektrot user-28=euromaki user-29=cosmatob user-30=v5srybi9dcdx user-31=supremel user-32=aquatech user-33=gorsajmk user-34=zdmgpsor user-35=inkigaic user-36=modernar user-37=taneccom user-38=tehnologija user-39=fnjorgmk user-40=darkogor user-41=dslmk user-42=prizmapl user-43=bozinovm user-44=vacuacti user-45=premiumi user-46=innofabl user-47=versusmk user-48=ambitiou
Sep 11 01:42:10 power sudo[441310]: wp-toolkit : (command continued) user-49=fiziosmk user-50=starluxm user-51=radekrat user-52=fffhpcwr user-53=tcieuroc user-54=solemor1 user-55=mapaspla user-56=onlinesh user-57=nationa2 user-58=bauerin2 user-59=folklore user-60=evberasm user-61=bonitavi user-62=conserva user-63=euronic3 user-64=cupidpro user-65=vegemk1 user-66=izzomk user-67=jpkomuna user-68=makdrone user-69=tehnodro user-70=fxxcom user-71=peshkai1 user-72=eaptekam user-73=dimpalne user-74=gradbai1 user-75=madzomk user-76=aptekafa user-77=evacommk user-78=jaramk user-79=solointe user-80=taktcomm user-81=recorgmk user-82=progress user-83=cleanerm user-84=animatem user-85=sssoluti user-86=atspedco user-87=biplmk user-88=kaoilmk user-89=bbbustou user-90=pelagini user-91=wineberr user-92=viplastc user-93=mbmehani user-94=workbenc user-95=ismassag user-96=naksorgm user-97=eliksirz user-98=trigemat user-99=electrol user-100=golakkom user-101=solarinv user-102=eurofarm
Sep 11 01:42:10 power sudo[441310]: wp-toolkit : (command continued) user-103=dikimk12 user-104=enochmk user-105=herbalpl user-106=sprintst user-107=edomcomm user-108=berbermk user-109=nolimits user-110=kolened1 user-111=nlpmkorg user-112=centarba user-113=seloviro user-114=gocruise user-115=goodnews user-116=mstmmk user-117=dadarmk user-118=proverim user-119=tealmk user-120=holiyayt user-121=rastiraz user-122=pecakome user-123=stravelm user-124=robustco user-125=wondersp user-126=dnevnoin user-127=tradeyou user-128=gjorgeiv user-129=anitermc user-130=youthgua user-131=cajsproc user-132=hotammk user-133=enaspotc user-134=trudovop user-135=viewinn user-136=vmro user-137=oouslave user-138=raremk user-139=bauerbg user-140=uhostmk5 user-141=stojnevi user-142=evolvepl user-143=pelagoni user-144=socioloz user-145=avtogumi user-146=ekostoc1 user-147=levantmk user-148=oncolog1 user-149=nefrolog user-150=caramk user-151=hidrommk user-152=frizered user-153=mpbmk user-154=agrosind
Sep 11 01:42:10 power sudo[441310]: wp-toolkit : (command continued) user-155=kujnamon user-156=univerz1 user-157=gogovan1 user-158=velmk user-159=datalink user-160=rasmorgm user-161=skyapart user-162=bianasho user-163=makoasmk user-164=dhamachi user-165=volkanco user-166=goartsym user-167=mfashion user-168=barececo user-169=simbiome user-170=getaldus user-171=delcevca user-172=workandt user-173=mspmk user-174=infobadi user-175=spdcompu user-176=detskagr user-177=wikicamp user-178=urbanexp user-179=polyeste user-180=vfxnestc user-181=sedcmk user-182=ivanjord user-183=groskome user-184=maleshne user-185=datelcom user-186=bizporta user-187=klimimk user-188=stokovna user-189=sparkupm user-190=custome1 user-191=palenzok user-192=zampmk user-193=zvskopje user-194=busymard user-195=vezilkac user-196=cabinetm user-197=janiboja user-198=itradeco user-199=bovincom user-200=stojano1 user-201=butelmk user-202=daris user-203=premiums user-204=nasaidni user-205=karpospo user-206=ideaplus
Sep 11 01:42:10 power sudo[441310]: wp-toolkit : (command continued) user-207=screenme user-208=arturaco user-209=inotekso user-210=jpparkin user-211=drleomk user-212=cetplatf user-213=dalmacom user-214=kouzonco user-215=premiuma feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 01:42:10 power sudo[441310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:10 power sudo[441310]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:10 power sudo[441323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 01:42:10 power sudo[441323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:10 power sudo[441323]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:10 power sudo[441327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bIqmEWTr7Pi7Ca4F.~
Sep 11 01:42:10 power sudo[441327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:10 power sudo[441327]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:10 power sudo[441331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bIqmEWTr7Pi7Ca4F.~\''
Sep 11 01:42:10 power sudo[441331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:10 power sudo[441331]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:10 power sudo[441336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bIqmEWTr7Pi7Ca4F.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 01:42:10 power sudo[441336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:10 power sudo[441336]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:10 power sudo[441340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 01:42:10 power sudo[441340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:10 power sudo[441340]: pam_unix(sudo:session): session closed for user root
Sep 11 01:42:11 power sudo[442013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 01:42:11 power sudo[442013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 01:42:11 power sudo[442013]: pam_unix(sudo:session): session closed for user root
Sep 11 01:45:01 power systemd[444640]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:45:01 power systemd[444639]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:50:01 power systemd[449438]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 01:50:01 power systemd[449437]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:55:01 power systemd[453832]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 01:55:01 power systemd[453833]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:00:01 power systemd[458157]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 02:00:01 power systemd[458159]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:00:01 power systemd[458160]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 02:00:01 power systemd[458162]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 02:00:01 power systemd[458163]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 02:05:01 power systemd[464567]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:06:01 power systemd[465701]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 02:07:01 power systemd[466628]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 02:10:01 power systemd[469876]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:12:01 power systemd[471772]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 02:15:01 power systemd[474860]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:20:01 power systemd[480765]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:25:01 power systemd[485516]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:30:01 power systemd[490205]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:30:01 power systemd[490207]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 02:30:01 power systemd[490208]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 02:30:01 power systemd[490210]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 02:35:01 power systemd[495939]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:36:01 power systemd[496951]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 02:37:01 power systemd[498031]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 02:40:01 power systemd[501076]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:42:01 power systemd[502777]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 02:42:07 power sudo[502853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 02:42:07 power sudo[502853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502853]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 02:42:07 power sudo[502857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502857]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 02:42:07 power sudo[502861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502861]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=wvUvmbCIcM'
Sep 11 02:42:07 power sudo[502865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502865]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 02:42:07 power sudo[502870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502870]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 02:42:07 power sudo[502874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502874]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 02:42:07 power sudo[502879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502879]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 02:42:07 power sudo[502883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502883]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 02:42:07 power sudo[502890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502890]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 02:42:07 power sudo[502895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502895]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 02:42:07 power sudo[502899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502899]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 02:42:07 power sudo[502903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502903]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 02:42:07 power sudo[502907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:07 power sudo[502907]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:07 power sudo[502912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 02:42:07 power sudo[502912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:08 power sudo[502912]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:09 power sudo[502952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 02:42:09 power sudo[502952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:09 power sudo[502952]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:09 power sudo[502957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 02:42:09 power sudo[502957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:09 power sudo[502957]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:09 power sudo[502963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=nationa2 user-2=onlinesh user-3=mapaspla user-4=solemor1 user-5=tcieuroc user-6=fffhpcwr user-7=radekrat user-8=starluxm user-9=fiziosmk user-10=ambitiou user-11=versusmk user-12=premiumi user-13=innofabl user-14=vacuacti user-15=bozinovm user-16=prizmapl user-17=darkogor user-18=fnjorgmk user-19=dslmk user-20=tehnologija user-21=taneccom user-22=modernar user-23=inkigaic user-24=zdmgpsor user-25=gorsajmk user-26=aquatech user-27=supremel user-28=v5srybi9dcdx user-29=euromaki user-30=cosmatob user-31=zapovim1 user-32=elektrot user-33=samasped user-34=chemhemc user-35=nutrivim user-36=imdskopj user-37=glammace user-38=albuname user-39=infopor1 user-40=pravekom user-41=vtranseu user-42=intelek1 user-43=mediatag user-44=lblawcom user-45=nucktra1 user-46=forzares user-47=aptekazd user-48=nikimare
Sep 11 02:42:09 power sudo[502963]: wp-toolkit : (command continued) user-49=hausmark user-50=nikolov1 user-51=apgrupmk user-52=mediasol user-53=bogdanos user-54=carrent1 user-55=kardiome user-56=euronic2 user-57=matratze user-58=eurofarm user-59=solarinv user-60=golakkom user-61=electrol user-62=trigemat user-63=naksorgm user-64=eliksirz user-65=ismassag user-66=workbenc user-67=mbmehani user-68=viplastc user-69=wineberr user-70=pelagini user-71=bbbustou user-72=biplmk user-73=kaoilmk user-74=atspedco user-75=sssoluti user-76=animatem user-77=cleanerm user-78=progress user-79=taktcomm user-80=recorgmk user-81=solointe user-82=jaramk user-83=evacommk user-84=aptekafa user-85=madzomk user-86=gradbai1 user-87=dimpalne user-88=eaptekam user-89=peshkai1 user-90=fxxcom user-91=tehnodro user-92=makdrone user-93=jpkomuna user-94=izzomk user-95=vegemk1 user-96=cupidpro user-97=euronic3 user-98=conserva user-99=bonitavi user-100=evberasm user-101=folklore user-102=bauerin2
Sep 11 02:42:09 power sudo[502963]: wp-toolkit : (command continued) user-103=frizered user-104=hidrommk user-105=caramk user-106=nefrolog user-107=oncolog1 user-108=ekostoc1 user-109=levantmk user-110=avtogumi user-111=socioloz user-112=pelagoni user-113=evolvepl user-114=stojnevi user-115=uhostmk5 user-116=bauerbg user-117=raremk user-118=oouslave user-119=vmro user-120=trudovop user-121=viewinn user-122=enaspotc user-123=hotammk user-124=cajsproc user-125=youthgua user-126=anitermc user-127=tradeyou user-128=gjorgeiv user-129=dnevnoin user-130=wondersp user-131=stravelm user-132=robustco user-133=pecakome user-134=rastiraz user-135=holiyayt user-136=tealmk user-137=proverim user-138=dadarmk user-139=mstmmk user-140=goodnews user-141=gocruise user-142=seloviro user-143=nlpmkorg user-144=centarba user-145=kolened1 user-146=nolimits user-147=berbermk user-148=edomcomm user-149=sprintst user-150=herbalpl user-151=enochmk user-152=dikimk12 user-153=premiuma user-154=kouzonco
Sep 11 02:42:09 power sudo[502963]: wp-toolkit : (command continued) user-155=dalmacom user-156=cetplatf user-157=drleomk user-158=jpparkin user-159=inotekso user-160=arturaco user-161=screenme user-162=ideaplus user-163=nasaidni user-164=karpospo user-165=premiums user-166=daris user-167=butelmk user-168=stojano1 user-169=bovincom user-170=itradeco user-171=janiboja user-172=cabinetm user-173=vezilkac user-174=zvskopje user-175=zampmk user-176=busymard user-177=palenzok user-178=custome1 user-179=sparkupm user-180=stokovna user-181=klimimk user-182=bizporta user-183=datelcom user-184=maleshne user-185=ivanjord user-186=groskome user-187=sedcmk user-188=vfxnestc user-189=polyeste user-190=urbanexp user-191=wikicamp user-192=detskagr user-193=spdcompu user-194=infobadi user-195=mspmk user-196=workandt user-197=simbiome user-198=getaldus user-199=delcevca user-200=barececo user-201=mfashion user-202=volkanco user-203=goartsym user-204=dhamachi user-205=makoasmk user-206=bianasho
Sep 11 02:42:09 power sudo[502963]: wp-toolkit : (command continued) user-207=skyapart user-208=rasmorgm user-209=datalink user-210=velmk user-211=gogovan1 user-212=kujnamon user-213=univerz1 user-214=agrosind user-215=mpbmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 02:42:10 power sudo[502963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:10 power sudo[502963]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:10 power sudo[502973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 02:42:10 power sudo[502973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:10 power sudo[502973]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:10 power sudo[502980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6MvT1E21y6QymABr.~
Sep 11 02:42:10 power sudo[502980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:10 power sudo[502980]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:10 power sudo[502984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6MvT1E21y6QymABr.~\''
Sep 11 02:42:10 power sudo[502984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:10 power sudo[502984]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:10 power sudo[502989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6MvT1E21y6QymABr.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 02:42:10 power sudo[502989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:10 power sudo[502989]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:10 power sudo[502993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 02:42:10 power sudo[502993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:10 power sudo[502993]: pam_unix(sudo:session): session closed for user root
Sep 11 02:42:10 power sudo[503334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 02:42:10 power sudo[503334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 02:42:11 power sudo[503334]: pam_unix(sudo:session): session closed for user root
Sep 11 02:45:01 power systemd[506458]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:50:01 power systemd[510924]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 02:52:06 power sshd[512678]: Connection closed by 172.236.228.220 port 5626 [preauth]
Sep 11 02:52:08 power sshd[512690]: Connection closed by 172.236.228.220 port 5630 [preauth]
Sep 11 02:52:09 power sshd[512704]: Connection closed by 172.236.228.220 port 5644 [preauth]
Sep 11 02:55:01 power systemd[514887]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:00:01 power systemd[519396]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:00:01 power systemd[519399]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 03:00:01 power systemd[519402]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 03:00:01 power systemd[519401]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 03:05:01 power systemd[524417]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:06:01 power systemd[525310]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 03:07:01 power systemd[526190]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 03:10:01 power systemd[528936]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:12:01 power systemd[530590]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 03:15:01 power systemd[533038]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:20:01 power systemd[538005]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:21:01 power sshd[538939]: error: kex_exchange_identification: Connection closed by remote host
Sep 11 03:21:01 power sshd[538939]: Connection closed by 185.247.137.242 port 49143
Sep 11 03:21:02 power sshd[538985]: Connection closed by 185.247.137.242 port 48637 [preauth]
Sep 11 03:25:02 power systemd[542300]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:27:01 power systemd[544148]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 11 03:30:01 power systemd[546609]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:30:01 power systemd[546611]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 03:30:01 power systemd[546612]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 03:30:01 power systemd[546614]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 03:33:35 power pam_imunify[331555]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 80.244.4.118 has been locked due to Imunify RBL
Sep 11 03:33:43 power pam_imunify[331555]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 80.244.4.118 has been locked due to Imunify RBL
Sep 11 03:35:01 power systemd[551143]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:36:01 power systemd[552251]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 03:37:01 power systemd[553155]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 03:40:01 power systemd[555993]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:42:01 power systemd[557503]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 03:42:07 power sudo[557586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 03:42:07 power sudo[557586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557586]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 03:42:07 power sudo[557590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557590]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 03:42:07 power sudo[557594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557594]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=ZGiSYBhpB1'
Sep 11 03:42:07 power sudo[557598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557598]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 03:42:07 power sudo[557603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557603]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 03:42:07 power sudo[557607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557607]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 03:42:07 power sudo[557611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557611]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 03:42:07 power sudo[557616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557616]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 03:42:07 power sudo[557625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557625]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 03:42:07 power sudo[557629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557629]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 03:42:07 power sudo[557633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557633]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 03:42:07 power sudo[557637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557637]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 03:42:07 power sudo[557641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:07 power sudo[557641]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:07 power sudo[557645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 03:42:07 power sudo[557645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:08 power sudo[557645]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:10 power sudo[557697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 03:42:10 power sudo[557697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:10 power sudo[557697]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:10 power sudo[557702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 03:42:10 power sudo[557702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:10 power sudo[557702]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:10 power sudo[557707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=datalink user-2=velmk user-3=gogovan1 user-4=kujnamon user-5=univerz1 user-6=agrosind user-7=mpbmk user-8=workandt user-9=getaldus user-10=delcevca user-11=simbiome user-12=barececo user-13=mfashion user-14=volkanco user-15=goartsym user-16=dhamachi user-17=makoasmk user-18=bianasho user-19=skyapart user-20=rasmorgm user-21=urbanexp user-22=wikicamp user-23=detskagr user-24=spdcompu user-25=infobadi user-26=mspmk user-27=bizporta user-28=datelcom user-29=maleshne user-30=ivanjord user-31=groskome user-32=sedcmk user-33=vfxnestc user-34=polyeste user-35=busymard user-36=zampmk user-37=zvskopje user-38=palenzok user-39=custome1 user-40=sparkupm user-41=stokovna user-42=klimimk user-43=stojano1 user-44=bovincom user-45=itradeco user-46=janiboja user-47=cabinetm user-48=vezilkac user-49=drleomk user-50=jpparkin
Sep 11 03:42:10 power sudo[557707]: wp-toolkit : (command continued) user-51=inotekso user-52=screenme user-53=arturaco user-54=ideaplus user-55=nasaidni user-56=karpospo user-57=premiums user-58=daris user-59=butelmk user-60=premiuma user-61=kouzonco user-62=dalmacom user-63=cetplatf user-64=berbermk user-65=edomcomm user-66=sprintst user-67=enochmk user-68=herbalpl user-69=dikimk12 user-70=seloviro user-71=nlpmkorg user-72=centarba user-73=kolened1 user-74=nolimits user-75=tealmk user-76=proverim user-77=dadarmk user-78=mstmmk user-79=goodnews user-80=gocruise user-81=gjorgeiv user-82=tradeyou user-83=dnevnoin user-84=wondersp user-85=stravelm user-86=robustco user-87=pecakome user-88=rastiraz user-89=holiyayt user-90=hotammk user-91=cajsproc user-92=youthgua user-93=anitermc user-94=stojnevi user-95=uhostmk5 user-96=bauerbg user-97=raremk user-98=oouslave user-99=vmro user-100=viewinn user-101=trudovop user-102=enaspotc user-103=avtogumi user-104=socioloz user-105=pelagoni
Sep 11 03:42:10 power sudo[557707]: wp-toolkit : (command continued) user-106=evolvepl user-107=frizered user-108=hidrommk user-109=caramk user-110=nefrolog user-111=oncolog1 user-112=levantmk user-113=ekostoc1 user-114=folklore user-115=bauerin2 user-116=vegemk1 user-117=cupidpro user-118=euronic3 user-119=conserva user-120=bonitavi user-121=evberasm user-122=tehnodro user-123=makdrone user-124=jpkomuna user-125=izzomk user-126=evacommk user-127=madzomk user-128=aptekafa user-129=gradbai1 user-130=dimpalne user-131=eaptekam user-132=peshkai1 user-133=fxxcom user-134=atspedco user-135=sssoluti user-136=animatem user-137=cleanerm user-138=progress user-139=recorgmk user-140=taktcomm user-141=solointe user-142=jaramk user-143=pelagini user-144=bbbustou user-145=biplmk user-146=kaoilmk user-147=ismassag user-148=workbenc user-149=mbmehani user-150=viplastc user-151=wineberr user-152=eurofarm user-153=solarinv user-154=golakkom user-155=electrol user-156=trigemat user-157=eliksirz
Sep 11 03:42:10 power sudo[557707]: wp-toolkit : (command continued) user-158=naksorgm user-159=apgrupmk user-160=mediasol user-161=bogdanos user-162=carrent1 user-163=kardiome user-164=euronic2 user-165=matratze user-166=intelek1 user-167=mediatag user-168=lblawcom user-169=nucktra1 user-170=forzares user-171=aptekazd user-172=nikimare user-173=hausmark user-174=nikolov1 user-175=imdskopj user-176=glammace user-177=albuname user-178=infopor1 user-179=pravekom user-180=vtranseu user-181=euromaki user-182=cosmatob user-183=zapovim1 user-184=elektrot user-185=chemhemc user-186=samasped user-187=nutrivim user-188=zdmgpsor user-189=gorsajmk user-190=aquatech user-191=supremel user-192=v5srybi9dcdx user-193=premiumi user-194=innofabl user-195=vacuacti user-196=bozinovm user-197=dslmk user-198=prizmapl user-199=fnjorgmk user-200=darkogor user-201=tehnologija user-202=taneccom user-203=modernar user-204=inkigaic user-205=fffhpcwr user-206=radekrat user-207=starluxm user-208=fiziosmk
Sep 11 03:42:10 power sudo[557707]: wp-toolkit : (command continued) user-209=ambitiou user-210=versusmk user-211=nationa2 user-212=onlinesh user-213=mapaspla user-214=solemor1 user-215=tcieuroc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 03:42:10 power sudo[557707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:10 power sudo[557707]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:10 power sudo[557714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 03:42:10 power sudo[557714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:10 power sudo[557714]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:10 power sudo[557718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-egvvym8C79S0rmx3.~
Sep 11 03:42:10 power sudo[557718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:10 power sudo[557718]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:10 power sudo[557722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-egvvym8C79S0rmx3.~\''
Sep 11 03:42:10 power sudo[557722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:10 power sudo[557722]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:10 power sudo[557727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-egvvym8C79S0rmx3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 03:42:10 power sudo[557727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:10 power sudo[557727]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:10 power sudo[557731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 03:42:10 power sudo[557731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:10 power sudo[557731]: pam_unix(sudo:session): session closed for user root
Sep 11 03:42:15 power sudo[558693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 03:42:15 power sudo[558693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 03:42:15 power sudo[558693]: pam_unix(sudo:session): session closed for user root
Sep 11 03:45:01 power systemd[561066]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:50:01 power systemd[565612]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 03:55:01 power systemd[569533]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:00:01 power systemd[573586]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:00:01 power systemd[573592]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 04:00:01 power systemd[573594]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 04:00:01 power systemd[573595]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 04:05:01 power systemd[578505]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:06:01 power systemd[579345]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 04:07:01 power systemd[580041]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 04:10:01 power systemd[582673]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:12:01 power systemd[584254]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 04:15:01 power systemd[586590]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:20:01 power systemd[592984]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:25:01 power systemd[598447]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:30:01 power systemd[602393]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:30:01 power systemd[602394]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 04:30:01 power systemd[602396]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 04:30:01 power systemd[602398]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 04:30:01 power systemd[602403]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 11 04:35:01 power systemd[606564]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:36:01 power systemd[607265]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 04:37:01 power systemd[608010]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 04:40:01 power systemd[610679]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:42:01 power systemd[612214]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 04:42:07 power sudo[612300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 04:42:07 power sudo[612300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612300]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 04:42:07 power sudo[612304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612304]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 04:42:07 power sudo[612308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612308]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=JV7zaUm2l7'
Sep 11 04:42:07 power sudo[612312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612312]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 04:42:07 power sudo[612318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612318]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 04:42:07 power sudo[612322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612322]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 04:42:07 power sudo[612326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612326]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 04:42:07 power sudo[612330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612330]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 04:42:07 power sudo[612337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612337]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 04:42:07 power sudo[612342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612342]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 04:42:07 power sudo[612346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612346]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 04:42:07 power sudo[612351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612351]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 04:42:07 power sudo[612355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:07 power sudo[612355]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:07 power sudo[612359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 04:42:07 power sudo[612359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:08 power sudo[612359]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:09 power sudo[612407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 04:42:09 power sudo[612407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:09 power sudo[612407]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:09 power sudo[612412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 04:42:09 power sudo[612412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:10 power sudo[612412]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:10 power sudo[612417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=evolvepl user-2=socioloz user-3=avtogumi user-4=pelagoni user-5=oncolog1 user-6=ekostoc1 user-7=levantmk user-8=nefrolog user-9=hidrommk user-10=frizered user-11=caramk user-12=anitermc user-13=youthgua user-14=hotammk user-15=cajsproc user-16=viewinn user-17=trudovop user-18=vmro user-19=enaspotc user-20=stojnevi user-21=bauerbg user-22=uhostmk5 user-23=oouslave user-24=raremk user-25=mstmmk user-26=goodnews user-27=gocruise user-28=tealmk user-29=proverim user-30=dadarmk user-31=robustco user-32=stravelm user-33=wondersp user-34=pecakome user-35=rastiraz user-36=holiyayt user-37=tradeyou user-38=gjorgeiv user-39=dnevnoin user-40=herbalpl user-41=enochmk user-42=sprintst user-43=dikimk12 user-44=berbermk user-45=edomcomm user-46=kolened1 user-47=nlpmkorg user-48=centarba user-49=nolimits user-50=seloviro
Sep 11 04:42:10 power sudo[612417]: wp-toolkit : (command continued) user-51=screenme user-52=arturaco user-53=karpospo user-54=nasaidni user-55=ideaplus user-56=daris user-57=butelmk user-58=premiums user-59=drleomk user-60=inotekso user-61=jpparkin user-62=premiuma user-63=kouzonco user-64=dalmacom user-65=cetplatf user-66=stokovna user-67=sparkupm user-68=klimimk user-69=busymard user-70=zvskopje user-71=zampmk user-72=palenzok user-73=custome1 user-74=itradeco user-75=janiboja user-76=cabinetm user-77=vezilkac user-78=stojano1 user-79=bovincom user-80=detskagr user-81=spdcompu user-82=mspmk user-83=infobadi user-84=urbanexp user-85=wikicamp user-86=groskome user-87=ivanjord user-88=sedcmk user-89=polyeste user-90=vfxnestc user-91=bizporta user-92=maleshne user-93=datelcom user-94=mpbmk user-95=agrosind user-96=datalink user-97=univerz1 user-98=kujnamon user-99=gogovan1 user-100=velmk user-101=skyapart user-102=bianasho user-103=makoasmk user-104=rasmorgm user-105=workandt
Sep 11 04:42:10 power sudo[612417]: wp-toolkit : (command continued) user-106=barececo user-107=simbiome user-108=getaldus user-109=delcevca user-110=mfashion user-111=dhamachi user-112=volkanco user-113=goartsym user-114=fiziosmk user-115=ambitiou user-116=versusmk user-117=fffhpcwr user-118=starluxm user-119=radekrat user-120=tcieuroc user-121=nationa2 user-122=onlinesh user-123=mapaspla user-124=solemor1 user-125=aquatech user-126=gorsajmk user-127=supremel user-128=v5srybi9dcdx user-129=zdmgpsor user-130=modernar user-131=inkigaic user-132=vacuacti user-133=premiumi user-134=innofabl user-135=darkogor user-136=prizmapl user-137=fnjorgmk user-138=dslmk user-139=bozinovm user-140=tehnologija user-141=taneccom user-142=infopor1 user-143=vtranseu user-144=pravekom user-145=imdskopj user-146=albuname user-147=glammace user-148=chemhemc user-149=samasped user-150=nutrivim user-151=cosmatob user-152=euromaki user-153=elektrot user-154=zapovim1 user-155=matratze user-156=euronic2
Sep 11 04:42:10 power sudo[612417]: wp-toolkit : (command continued) user-157=apgrupmk user-158=carrent1 user-159=bogdanos user-160=mediasol user-161=kardiome user-162=forzares user-163=nikimare user-164=aptekazd user-165=nikolov1 user-166=hausmark user-167=mediatag user-168=intelek1 user-169=lblawcom user-170=nucktra1 user-171=viplastc user-172=wineberr user-173=ismassag user-174=workbenc user-175=mbmehani user-176=golakkom user-177=electrol user-178=eliksirz user-179=naksorgm user-180=trigemat user-181=eurofarm user-182=solarinv user-183=recorgmk user-184=taktcomm user-185=solointe user-186=jaramk user-187=atspedco user-188=sssoluti user-189=cleanerm user-190=animatem user-191=progress user-192=bbbustou user-193=kaoilmk user-194=biplmk user-195=pelagini user-196=jpkomuna user-197=izzomk user-198=tehnodro user-199=makdrone user-200=dimpalne user-201=eaptekam user-202=fxxcom user-203=peshkai1 user-204=aptekafa user-205=madzomk user-206=evacommk user-207=gradbai1 user-208=folklore
Sep 11 04:42:10 power sudo[612417]: wp-toolkit : (command continued) user-209=bauerin2 user-210=evberasm user-211=bonitavi user-212=cupidpro user-213=vegemk1 user-214=euronic3 user-215=conserva feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 04:42:10 power sudo[612417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:10 power sudo[612417]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:10 power sudo[612429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 04:42:10 power sudo[612429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:10 power sudo[612429]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:10 power sudo[612434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sqsXvWoNHgRfCwTT.~
Sep 11 04:42:10 power sudo[612434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:10 power sudo[612434]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:10 power sudo[612438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sqsXvWoNHgRfCwTT.~\''
Sep 11 04:42:10 power sudo[612438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:10 power sudo[612438]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:10 power sudo[612443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sqsXvWoNHgRfCwTT.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 04:42:10 power sudo[612443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:10 power sudo[612443]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:10 power sudo[612447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 04:42:10 power sudo[612447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:10 power sudo[612447]: pam_unix(sudo:session): session closed for user root
Sep 11 04:42:14 power sudo[613204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 04:42:14 power sudo[613204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:42:14 power sudo[613204]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:07 power sudo[614652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 04:44:07 power sudo[614652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:07 power sudo[614652]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:07 power sudo[614659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 04:44:07 power sudo[614659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:07 power sudo[614659]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:07 power sudo[614668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 04:44:07 power sudo[614668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:07 power sudo[614668]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:07 power sudo[614675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=eaptekam user-2=dimpalne user-3=peshkai1 user-4=fxxcom user-5=evacommk user-6=madzomk user-7=aptekafa user-8=gradbai1 user-9=izzomk user-10=jpkomuna user-11=tehnodro user-12=makdrone user-13=bonitavi user-14=evberasm user-15=euronic3 user-16=vegemk1 user-17=cupidpro user-18=conserva user-19=folklore user-20=bauerin2 user-21=golakkom user-22=trigemat user-23=eliksirz user-24=naksorgm user-25=electrol user-26=eurofarm user-27=solarinv user-28=wineberr user-29=viplastc user-30=workbenc user-31=ismassag user-32=mbmehani user-33=biplmk user-34=kaoilmk user-35=bbbustou user-36=pelagini user-37=taktcomm user-38=recorgmk user-39=jaramk user-40=solointe user-41=sssoluti user-42=atspedco user-43=progress user-44=animatem user-45=cleanerm user-46=samasped user-47=chemhemc user-48=nutrivim user-49=euromaki
Sep 11 04:44:07 power sudo[614675]: wp-toolkit : (command continued) user-50=cosmatob user-51=zapovim1 user-52=elektrot user-53=infopor1 user-54=vtranseu user-55=pravekom user-56=imdskopj user-57=glammace user-58=albuname user-59=aptekazd user-60=nikimare user-61=forzares user-62=hausmark user-63=nikolov1 user-64=intelek1 user-65=mediatag user-66=nucktra1 user-67=lblawcom user-68=euronic2 user-69=matratze user-70=mediasol user-71=bogdanos user-72=carrent1 user-73=apgrupmk user-74=kardiome user-75=tcieuroc user-76=onlinesh user-77=nationa2 user-78=solemor1 user-79=mapaspla user-80=ambitiou user-81=fiziosmk user-82=versusmk user-83=fffhpcwr user-84=radekrat user-85=starluxm user-86=modernar user-87=inkigaic user-88=bozinovm user-89=fnjorgmk user-90=darkogor user-91=prizmapl user-92=dslmk user-93=innofabl user-94=premiumi user-95=vacuacti user-96=taneccom user-97=tehnologija user-98=gorsajmk user-99=aquatech user-100=v5srybi9dcdx user-101=supremel user-102=zdmgpsor user-103=sedcmk
Sep 11 04:44:07 power sudo[614675]: wp-toolkit : (command continued) user-104=ivanjord user-105=groskome user-106=vfxnestc user-107=polyeste user-108=bizporta user-109=datelcom user-110=maleshne user-111=spdcompu user-112=detskagr user-113=mspmk user-114=infobadi user-115=wikicamp user-116=urbanexp user-117=bianasho user-118=makoasmk user-119=skyapart user-120=rasmorgm user-121=getaldus user-122=delcevca user-123=simbiome user-124=barececo user-125=workandt user-126=volkanco user-127=goartsym user-128=dhamachi user-129=mfashion user-130=agrosind user-131=mpbmk user-132=datalink user-133=gogovan1 user-134=velmk user-135=kujnamon user-136=univerz1 user-137=kouzonco user-138=premiuma user-139=cetplatf user-140=dalmacom user-141=ideaplus user-142=nasaidni user-143=karpospo user-144=arturaco user-145=screenme user-146=premiums user-147=daris user-148=butelmk user-149=jpparkin user-150=inotekso user-151=drleomk user-152=janiboja user-153=itradeco user-154=vezilkac user-155=cabinetm
Sep 11 04:44:07 power sudo[614675]: wp-toolkit : (command continued) user-156=stojano1 user-157=bovincom user-158=sparkupm user-159=stokovna user-160=klimimk user-161=palenzok user-162=zvskopje user-163=busymard user-164=zampmk user-165=custome1 user-166=pecakome user-167=wondersp user-168=robustco user-169=stravelm user-170=holiyayt user-171=rastiraz user-172=gjorgeiv user-173=tradeyou user-174=dnevnoin user-175=goodnews user-176=mstmmk user-177=gocruise user-178=tealmk user-179=dadarmk user-180=proverim user-181=nlpmkorg user-182=centarba user-183=kolened1 user-184=nolimits user-185=seloviro user-186=dikimk12 user-187=sprintst user-188=herbalpl user-189=enochmk user-190=edomcomm user-191=berbermk user-192=nefrolog user-193=levantmk user-194=ekostoc1 user-195=oncolog1 user-196=frizered user-197=hidrommk user-198=caramk user-199=evolvepl user-200=avtogumi user-201=socioloz user-202=pelagoni user-203=enaspotc user-204=vmro user-205=viewinn user-206=trudovop user-207=stojnevi
Sep 11 04:44:07 power sudo[614675]: wp-toolkit : (command continued) user-208=raremk user-209=oouslave user-210=uhostmk5 user-211=bauerbg user-212=youthgua user-213=anitermc user-214=cajsproc user-215=hotammk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 04:44:07 power sudo[614675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:08 power sudo[614675]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:08 power sudo[614685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep 11 04:44:08 power sudo[614685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:08 power sudo[614685]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:08 power sudo[614692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vmro --output=json'
Sep 11 04:44:08 power sudo[614692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:08 power sudo[614692]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:11 power sudo[614752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro /bin/sh -c 'cd /home/vmro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:44:11 power sudo[614752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:11 power sudo[614752]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:11 power sudo[614761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vmro --user-current --json'
Sep 11 04:44:11 power sudo[614761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:11 power sudo[614761]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:11 power sudo[614766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro LangPHP php_get_vhost_versions --output=json'
Sep 11 04:44:11 power sudo[614766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:11 power sudo[614766]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:11 power sudo[614771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php83 --output=json'
Sep 11 04:44:11 power sudo[614771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:12 power sudo[614771]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:12 power sudo[614784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:44:12 power sudo[614784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:12 power sudo[614784]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:12 power sudo[614797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DomainInfo single_domain_data domain=vmro-dpmne.org.mk return_https_redirect_status=1 --output=json'
Sep 11 04:44:12 power sudo[614797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:12 power sudo[614797]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:12 power sudo[614803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_vhost_ssl_components --output=json'
Sep 11 04:44:12 power sudo[614803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:13 power sudo[614803]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:13 power sudo[614813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_ssl_vhosts --output=json'
Sep 11 04:44:13 power sudo[614813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:13 power sudo[614813]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:13 power sudo[614821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro Mime list_redirects --output=json'
Sep 11 04:44:13 power sudo[614821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:13 power sudo[614821]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:15 power sudo[614895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DirectoryPrivacy is_directory_protected dir=/home/vmro/public_html --output=json'
Sep 11 04:44:15 power sudo[614895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:15 power sudo[614895]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:18 power sudo[615088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep 11 04:44:19 power sudo[615088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:19 power sudo[615088]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:19 power sudo[615097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dadarmk --output=json'
Sep 11 04:44:19 power sudo[615097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:19 power sudo[615097]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:23 power sudo[615222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/academy.dadar.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:44:23 power sudo[615222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:23 power sudo[615222]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:23 power sudo[615229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep 11 04:44:23 power sudo[615229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:23 power sudo[615229]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:23 power sudo[615239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk LangPHP php_get_vhost_versions --output=json'
Sep 11 04:44:23 power sudo[615239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:23 power sudo[615239]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:23 power sudo[615244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:44:23 power sudo[615244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:23 power sudo[615244]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:24 power sudo[615261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=academy.dadar.mk return_https_redirect_status=1 --output=json'
Sep 11 04:44:24 power sudo[615261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:24 power sudo[615261]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:24 power sudo[615267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk Mime list_redirects --output=json'
Sep 11 04:44:24 power sudo[615267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:24 power sudo[615267]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:26 power sudo[615341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/academy.dadar.mk --output=json'
Sep 11 04:44:26 power sudo[615341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:27 power sudo[615341]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:30 power sudo[615551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep 11 04:44:30 power sudo[615551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:30 power sudo[615551]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:30 power sudo[615561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=agrosind --output=json'
Sep 11 04:44:30 power sudo[615561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:31 power sudo[615561]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:37 power sudo[615670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:44:37 power sudo[615670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:37 power sudo[615670]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:37 power sudo[615680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user agrosind --user-current --json'
Sep 11 04:44:37 power sudo[615680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:38 power sudo[615680]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:38 power sudo[615685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind LangPHP php_get_vhost_versions --output=json'
Sep 11 04:44:38 power sudo[615685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:38 power sudo[615685]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:38 power sudo[615690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php81 --output=json'
Sep 11 04:44:38 power sudo[615690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:38 power sudo[615690]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:38 power sudo[615701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:44:38 power sudo[615701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:38 power sudo[615701]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:39 power sudo[615720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DomainInfo single_domain_data domain=agrosindikat.mk return_https_redirect_status=1 --output=json'
Sep 11 04:44:39 power sudo[615720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:39 power sudo[615720]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:39 power sudo[615738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind Mime list_redirects --output=json'
Sep 11 04:44:39 power sudo[615738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:39 power sudo[615738]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:43 power sudo[615828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DirectoryPrivacy is_directory_protected dir=/home/agrosind/public_html --output=json'
Sep 11 04:44:43 power sudo[615828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:43 power sudo[615828]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:44 power sudo[615886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:44:44 power sudo[615886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:44 power sudo[615886]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:44 power sudo[615892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:44:44 power sudo[615892]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:44:44 power sudo[615892]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:44:44 power sudo[615892]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:44:44 power sudo[615892]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:44:44 power sudo[615892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:44 power sudo[615892]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:44 power sudo[615897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:44:44 power sudo[615897]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:44:44 power sudo[615897]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:44:44 power sudo[615897]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:44:44 power sudo[615897]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:44:44 power sudo[615897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:44 power sudo[615897]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:46 power sudo[615997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:44:46 power sudo[615997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:46 power sudo[615997]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:46 power sudo[616002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:44:46 power sudo[616002]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:44:46 power sudo[616002]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:44:46 power sudo[616002]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:44:46 power sudo[616002]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:44:46 power sudo[616002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:46 power sudo[616002]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:46 power sudo[616007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:44:46 power sudo[616007]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:44:46 power sudo[616007]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:44:46 power sudo[616007]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:44:46 power sudo[616007]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:44:46 power sudo[616007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:46 power sudo[616007]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:47 power sudo[616051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep 11 04:44:47 power sudo[616051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:47 power sudo[616051]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:47 power sudo[616060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=fffhpcwr --output=json'
Sep 11 04:44:47 power sudo[616060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:47 power sudo[616060]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:52 power sudo[616276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/al.rsbsp.org.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:44:52 power sudo[616276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:52 power sudo[616276]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:52 power sudo[616282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep 11 04:44:52 power sudo[616282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:52 power sudo[616282]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:52 power sudo[616289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr LangPHP php_get_vhost_versions --output=json'
Sep 11 04:44:52 power sudo[616289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:52 power sudo[616289]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:52 power sudo[616296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:44:52 power sudo[616296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:52 power sudo[616296]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:53 power sudo[616313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=al.rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep 11 04:44:53 power sudo[616313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:53 power sudo[616313]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:53 power sudo[616319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr Mime list_redirects --output=json'
Sep 11 04:44:53 power sudo[616319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:53 power sudo[616319]: pam_unix(sudo:session): session closed for user root
Sep 11 04:44:56 power sudo[616394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/al.rsbsp.org.mk --output=json'
Sep 11 04:44:56 power sudo[616394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:44:56 power sudo[616394]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:00 power sudo[616640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep 11 04:45:00 power sudo[616640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:01 power sudo[616640]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:01 power sudo[616647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ambitiou --output=json'
Sep 11 04:45:01 power sudo[616647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:01 power sudo[616647]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:01 power systemd[616748]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:45:06 power sudo[616889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/public_html/site && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:45:06 power sudo[616889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:06 power sudo[616889]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:06 power sudo[616898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep 11 04:45:06 power sudo[616898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:06 power sudo[616898]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:06 power sudo[616914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou LangPHP php_get_vhost_versions --output=json'
Sep 11 04:45:06 power sudo[616914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:06 power sudo[616914]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:06 power sudo[616919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep 11 04:45:06 power sudo[616919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:07 power sudo[616919]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:07 power sudo[616928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:45:07 power sudo[616928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:07 power sudo[616928]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:07 power sudo[616952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep 11 04:45:07 power sudo[616952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:07 power sudo[616952]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:07 power sudo[616960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou Mime list_redirects --output=json'
Sep 11 04:45:07 power sudo[616960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:08 power sudo[616960]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:11 power sudo[617092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/public_html/site --output=json'
Sep 11 04:45:11 power sudo[617092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:11 power sudo[617092]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:14 power sudo[617401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep 11 04:45:15 power sudo[617401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:15 power sudo[617401]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:15 power sudo[617406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=animatem --output=json'
Sep 11 04:45:15 power sudo[617406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:15 power sudo[617406]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:20 power sudo[617520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem /bin/sh -c 'cd /home/animatem/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:45:20 power sudo[617520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:20 power sudo[617520]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:20 power sudo[617533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user animatem --user-current --json'
Sep 11 04:45:20 power sudo[617533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:21 power sudo[617533]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:21 power sudo[617559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem LangPHP php_get_vhost_versions --output=json'
Sep 11 04:45:21 power sudo[617559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:21 power sudo[617559]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:21 power sudo[617567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php73 --output=json'
Sep 11 04:45:21 power sudo[617567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:21 power sudo[617567]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:21 power sudo[617578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:45:21 power sudo[617578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:21 power sudo[617578]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:22 power sudo[617598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DomainInfo single_domain_data domain=animate.mk return_https_redirect_status=1 --output=json'
Sep 11 04:45:22 power sudo[617598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:22 power sudo[617598]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:22 power sudo[617608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem Mime list_redirects --output=json'
Sep 11 04:45:22 power sudo[617608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:22 power sudo[617608]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:27 power sudo[617737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DirectoryPrivacy is_directory_protected dir=/home/animatem/public_html --output=json'
Sep 11 04:45:27 power sudo[617737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:27 power sudo[617737]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:30 power sudo[617970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep 11 04:45:30 power sudo[617970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:30 power sudo[617970]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:30 power sudo[617981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=anitermc --output=json'
Sep 11 04:45:30 power sudo[617981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:30 power sudo[617981]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:41 power sudo[618206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc /bin/sh -c 'cd /home/anitermc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:45:41 power sudo[618206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:41 power sudo[618206]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:41 power sudo[618212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user anitermc --user-current --json'
Sep 11 04:45:41 power sudo[618212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:42 power sudo[618212]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:42 power sudo[618217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc LangPHP php_get_vhost_versions --output=json'
Sep 11 04:45:42 power sudo[618217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:42 power sudo[618217]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:42 power sudo[618223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:45:42 power sudo[618223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:42 power sudo[618223]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:42 power sudo[618245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DomainInfo single_domain_data domain=aniterm.com.mk return_https_redirect_status=1 --output=json'
Sep 11 04:45:42 power sudo[618245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:43 power sudo[618245]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:43 power sudo[618252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc Mime list_redirects --output=json'
Sep 11 04:45:43 power sudo[618252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:43 power sudo[618252]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:49 power sudo[618397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DirectoryPrivacy is_directory_protected dir=/home/anitermc/public_html --output=json'
Sep 11 04:45:49 power sudo[618397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:49 power sudo[618397]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:53 power sudo[618601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep 11 04:45:53 power sudo[618601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:53 power sudo[618601]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:53 power sudo[618607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wineberr --output=json'
Sep 11 04:45:53 power sudo[618607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:53 power sudo[618607]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:59 power sudo[618717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/app.wineberry.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:45:59 power sudo[618717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:45:59 power sudo[618717]: pam_unix(sudo:session): session closed for user root
Sep 11 04:45:59 power sudo[618726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep 11 04:45:59 power sudo[618726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:00 power sudo[618726]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:00 power sudo[618737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr LangPHP php_get_vhost_versions --output=json'
Sep 11 04:46:00 power sudo[618737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:00 power sudo[618737]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:00 power sudo[618742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:46:00 power sudo[618742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:00 power sudo[618742]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:01 power sudo[618765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=app.wineberry.mk return_https_redirect_status=1 --output=json'
Sep 11 04:46:01 power sudo[618765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:01 power sudo[618765]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:01 power sudo[618770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr Mime list_redirects --output=json'
Sep 11 04:46:01 power sudo[618770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:01 power sudo[618770]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:04 power sudo[618887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/app.wineberry.mk/bck --output=json'
Sep 11 04:46:04 power sudo[618887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:04 power sudo[618887]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:08 power sudo[619083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep 11 04:46:08 power sudo[619083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:08 power sudo[619083]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:08 power sudo[619088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=aptekazd --output=json'
Sep 11 04:46:08 power sudo[619088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:08 power sudo[619088]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:13 power sudo[619191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:46:13 power sudo[619191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:13 power sudo[619191]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:13 power sudo[619197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user aptekazd --user-current --json'
Sep 11 04:46:13 power sudo[619197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:14 power sudo[619197]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:14 power sudo[619202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd LangPHP php_get_vhost_versions --output=json'
Sep 11 04:46:14 power sudo[619202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:14 power sudo[619202]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:14 power sudo[619207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:46:14 power sudo[619207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:14 power sudo[619207]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:14 power sudo[619229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DomainInfo single_domain_data domain=aptekazdravje.mk return_https_redirect_status=1 --output=json'
Sep 11 04:46:14 power sudo[619229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:15 power sudo[619229]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:15 power sudo[619235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd Mime list_redirects --output=json'
Sep 11 04:46:15 power sudo[619235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:15 power sudo[619235]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:18 power sudo[619319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DirectoryPrivacy is_directory_protected dir=/home/aptekazd/public_html --output=json'
Sep 11 04:46:18 power sudo[619319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:18 power sudo[619319]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:19 power sudo[619390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:46:19 power sudo[619390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:19 power sudo[619390]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:19 power sudo[619398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:46:19 power sudo[619398]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:46:19 power sudo[619398]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:46:19 power sudo[619398]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:46:19 power sudo[619398]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:46:19 power sudo[619398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:19 power sudo[619398]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:19 power sudo[619403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:46:19 power sudo[619403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:46:19 power sudo[619403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:46:19 power sudo[619403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:46:19 power sudo[619403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:46:19 power sudo[619403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:19 power sudo[619403]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:21 power sudo[619513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:46:21 power sudo[619513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:21 power sudo[619513]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:21 power sudo[619522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:46:21 power sudo[619522]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:46:21 power sudo[619522]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:46:21 power sudo[619522]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:46:21 power sudo[619522]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:46:21 power sudo[619522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:21 power sudo[619522]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:21 power sudo[619527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:46:21 power sudo[619527]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:46:21 power sudo[619527]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:46:21 power sudo[619527]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:46:21 power sudo[619527]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:46:21 power sudo[619527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:21 power sudo[619527]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:22 power sudo[619596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep 11 04:46:22 power sudo[619596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:22 power sudo[619596]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:22 power sudo[619607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=progress --output=json'
Sep 11 04:46:22 power sudo[619607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:22 power sudo[619607]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:27 power sudo[619811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress /bin/sh -c 'cd /home/progress/artivo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:46:27 power sudo[619811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:27 power sudo[619811]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:27 power sudo[619817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user progress --user-current --json'
Sep 11 04:46:27 power sudo[619817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:27 power sudo[619817]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:27 power sudo[619827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress LangPHP php_get_vhost_versions --output=json'
Sep 11 04:46:27 power sudo[619827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:27 power sudo[619827]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:27 power sudo[619832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:46:27 power sudo[619832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:27 power sudo[619832]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:28 power sudo[619859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DomainInfo single_domain_data domain=artivo.mk return_https_redirect_status=1 --output=json'
Sep 11 04:46:28 power sudo[619859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:28 power sudo[619859]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:28 power sudo[619868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress Mime list_redirects --output=json'
Sep 11 04:46:28 power sudo[619868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:28 power sudo[619868]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:31 power sudo[619943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DirectoryPrivacy is_directory_protected dir=/home/progress/artivo.mk --output=json'
Sep 11 04:46:31 power sudo[619943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:31 power sudo[619943]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:35 power sudo[620130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep 11 04:46:35 power sudo[620130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:35 power sudo[620130]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:35 power sudo[620141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bbbustou --output=json'
Sep 11 04:46:35 power sudo[620141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:35 power sudo[620141]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:41 power sudo[620267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:46:41 power sudo[620267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:41 power sudo[620267]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:41 power sudo[620273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep 11 04:46:42 power sudo[620273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:42 power sudo[620273]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:42 power sudo[620277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou LangPHP php_get_vhost_versions --output=json'
Sep 11 04:46:42 power sudo[620277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:42 power sudo[620277]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:42 power sudo[620287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php84 --output=json'
Sep 11 04:46:42 power sudo[620287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:42 power sudo[620287]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:43 power sudo[620301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:46:43 power sudo[620301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:43 power sudo[620301]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:43 power sudo[620317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=bbbustours.mk return_https_redirect_status=1 --output=json'
Sep 11 04:46:43 power sudo[620317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:43 power sudo[620317]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:43 power sudo[620332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou Mime list_redirects --output=json'
Sep 11 04:46:43 power sudo[620332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:43 power sudo[620332]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:47 power sudo[620423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/public_html --output=json'
Sep 11 04:46:47 power sudo[620423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:47 power sudo[620423]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:51 power sudo[620649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep 11 04:46:51 power sudo[620649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:51 power sudo[620649]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:51 power sudo[620656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nationa2 --output=json'
Sep 11 04:46:51 power sudo[620656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:51 power sudo[620656]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:54 power sudo[620742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 /bin/sh -c 'cd /home/nationa2/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:46:54 power sudo[620742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:54 power sudo[620742]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:54 power sudo[620752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nationa2 --user-current --json'
Sep 11 04:46:54 power sudo[620752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:55 power sudo[620752]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:55 power sudo[620758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 LangPHP php_get_vhost_versions --output=json'
Sep 11 04:46:55 power sudo[620758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:55 power sudo[620758]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:55 power sudo[620762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php74 --output=json'
Sep 11 04:46:55 power sudo[620762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:55 power sudo[620762]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:55 power sudo[620782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:46:55 power sudo[620782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:55 power sudo[620782]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:56 power sudo[620798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DomainInfo single_domain_data domain=beactiveday.mk return_https_redirect_status=1 --output=json'
Sep 11 04:46:56 power sudo[620798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:56 power sudo[620798]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:56 power sudo[620809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 Mime list_redirects --output=json'
Sep 11 04:46:56 power sudo[620809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:56 power sudo[620809]: pam_unix(sudo:session): session closed for user root
Sep 11 04:46:58 power sudo[620902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DirectoryPrivacy is_directory_protected dir=/home/nationa2/public_html --output=json'
Sep 11 04:46:58 power sudo[620902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:46:58 power sudo[620902]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:12 power sudo[622139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep 11 04:48:12 power sudo[622139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:13 power sudo[622139]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:13 power sudo[622147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cetplatf --output=json'
Sep 11 04:48:13 power sudo[622147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:13 power sudo[622147]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:17 power sudo[622230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/beep.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:48:17 power sudo[622230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:17 power sudo[622230]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:17 power sudo[622236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 11 04:48:17 power sudo[622236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:17 power sudo[622236]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:17 power sudo[622245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf LangPHP php_get_vhost_versions --output=json'
Sep 11 04:48:17 power sudo[622245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:17 power sudo[622245]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:17 power sudo[622250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:48:17 power sudo[622250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:17 power sudo[622250]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:18 power sudo[622263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=beep.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 04:48:18 power sudo[622263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:18 power sudo[622263]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:18 power sudo[622269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf Mime list_redirects --output=json'
Sep 11 04:48:18 power sudo[622269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:18 power sudo[622269]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:21 power sudo[622355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/beep.cetplatform.mk --output=json'
Sep 11 04:48:21 power sudo[622355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:21 power sudo[622355]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:25 power sudo[622606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep 11 04:48:25 power sudo[622606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:25 power sudo[622606]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:25 power sudo[622611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bianasho --output=json'
Sep 11 04:48:25 power sudo[622611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:25 power sudo[622611]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:32 power sudo[622727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho /bin/sh -c 'cd /home/bianasho/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:48:32 power sudo[622727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:32 power sudo[622727]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:32 power sudo[622734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bianasho --user-current --json'
Sep 11 04:48:32 power sudo[622734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:33 power sudo[622734]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:33 power sudo[622741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho LangPHP php_get_vhost_versions --output=json'
Sep 11 04:48:33 power sudo[622741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:33 power sudo[622741]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:33 power sudo[622746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:48:33 power sudo[622746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:33 power sudo[622746]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:34 power sudo[622776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DomainInfo single_domain_data domain=bianashoes.mk return_https_redirect_status=1 --output=json'
Sep 11 04:48:34 power sudo[622776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:34 power sudo[622776]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:34 power sudo[622784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho Mime list_redirects --output=json'
Sep 11 04:48:34 power sudo[622784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:35 power sudo[622784]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:39 power sudo[622890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DirectoryPrivacy is_directory_protected dir=/home/bianasho/public_html --output=json'
Sep 11 04:48:39 power sudo[622890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:39 power sudo[622890]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:43 power sudo[623090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep 11 04:48:43 power sudo[623090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:43 power sudo[623090]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:43 power sudo[623095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=velmk --output=json'
Sep 11 04:48:43 power sudo[623095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:43 power sudo[623095]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:50 power sudo[623189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk /bin/sh -c 'cd /home/velmk/blog.vel.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:48:50 power sudo[623189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:50 power sudo[623189]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:50 power sudo[623195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user velmk --user-current --json'
Sep 11 04:48:50 power sudo[623195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:50 power sudo[623195]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:50 power sudo[623200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk LangPHP php_get_vhost_versions --output=json'
Sep 11 04:48:50 power sudo[623200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:50 power sudo[623200]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:50 power sudo[623205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:48:50 power sudo[623205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:50 power sudo[623205]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:51 power sudo[623223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DomainInfo single_domain_data domain=blog.vel.mk return_https_redirect_status=1 --output=json'
Sep 11 04:48:51 power sudo[623223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:51 power sudo[623223]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:51 power sudo[623229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk Mime list_redirects --output=json'
Sep 11 04:48:51 power sudo[623229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:51 power sudo[623229]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:55 power sudo[623317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DirectoryPrivacy is_directory_protected dir=/home/velmk/blog.vel.mk --output=json'
Sep 11 04:48:55 power sudo[623317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:55 power sudo[623317]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:58 power sudo[623524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep 11 04:48:58 power sudo[623524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:59 power sudo[623524]: pam_unix(sudo:session): session closed for user root
Sep 11 04:48:59 power sudo[623532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enaspotc --output=json'
Sep 11 04:48:59 power sudo[623532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:48:59 power sudo[623532]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:01 power sudo[623592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/boiling.pt && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:49:01 power sudo[623592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:01 power sudo[623592]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:02 power sudo[623606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep 11 04:49:02 power sudo[623606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:02 power sudo[623606]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:02 power sudo[623618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc LangPHP php_get_vhost_versions --output=json'
Sep 11 04:49:02 power sudo[623618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:02 power sudo[623618]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:02 power sudo[623623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:49:02 power sudo[623623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:02 power sudo[623623]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:02 power sudo[623640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=boiling.pt return_https_redirect_status=1 --output=json'
Sep 11 04:49:02 power sudo[623640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:02 power sudo[623640]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:02 power sudo[623650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc Mime list_redirects --output=json'
Sep 11 04:49:02 power sudo[623650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:03 power sudo[623650]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:05 power sudo[623728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/boiling.pt --output=json'
Sep 11 04:49:05 power sudo[623728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:05 power sudo[623728]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:08 power sudo[623927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep 11 04:49:08 power sudo[623927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:09 power sudo[623927]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:09 power sudo[623938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bonitavi --output=json'
Sep 11 04:49:09 power sudo[623938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:09 power sudo[623938]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:12 power sudo[624028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi /bin/sh -c 'cd /home/bonitavi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:49:12 power sudo[624028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:12 power sudo[624028]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:12 power sudo[624034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bonitavi --user-current --json'
Sep 11 04:49:12 power sudo[624034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:13 power sudo[624034]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:13 power sudo[624039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi LangPHP php_get_vhost_versions --output=json'
Sep 11 04:49:13 power sudo[624039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:13 power sudo[624039]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:13 power sudo[624048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:49:13 power sudo[624048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:13 power sudo[624048]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:13 power sudo[624065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DomainInfo single_domain_data domain=bonita-vita.com return_https_redirect_status=1 --output=json'
Sep 11 04:49:13 power sudo[624065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:13 power sudo[624065]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:13 power sudo[624071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi Mime list_redirects --output=json'
Sep 11 04:49:13 power sudo[624071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:13 power sudo[624071]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:16 power sudo[624161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DirectoryPrivacy is_directory_protected dir=/home/bonitavi/public_html --output=json'
Sep 11 04:49:16 power sudo[624161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:16 power sudo[624161]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:19 power sudo[624373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep 11 04:49:19 power sudo[624373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:19 power sudo[624373]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:19 power sudo[624380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bovincom --output=json'
Sep 11 04:49:19 power sudo[624380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:19 power sudo[624380]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:27 power sudo[624543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom /bin/sh -c 'cd /home/bovincom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:49:27 power sudo[624543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:27 power sudo[624543]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:27 power sudo[624549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bovincom --user-current --json'
Sep 11 04:49:27 power sudo[624549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:27 power sudo[624549]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:27 power sudo[624554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom LangPHP php_get_vhost_versions --output=json'
Sep 11 04:49:27 power sudo[624554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:27 power sudo[624554]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:27 power sudo[624559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:49:27 power sudo[624559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:27 power sudo[624559]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:28 power sudo[624588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DomainInfo single_domain_data domain=bovin.com.mk return_https_redirect_status=1 --output=json'
Sep 11 04:49:28 power sudo[624588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:28 power sudo[624588]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:28 power sudo[624594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom Mime list_redirects --output=json'
Sep 11 04:49:28 power sudo[624594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:28 power sudo[624594]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:33 power sudo[624702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DirectoryPrivacy is_directory_protected dir=/home/bovincom/public_html --output=json'
Sep 11 04:49:33 power sudo[624702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:33 power sudo[624702]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:37 power sudo[624916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep 11 04:49:37 power sudo[624916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:37 power sudo[624916]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:37 power sudo[624921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=butelmk --output=json'
Sep 11 04:49:37 power sudo[624921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:37 power sudo[624921]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:49 power sudo[625133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk /bin/sh -c 'cd /home/butelmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:49:49 power sudo[625133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:49 power sudo[625133]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:49 power sudo[625142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user butelmk --user-current --json'
Sep 11 04:49:49 power sudo[625142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:49 power sudo[625142]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:49 power sudo[625148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk LangPHP php_get_vhost_versions --output=json'
Sep 11 04:49:49 power sudo[625148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:49 power sudo[625148]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:49 power sudo[625154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 11 04:49:49 power sudo[625154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:49 power sudo[625154]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:49 power sudo[625159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=alt-php73 --output=json'
Sep 11 04:49:49 power sudo[625159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:50 power sudo[625159]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:50 power sudo[625169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:49:50 power sudo[625169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:50 power sudo[625169]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:50 power sudo[625188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DomainInfo single_domain_data domain=butel.mk return_https_redirect_status=1 --output=json'
Sep 11 04:49:50 power sudo[625188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:50 power sudo[625188]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:51 power sudo[625195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk Mime list_redirects --output=json'
Sep 11 04:49:51 power sudo[625195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:51 power sudo[625195]: pam_unix(sudo:session): session closed for user root
Sep 11 04:49:57 power sudo[625489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DirectoryPrivacy is_directory_protected dir=/home/butelmk/public_html --output=json'
Sep 11 04:49:57 power sudo[625489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:49:57 power sudo[625489]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:02 power systemd[625841]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:50:02 power sudo[625884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep 11 04:50:02 power sudo[625884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:02 power sudo[625884]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:02 power sudo[625891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=izzomk --output=json'
Sep 11 04:50:02 power sudo[625891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:02 power sudo[625891]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:09 power sudo[626027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/caffeizzo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:50:09 power sudo[626027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:09 power sudo[626027]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:09 power sudo[626033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep 11 04:50:09 power sudo[626033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:09 power sudo[626033]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:09 power sudo[626040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk LangPHP php_get_vhost_versions --output=json'
Sep 11 04:50:09 power sudo[626040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:10 power sudo[626040]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:10 power sudo[626045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:50:10 power sudo[626045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:10 power sudo[626045]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:10 power sudo[626063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=caffeizzo.mk return_https_redirect_status=1 --output=json'
Sep 11 04:50:10 power sudo[626063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:10 power sudo[626063]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:10 power sudo[626069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk Mime list_redirects --output=json'
Sep 11 04:50:10 power sudo[626069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:11 power sudo[626069]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:15 power sudo[626173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/caffeizzo.mk --output=json'
Sep 11 04:50:15 power sudo[626173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:15 power sudo[626173]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:23 power sudo[626440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/cateye.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:50:23 power sudo[626440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:23 power sudo[626440]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:23 power sudo[626446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 11 04:50:23 power sudo[626446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:23 power sudo[626446]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:23 power sudo[626453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:50:23 power sudo[626453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:23 power sudo[626453]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:24 power sudo[626470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cateye.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 04:50:24 power sudo[626470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:24 power sudo[626470]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:27 power sudo[626607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/cateye.cetplatform.mk --output=json'
Sep 11 04:50:27 power sudo[626607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:27 power sudo[626607]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:35 power sudo[626914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:50:35 power sudo[626914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:35 power sudo[626914]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:35 power sudo[626920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 11 04:50:35 power sudo[626920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:36 power sudo[626920]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:36 power sudo[626925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:50:36 power sudo[626925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:36 power sudo[626925]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:37 power sudo[626956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 04:50:37 power sudo[626956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:37 power sudo[626956]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:41 power sudo[627078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/public_html --output=json'
Sep 11 04:50:41 power sudo[627078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:41 power sudo[627078]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:44 power sudo[627257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep 11 04:50:44 power sudo[627257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:44 power sudo[627257]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:44 power sudo[627266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=chemhemc --output=json'
Sep 11 04:50:44 power sudo[627266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:44 power sudo[627266]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:48 power sudo[627354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:50:48 power sudo[627354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:48 power sudo[627354]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:48 power sudo[627360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep 11 04:50:48 power sudo[627360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:49 power sudo[627360]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:49 power sudo[627370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc LangPHP php_get_vhost_versions --output=json'
Sep 11 04:50:49 power sudo[627370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:49 power sudo[627370]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:49 power sudo[627376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:50:49 power sudo[627376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:49 power sudo[627376]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:49 power sudo[627390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=chemhem.com return_https_redirect_status=1 --output=json'
Sep 11 04:50:49 power sudo[627390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:49 power sudo[627390]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:49 power sudo[627396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc Mime list_redirects --output=json'
Sep 11 04:50:49 power sudo[627396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:49 power sudo[627396]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:51 power sudo[627477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/public_html --output=json'
Sep 11 04:50:51 power sudo[627477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:52 power sudo[627477]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:53 power sudo[627552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:50:53 power sudo[627552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:53 power sudo[627552]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:53 power sudo[627558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:50:53 power sudo[627558]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:50:53 power sudo[627558]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:50:53 power sudo[627558]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:50:53 power sudo[627558]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:50:53 power sudo[627558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:53 power sudo[627558]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:53 power sudo[627563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:50:53 power sudo[627563]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:50:53 power sudo[627563]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:50:53 power sudo[627563]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:50:53 power sudo[627563]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:50:53 power sudo[627563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:53 power sudo[627563]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:55 power sudo[627663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:50:55 power sudo[627663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:55 power sudo[627663]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:55 power sudo[627668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:50:55 power sudo[627668]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:50:55 power sudo[627668]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:50:55 power sudo[627668]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:50:55 power sudo[627668]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:50:55 power sudo[627668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:55 power sudo[627668]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:55 power sudo[627673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:50:55 power sudo[627673]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:50:55 power sudo[627673]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:50:55 power sudo[627673]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:50:55 power sudo[627673]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:50:55 power sudo[627673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:55 power sudo[627673]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:55 power sudo[627710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep 11 04:50:55 power sudo[627710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:56 power sudo[627710]: pam_unix(sudo:session): session closed for user root
Sep 11 04:50:56 power sudo[627718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cosmatob --output=json'
Sep 11 04:50:56 power sudo[627718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:50:56 power sudo[627718]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:02 power sudo[627837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob /bin/sh -c 'cd /home/cosmatob/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:51:02 power sudo[627837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:02 power sudo[627837]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:02 power sudo[627843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cosmatob --user-current --json'
Sep 11 04:51:02 power sudo[627843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:03 power sudo[627843]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:03 power sudo[627851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob LangPHP php_get_vhost_versions --output=json'
Sep 11 04:51:03 power sudo[627851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:03 power sudo[627851]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:03 power sudo[627857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:51:03 power sudo[627857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:03 power sudo[627857]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:04 power sudo[627879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DomainInfo single_domain_data domain=cosmatobacco.mk return_https_redirect_status=1 --output=json'
Sep 11 04:51:04 power sudo[627879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:04 power sudo[627879]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:04 power sudo[627885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob Mime list_redirects --output=json'
Sep 11 04:51:04 power sudo[627885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:04 power sudo[627885]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:09 power sudo[628019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DirectoryPrivacy is_directory_protected dir=/home/cosmatob/public_html --output=json'
Sep 11 04:51:09 power sudo[628019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:09 power sudo[628019]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:17 power sudo[628366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:51:17 power sudo[628366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:17 power sudo[628366]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:17 power sudo[628375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep 11 04:51:17 power sudo[628375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:17 power sudo[628375]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:17 power sudo[628380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:51:17 power sudo[628380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:17 power sudo[628380]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:17 power sudo[628394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=dadar.mk return_https_redirect_status=1 --output=json'
Sep 11 04:51:17 power sudo[628394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:17 power sudo[628394]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:19 power sudo[628462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/public_html --output=json'
Sep 11 04:51:19 power sudo[628462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:19 power sudo[628462]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:23 power sudo[628666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep 11 04:51:23 power sudo[628666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:23 power sudo[628666]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:23 power sudo[628673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=delcevca --output=json'
Sep 11 04:51:23 power sudo[628673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:23 power sudo[628673]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:29 power sudo[628836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:51:29 power sudo[628836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:29 power sudo[628836]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:29 power sudo[628842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user delcevca --user-current --json'
Sep 11 04:51:29 power sudo[628842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:29 power sudo[628842]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:29 power sudo[628852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca LangPHP php_get_vhost_versions --output=json'
Sep 11 04:51:29 power sudo[628852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:29 power sudo[628852]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:29 power sudo[628858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:51:29 power sudo[628858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:29 power sudo[628858]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:29 power sudo[628877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DomainInfo single_domain_data domain=delcevcani.mk return_https_redirect_status=1 --output=json'
Sep 11 04:51:29 power sudo[628877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:30 power sudo[628877]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:30 power sudo[628884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca Mime list_redirects --output=json'
Sep 11 04:51:30 power sudo[628884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:30 power sudo[628884]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:33 power sudo[628971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DirectoryPrivacy is_directory_protected dir=/home/delcevca/public_html --output=json'
Sep 11 04:51:33 power sudo[628971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:33 power sudo[628971]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:34 power sudo[629028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:51:34 power sudo[629028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:34 power sudo[629028]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:34 power sudo[629033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:51:34 power sudo[629033]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:51:34 power sudo[629033]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:51:34 power sudo[629033]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:51:34 power sudo[629033]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:51:34 power sudo[629033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:34 power sudo[629033]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:34 power sudo[629038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:51:34 power sudo[629038]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:51:34 power sudo[629038]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:51:34 power sudo[629038]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:51:34 power sudo[629038]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:51:34 power sudo[629038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:34 power sudo[629038]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:34 power sudo[629045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:51:34 power sudo[629045]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:51:34 power sudo[629045]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:51:34 power sudo[629045]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:51:34 power sudo[629045]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:51:34 power sudo[629045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:34 power sudo[629045]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:36 power sudo[629152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:51:36 power sudo[629152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:36 power sudo[629152]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:36 power sudo[629157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:51:36 power sudo[629157]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:51:36 power sudo[629157]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:51:36 power sudo[629157]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:51:36 power sudo[629157]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:51:36 power sudo[629157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:36 power sudo[629157]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:36 power sudo[629162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:51:36 power sudo[629162]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:51:36 power sudo[629162]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:51:36 power sudo[629162]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:51:36 power sudo[629162]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:51:36 power sudo[629162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:36 power sudo[629162]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:36 power sudo[629167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:51:36 power sudo[629167]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:51:36 power sudo[629167]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:51:36 power sudo[629167]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:51:36 power sudo[629167]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:51:36 power sudo[629167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:36 power sudo[629167]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:37 power sudo[629206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep 11 04:51:37 power sudo[629206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:37 power sudo[629206]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:37 power sudo[629211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=edomcomm --output=json'
Sep 11 04:51:37 power sudo[629211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:37 power sudo[629211]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:40 power sudo[629293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:51:40 power sudo[629293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:40 power sudo[629293]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:40 power sudo[629302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user edomcomm --user-current --json'
Sep 11 04:51:40 power sudo[629302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:40 power sudo[629302]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:40 power sudo[629308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm LangPHP php_get_vhost_versions --output=json'
Sep 11 04:51:40 power sudo[629308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:40 power sudo[629308]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:40 power sudo[629313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:51:40 power sudo[629313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:40 power sudo[629313]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:41 power sudo[629334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=deosol.mk return_https_redirect_status=1 --output=json'
Sep 11 04:51:41 power sudo[629334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:41 power sudo[629334]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:41 power sudo[629342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm Mime list_redirects --output=json'
Sep 11 04:51:41 power sudo[629342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:41 power sudo[629342]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:44 power sudo[629445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/w --output=json'
Sep 11 04:51:44 power sudo[629445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:44 power sudo[629445]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:50 power sudo[629774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/ekobalans.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:51:50 power sudo[629774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:50 power sudo[629774]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:50 power sudo[629783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 11 04:51:50 power sudo[629783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:50 power sudo[629783]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:50 power sudo[629788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:51:50 power sudo[629788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:50 power sudo[629788]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:51 power sudo[629810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=ekobalans.mk return_https_redirect_status=1 --output=json'
Sep 11 04:51:51 power sudo[629810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:51 power sudo[629810]: pam_unix(sudo:session): session closed for user root
Sep 11 04:51:53 power sudo[629908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/ekobalans.mk --output=json'
Sep 11 04:51:53 power sudo[629908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:51:53 power sudo[629908]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:01 power sudo[630309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/moetodete.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:52:01 power sudo[630309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:01 power sudo[630309]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:01 power sudo[630328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 11 04:52:01 power sudo[630328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:01 power sudo[630328]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:01 power sudo[630334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:52:01 power sudo[630334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:01 power sudo[630334]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:01 power sudo[630416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=moetodete.mk return_https_redirect_status=1 --output=json'
Sep 11 04:52:01 power sudo[630416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:02 power sudo[630416]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:04 power sudo[630636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/moetodete.mk --output=json'
Sep 11 04:52:04 power sudo[630636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:04 power sudo[630636]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:08 power sudo[630885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep 11 04:52:08 power sudo[630885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:08 power sudo[630885]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:08 power sudo[630899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=detskagr --output=json'
Sep 11 04:52:08 power sudo[630899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:08 power sudo[630899]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:15 power sudo[631007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:52:15 power sudo[631007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:15 power sudo[631007]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:15 power sudo[631013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user detskagr --user-current --json'
Sep 11 04:52:15 power sudo[631013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:16 power sudo[631013]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:16 power sudo[631021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr LangPHP php_get_vhost_versions --output=json'
Sep 11 04:52:16 power sudo[631021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:16 power sudo[631021]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:16 power sudo[631026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:52:16 power sudo[631026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:16 power sudo[631026]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:16 power sudo[631048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DomainInfo single_domain_data domain=detskagradinka-prolet.mk return_https_redirect_status=1 --output=json'
Sep 11 04:52:16 power sudo[631048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:16 power sudo[631048]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:16 power sudo[631054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr Mime list_redirects --output=json'
Sep 11 04:52:16 power sudo[631054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:16 power sudo[631054]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:20 power sudo[631144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DirectoryPrivacy is_directory_protected dir=/home/detskagr/public_html/wordpress --output=json'
Sep 11 04:52:20 power sudo[631144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:20 power sudo[631144]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:21 power sudo[631206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:52:21 power sudo[631206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:21 power sudo[631206]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:21 power sudo[631211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 11 04:52:21 power sudo[631211]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 11 04:52:21 power sudo[631211]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 11 04:52:21 power sudo[631211]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 11 04:52:21 power sudo[631211]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:52:21 power sudo[631211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:21 power sudo[631211]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:21 power sudo[631216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 11 04:52:21 power sudo[631216]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 11 04:52:21 power sudo[631216]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 11 04:52:21 power sudo[631216]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 11 04:52:21 power sudo[631216]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:52:21 power sudo[631216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:21 power sudo[631216]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:21 power sudo[631221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep 11 04:52:21 power sudo[631221]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep 11 04:52:21 power sudo[631221]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep 11 04:52:21 power sudo[631221]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep 11 04:52:21 power sudo[631221]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:52:21 power sudo[631221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:21 power sudo[631221]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:23 power sudo[631326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:52:23 power sudo[631326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:23 power sudo[631326]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:23 power sudo[631331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 11 04:52:23 power sudo[631331]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 11 04:52:23 power sudo[631331]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 11 04:52:23 power sudo[631331]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 11 04:52:23 power sudo[631331]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:52:23 power sudo[631331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:23 power sudo[631331]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:23 power sudo[631336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 11 04:52:23 power sudo[631336]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 11 04:52:23 power sudo[631336]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 11 04:52:23 power sudo[631336]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 11 04:52:23 power sudo[631336]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:52:23 power sudo[631336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:23 power sudo[631336]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:23 power sudo[631341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep 11 04:52:23 power sudo[631341]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep 11 04:52:23 power sudo[631341]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep 11 04:52:23 power sudo[631341]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep 11 04:52:23 power sudo[631341]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:52:23 power sudo[631341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:23 power sudo[631341]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:24 power sudo[631379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep 11 04:52:24 power sudo[631379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:24 power sudo[631379]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:24 power sudo[631385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eaptekam --output=json'
Sep 11 04:52:24 power sudo[631385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:24 power sudo[631385]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:29 power sudo[631542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam /bin/sh -c 'cd /home/eaptekam/dev.eapteka.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:52:30 power sudo[631542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:30 power sudo[631542]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:30 power sudo[631548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eaptekam --user-current --json'
Sep 11 04:52:30 power sudo[631548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:30 power sudo[631548]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:30 power sudo[631559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam LangPHP php_get_vhost_versions --output=json'
Sep 11 04:52:30 power sudo[631559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:30 power sudo[631559]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:30 power sudo[631565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:52:30 power sudo[631565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:30 power sudo[631565]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:31 power sudo[631589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DomainInfo single_domain_data domain=dev.eapteka.mk return_https_redirect_status=1 --output=json'
Sep 11 04:52:31 power sudo[631589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:31 power sudo[631589]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:31 power sudo[631598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam Mime list_redirects --output=json'
Sep 11 04:52:31 power sudo[631598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:31 power sudo[631598]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:34 power sudo[631670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DirectoryPrivacy is_directory_protected dir=/home/eaptekam/dev.eapteka.mk --output=json'
Sep 11 04:52:34 power sudo[631670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:34 power sudo[631670]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:38 power sudo[631864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep 11 04:52:38 power sudo[631864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:38 power sudo[631864]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:38 power sudo[631873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dimpalne --output=json'
Sep 11 04:52:38 power sudo[631873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:38 power sudo[631873]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:43 power sudo[631964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne /bin/sh -c 'cd /home/dimpalne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:52:43 power sudo[631964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:43 power sudo[631964]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:43 power sudo[631970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dimpalne --user-current --json'
Sep 11 04:52:43 power sudo[631970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:43 power sudo[631970]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:43 power sudo[631984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne LangPHP php_get_vhost_versions --output=json'
Sep 11 04:52:43 power sudo[631984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:43 power sudo[631984]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:43 power sudo[631991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:52:43 power sudo[631991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:43 power sudo[631991]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:44 power sudo[632005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DomainInfo single_domain_data domain=dimpal.net return_https_redirect_status=1 --output=json'
Sep 11 04:52:44 power sudo[632005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:44 power sudo[632005]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:44 power sudo[632011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne Mime list_redirects --output=json'
Sep 11 04:52:44 power sudo[632011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:44 power sudo[632011]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:46 power sudo[632093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DirectoryPrivacy is_directory_protected dir=/home/dimpalne/public_html --output=json'
Sep 11 04:52:46 power sudo[632093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:47 power sudo[632093]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:52 power sudo[632331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=dreamholidays.bbbustours.mk return_https_redirect_status=1 --output=json'
Sep 11 04:52:52 power sudo[632331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:52 power sudo[632331]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:55 power sudo[632398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/dreamholidays.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:52:55 power sudo[632398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:55 power sudo[632398]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:55 power sudo[632404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep 11 04:52:55 power sudo[632404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:55 power sudo[632404]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:55 power sudo[632409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:52:55 power sudo[632409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:55 power sudo[632409]: pam_unix(sudo:session): session closed for user root
Sep 11 04:52:59 power sudo[632490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/dreamholidays.mk --output=json'
Sep 11 04:52:59 power sudo[632490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:52:59 power sudo[632490]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:40 power sudo[633285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep 11 04:53:40 power sudo[633285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:41 power sudo[633285]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:41 power sudo[633291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=drleomk --output=json'
Sep 11 04:53:41 power sudo[633291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:41 power sudo[633291]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:46 power sudo[633391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk /bin/sh -c 'cd /home/drleomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:53:46 power sudo[633391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:46 power sudo[633391]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:46 power sudo[633397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user drleomk --user-current --json'
Sep 11 04:53:46 power sudo[633397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:46 power sudo[633397]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:46 power sudo[633407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk LangPHP php_get_vhost_versions --output=json'
Sep 11 04:53:46 power sudo[633407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:46 power sudo[633407]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:46 power sudo[633413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:53:46 power sudo[633413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:46 power sudo[633413]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:47 power sudo[633437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DomainInfo single_domain_data domain=drleo.mk return_https_redirect_status=1 --output=json'
Sep 11 04:53:47 power sudo[633437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:47 power sudo[633437]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:47 power sudo[633447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk Mime list_redirects --output=json'
Sep 11 04:53:47 power sudo[633447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:47 power sudo[633447]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:50 power sudo[633533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DirectoryPrivacy is_directory_protected dir=/home/drleomk/public_html --output=json'
Sep 11 04:53:50 power sudo[633533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:50 power sudo[633533]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:55 power sudo[633747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep 11 04:53:55 power sudo[633747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:55 power sudo[633747]: pam_unix(sudo:session): session closed for user root
Sep 11 04:53:55 power sudo[633755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=goodnews --output=json'
Sep 11 04:53:55 power sudo[633755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:53:55 power sudo[633755]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:00 power sudo[633831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:54:00 power sudo[633831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:00 power sudo[633831]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:00 power sudo[633842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 11 04:54:00 power sudo[633842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:00 power sudo[633842]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:00 power sudo[633850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews LangPHP php_get_vhost_versions --output=json'
Sep 11 04:54:00 power sudo[633850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:00 power sudo[633850]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:00 power sudo[633855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:54:00 power sudo[633855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:00 power sudo[633855]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:01 power sudo[633869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=elan.mk return_https_redirect_status=1 --output=json'
Sep 11 04:54:01 power sudo[633869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:01 power sudo[633869]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:01 power sudo[633884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews Mime list_redirects --output=json'
Sep 11 04:54:01 power sudo[633884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:01 power sudo[633884]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:04 power sudo[633971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/elan.mk --output=json'
Sep 11 04:54:04 power sudo[633971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:04 power sudo[633971]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:04 power sudo[634028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:04 power sudo[634028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:04 power sudo[634028]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:04 power sudo[634033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 04:54:04 power sudo[634033]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 04:54:04 power sudo[634033]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 04:54:04 power sudo[634033]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 04:54:04 power sudo[634033]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:04 power sudo[634033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:04 power sudo[634033]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:04 power sudo[634038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 04:54:04 power sudo[634038]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 04:54:04 power sudo[634038]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 04:54:04 power sudo[634038]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 04:54:04 power sudo[634038]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:04 power sudo[634038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:04 power sudo[634038]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:06 power sudo[634120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:06 power sudo[634120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:06 power sudo[634120]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:06 power sudo[634125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 04:54:06 power sudo[634125]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 04:54:06 power sudo[634125]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 04:54:06 power sudo[634125]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 04:54:06 power sudo[634125]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:06 power sudo[634125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:06 power sudo[634125]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:06 power sudo[634131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 04:54:06 power sudo[634131]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 04:54:06 power sudo[634131]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 04:54:06 power sudo[634131]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 04:54:06 power sudo[634131]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:06 power sudo[634131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:06 power sudo[634131]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:06 power sudo[634155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep 11 04:54:06 power sudo[634155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:07 power sudo[634155]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:07 power sudo[634160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=electrol --output=json'
Sep 11 04:54:07 power sudo[634160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:07 power sudo[634160]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:12 power sudo[634239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol /bin/sh -c 'cd /home/electrol/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:54:12 power sudo[634239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:12 power sudo[634239]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:12 power sudo[634245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user electrol --user-current --json'
Sep 11 04:54:12 power sudo[634245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:12 power sudo[634245]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:12 power sudo[634253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol LangPHP php_get_vhost_versions --output=json'
Sep 11 04:54:12 power sudo[634253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:12 power sudo[634253]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:12 power sudo[634259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:54:12 power sudo[634259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:12 power sudo[634259]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:13 power sudo[634289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DomainInfo single_domain_data domain=electrolight.mk return_https_redirect_status=1 --output=json'
Sep 11 04:54:13 power sudo[634289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:13 power sudo[634289]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:13 power sudo[634295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol Mime list_redirects --output=json'
Sep 11 04:54:13 power sudo[634295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:13 power sudo[634295]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:17 power sudo[634375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DirectoryPrivacy is_directory_protected dir=/home/electrol/public_html --output=json'
Sep 11 04:54:17 power sudo[634375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:17 power sudo[634375]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:20 power sudo[634570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep 11 04:54:21 power sudo[634570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:21 power sudo[634570]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:21 power sudo[634577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=elektrot --output=json'
Sep 11 04:54:21 power sudo[634577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:21 power sudo[634577]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:23 power sudo[634627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot /bin/sh -c 'cd /home/elektrot/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:54:23 power sudo[634627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:23 power sudo[634627]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:23 power sudo[634637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user elektrot --user-current --json'
Sep 11 04:54:23 power sudo[634637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:23 power sudo[634637]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:23 power sudo[634646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot LangPHP php_get_vhost_versions --output=json'
Sep 11 04:54:23 power sudo[634646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:23 power sudo[634646]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:23 power sudo[634653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:54:23 power sudo[634653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:23 power sudo[634653]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:24 power sudo[634668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DomainInfo single_domain_data domain=elektrotehnika-inzinering.mk return_https_redirect_status=1 --output=json'
Sep 11 04:54:24 power sudo[634668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:24 power sudo[634668]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:24 power sudo[634674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot Mime list_redirects --output=json'
Sep 11 04:54:24 power sudo[634674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:24 power sudo[634674]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:26 power sudo[634748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy is_directory_protected dir=/home/elektrot/public_html/wp --output=json'
Sep 11 04:54:26 power sudo[634748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:26 power sudo[634748]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:26 power sudo[634753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy list_users dir=/home/elektrot/public_html/wp --output=json'
Sep 11 04:54:26 power sudo[634753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:26 power sudo[634753]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:31 power sudo[634996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:54:31 power sudo[634996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:31 power sudo[634996]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:31 power sudo[635002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep 11 04:54:31 power sudo[635002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:31 power sudo[635002]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:31 power sudo[635011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:54:31 power sudo[635011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:31 power sudo[635011]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:32 power sudo[635033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=enaspot.com return_https_redirect_status=1 --output=json'
Sep 11 04:54:32 power sudo[635033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:32 power sudo[635033]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:35 power sudo[635127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/public_html --output=json'
Sep 11 04:54:35 power sudo[635127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:35 power sudo[635127]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:38 power sudo[635327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep 11 04:54:38 power sudo[635327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:39 power sudo[635327]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:39 power sudo[635332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enochmk --output=json'
Sep 11 04:54:39 power sudo[635332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:39 power sudo[635332]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:44 power sudo[635450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:54:44 power sudo[635450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:44 power sudo[635450]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:44 power sudo[635457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enochmk --user-current --json'
Sep 11 04:54:44 power sudo[635457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:45 power sudo[635457]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:45 power sudo[635463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk LangPHP php_get_vhost_versions --output=json'
Sep 11 04:54:45 power sudo[635463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:45 power sudo[635463]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:45 power sudo[635472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:54:45 power sudo[635472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:45 power sudo[635472]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:46 power sudo[635490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DomainInfo single_domain_data domain=enoch.mk return_https_redirect_status=1 --output=json'
Sep 11 04:54:46 power sudo[635490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:46 power sudo[635490]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:46 power sudo[635496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk Mime list_redirects --output=json'
Sep 11 04:54:46 power sudo[635496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:46 power sudo[635496]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:50 power sudo[635587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DirectoryPrivacy is_directory_protected dir=/home/enochmk/public_html --output=json'
Sep 11 04:54:50 power sudo[635587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:50 power sudo[635587]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:51 power sudo[635655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:51 power sudo[635655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:51 power sudo[635655]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:51 power sudo[635660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 04:54:51 power sudo[635660]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 04:54:51 power sudo[635660]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 04:54:51 power sudo[635660]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 04:54:51 power sudo[635660]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:51 power sudo[635660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:51 power sudo[635660]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:51 power sudo[635665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 04:54:51 power sudo[635665]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 04:54:51 power sudo[635665]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 04:54:51 power sudo[635665]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 04:54:51 power sudo[635665]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:51 power sudo[635665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:51 power sudo[635665]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:53 power sudo[635785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:53 power sudo[635785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:53 power sudo[635785]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:53 power sudo[635792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 04:54:53 power sudo[635792]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 04:54:53 power sudo[635792]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 04:54:53 power sudo[635792]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 04:54:53 power sudo[635792]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:53 power sudo[635792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:53 power sudo[635792]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:53 power sudo[635800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 04:54:53 power sudo[635800]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 04:54:53 power sudo[635800]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 04:54:53 power sudo[635800]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 04:54:53 power sudo[635800]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:54:53 power sudo[635800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:53 power sudo[635800]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:57 power sudo[636032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/equip.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:54:57 power sudo[636032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:57 power sudo[636032]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:57 power sudo[636039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 11 04:54:57 power sudo[636039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:57 power sudo[636039]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:57 power sudo[636049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:54:57 power sudo[636049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:57 power sudo[636049]: pam_unix(sudo:session): session closed for user root
Sep 11 04:54:58 power sudo[636064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=equip.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 04:54:58 power sudo[636064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:54:58 power sudo[636064]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:00 power sudo[636144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/equip.cetplatform.mk --output=json'
Sep 11 04:55:00 power sudo[636144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:00 power sudo[636144]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:01 power systemd[636258]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 04:55:04 power sudo[636442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep 11 04:55:04 power sudo[636442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:04 power sudo[636442]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:04 power sudo[636452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eurofarm --output=json'
Sep 11 04:55:04 power sudo[636452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:04 power sudo[636452]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:11 power sudo[636592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm /bin/sh -c 'cd /home/eurofarm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:55:11 power sudo[636592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:11 power sudo[636592]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:11 power sudo[636605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eurofarm --user-current --json'
Sep 11 04:55:11 power sudo[636605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:12 power sudo[636605]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:12 power sudo[636618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm LangPHP php_get_vhost_versions --output=json'
Sep 11 04:55:12 power sudo[636618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:12 power sudo[636618]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:12 power sudo[636623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:55:12 power sudo[636623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:12 power sudo[636623]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:12 power sudo[636645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DomainInfo single_domain_data domain=eurofarm.com.mk return_https_redirect_status=1 --output=json'
Sep 11 04:55:12 power sudo[636645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:13 power sudo[636645]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:13 power sudo[636652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm Mime list_redirects --output=json'
Sep 11 04:55:13 power sudo[636652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:13 power sudo[636652]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:17 power sudo[636748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DirectoryPrivacy is_directory_protected dir=/home/eurofarm/public_html --output=json'
Sep 11 04:55:17 power sudo[636748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:17 power sudo[636748]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:21 power sudo[636955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep 11 04:55:21 power sudo[636955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:21 power sudo[636955]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:21 power sudo[636964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=euromaki --output=json'
Sep 11 04:55:21 power sudo[636964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:21 power sudo[636964]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:25 power sudo[637052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki /bin/sh -c 'cd /home/euromaki/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:55:25 power sudo[637052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:25 power sudo[637052]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:25 power sudo[637058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user euromaki --user-current --json'
Sep 11 04:55:25 power sudo[637058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:25 power sudo[637058]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:25 power sudo[637063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki LangPHP php_get_vhost_versions --output=json'
Sep 11 04:55:25 power sudo[637063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:26 power sudo[637063]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:26 power sudo[637068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:55:26 power sudo[637068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:26 power sudo[637068]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:26 power sudo[637081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DomainInfo single_domain_data domain=euromakinsurance.mk return_https_redirect_status=1 --output=json'
Sep 11 04:55:26 power sudo[637081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:26 power sudo[637081]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:26 power sudo[637091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki Mime list_redirects --output=json'
Sep 11 04:55:26 power sudo[637091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:26 power sudo[637091]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:30 power sudo[637263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DirectoryPrivacy is_directory_protected dir=/home/euromaki/public_html --output=json'
Sep 11 04:55:30 power sudo[637263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:30 power sudo[637263]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:33 power sudo[637470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep 11 04:55:33 power sudo[637470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:33 power sudo[637470]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:33 power sudo[637476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evberasm --output=json'
Sep 11 04:55:33 power sudo[637476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:33 power sudo[637476]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:41 power sudo[637599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm /bin/sh -c 'cd /home/evberasm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:55:41 power sudo[637599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:41 power sudo[637599]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:41 power sudo[637605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evberasm --user-current --json'
Sep 11 04:55:41 power sudo[637605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:41 power sudo[637605]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:41 power sudo[637618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm LangPHP php_get_vhost_versions --output=json'
Sep 11 04:55:41 power sudo[637618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:41 power sudo[637618]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:41 power sudo[637623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:55:41 power sudo[637623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:41 power sudo[637623]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:41 power sudo[637636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DomainInfo single_domain_data domain=evberasmusplus.com.mk return_https_redirect_status=1 --output=json'
Sep 11 04:55:41 power sudo[637636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:42 power sudo[637636]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:42 power sudo[637642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm Mime list_redirects --output=json'
Sep 11 04:55:42 power sudo[637642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:42 power sudo[637642]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:45 power sudo[637722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DirectoryPrivacy is_directory_protected dir=/home/evberasm/public_html/wp --output=json'
Sep 11 04:55:45 power sudo[637722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:45 power sudo[637722]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:48 power sudo[637931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep 11 04:55:48 power sudo[637931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:48 power sudo[637931]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:48 power sudo[637936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evolvepl --output=json'
Sep 11 04:55:48 power sudo[637936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:48 power sudo[637936]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:52 power sudo[638018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:55:52 power sudo[638018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:53 power sudo[638018]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:53 power sudo[638024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evolvepl --user-current --json'
Sep 11 04:55:53 power sudo[638024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:53 power sudo[638024]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:53 power sudo[638037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl LangPHP php_get_vhost_versions --output=json'
Sep 11 04:55:53 power sudo[638037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:53 power sudo[638037]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:53 power sudo[638045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:55:53 power sudo[638045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:53 power sudo[638045]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:54 power sudo[638067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DomainInfo single_domain_data domain=evolveplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 04:55:54 power sudo[638067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:54 power sudo[638067]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:54 power sudo[638075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl Mime list_redirects --output=json'
Sep 11 04:55:54 power sudo[638075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:54 power sudo[638075]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:57 power sudo[638171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DirectoryPrivacy is_directory_protected dir=/home/evolvepl/public_html --output=json'
Sep 11 04:55:57 power sudo[638171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:57 power sudo[638171]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:58 power sudo[638242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:55:58 power sudo[638242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:58 power sudo[638242]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:58 power sudo[638247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:55:58 power sudo[638247]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:55:58 power sudo[638247]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:55:58 power sudo[638247]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:55:58 power sudo[638247]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:55:58 power sudo[638247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:58 power sudo[638247]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:58 power sudo[638252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:55:58 power sudo[638252]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:55:58 power sudo[638252]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:55:58 power sudo[638252]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:55:58 power sudo[638252]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:55:58 power sudo[638252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:58 power sudo[638252]: pam_unix(sudo:session): session closed for user root
Sep 11 04:55:58 power sudo[638261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:55:58 power sudo[638261]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:55:58 power sudo[638261]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:55:58 power sudo[638261]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:55:58 power sudo[638261]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:55:58 power sudo[638261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:55:58 power sudo[638261]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:00 power sudo[638381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:00 power sudo[638381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:00 power sudo[638381]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:00 power sudo[638386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:56:00 power sudo[638386]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:56:00 power sudo[638386]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:56:00 power sudo[638386]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:56:00 power sudo[638386]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:00 power sudo[638386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:00 power sudo[638386]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:00 power sudo[638391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:56:00 power sudo[638391]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:56:00 power sudo[638391]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:56:00 power sudo[638391]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:56:00 power sudo[638391]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:00 power sudo[638391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:00 power sudo[638391]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:00 power sudo[638396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:56:00 power sudo[638396]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:56:00 power sudo[638396]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:56:00 power sudo[638396]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:56:00 power sudo[638396]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:00 power sudo[638396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:00 power sudo[638396]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:05 power sudo[638526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/ey.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:56:05 power sudo[638526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:05 power sudo[638526]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:05 power sudo[638534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 11 04:56:05 power sudo[638534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:05 power sudo[638534]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:05 power sudo[638543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:56:05 power sudo[638543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:05 power sudo[638543]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:06 power sudo[638562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=ey.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 04:56:06 power sudo[638562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:06 power sudo[638562]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:08 power sudo[638650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/ey.cetplatform.mk --output=json'
Sep 11 04:56:08 power sudo[638650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:08 power sudo[638650]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:12 power sudo[638882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep 11 04:56:12 power sudo[638882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:12 power sudo[638882]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:12 power sudo[638888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=holiyayt --output=json'
Sep 11 04:56:12 power sudo[638888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:12 power sudo[638888]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:15 power sudo[638952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/fitkit.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:56:15 power sudo[638952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:15 power sudo[638952]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:15 power sudo[638958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 11 04:56:15 power sudo[638958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:16 power sudo[638958]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:16 power sudo[638966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt LangPHP php_get_vhost_versions --output=json'
Sep 11 04:56:16 power sudo[638966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:16 power sudo[638966]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:16 power sudo[638971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:56:16 power sudo[638971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:16 power sudo[638971]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:16 power sudo[638986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=fitkit.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 11 04:56:16 power sudo[638986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:16 power sudo[638986]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:16 power sudo[638995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt Mime list_redirects --output=json'
Sep 11 04:56:16 power sudo[638995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:16 power sudo[638995]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:17 power sudo[639055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/fitkit.holiyaytravel.com --output=json'
Sep 11 04:56:17 power sudo[639055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:18 power sudo[639055]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:21 power sudo[639267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep 11 04:56:21 power sudo[639267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:21 power sudo[639267]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:21 power sudo[639273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=v5srybi9dcdx --output=json'
Sep 11 04:56:21 power sudo[639273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:21 power sudo[639273]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:24 power sudo[639515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/flowoptstudio.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:56:24 power sudo[639515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:24 power sudo[639515]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:24 power sudo[639522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep 11 04:56:24 power sudo[639522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:25 power sudo[639522]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:25 power sudo[639532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx LangPHP php_get_vhost_versions --output=json'
Sep 11 04:56:25 power sudo[639532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:25 power sudo[639532]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:25 power sudo[639537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:56:25 power sudo[639537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:25 power sudo[639537]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:25 power sudo[639578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=flowoptstudio.com return_https_redirect_status=1 --output=json'
Sep 11 04:56:25 power sudo[639578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:25 power sudo[639578]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:25 power sudo[639584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx Mime list_redirects --output=json'
Sep 11 04:56:25 power sudo[639584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:25 power sudo[639584]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:27 power sudo[639675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/flowoptstudio.com --output=json'
Sep 11 04:56:27 power sudo[639675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:27 power sudo[639675]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:31 power sudo[639915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep 11 04:56:31 power sudo[639915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:31 power sudo[639915]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:31 power sudo[639921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=folklore --output=json'
Sep 11 04:56:31 power sudo[639921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:31 power sudo[639921]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:34 power sudo[639979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:56:34 power sudo[639979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:34 power sudo[639979]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:34 power sudo[639986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user folklore --user-current --json'
Sep 11 04:56:34 power sudo[639986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:34 power sudo[639986]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:34 power sudo[639996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore LangPHP php_get_vhost_versions --output=json'
Sep 11 04:56:34 power sudo[639996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:34 power sudo[639996]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:34 power sudo[640003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:56:34 power sudo[640003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:34 power sudo[640003]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:35 power sudo[640022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DomainInfo single_domain_data domain=folklorefestivals.com return_https_redirect_status=1 --output=json'
Sep 11 04:56:35 power sudo[640022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:35 power sudo[640022]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:35 power sudo[640028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore Mime list_redirects --output=json'
Sep 11 04:56:35 power sudo[640028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:35 power sudo[640028]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:37 power sudo[640096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DirectoryPrivacy is_directory_protected dir=/home/folklore/public_html --output=json'
Sep 11 04:56:37 power sudo[640096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:37 power sudo[640096]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:38 power sudo[640148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:38 power sudo[640148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:38 power sudo[640148]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:38 power sudo[640153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:56:38 power sudo[640153]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:56:38 power sudo[640153]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:56:38 power sudo[640153]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:56:38 power sudo[640153]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:38 power sudo[640153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:38 power sudo[640153]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:38 power sudo[640158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:56:38 power sudo[640158]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:56:38 power sudo[640158]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:56:38 power sudo[640158]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:56:38 power sudo[640158]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:38 power sudo[640158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:38 power sudo[640158]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:38 power sudo[640164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:56:38 power sudo[640164]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:56:38 power sudo[640164]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:56:38 power sudo[640164]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:56:38 power sudo[640164]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:38 power sudo[640164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:38 power sudo[640164]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:40 power sudo[640260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:40 power sudo[640260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:40 power sudo[640260]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:40 power sudo[640265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:56:40 power sudo[640265]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:56:40 power sudo[640265]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:56:40 power sudo[640265]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:56:40 power sudo[640265]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:40 power sudo[640265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:40 power sudo[640265]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:40 power sudo[640270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:56:40 power sudo[640270]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:56:40 power sudo[640270]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:56:40 power sudo[640270]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:56:40 power sudo[640270]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:40 power sudo[640270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:40 power sudo[640270]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:40 power sudo[640275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:56:40 power sudo[640275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:56:40 power sudo[640275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:56:40 power sudo[640275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:56:40 power sudo[640275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:56:40 power sudo[640275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:40 power sudo[640275]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:40 power sudo[640299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep 11 04:56:40 power sudo[640299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:41 power sudo[640299]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:41 power sudo[640319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=forzares --output=json'
Sep 11 04:56:41 power sudo[640319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:41 power sudo[640319]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:46 power sudo[640476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares /bin/sh -c 'cd /home/forzares/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:56:46 power sudo[640476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:46 power sudo[640476]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:46 power sudo[640482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user forzares --user-current --json'
Sep 11 04:56:46 power sudo[640482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:46 power sudo[640482]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:46 power sudo[640490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares LangPHP php_get_vhost_versions --output=json'
Sep 11 04:56:46 power sudo[640490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:46 power sudo[640490]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:46 power sudo[640496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:56:46 power sudo[640496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:46 power sudo[640496]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:47 power sudo[640521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DomainInfo single_domain_data domain=forzarestaurant.com.mk return_https_redirect_status=1 --output=json'
Sep 11 04:56:47 power sudo[640521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:47 power sudo[640521]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:47 power sudo[640532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares Mime list_redirects --output=json'
Sep 11 04:56:47 power sudo[640532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:47 power sudo[640532]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:50 power sudo[640639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DirectoryPrivacy is_directory_protected dir=/home/forzares/public_html --output=json'
Sep 11 04:56:50 power sudo[640639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:50 power sudo[640639]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:54 power sudo[640817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep 11 04:56:54 power sudo[640817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:54 power sudo[640817]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:54 power sudo[640824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=getaldus --output=json'
Sep 11 04:56:54 power sudo[640824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:54 power sudo[640824]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:56 power sudo[640875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus /bin/sh -c 'cd /home/getaldus/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:56:56 power sudo[640875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:56 power sudo[640875]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:56 power sudo[640885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user getaldus --user-current --json'
Sep 11 04:56:56 power sudo[640885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:56 power sudo[640885]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:56 power sudo[640895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus LangPHP php_get_vhost_versions --output=json'
Sep 11 04:56:56 power sudo[640895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:57 power sudo[640895]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:57 power sudo[640905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:56:57 power sudo[640905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:57 power sudo[640905]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:57 power sudo[640920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DomainInfo single_domain_data domain=getaldus.mk return_https_redirect_status=1 --output=json'
Sep 11 04:56:57 power sudo[640920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:57 power sudo[640920]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:57 power sudo[640927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus Mime list_redirects --output=json'
Sep 11 04:56:57 power sudo[640927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:57 power sudo[640927]: pam_unix(sudo:session): session closed for user root
Sep 11 04:56:59 power sudo[641002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DirectoryPrivacy is_directory_protected dir=/home/getaldus/public_html --output=json'
Sep 11 04:56:59 power sudo[641002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:56:59 power sudo[641002]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:02 power sudo[641192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep 11 04:57:03 power sudo[641192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:03 power sudo[641192]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:03 power sudo[641200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gocruise --output=json'
Sep 11 04:57:03 power sudo[641200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:03 power sudo[641200]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:08 power sudo[641287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise /bin/sh -c 'cd /home/gocruise/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:57:08 power sudo[641287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:08 power sudo[641287]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:08 power sudo[641296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gocruise --user-current --json'
Sep 11 04:57:08 power sudo[641296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:08 power sudo[641296]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:08 power sudo[641305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise LangPHP php_get_vhost_versions --output=json'
Sep 11 04:57:08 power sudo[641305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:08 power sudo[641305]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:08 power sudo[641310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:57:08 power sudo[641310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:08 power sudo[641310]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:09 power sudo[641324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DomainInfo single_domain_data domain=gocruise.mk return_https_redirect_status=1 --output=json'
Sep 11 04:57:09 power sudo[641324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:09 power sudo[641324]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:09 power sudo[641335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise Mime list_redirects --output=json'
Sep 11 04:57:09 power sudo[641335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:09 power sudo[641335]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:12 power sudo[641430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DirectoryPrivacy is_directory_protected dir=/home/gocruise/public_html --output=json'
Sep 11 04:57:12 power sudo[641430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:12 power sudo[641430]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:15 power sudo[641613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep 11 04:57:15 power sudo[641613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:15 power sudo[641613]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:15 power sudo[641625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gogovan1 --output=json'
Sep 11 04:57:15 power sudo[641625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:15 power sudo[641625]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:19 power sudo[641699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 /bin/sh -c 'cd /home/gogovan1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:57:19 power sudo[641699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:19 power sudo[641699]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:19 power sudo[641706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gogovan1 --user-current --json'
Sep 11 04:57:20 power sudo[641706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:20 power sudo[641706]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:20 power sudo[641714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 LangPHP php_get_vhost_versions --output=json'
Sep 11 04:57:20 power sudo[641714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:20 power sudo[641714]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:20 power sudo[641720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:57:20 power sudo[641720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:20 power sudo[641720]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:20 power sudo[641737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DomainInfo single_domain_data domain=gogovan.mk return_https_redirect_status=1 --output=json'
Sep 11 04:57:20 power sudo[641737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:20 power sudo[641737]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:20 power sudo[641744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 Mime list_redirects --output=json'
Sep 11 04:57:20 power sudo[641744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:20 power sudo[641744]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:23 power sudo[641834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DirectoryPrivacy is_directory_protected dir=/home/gogovan1/public_html --output=json'
Sep 11 04:57:23 power sudo[641834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:23 power sudo[641834]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:27 power sudo[642060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep 11 04:57:27 power sudo[642060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:27 power sudo[642060]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:27 power sudo[642066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=golakkom --output=json'
Sep 11 04:57:27 power sudo[642066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:27 power sudo[642066]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:34 power sudo[642204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:57:34 power sudo[642204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:34 power sudo[642204]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:34 power sudo[642210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user golakkom --user-current --json'
Sep 11 04:57:34 power sudo[642210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:34 power sudo[642210]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:34 power sudo[642215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom LangPHP php_get_vhost_versions --output=json'
Sep 11 04:57:34 power sudo[642215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:34 power sudo[642215]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:34 power sudo[642220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:57:34 power sudo[642220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:34 power sudo[642220]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:35 power sudo[642239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DomainInfo single_domain_data domain=golak-komerc.mk return_https_redirect_status=1 --output=json'
Sep 11 04:57:35 power sudo[642239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:35 power sudo[642239]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:35 power sudo[642245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom Mime list_redirects --output=json'
Sep 11 04:57:35 power sudo[642245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:35 power sudo[642245]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:39 power sudo[642361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DirectoryPrivacy is_directory_protected dir=/home/golakkom/public_html --output=json'
Sep 11 04:57:39 power sudo[642361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:39 power sudo[642361]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:40 power sudo[642414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:57:40 power sudo[642414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:40 power sudo[642414]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:40 power sudo[642419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 04:57:40 power sudo[642419]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 04:57:40 power sudo[642419]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 04:57:40 power sudo[642419]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 04:57:40 power sudo[642419]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:57:40 power sudo[642419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:40 power sudo[642419]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:40 power sudo[642424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:57:40 power sudo[642424]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:57:40 power sudo[642424]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:57:40 power sudo[642424]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:57:40 power sudo[642424]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:57:40 power sudo[642424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:41 power sudo[642424]: pam_unix(sudo:session): session closed for user root
Sep 11 04:57:41 power sudo[642434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 04:57:41 power sudo[642434]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 04:57:41 power sudo[642434]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 04:57:41 power sudo[642434]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 04:57:41 power sudo[642434]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 04:57:41 power sudo[642434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:57:41 power sudo[642434]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:38 power sudo[643287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:58:38 power sudo[643287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:38 power sudo[643287]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:38 power sudo[643293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 11 04:58:38 power sudo[643293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:39 power sudo[643293]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:39 power sudo[643304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:58:39 power sudo[643304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:39 power sudo[643304]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:39 power sudo[643338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=goodnews.mk return_https_redirect_status=1 --output=json'
Sep 11 04:58:39 power sudo[643338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:39 power sudo[643338]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:42 power sudo[643413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/public_html --output=json'
Sep 11 04:58:42 power sudo[643413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:42 power sudo[643413]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:47 power sudo[643639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep 11 04:58:47 power sudo[643639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:47 power sudo[643639]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:47 power sudo[643647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=herbalpl --output=json'
Sep 11 04:58:47 power sudo[643647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:47 power sudo[643647]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:53 power sudo[643770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl /bin/sh -c 'cd /home/herbalpl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:58:53 power sudo[643770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:53 power sudo[643770]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:53 power sudo[643776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user herbalpl --user-current --json'
Sep 11 04:58:53 power sudo[643776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:53 power sudo[643776]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:53 power sudo[643783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl LangPHP php_get_vhost_versions --output=json'
Sep 11 04:58:53 power sudo[643783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:53 power sudo[643783]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:53 power sudo[643788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:58:53 power sudo[643788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:53 power sudo[643788]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:54 power sudo[643812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DomainInfo single_domain_data domain=herbalplus.mk return_https_redirect_status=1 --output=json'
Sep 11 04:58:54 power sudo[643812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:54 power sudo[643812]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:54 power sudo[643823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl Mime list_redirects --output=json'
Sep 11 04:58:54 power sudo[643823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:55 power sudo[643823]: pam_unix(sudo:session): session closed for user root
Sep 11 04:58:58 power sudo[643903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DirectoryPrivacy is_directory_protected dir=/home/herbalpl/public_html --output=json'
Sep 11 04:58:58 power sudo[643903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:58:58 power sudo[643903]: pam_unix(sudo:session): session closed for user root
Sep 11 04:59:47 power sudo[644697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/hero.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:59:47 power sudo[644697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:59:47 power sudo[644697]: pam_unix(sudo:session): session closed for user root
Sep 11 04:59:47 power sudo[644706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 11 04:59:47 power sudo[644706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:59:47 power sudo[644706]: pam_unix(sudo:session): session closed for user root
Sep 11 04:59:47 power sudo[644716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:59:47 power sudo[644716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:59:47 power sudo[644716]: pam_unix(sudo:session): session closed for user root
Sep 11 04:59:48 power sudo[644731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=hero.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 04:59:48 power sudo[644731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:59:48 power sudo[644731]: pam_unix(sudo:session): session closed for user root
Sep 11 04:59:50 power sudo[644825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/hero.cetplatform.mk --output=json'
Sep 11 04:59:50 power sudo[644825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:59:50 power sudo[644825]: pam_unix(sudo:session): session closed for user root
Sep 11 04:59:57 power sudo[645227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 04:59:57 power sudo[645227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:59:57 power sudo[645227]: pam_unix(sudo:session): session closed for user root
Sep 11 04:59:57 power sudo[645233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 11 04:59:57 power sudo[645233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:59:58 power sudo[645233]: pam_unix(sudo:session): session closed for user root
Sep 11 04:59:58 power sudo[645240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 04:59:58 power sudo[645240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:59:58 power sudo[645240]: pam_unix(sudo:session): session closed for user root
Sep 11 04:59:58 power sudo[645266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 11 04:59:59 power sudo[645266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 04:59:59 power sudo[645266]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:01 power systemd[645477]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:00:01 power systemd[645478]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 05:00:01 power systemd[645479]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 05:00:01 power systemd[645481]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 05:00:01 power sudo[645585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/public_html --output=json'
Sep 11 05:00:01 power sudo[645585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:01 power sudo[645585]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:02 power sudo[645757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:00:02 power sudo[645757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:02 power sudo[645757]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:02 power sudo[645762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:00:02 power sudo[645762]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:00:02 power sudo[645762]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:00:02 power sudo[645762]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:00:02 power sudo[645762]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:00:02 power sudo[645762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:02 power sudo[645762]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:02 power sudo[645767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:00:02 power sudo[645767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:00:02 power sudo[645767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:00:02 power sudo[645767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:00:02 power sudo[645767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:00:02 power sudo[645767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:03 power sudo[645767]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:03 power sudo[645791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:00:03 power sudo[645791]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:00:03 power sudo[645791]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:00:03 power sudo[645791]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:00:03 power sudo[645791]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:00:03 power sudo[645791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:03 power sudo[645791]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:05 power sudo[645940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:00:05 power sudo[645940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:05 power sudo[645940]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:05 power sudo[645950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:00:05 power sudo[645950]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:00:05 power sudo[645950]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:00:05 power sudo[645950]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:00:05 power sudo[645950]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:00:05 power sudo[645950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:05 power sudo[645950]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:05 power sudo[645956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:00:05 power sudo[645956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:00:05 power sudo[645956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:00:05 power sudo[645956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:00:05 power sudo[645956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:00:05 power sudo[645956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:05 power sudo[645956]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:05 power sudo[645986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:00:05 power sudo[645986]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:00:05 power sudo[645986]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:00:05 power sudo[645986]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:00:05 power sudo[645986]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:00:05 power sudo[645986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:05 power sudo[645986]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:06 power sudo[646031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep 11 05:00:06 power sudo[646031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:06 power sudo[646031]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:06 power sudo[646044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vezilkac --output=json'
Sep 11 05:00:06 power sudo[646044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:06 power sudo[646044]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:10 power sudo[646158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/vezden.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:00:10 power sudo[646158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:10 power sudo[646158]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:10 power sudo[646165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 11 05:00:10 power sudo[646165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:10 power sudo[646165]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:10 power sudo[646171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac LangPHP php_get_vhost_versions --output=json'
Sep 11 05:00:10 power sudo[646171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:11 power sudo[646171]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:11 power sudo[646176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:00:11 power sudo[646176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:11 power sudo[646176]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:11 power sudo[646208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezden.mk return_https_redirect_status=1 --output=json'
Sep 11 05:00:11 power sudo[646208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:11 power sudo[646208]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:11 power sudo[646218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Mime list_redirects --output=json'
Sep 11 05:00:11 power sudo[646218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:11 power sudo[646218]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:13 power sudo[646461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/vezden.mk --output=json'
Sep 11 05:00:13 power sudo[646461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:13 power sudo[646461]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:30 power sudo[646880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/metatet && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:00:30 power sudo[646880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:30 power sudo[646880]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:30 power sudo[646889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 11 05:00:30 power sudo[646889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:30 power sudo[646889]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:30 power sudo[646894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:00:30 power sudo[646894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:30 power sudo[646894]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:30 power sudo[646913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=metatet.com return_https_redirect_status=1 --output=json'
Sep 11 05:00:30 power sudo[646913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:31 power sudo[646913]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:36 power sudo[647076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/metatet --output=json'
Sep 11 05:00:36 power sudo[647076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:36 power sudo[647076]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:52 power sudo[647484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:00:52 power sudo[647484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:52 power sudo[647484]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:52 power sudo[647490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 11 05:00:52 power sudo[647490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:52 power sudo[647490]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:52 power sudo[647496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:00:53 power sudo[647496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:53 power sudo[647496]: pam_unix(sudo:session): session closed for user root
Sep 11 05:00:53 power sudo[647513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezilka.com return_https_redirect_status=1 --output=json'
Sep 11 05:00:53 power sudo[647513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:00:53 power sudo[647513]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:00 power sudo[647653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html --output=json'
Sep 11 05:01:00 power sudo[647653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:00 power sudo[647653]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:08 power sudo[647961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/sorabotnici && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:01:08 power sudo[647961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:08 power sudo[647961]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:08 power sudo[647967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 11 05:01:08 power sudo[647967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:08 power sudo[647967]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:08 power sudo[647978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:01:08 power sudo[647978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:08 power sudo[647978]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:08 power sudo[647995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=sorabotnici.vezilka.com return_https_redirect_status=1 --output=json'
Sep 11 05:01:08 power sudo[647995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:08 power sudo[647995]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:11 power sudo[648093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/sorabotnici --output=json'
Sep 11 05:01:11 power sudo[648093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:11 power sudo[648093]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:17 power sudo[648421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/pp && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:01:17 power sudo[648421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:17 power sudo[648421]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:17 power sudo[648428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 11 05:01:17 power sudo[648428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:18 power sudo[648428]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:18 power sudo[648433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:01:18 power sudo[648433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:18 power sudo[648433]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:18 power sudo[648447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=pp.denicija.mk return_https_redirect_status=1 --output=json'
Sep 11 05:01:18 power sudo[648447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:18 power sudo[648447]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:20 power sudo[648530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/pp --output=json'
Sep 11 05:01:20 power sudo[648530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:20 power sudo[648530]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:23 power sudo[648735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep 11 05:01:23 power sudo[648735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:24 power sudo[648735]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:24 power sudo[648741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=madzomk --output=json'
Sep 11 05:01:24 power sudo[648741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:24 power sudo[648741]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:29 power sudo[648858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk /bin/sh -c 'cd /home/madzomk/hotelcitypark.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:01:29 power sudo[648858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:29 power sudo[648858]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:29 power sudo[648864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user madzomk --user-current --json'
Sep 11 05:01:29 power sudo[648864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:29 power sudo[648864]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:29 power sudo[648870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk LangPHP php_get_vhost_versions --output=json'
Sep 11 05:01:29 power sudo[648870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:29 power sudo[648870]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:29 power sudo[648879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:01:29 power sudo[648879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:29 power sudo[648879]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:30 power sudo[648899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DomainInfo single_domain_data domain=hotelcitypark.mk return_https_redirect_status=1 --output=json'
Sep 11 05:01:30 power sudo[648899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:30 power sudo[648899]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:30 power sudo[648909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk Mime list_redirects --output=json'
Sep 11 05:01:30 power sudo[648909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:30 power sudo[648909]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:33 power sudo[649056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DirectoryPrivacy is_directory_protected dir=/home/madzomk/hotelcitypark.mk --output=json'
Sep 11 05:01:33 power sudo[649056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:33 power sudo[649056]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:37 power sudo[649271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep 11 05:01:37 power sudo[649271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:37 power sudo[649271]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:37 power sudo[649277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=imdskopj --output=json'
Sep 11 05:01:37 power sudo[649277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:37 power sudo[649277]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:40 power sudo[649410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj /bin/sh -c 'cd /home/imdskopj/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:01:40 power sudo[649410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:40 power sudo[649410]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:40 power sudo[649416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user imdskopj --user-current --json'
Sep 11 05:01:40 power sudo[649416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:40 power sudo[649416]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:40 power sudo[649426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj LangPHP php_get_vhost_versions --output=json'
Sep 11 05:01:40 power sudo[649426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:41 power sudo[649426]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:41 power sudo[649431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:01:41 power sudo[649431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:41 power sudo[649431]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:41 power sudo[649446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DomainInfo single_domain_data domain=imdskopje.mk return_https_redirect_status=1 --output=json'
Sep 11 05:01:41 power sudo[649446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:41 power sudo[649446]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:41 power sudo[649460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj Mime list_redirects --output=json'
Sep 11 05:01:41 power sudo[649460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:41 power sudo[649460]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:43 power sudo[649553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DirectoryPrivacy is_directory_protected dir=/home/imdskopj/public_html --output=json'
Sep 11 05:01:43 power sudo[649553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:43 power sudo[649553]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:47 power sudo[649778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep 11 05:01:47 power sudo[649778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:47 power sudo[649778]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:47 power sudo[649788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=infopor1 --output=json'
Sep 11 05:01:47 power sudo[649788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:47 power sudo[649788]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:49 power sshd[649137]: Connection closed by 206.168.34.211 port 59976 [preauth]
Sep 11 05:01:52 power sudo[649914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:01:52 power sudo[649914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:52 power sudo[649914]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:52 power sudo[649920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user infopor1 --user-current --json'
Sep 11 05:01:52 power sudo[649920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:52 power sudo[649920]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:52 power sudo[649925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 LangPHP php_get_vhost_versions --output=json'
Sep 11 05:01:52 power sudo[649925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:53 power sudo[649925]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:53 power sudo[649931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:01:53 power sudo[649931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:53 power sudo[649931]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:53 power sudo[649947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DomainInfo single_domain_data domain=infoportal.mk return_https_redirect_status=1 --output=json'
Sep 11 05:01:53 power sudo[649947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:53 power sudo[649947]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:53 power sudo[649954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 Mime list_redirects --output=json'
Sep 11 05:01:53 power sudo[649954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:53 power sudo[649954]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:56 power sudo[650043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DirectoryPrivacy is_directory_protected dir=/home/infopor1/public_html --output=json'
Sep 11 05:01:56 power sudo[650043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:56 power sudo[650043]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:57 power sudo[650109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:01:57 power sudo[650109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:57 power sudo[650109]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:57 power sudo[650114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:01:57 power sudo[650114]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:01:57 power sudo[650114]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:01:57 power sudo[650114]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:01:57 power sudo[650114]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:01:57 power sudo[650114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:57 power sudo[650114]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:57 power sudo[650119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:01:57 power sudo[650119]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:01:57 power sudo[650119]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:01:57 power sudo[650119]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:01:57 power sudo[650119]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:01:57 power sudo[650119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:57 power sudo[650119]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:57 power sudo[650127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:01:57 power sudo[650127]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:01:57 power sudo[650127]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:01:57 power sudo[650127]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:01:57 power sudo[650127]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:01:57 power sudo[650127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:58 power sudo[650127]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:59 power sudo[650245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:01:59 power sudo[650245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:59 power sudo[650245]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:59 power sudo[650250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:01:59 power sudo[650250]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:01:59 power sudo[650250]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:01:59 power sudo[650250]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:01:59 power sudo[650250]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:01:59 power sudo[650250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:01:59 power sudo[650250]: pam_unix(sudo:session): session closed for user root
Sep 11 05:01:59 power sudo[650255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:01:59 power sudo[650255]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:01:59 power sudo[650255]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:01:59 power sudo[650255]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:01:59 power sudo[650255]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:01:59 power sudo[650255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:00 power sudo[650255]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:00 power sudo[650260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:02:00 power sudo[650260]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:02:00 power sudo[650260]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:02:00 power sudo[650260]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:02:00 power sudo[650260]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:02:00 power sudo[650260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:00 power sudo[650260]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:00 power sudo[650298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep 11 05:02:00 power sudo[650298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:00 power sudo[650298]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:00 power sudo[650306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=intelek1 --output=json'
Sep 11 05:02:00 power sudo[650306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:01 power sudo[650306]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:05 power sudo[650417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:02:05 power sudo[650417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:05 power sudo[650417]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:05 power sudo[650423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user intelek1 --user-current --json'
Sep 11 05:02:05 power sudo[650423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:05 power sudo[650423]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:05 power sudo[650431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 LangPHP php_get_vhost_versions --output=json'
Sep 11 05:02:05 power sudo[650431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:05 power sudo[650431]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:05 power sudo[650436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:02:06 power sudo[650436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:06 power sudo[650436]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:06 power sudo[650455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DomainInfo single_domain_data domain=intelekt-bb.com return_https_redirect_status=1 --output=json'
Sep 11 05:02:06 power sudo[650455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:06 power sudo[650455]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:06 power sudo[650464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 Mime list_redirects --output=json'
Sep 11 05:02:06 power sudo[650464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:06 power sudo[650464]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:09 power sudo[650549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DirectoryPrivacy is_directory_protected dir=/home/intelek1/public_html --output=json'
Sep 11 05:02:09 power sudo[650549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:09 power sudo[650549]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:10 power sudo[650638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:02:10 power sudo[650638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:10 power sudo[650638]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:10 power sudo[650643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:02:10 power sudo[650643]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:02:10 power sudo[650643]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:02:10 power sudo[650643]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:02:10 power sudo[650643]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:02:10 power sudo[650643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:10 power sudo[650643]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:10 power sudo[650651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:02:10 power sudo[650651]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:02:10 power sudo[650651]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:02:10 power sudo[650651]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:02:10 power sudo[650651]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:02:10 power sudo[650651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:10 power sudo[650651]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:10 power sudo[650656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:02:10 power sudo[650656]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:02:10 power sudo[650656]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:02:10 power sudo[650656]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:02:10 power sudo[650656]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:02:10 power sudo[650656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:10 power sudo[650656]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:12 power sudo[650767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:02:12 power sudo[650767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:12 power sudo[650767]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:12 power sudo[650772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:02:12 power sudo[650772]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:02:12 power sudo[650772]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:02:12 power sudo[650772]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:02:12 power sudo[650772]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:02:12 power sudo[650772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:12 power sudo[650772]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:12 power sudo[650777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:02:12 power sudo[650777]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:02:12 power sudo[650777]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:02:12 power sudo[650777]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:02:12 power sudo[650777]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:02:12 power sudo[650777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:12 power sudo[650777]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:12 power sudo[650783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:02:12 power sudo[650783]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:02:12 power sudo[650783]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:02:12 power sudo[650783]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:02:12 power sudo[650783]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:02:12 power sudo[650783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:12 power sudo[650783]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:14 power sudo[650854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=invoices.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 11 05:02:14 power sudo[650854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:15 power sudo[650854]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:16 power sudo[650886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/invoices.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:02:16 power sudo[650886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:16 power sudo[650886]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:16 power sudo[650892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 11 05:02:16 power sudo[650892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:16 power sudo[650892]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:16 power sudo[650901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:02:16 power sudo[650901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:16 power sudo[650901]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:18 power sudo[650990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/invoices.holiyaytravel.com --output=json'
Sep 11 05:02:18 power sudo[650990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:18 power sudo[650990]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:22 power sudo[651240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep 11 05:02:22 power sudo[651240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:22 power sudo[651240]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:22 power sudo[651258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jpparkin --output=json'
Sep 11 05:02:22 power sudo[651258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:22 power sudo[651258]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:26 power sudo[651341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin /bin/sh -c 'cd /home/jpparkin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:02:26 power sudo[651341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:26 power sudo[651341]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:26 power sudo[651347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jpparkin --user-current --json'
Sep 11 05:02:26 power sudo[651347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:26 power sudo[651347]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:26 power sudo[651354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin LangPHP php_get_vhost_versions --output=json'
Sep 11 05:02:26 power sudo[651354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:26 power sudo[651354]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:26 power sudo[651362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:02:26 power sudo[651362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:26 power sudo[651362]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:26 power sudo[651382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DomainInfo single_domain_data domain=jpparkinzinegotino.mk return_https_redirect_status=1 --output=json'
Sep 11 05:02:26 power sudo[651382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:26 power sudo[651382]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:26 power sudo[651390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin Mime list_redirects --output=json'
Sep 11 05:02:26 power sudo[651390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:27 power sudo[651390]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:28 power sudo[651476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DirectoryPrivacy is_directory_protected dir=/home/jpparkin/public_html --output=json'
Sep 11 05:02:28 power sudo[651476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:28 power sudo[651476]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:32 power sudo[651689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep 11 05:02:32 power sudo[651689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:32 power sudo[651689]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:32 power sudo[651695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=karpospo --output=json'
Sep 11 05:02:32 power sudo[651695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:32 power sudo[651695]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:36 power sudo[651839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo /bin/sh -c 'cd /home/karpospo/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:02:36 power sudo[651839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:36 power sudo[651839]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:36 power sudo[651851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user karpospo --user-current --json'
Sep 11 05:02:36 power sudo[651851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:36 power sudo[651851]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:36 power sudo[651859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo LangPHP php_get_vhost_versions --output=json'
Sep 11 05:02:36 power sudo[651859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:36 power sudo[651859]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:36 power sudo[651864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:02:36 power sudo[651864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:36 power sudo[651864]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:37 power sudo[651883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DomainInfo single_domain_data domain=karpospoliklinika.com.mk return_https_redirect_status=1 --output=json'
Sep 11 05:02:37 power sudo[651883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:37 power sudo[651883]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:37 power sudo[651889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo Mime list_redirects --output=json'
Sep 11 05:02:37 power sudo[651889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:37 power sudo[651889]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:40 power sudo[652004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DirectoryPrivacy is_directory_protected dir=/home/karpospo/public_html --output=json'
Sep 11 05:02:40 power sudo[652004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:40 power sudo[652004]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:47 power sudo[652299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:02:47 power sudo[652299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:47 power sudo[652299]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:47 power sudo[652308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 11 05:02:47 power sudo[652308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:47 power sudo[652308]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:47 power sudo[652326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:02:47 power sudo[652326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:47 power sudo[652326]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:48 power sudo[652341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=kaysharov.com return_https_redirect_status=1 --output=json'
Sep 11 05:02:48 power sudo[652341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:48 power sudo[652341]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:50 power sudo[652414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com --output=json'
Sep 11 05:02:50 power sudo[652414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:50 power sudo[652414]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:59 power sudo[652720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:02:59 power sudo[652720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:59 power sudo[652720]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:59 power sudo[652730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 11 05:02:59 power sudo[652730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:59 power sudo[652730]: pam_unix(sudo:session): session closed for user root
Sep 11 05:02:59 power sudo[652735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:02:59 power sudo[652735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:02:59 power sudo[652735]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:02 power sudo[652836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com/test --output=json'
Sep 11 05:03:02 power sudo[652836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:02 power sudo[652836]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:06 power sudo[653055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep 11 05:03:06 power sudo[653055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:07 power sudo[653055]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:07 power sudo[653064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kolened1 --output=json'
Sep 11 05:03:07 power sudo[653064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:07 power sudo[653064]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:18 power sudo[653275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:03:18 power sudo[653275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:18 power sudo[653275]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:18 power sudo[653281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kolened1 --user-current --json'
Sep 11 05:03:18 power sudo[653281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:19 power sudo[653281]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:19 power sudo[653286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 LangPHP php_get_vhost_versions --output=json'
Sep 11 05:03:19 power sudo[653286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:19 power sudo[653286]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:19 power sudo[653291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:03:19 power sudo[653291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:19 power sudo[653291]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:19 power sudo[653309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DomainInfo single_domain_data domain=kolenedelkovski.edu.mk return_https_redirect_status=1 --output=json'
Sep 11 05:03:19 power sudo[653309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:19 power sudo[653309]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:19 power sudo[653315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 Mime list_redirects --output=json'
Sep 11 05:03:19 power sudo[653315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:19 power sudo[653315]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:26 power sudo[653423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DirectoryPrivacy is_directory_protected dir=/home/kolened1/public_html --output=json'
Sep 11 05:03:26 power sudo[653423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:26 power sudo[653423]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:27 power sudo[653482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:03:27 power sudo[653482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:27 power sudo[653482]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:27 power sudo[653487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:03:27 power sudo[653487]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:03:27 power sudo[653487]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:03:27 power sudo[653487]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:03:27 power sudo[653487]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:03:27 power sudo[653487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:27 power sudo[653487]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:27 power sudo[653492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:03:27 power sudo[653492]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:03:27 power sudo[653492]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:03:27 power sudo[653492]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:03:27 power sudo[653492]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:03:27 power sudo[653492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:27 power sudo[653492]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:29 power sudo[653607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:03:29 power sudo[653607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:29 power sudo[653607]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:29 power sudo[653612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:03:29 power sudo[653612]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:03:29 power sudo[653612]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:03:29 power sudo[653612]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:03:29 power sudo[653612]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:03:29 power sudo[653612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:29 power sudo[653612]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:29 power sudo[653617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:03:29 power sudo[653617]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:03:29 power sudo[653617]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:03:29 power sudo[653617]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:03:29 power sudo[653617]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:03:29 power sudo[653617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:29 power sudo[653617]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:30 power sudo[653660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep 11 05:03:30 power sudo[653660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:30 power sudo[653660]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:30 power sudo[653665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kouzonco --output=json'
Sep 11 05:03:30 power sudo[653665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:30 power sudo[653665]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:34 power sudo[653760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco /bin/sh -c 'cd /home/kouzonco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:03:34 power sudo[653760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:34 power sudo[653760]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:34 power sudo[653769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kouzonco --user-current --json'
Sep 11 05:03:34 power sudo[653769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:34 power sudo[653769]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:34 power sudo[653792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco LangPHP php_get_vhost_versions --output=json'
Sep 11 05:03:34 power sudo[653792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:34 power sudo[653792]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:34 power sudo[653800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:03:34 power sudo[653800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:34 power sudo[653800]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:34 power sudo[653816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DomainInfo single_domain_data domain=kouzon.com.hn return_https_redirect_status=1 --output=json'
Sep 11 05:03:34 power sudo[653816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:35 power sudo[653816]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:35 power sudo[653822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco Mime list_redirects --output=json'
Sep 11 05:03:35 power sudo[653822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:35 power sudo[653822]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:37 power sudo[653910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DirectoryPrivacy is_directory_protected dir=/home/kouzonco/public_html --output=json'
Sep 11 05:03:37 power sudo[653910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:37 power sudo[653910]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:41 power sudo[654122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep 11 05:03:41 power sudo[654122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:41 power sudo[654122]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:41 power sudo[654127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sprintst --output=json'
Sep 11 05:03:41 power sudo[654127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:41 power sudo[654127]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:45 power sudo[654235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst /bin/sh -c 'cd /home/sprintst/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:03:45 power sudo[654235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:46 power sudo[654235]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:46 power sudo[654242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sprintst --user-current --json'
Sep 11 05:03:46 power sudo[654242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:46 power sudo[654242]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:46 power sudo[654247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst LangPHP php_get_vhost_versions --output=json'
Sep 11 05:03:46 power sudo[654247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:46 power sudo[654247]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:46 power sudo[654253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:03:46 power sudo[654253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:46 power sudo[654253]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:46 power sudo[654276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DomainInfo single_domain_data domain=kritiki.mk return_https_redirect_status=1 --output=json'
Sep 11 05:03:46 power sudo[654276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:46 power sudo[654276]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:46 power sudo[654282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst Mime list_redirects --output=json'
Sep 11 05:03:46 power sudo[654282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:46 power sudo[654282]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:49 power sudo[654367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DirectoryPrivacy is_directory_protected dir=/home/sprintst/public_html --output=json'
Sep 11 05:03:49 power sudo[654367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:49 power sudo[654367]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:53 power sudo[654553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep 11 05:03:53 power sudo[654553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:53 power sudo[654553]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:53 power sudo[654559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kujnamon --output=json'
Sep 11 05:03:53 power sudo[654559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:53 power sudo[654559]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:58 power sudo[654639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon /bin/sh -c 'cd /home/kujnamon/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:03:58 power sudo[654639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:58 power sudo[654639]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:58 power sudo[654645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kujnamon --user-current --json'
Sep 11 05:03:58 power sudo[654645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:58 power sudo[654645]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:58 power sudo[654650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon LangPHP php_get_vhost_versions --output=json'
Sep 11 05:03:58 power sudo[654650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:59 power sudo[654650]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:59 power sudo[654658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:03:59 power sudo[654658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:59 power sudo[654658]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:59 power sudo[654674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DomainInfo single_domain_data domain=kujnamoni.mk return_https_redirect_status=1 --output=json'
Sep 11 05:03:59 power sudo[654674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:59 power sudo[654674]: pam_unix(sudo:session): session closed for user root
Sep 11 05:03:59 power sudo[654680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon Mime list_redirects --output=json'
Sep 11 05:03:59 power sudo[654680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:03:59 power sudo[654680]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:02 power sudo[654777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DirectoryPrivacy is_directory_protected dir=/home/kujnamon/public_html --output=json'
Sep 11 05:04:02 power sudo[654777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:02 power sudo[654777]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:09 power sudo[655064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/love.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:04:09 power sudo[655064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:09 power sudo[655064]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:09 power sudo[655071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 11 05:04:09 power sudo[655071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:10 power sudo[655071]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:10 power sudo[655079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:04:10 power sudo[655079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:10 power sudo[655079]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:10 power sudo[655094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=love.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 05:04:10 power sudo[655094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:10 power sudo[655094]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:13 power sudo[655170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/love.cetplatform.mk --output=json'
Sep 11 05:04:13 power sudo[655170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:13 power sudo[655170]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:17 power sudo[655369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep 11 05:04:17 power sudo[655369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:17 power sudo[655369]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:17 power sudo[655376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makdrone --output=json'
Sep 11 05:04:17 power sudo[655376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:17 power sudo[655376]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:21 power sudo[655465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:04:21 power sudo[655465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:21 power sudo[655465]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:21 power sudo[655471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makdrone --user-current --json'
Sep 11 05:04:21 power sudo[655471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:22 power sudo[655471]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:22 power sudo[655481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone LangPHP php_get_vhost_versions --output=json'
Sep 11 05:04:22 power sudo[655481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:22 power sudo[655481]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:22 power sudo[655486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:04:22 power sudo[655486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:22 power sudo[655486]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:22 power sudo[655501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DomainInfo single_domain_data domain=makdrone.mk return_https_redirect_status=1 --output=json'
Sep 11 05:04:22 power sudo[655501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:22 power sudo[655501]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:22 power sudo[655507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone Mime list_redirects --output=json'
Sep 11 05:04:22 power sudo[655507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:22 power sudo[655507]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:25 power sudo[655585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DirectoryPrivacy is_directory_protected dir=/home/makdrone/public_html --output=json'
Sep 11 05:04:25 power sudo[655585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:25 power sudo[655585]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:26 power sudo[655651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:04:26 power sudo[655651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:26 power sudo[655651]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:26 power sudo[655656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:04:26 power sudo[655656]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:04:26 power sudo[655656]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:04:26 power sudo[655656]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:04:26 power sudo[655656]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:04:26 power sudo[655656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:26 power sudo[655656]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:26 power sudo[655661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:04:26 power sudo[655661]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:04:26 power sudo[655661]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:04:26 power sudo[655661]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:04:26 power sudo[655661]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:04:26 power sudo[655661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:26 power sudo[655661]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:26 power sudo[655666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:04:26 power sudo[655666]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:04:26 power sudo[655666]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:04:26 power sudo[655666]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:04:26 power sudo[655666]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:04:26 power sudo[655666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:26 power sudo[655666]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:28 power sudo[655785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:04:28 power sudo[655785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:28 power sudo[655785]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:28 power sudo[655790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:04:28 power sudo[655790]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:04:28 power sudo[655790]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:04:28 power sudo[655790]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:04:28 power sudo[655790]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:04:28 power sudo[655790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:28 power sudo[655790]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:28 power sudo[655795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:04:28 power sudo[655795]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:04:28 power sudo[655795]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:04:28 power sudo[655795]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:04:28 power sudo[655795]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:04:28 power sudo[655795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:28 power sudo[655795]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:28 power sudo[655800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:04:28 power sudo[655800]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:04:28 power sudo[655800]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:04:28 power sudo[655800]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:04:28 power sudo[655800]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:04:28 power sudo[655800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:28 power sudo[655800]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:29 power sudo[655836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep 11 05:04:29 power sudo[655836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:29 power sudo[655836]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:29 power sudo[655844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makoasmk --output=json'
Sep 11 05:04:29 power sudo[655844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:29 power sudo[655844]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:34 power sudo[655938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk /bin/sh -c 'cd /home/makoasmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:04:34 power sudo[655938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:34 power sudo[655938]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:34 power sudo[655948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makoasmk --user-current --json'
Sep 11 05:04:34 power sudo[655948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:34 power sudo[655948]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:34 power sudo[655980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk LangPHP php_get_vhost_versions --output=json'
Sep 11 05:04:34 power sudo[655980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:34 power sudo[655980]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:34 power sudo[656001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:04:35 power sudo[656001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:35 power sudo[656001]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:35 power sudo[656023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DomainInfo single_domain_data domain=makoas.mk return_https_redirect_status=1 --output=json'
Sep 11 05:04:35 power sudo[656023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:35 power sudo[656023]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:35 power sudo[656030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk Mime list_redirects --output=json'
Sep 11 05:04:35 power sudo[656030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:35 power sudo[656030]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:39 power sudo[656174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DirectoryPrivacy is_directory_protected dir=/home/makoasmk/public_html --output=json'
Sep 11 05:04:39 power sudo[656174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:39 power sudo[656174]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:47 power sudo[656475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/mango.ambitioussolutions.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:04:47 power sudo[656475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:48 power sudo[656475]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:48 power sudo[656489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep 11 05:04:48 power sudo[656489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:48 power sudo[656489]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:48 power sudo[656499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:04:48 power sudo[656499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:48 power sudo[656499]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:49 power sudo[656519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=mango.ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep 11 05:04:49 power sudo[656519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:49 power sudo[656519]: pam_unix(sudo:session): session closed for user root
Sep 11 05:04:53 power sudo[656612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/mango.ambitioussolutions.mk --output=json'
Sep 11 05:04:53 power sudo[656612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:04:53 power sudo[656612]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:01 power systemd[657111]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:05:03 power sudo[657160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/mkvesti.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:05:03 power sudo[657160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:03 power sudo[657160]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:03 power sudo[657169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 11 05:05:03 power sudo[657169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:03 power sudo[657169]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:03 power sudo[657176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:05:03 power sudo[657176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:03 power sudo[657176]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:03 power sudo[657196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=mkvesti.mk return_https_redirect_status=1 --output=json'
Sep 11 05:05:03 power sudo[657196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:03 power sudo[657196]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:07 power sudo[657299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/mkvesti.mk --output=json'
Sep 11 05:05:07 power sudo[657299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:07 power sudo[657299]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:12 power sudo[657595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep 11 05:05:12 power sudo[657595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:12 power sudo[657595]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:12 power sudo[657601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=modernar --output=json'
Sep 11 05:05:12 power sudo[657601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:12 power sudo[657601]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:16 power sudo[657711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:05:16 power sudo[657711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:16 power sudo[657711]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:16 power sudo[657720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user modernar --user-current --json'
Sep 11 05:05:16 power sudo[657720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:17 power sudo[657720]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:17 power sudo[657726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar LangPHP php_get_vhost_versions --output=json'
Sep 11 05:05:17 power sudo[657726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:17 power sudo[657726]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:17 power sudo[657734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:05:17 power sudo[657734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:17 power sudo[657734]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:17 power sudo[657753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DomainInfo single_domain_data domain=modernart.mk return_https_redirect_status=1 --output=json'
Sep 11 05:05:17 power sudo[657753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:17 power sudo[657753]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:17 power sudo[657760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar Mime list_redirects --output=json'
Sep 11 05:05:18 power sudo[657760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:18 power sudo[657760]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:20 power sudo[657848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DirectoryPrivacy is_directory_protected dir=/home/modernar/public_html --output=json'
Sep 11 05:05:20 power sudo[657848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:20 power sudo[657848]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:21 power sudo[657924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:05:21 power sudo[657924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:21 power sudo[657924]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:21 power sudo[657930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:05:21 power sudo[657930]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:05:21 power sudo[657930]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:05:21 power sudo[657930]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:05:21 power sudo[657930]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:05:21 power sudo[657930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:21 power sudo[657930]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:21 power sudo[657935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:05:21 power sudo[657935]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:05:21 power sudo[657935]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:05:21 power sudo[657935]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:05:21 power sudo[657935]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:05:21 power sudo[657935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:21 power sudo[657935]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:21 power sudo[657940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:05:21 power sudo[657940]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:05:21 power sudo[657940]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:05:21 power sudo[657940]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:05:21 power sudo[657940]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:05:21 power sudo[657940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:21 power sudo[657940]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:23 power sudo[658046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:05:23 power sudo[658046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:23 power sudo[658046]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:23 power sudo[658051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:05:23 power sudo[658051]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:05:23 power sudo[658051]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:05:23 power sudo[658051]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:05:23 power sudo[658051]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:05:23 power sudo[658051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:23 power sudo[658051]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:23 power sudo[658056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:05:23 power sudo[658056]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:05:23 power sudo[658056]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:05:23 power sudo[658056]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:05:23 power sudo[658056]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:05:23 power sudo[658056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:24 power sudo[658056]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:24 power sudo[658061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:05:24 power sudo[658061]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:05:24 power sudo[658061]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:05:24 power sudo[658061]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:05:24 power sudo[658061]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:05:24 power sudo[658061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:24 power sudo[658061]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:28 power sudo[658166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:05:28 power sudo[658166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:28 power sudo[658166]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:28 power sudo[658175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep 11 05:05:28 power sudo[658175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:28 power sudo[658175]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:28 power sudo[658180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:05:28 power sudo[658180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:28 power sudo[658180]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:28 power sudo[658198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=momcurls.com return_https_redirect_status=1 --output=json'
Sep 11 05:05:28 power sudo[658198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:28 power sudo[658198]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:30 power sudo[658283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/public_html --output=json'
Sep 11 05:05:30 power sudo[658283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:31 power sudo[658283]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:35 power sudo[658510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep 11 05:05:35 power sudo[658510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:35 power sudo[658510]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:35 power sudo[658524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mpbmk --output=json'
Sep 11 05:05:35 power sudo[658524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:35 power sudo[658524]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:37 power sudo[658626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk /bin/sh -c 'cd /home/mpbmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:05:37 power sudo[658626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:37 power sudo[658626]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:37 power sudo[658634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mpbmk --user-current --json'
Sep 11 05:05:37 power sudo[658634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:37 power sudo[658634]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:37 power sudo[658639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk LangPHP php_get_vhost_versions --output=json'
Sep 11 05:05:37 power sudo[658639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:37 power sudo[658639]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:37 power sudo[658644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:05:37 power sudo[658644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:37 power sudo[658644]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:38 power sudo[658662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DomainInfo single_domain_data domain=mpb.mk return_https_redirect_status=1 --output=json'
Sep 11 05:05:38 power sudo[658662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:38 power sudo[658662]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:38 power sudo[658669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk Mime list_redirects --output=json'
Sep 11 05:05:38 power sudo[658669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:38 power sudo[658669]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:40 power sudo[658755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DirectoryPrivacy is_directory_protected dir=/home/mpbmk/public_html --output=json'
Sep 11 05:05:40 power sudo[658755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:40 power sudo[658755]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:42 power sudo[658973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep 11 05:05:43 power sudo[658973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:43 power sudo[658973]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:43 power sudo[658990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mspmk --output=json'
Sep 11 05:05:43 power sudo[658990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:43 power sudo[658990]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:49 power sudo[659098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk /bin/sh -c 'cd /home/mspmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:05:49 power sudo[659098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:49 power sudo[659098]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:49 power sudo[659107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mspmk --user-current --json'
Sep 11 05:05:49 power sudo[659107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:49 power sudo[659107]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:49 power sudo[659117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk LangPHP php_get_vhost_versions --output=json'
Sep 11 05:05:49 power sudo[659117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:49 power sudo[659117]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:49 power sudo[659127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:05:49 power sudo[659127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:49 power sudo[659127]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:50 power sudo[659146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DomainInfo single_domain_data domain=msp.mk return_https_redirect_status=1 --output=json'
Sep 11 05:05:50 power sudo[659146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:50 power sudo[659146]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:50 power sudo[659155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk Mime list_redirects --output=json'
Sep 11 05:05:50 power sudo[659155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:50 power sudo[659155]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:54 power sudo[659242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DirectoryPrivacy is_directory_protected dir=/home/mspmk/public_html --output=json'
Sep 11 05:05:54 power sudo[659242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:54 power sudo[659242]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:57 power sudo[659460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep 11 05:05:57 power sudo[659460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:58 power sudo[659460]: pam_unix(sudo:session): session closed for user root
Sep 11 05:05:58 power sudo[659466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mstmmk --output=json'
Sep 11 05:05:58 power sudo[659466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:05:58 power sudo[659466]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:01 power systemd[659542]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 05:06:02 power sudo[659601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk /bin/sh -c 'cd /home/mstmmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:06:02 power sudo[659601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:02 power sudo[659601]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:02 power sudo[659608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mstmmk --user-current --json'
Sep 11 05:06:02 power sudo[659608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:02 power sudo[659608]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:02 power sudo[659614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk LangPHP php_get_vhost_versions --output=json'
Sep 11 05:06:02 power sudo[659614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:02 power sudo[659614]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:02 power sudo[659619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:06:02 power sudo[659619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:02 power sudo[659619]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:03 power sudo[659635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DomainInfo single_domain_data domain=mstm.mk return_https_redirect_status=1 --output=json'
Sep 11 05:06:03 power sudo[659635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:03 power sudo[659635]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:03 power sudo[659641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk Mime list_redirects --output=json'
Sep 11 05:06:03 power sudo[659641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:03 power sudo[659641]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:06 power sudo[659722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DirectoryPrivacy is_directory_protected dir=/home/mstmmk/public_html --output=json'
Sep 11 05:06:06 power sudo[659722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:06 power sudo[659722]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:09 power sudo[659934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep 11 05:06:09 power sudo[659934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:09 power sudo[659934]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:09 power sudo[659940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=naksorgm --output=json'
Sep 11 05:06:09 power sudo[659940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:09 power sudo[659940]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:17 power sudo[660084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm /bin/sh -c 'cd /home/naksorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:06:17 power sudo[660084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:17 power sudo[660084]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:17 power sudo[660091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user naksorgm --user-current --json'
Sep 11 05:06:17 power sudo[660091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:18 power sudo[660091]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:18 power sudo[660096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm LangPHP php_get_vhost_versions --output=json'
Sep 11 05:06:18 power sudo[660096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:18 power sudo[660096]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:18 power sudo[660104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:06:18 power sudo[660104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:18 power sudo[660104]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:18 power sudo[660118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DomainInfo single_domain_data domain=naks.org.mk return_https_redirect_status=1 --output=json'
Sep 11 05:06:18 power sudo[660118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:18 power sudo[660118]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:18 power sudo[660124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm Mime list_redirects --output=json'
Sep 11 05:06:18 power sudo[660124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:18 power sudo[660124]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:24 power sudo[660220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DirectoryPrivacy is_directory_protected dir=/home/naksorgm/public_html --output=json'
Sep 11 05:06:24 power sudo[660220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:24 power sudo[660220]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:27 power sudo[660441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep 11 05:06:27 power sudo[660441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:28 power sudo[660441]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:28 power sudo[660446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nasaidni --output=json'
Sep 11 05:06:28 power sudo[660446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:28 power sudo[660446]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:31 power sudo[660546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html/test.nasaidnina.com.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:06:31 power sudo[660546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:31 power sudo[660546]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:31 power sudo[660552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep 11 05:06:31 power sudo[660552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:32 power sudo[660552]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:32 power sudo[660558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni LangPHP php_get_vhost_versions --output=json'
Sep 11 05:06:32 power sudo[660558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:32 power sudo[660558]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:32 power sudo[660567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:06:32 power sudo[660567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:32 power sudo[660567]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:32 power sudo[660581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=test.nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep 11 05:06:32 power sudo[660581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:32 power sudo[660581]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:32 power sudo[660588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni Mime list_redirects --output=json'
Sep 11 05:06:32 power sudo[660588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:32 power sudo[660588]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:35 power sudo[660693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html/test.nasaidnina.com.mk/wp --output=json'
Sep 11 05:06:35 power sudo[660693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:35 power sudo[660693]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:42 power sudo[661074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:06:42 power sudo[661074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:42 power sudo[661074]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:42 power sudo[661080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep 11 05:06:42 power sudo[661080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:42 power sudo[661080]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:43 power sudo[661088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:06:43 power sudo[661088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:43 power sudo[661088]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:43 power sudo[661110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep 11 05:06:43 power sudo[661110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:43 power sudo[661110]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:46 power sudo[661202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html --output=json'
Sep 11 05:06:46 power sudo[661202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:46 power sudo[661202]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:49 power sudo[661399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep 11 05:06:49 power sudo[661399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:49 power sudo[661399]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:49 power sudo[661408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ismassag --output=json'
Sep 11 05:06:49 power sudo[661408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:49 power sudo[661408]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:58 power sudo[661550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag /bin/sh -c 'cd /home/ismassag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:06:58 power sudo[661550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:58 power sudo[661550]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:58 power sudo[661556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ismassag --user-current --json'
Sep 11 05:06:58 power sudo[661556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:58 power sudo[661556]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:58 power sudo[661567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag LangPHP php_get_vhost_versions --output=json'
Sep 11 05:06:58 power sudo[661567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:58 power sudo[661567]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:58 power sudo[661572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:06:58 power sudo[661572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:58 power sudo[661572]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:59 power sudo[661590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DomainInfo single_domain_data domain=needmassagetherapy.co.uk return_https_redirect_status=1 --output=json'
Sep 11 05:06:59 power sudo[661590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:59 power sudo[661590]: pam_unix(sudo:session): session closed for user root
Sep 11 05:06:59 power sudo[661597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag Mime list_redirects --output=json'
Sep 11 05:06:59 power sudo[661597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:06:59 power sudo[661597]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:01 power systemd[661652]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 05:07:03 power sudo[661726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DirectoryPrivacy is_directory_protected dir=/home/ismassag/public_html --output=json'
Sep 11 05:07:03 power sudo[661726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:03 power sudo[661726]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:10 power sudo[662007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:07:10 power sudo[662007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:10 power sudo[662007]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:10 power sudo[662013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep 11 05:07:10 power sudo[662013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:10 power sudo[662013]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:10 power sudo[662019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:07:10 power sudo[662019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:10 power sudo[662019]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:11 power sudo[662033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=new.chemhem.com return_https_redirect_status=1 --output=json'
Sep 11 05:07:11 power sudo[662033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:11 power sudo[662033]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:13 power sudo[662126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/new.chemhem.com --output=json'
Sep 11 05:07:13 power sudo[662126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:13 power sudo[662126]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:14 power sudo[662191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:14 power sudo[662191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:14 power sudo[662191]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:14 power sudo[662196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 11 05:07:14 power sudo[662196]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 11 05:07:14 power sudo[662196]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 11 05:07:14 power sudo[662196]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 11 05:07:14 power sudo[662196]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:14 power sudo[662196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:14 power sudo[662196]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:14 power sudo[662201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 11 05:07:14 power sudo[662201]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 11 05:07:14 power sudo[662201]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 11 05:07:14 power sudo[662201]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 11 05:07:14 power sudo[662201]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:14 power sudo[662201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:14 power sudo[662201]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:14 power sudo[662206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep 11 05:07:14 power sudo[662206]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep 11 05:07:14 power sudo[662206]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep 11 05:07:14 power sudo[662206]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep 11 05:07:14 power sudo[662206]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:14 power sudo[662206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:14 power sudo[662206]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:16 power sudo[662309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:16 power sudo[662309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:16 power sudo[662309]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:16 power sudo[662314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 11 05:07:16 power sudo[662314]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 11 05:07:16 power sudo[662314]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 11 05:07:16 power sudo[662314]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 11 05:07:16 power sudo[662314]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:16 power sudo[662314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:16 power sudo[662314]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:16 power sudo[662319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 11 05:07:16 power sudo[662319]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 11 05:07:16 power sudo[662319]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 11 05:07:16 power sudo[662319]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 11 05:07:16 power sudo[662319]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:16 power sudo[662319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:17 power sudo[662319]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:17 power sudo[662324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep 11 05:07:17 power sudo[662324]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep 11 05:07:17 power sudo[662324]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep 11 05:07:17 power sudo[662324]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep 11 05:07:17 power sudo[662324]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:17 power sudo[662324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:17 power sudo[662324]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:17 power sudo[662369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep 11 05:07:17 power sudo[662369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:18 power sudo[662369]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:18 power sudo[662374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikolov1 --output=json'
Sep 11 05:07:18 power sudo[662374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:18 power sudo[662374]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:22 power sudo[662465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:07:22 power sudo[662465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:22 power sudo[662465]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:22 power sudo[662471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikolov1 --user-current --json'
Sep 11 05:07:22 power sudo[662471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:23 power sudo[662471]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:23 power sudo[662480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 LangPHP php_get_vhost_versions --output=json'
Sep 11 05:07:23 power sudo[662480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:23 power sudo[662480]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:23 power sudo[662485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:07:23 power sudo[662485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:23 power sudo[662485]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:23 power sudo[662507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DomainInfo single_domain_data domain=nikolovproduction.com return_https_redirect_status=1 --output=json'
Sep 11 05:07:23 power sudo[662507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:23 power sudo[662507]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:23 power sudo[662513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 Mime list_redirects --output=json'
Sep 11 05:07:23 power sudo[662513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:23 power sudo[662513]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:26 power sudo[662605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DirectoryPrivacy is_directory_protected dir=/home/nikolov1/public_html --output=json'
Sep 11 05:07:26 power sudo[662605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:26 power sudo[662605]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:27 power sudo[662661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:27 power sudo[662661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:27 power sudo[662661]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:27 power sudo[662666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:07:27 power sudo[662666]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:07:27 power sudo[662666]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:07:27 power sudo[662666]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:07:27 power sudo[662666]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:27 power sudo[662666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:27 power sudo[662666]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:27 power sudo[662671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:07:27 power sudo[662671]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:07:27 power sudo[662671]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:07:27 power sudo[662671]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:07:27 power sudo[662671]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:27 power sudo[662671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:27 power sudo[662671]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:27 power sudo[662681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:07:27 power sudo[662681]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:07:27 power sudo[662681]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:07:27 power sudo[662681]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:07:27 power sudo[662681]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:27 power sudo[662681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:27 power sudo[662681]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:29 power sudo[662794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:29 power sudo[662794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:29 power sudo[662794]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:29 power sudo[662803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:07:29 power sudo[662803]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:07:29 power sudo[662803]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:07:29 power sudo[662803]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:07:29 power sudo[662803]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:29 power sudo[662803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:29 power sudo[662803]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:29 power sudo[662808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:07:29 power sudo[662808]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:07:29 power sudo[662808]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:07:29 power sudo[662808]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:07:29 power sudo[662808]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:29 power sudo[662808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:29 power sudo[662808]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:29 power sudo[662813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:07:29 power sudo[662813]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:07:29 power sudo[662813]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:07:29 power sudo[662813]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:07:29 power sudo[662813]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:07:29 power sudo[662813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:29 power sudo[662813]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:30 power sudo[662859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep 11 05:07:30 power sudo[662859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:30 power sudo[662859]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:30 power sudo[662871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nolimits --output=json'
Sep 11 05:07:30 power sudo[662871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:30 power sudo[662871]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:34 power sudo[662980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits /bin/sh -c 'cd /home/nolimits/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:07:34 power sudo[662980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:34 power sudo[662980]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:34 power sudo[662986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nolimits --user-current --json'
Sep 11 05:07:34 power sudo[662986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:34 power sudo[662986]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:34 power sudo[662994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits LangPHP php_get_vhost_versions --output=json'
Sep 11 05:07:35 power sudo[662994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:35 power sudo[662994]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:35 power sudo[662999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:07:35 power sudo[662999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:35 power sudo[662999]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:35 power sudo[663017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DomainInfo single_domain_data domain=nolimits.mk return_https_redirect_status=1 --output=json'
Sep 11 05:07:35 power sudo[663017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:35 power sudo[663017]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:35 power sudo[663024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits Mime list_redirects --output=json'
Sep 11 05:07:35 power sudo[663024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:35 power sudo[663024]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:38 power sudo[663145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DirectoryPrivacy is_directory_protected dir=/home/nolimits/public_html/tru-find --output=json'
Sep 11 05:07:38 power sudo[663145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:38 power sudo[663145]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:41 power sudo[663357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep 11 05:07:41 power sudo[663357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:41 power sudo[663357]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:41 power sudo[663366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=onlinesh --output=json'
Sep 11 05:07:41 power sudo[663366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:41 power sudo[663366]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:44 power sudo[663434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh /bin/sh -c 'cd /home/onlinesh/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:07:44 power sudo[663434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:44 power sudo[663434]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:44 power sudo[663440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user onlinesh --user-current --json'
Sep 11 05:07:44 power sudo[663440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:44 power sudo[663440]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:44 power sudo[663448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh LangPHP php_get_vhost_versions --output=json'
Sep 11 05:07:44 power sudo[663448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:45 power sudo[663448]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:45 power sudo[663453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:07:45 power sudo[663453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:45 power sudo[663453]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:45 power sudo[663472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DomainInfo single_domain_data domain=onlineshop.com.mk return_https_redirect_status=1 --output=json'
Sep 11 05:07:45 power sudo[663472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:45 power sudo[663472]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:45 power sudo[663481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh Mime list_redirects --output=json'
Sep 11 05:07:45 power sudo[663481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:45 power sudo[663481]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:47 power sudo[663571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DirectoryPrivacy is_directory_protected dir=/home/onlinesh/public_html --output=json'
Sep 11 05:07:47 power sudo[663571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:47 power sudo[663571]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:51 power sudo[663794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep 11 05:07:51 power sudo[663794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:51 power sudo[663794]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:51 power sudo[663804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=palenzok --output=json'
Sep 11 05:07:51 power sudo[663804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:51 power sudo[663804]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:55 power sudo[663891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok /bin/sh -c 'cd /home/palenzok/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:07:55 power sudo[663891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:55 power sudo[663891]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:55 power sudo[663898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user palenzok --user-current --json'
Sep 11 05:07:55 power sudo[663898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:55 power sudo[663898]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:55 power sudo[663912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok LangPHP php_get_vhost_versions --output=json'
Sep 11 05:07:55 power sudo[663912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:55 power sudo[663912]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:55 power sudo[663917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:07:55 power sudo[663917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:55 power sudo[663917]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:56 power sudo[663952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DomainInfo single_domain_data domain=palenzokompani.mk return_https_redirect_status=1 --output=json'
Sep 11 05:07:56 power sudo[663952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:56 power sudo[663952]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:56 power sudo[663958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok Mime list_redirects --output=json'
Sep 11 05:07:56 power sudo[663958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:56 power sudo[663958]: pam_unix(sudo:session): session closed for user root
Sep 11 05:07:59 power sudo[664032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DirectoryPrivacy is_directory_protected dir=/home/palenzok/public_html --output=json'
Sep 11 05:07:59 power sudo[664032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:07:59 power sudo[664032]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:02 power sudo[664253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep 11 05:08:02 power sudo[664253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:03 power sudo[664253]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:03 power sudo[664259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pelagoni --output=json'
Sep 11 05:08:03 power sudo[664259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:03 power sudo[664259]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:07 power sudo[664344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni /bin/sh -c 'cd /home/pelagoni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:08:07 power sudo[664344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:07 power sudo[664344]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:07 power sudo[664350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pelagoni --user-current --json'
Sep 11 05:08:07 power sudo[664350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:07 power sudo[664350]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:07 power sudo[664362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni LangPHP php_get_vhost_versions --output=json'
Sep 11 05:08:07 power sudo[664362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:07 power sudo[664362]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:07 power sudo[664368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:08:07 power sudo[664368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:07 power sudo[664368]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:08 power sudo[664396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DomainInfo single_domain_data domain=pelagonijaregion.mk return_https_redirect_status=1 --output=json'
Sep 11 05:08:08 power sudo[664396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:08 power sudo[664396]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:08 power sudo[664403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni Mime list_redirects --output=json'
Sep 11 05:08:09 power sudo[664403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:09 power sudo[664403]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:12 power sudo[664527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DirectoryPrivacy is_directory_protected dir=/home/pelagoni/public_html/p --output=json'
Sep 11 05:08:12 power sudo[664527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:12 power sudo[664527]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:16 power sudo[664731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep 11 05:08:16 power sudo[664731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:16 power sudo[664731]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:16 power sudo[664739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=biplmk --output=json'
Sep 11 05:08:16 power sudo[664739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:16 power sudo[664739]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:19 power sudo[664812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk /bin/sh -c 'cd /home/biplmk/petstop.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:08:19 power sudo[664812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:19 power sudo[664812]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:19 power sudo[664818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user biplmk --user-current --json'
Sep 11 05:08:19 power sudo[664818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:19 power sudo[664818]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:19 power sudo[664824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk LangPHP php_get_vhost_versions --output=json'
Sep 11 05:08:19 power sudo[664824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:20 power sudo[664824]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:20 power sudo[664830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:08:20 power sudo[664830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:20 power sudo[664830]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:20 power sudo[664844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DomainInfo single_domain_data domain=petstop.mk return_https_redirect_status=1 --output=json'
Sep 11 05:08:20 power sudo[664844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:20 power sudo[664844]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:20 power sudo[664853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk Mime list_redirects --output=json'
Sep 11 05:08:20 power sudo[664853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:20 power sudo[664853]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:23 power sudo[664941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DirectoryPrivacy is_directory_protected dir=/home/biplmk/petstop.mk/wp --output=json'
Sep 11 05:08:23 power sudo[664941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:23 power sudo[664941]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:26 power sudo[665143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep 11 05:08:26 power sudo[665143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:26 power sudo[665143]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:26 power sudo[665151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=premiumi --output=json'
Sep 11 05:08:26 power sudo[665151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:26 power sudo[665151]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:30 power sudo[665237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:08:30 power sudo[665237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:30 power sudo[665237]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:30 power sudo[665246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user premiumi --user-current --json'
Sep 11 05:08:30 power sudo[665246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:30 power sudo[665246]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:30 power sudo[665251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi LangPHP php_get_vhost_versions --output=json'
Sep 11 05:08:30 power sudo[665251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:30 power sudo[665251]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:30 power sudo[665255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:08:30 power sudo[665255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:30 power sudo[665255]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:31 power sudo[665276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DomainInfo single_domain_data domain=premiuminsurance.mk return_https_redirect_status=1 --output=json'
Sep 11 05:08:31 power sudo[665276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:31 power sudo[665276]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:31 power sudo[665282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi Mime list_redirects --output=json'
Sep 11 05:08:31 power sudo[665282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:31 power sudo[665282]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:33 power sudo[665359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DirectoryPrivacy is_directory_protected dir=/home/premiumi/public_html --output=json'
Sep 11 05:08:33 power sudo[665359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:33 power sudo[665359]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:34 power sudo[665397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:08:34 power sudo[665397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:34 power sudo[665397]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:34 power sudo[665402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:08:34 power sudo[665402]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:08:34 power sudo[665402]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:08:34 power sudo[665402]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:08:34 power sudo[665402]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:08:34 power sudo[665402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:34 power sudo[665402]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:34 power sudo[665407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:08:34 power sudo[665407]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:08:34 power sudo[665407]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:08:34 power sudo[665407]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:08:34 power sudo[665407]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:08:34 power sudo[665407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:34 power sudo[665407]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:34 power sudo[665412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:08:34 power sudo[665412]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:08:34 power sudo[665412]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:08:34 power sudo[665412]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:08:34 power sudo[665412]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:08:34 power sudo[665412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:34 power sudo[665412]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:36 power sudo[665538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:08:36 power sudo[665538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:36 power sudo[665538]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:36 power sudo[665543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:08:36 power sudo[665543]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:08:36 power sudo[665543]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:08:36 power sudo[665543]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:08:36 power sudo[665543]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:08:36 power sudo[665543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:36 power sudo[665543]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:36 power sudo[665548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:08:36 power sudo[665548]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:08:36 power sudo[665548]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:08:36 power sudo[665548]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:08:36 power sudo[665548]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:08:36 power sudo[665548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:36 power sudo[665548]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:36 power sudo[665553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:08:36 power sudo[665553]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:08:36 power sudo[665553]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:08:36 power sudo[665553]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:08:36 power sudo[665553]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:08:36 power sudo[665553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:36 power sudo[665553]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:42 power sudo[665712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:08:42 power sudo[665712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:42 power sudo[665712]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:42 power sudo[665721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep 11 05:08:42 power sudo[665721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:42 power sudo[665721]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:42 power sudo[665726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:08:42 power sudo[665726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:42 power sudo[665726]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:43 power sudo[665740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep 11 05:08:43 power sudo[665740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:43 power sudo[665740]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:45 power sudo[665850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/public_html --output=json'
Sep 11 05:08:45 power sudo[665850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:46 power sudo[665850]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:50 power sudo[666079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep 11 05:08:50 power sudo[666079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:50 power sudo[666079]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:50 power sudo[666088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=radekrat --output=json'
Sep 11 05:08:50 power sudo[666088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:50 power sudo[666088]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:56 power sudo[666191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:08:56 power sudo[666191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:56 power sudo[666191]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:56 power sudo[666198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user radekrat --user-current --json'
Sep 11 05:08:56 power sudo[666198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:57 power sudo[666198]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:57 power sudo[666205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat LangPHP php_get_vhost_versions --output=json'
Sep 11 05:08:57 power sudo[666205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:57 power sudo[666205]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:57 power sudo[666210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:08:57 power sudo[666210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:57 power sudo[666210]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:57 power sudo[666227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DomainInfo single_domain_data domain=radekratovce.edu.mk return_https_redirect_status=1 --output=json'
Sep 11 05:08:57 power sudo[666227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:57 power sudo[666227]: pam_unix(sudo:session): session closed for user root
Sep 11 05:08:57 power sudo[666233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat Mime list_redirects --output=json'
Sep 11 05:08:57 power sudo[666233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:08:57 power sudo[666233]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:01 power sudo[666339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DirectoryPrivacy is_directory_protected dir=/home/radekrat/public_html/wp --output=json'
Sep 11 05:09:01 power sudo[666339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:01 power sudo[666339]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:01 power sudo[666396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:09:01 power sudo[666396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:01 power sudo[666396]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:01 power sudo[666401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:09:01 power sudo[666401]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:09:01 power sudo[666401]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:09:01 power sudo[666401]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:09:01 power sudo[666401]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:09:01 power sudo[666401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:01 power sudo[666401]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:01 power sudo[666406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 11 05:09:01 power sudo[666406]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 11 05:09:01 power sudo[666406]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 11 05:09:01 power sudo[666406]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 11 05:09:01 power sudo[666406]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:09:01 power sudo[666406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:01 power sudo[666406]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:01 power sudo[666412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 11 05:09:01 power sudo[666412]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 11 05:09:01 power sudo[666412]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 11 05:09:01 power sudo[666412]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 11 05:09:01 power sudo[666412]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:09:01 power sudo[666412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:02 power sudo[666412]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:07 power sudo[666615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep 11 05:09:07 power sudo[666615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:07 power sudo[666615]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:07 power sudo[666622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rasmorgm --output=json'
Sep 11 05:09:07 power sudo[666622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:07 power sudo[666622]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:14 power sudo[666769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm /bin/sh -c 'cd /home/rasmorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:09:14 power sudo[666769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:14 power sudo[666769]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:14 power sudo[666775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rasmorgm --user-current --json'
Sep 11 05:09:14 power sudo[666775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:14 power sudo[666775]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:14 power sudo[666783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm LangPHP php_get_vhost_versions --output=json'
Sep 11 05:09:14 power sudo[666783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:15 power sudo[666783]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:15 power sudo[666788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:09:15 power sudo[666788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:15 power sudo[666788]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:15 power sudo[666804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DomainInfo single_domain_data domain=rasm.org.mk return_https_redirect_status=1 --output=json'
Sep 11 05:09:15 power sudo[666804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:15 power sudo[666804]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:15 power sudo[666810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm Mime list_redirects --output=json'
Sep 11 05:09:15 power sudo[666810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:15 power sudo[666810]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:18 power sudo[666900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DirectoryPrivacy is_directory_protected dir=/home/rasmorgm/public_html --output=json'
Sep 11 05:09:18 power sudo[666900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:18 power sudo[666900]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:22 power sudo[667109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep 11 05:09:22 power sudo[667109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:22 power sudo[667109]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:22 power sudo[667117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=recorgmk --output=json'
Sep 11 05:09:22 power sudo[667117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:22 power sudo[667117]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:28 power sudo[667256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk /bin/sh -c 'cd /home/recorgmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:09:28 power sudo[667256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:28 power sudo[667256]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:28 power sudo[667262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user recorgmk --user-current --json'
Sep 11 05:09:28 power sudo[667262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:29 power sudo[667262]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:29 power sudo[667267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk LangPHP php_get_vhost_versions --output=json'
Sep 11 05:09:29 power sudo[667267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:29 power sudo[667267]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:29 power sudo[667285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:09:29 power sudo[667285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:29 power sudo[667285]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:29 power sudo[667303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DomainInfo single_domain_data domain=rec.org.mk return_https_redirect_status=1 --output=json'
Sep 11 05:09:29 power sudo[667303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:29 power sudo[667303]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:29 power sudo[667309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk Mime list_redirects --output=json'
Sep 11 05:09:29 power sudo[667309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:29 power sudo[667309]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:33 power sudo[667417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DirectoryPrivacy is_directory_protected dir=/home/recorgmk/public_html --output=json'
Sep 11 05:09:33 power sudo[667417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:33 power sudo[667417]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:37 power sudo[667612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep 11 05:09:37 power sudo[667612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:37 power sudo[667612]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:37 power sudo[667620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stravelm --output=json'
Sep 11 05:09:37 power sudo[667620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:37 power sudo[667620]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:41 power sudo[667759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm /bin/sh -c 'cd /home/stravelm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:09:41 power sudo[667759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:41 power sudo[667759]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:41 power sudo[667765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stravelm --user-current --json'
Sep 11 05:09:41 power sudo[667765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:41 power sudo[667765]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:41 power sudo[667777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm LangPHP php_get_vhost_versions --output=json'
Sep 11 05:09:41 power sudo[667777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:41 power sudo[667777]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:41 power sudo[667782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:09:41 power sudo[667782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:41 power sudo[667782]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:42 power sudo[667804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DomainInfo single_domain_data domain=s-travel.mk return_https_redirect_status=1 --output=json'
Sep 11 05:09:42 power sudo[667804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:42 power sudo[667804]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:42 power sudo[667811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm Mime list_redirects --output=json'
Sep 11 05:09:42 power sudo[667811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:42 power sudo[667811]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:45 power sudo[667896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DirectoryPrivacy is_directory_protected dir=/home/stravelm/public_html --output=json'
Sep 11 05:09:45 power sudo[667896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:45 power sudo[667896]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:49 power sudo[668074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep 11 05:09:49 power sudo[668074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:49 power sudo[668074]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:49 power sudo[668081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=simbiome --output=json'
Sep 11 05:09:49 power sudo[668081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:49 power sudo[668081]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:54 power sudo[668209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome /bin/sh -c 'cd /home/simbiome/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:09:54 power sudo[668209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:54 power sudo[668209]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:54 power sudo[668217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user simbiome --user-current --json'
Sep 11 05:09:54 power sudo[668217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:55 power sudo[668217]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:55 power sudo[668223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome LangPHP php_get_vhost_versions --output=json'
Sep 11 05:09:55 power sudo[668223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:55 power sudo[668223]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:55 power sudo[668228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:09:55 power sudo[668228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:55 power sudo[668228]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:56 power sudo[668245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DomainInfo single_domain_data domain=simbiomedic.mk return_https_redirect_status=1 --output=json'
Sep 11 05:09:56 power sudo[668245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:56 power sudo[668245]: pam_unix(sudo:session): session closed for user root
Sep 11 05:09:56 power sudo[668251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome Mime list_redirects --output=json'
Sep 11 05:09:56 power sudo[668251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:09:56 power sudo[668251]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:00 power sudo[668495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DirectoryPrivacy is_directory_protected dir=/home/simbiome/public_html --output=json'
Sep 11 05:10:00 power sudo[668495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:00 power sudo[668495]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:01 power systemd[668664]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:10:09 power sudo[668935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/sk.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:10:09 power sudo[668935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:09 power sudo[668935]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:09 power sudo[668952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 11 05:10:09 power sudo[668952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:09 power sudo[668952]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:09 power sudo[668966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:10:09 power sudo[668966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:09 power sudo[668966]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:10 power sudo[668985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=sk.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 05:10:10 power sudo[668985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:10 power sudo[668985]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:13 power sudo[669099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/sk.cetplatform.mk --output=json'
Sep 11 05:10:13 power sudo[669099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:13 power sudo[669099]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:17 power sudo[669316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 11 05:10:17 power sudo[669316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:17 power sudo[669316]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:17 power sudo[669326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=solemor1 --output=json'
Sep 11 05:10:17 power sudo[669326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:17 power sudo[669326]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:20 power sudo[669403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:10:20 power sudo[669403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:20 power sudo[669403]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:20 power sudo[669409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep 11 05:10:20 power sudo[669409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:20 power sudo[669409]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:20 power sudo[669418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 LangPHP php_get_vhost_versions --output=json'
Sep 11 05:10:20 power sudo[669418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:20 power sudo[669418]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:20 power sudo[669427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:10:20 power sudo[669427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:20 power sudo[669427]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:21 power sudo[669444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=solem.org.mk return_https_redirect_status=1 --output=json'
Sep 11 05:10:21 power sudo[669444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:21 power sudo[669444]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:21 power sudo[669450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 Mime list_redirects --output=json'
Sep 11 05:10:21 power sudo[669450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:21 power sudo[669450]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:23 power sudo[669524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html --output=json'
Sep 11 05:10:23 power sudo[669524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:23 power sudo[669524]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:24 power sudo[669590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:10:24 power sudo[669590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:24 power sudo[669590]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:24 power sudo[669595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:10:24 power sudo[669595]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:10:24 power sudo[669595]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:10:24 power sudo[669595]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:10:24 power sudo[669595]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:10:24 power sudo[669595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:24 power sudo[669595]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:24 power sudo[669600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:10:24 power sudo[669600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:10:24 power sudo[669600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:10:24 power sudo[669600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:10:24 power sudo[669600]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:10:24 power sudo[669600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:24 power sudo[669600]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:24 power sudo[669606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:10:24 power sudo[669606]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:10:24 power sudo[669606]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:10:24 power sudo[669606]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:10:24 power sudo[669606]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:10:24 power sudo[669606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:24 power sudo[669606]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:26 power sudo[669720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:10:26 power sudo[669720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:26 power sudo[669720]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:26 power sudo[669725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:10:26 power sudo[669725]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:10:26 power sudo[669725]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:10:26 power sudo[669725]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:10:26 power sudo[669725]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:10:26 power sudo[669725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:26 power sudo[669725]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:26 power sudo[669730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:10:26 power sudo[669730]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:10:26 power sudo[669730]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:10:26 power sudo[669730]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:10:26 power sudo[669730]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:10:26 power sudo[669730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:26 power sudo[669730]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:26 power sudo[669735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:10:26 power sudo[669735]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:10:26 power sudo[669735]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:10:26 power sudo[669735]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:10:26 power sudo[669735]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:10:26 power sudo[669735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:26 power sudo[669735]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:32 power sudo[669873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html/vedi && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:10:32 power sudo[669873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:32 power sudo[669873]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:32 power sudo[669880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep 11 05:10:32 power sudo[669880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:32 power sudo[669880]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:32 power sudo[669890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:10:32 power sudo[669890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:32 power sudo[669890]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:33 power sudo[669904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=vedi.mk return_https_redirect_status=1 --output=json'
Sep 11 05:10:33 power sudo[669904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:33 power sudo[669904]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:35 power sudo[669996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html/vedi --output=json'
Sep 11 05:10:35 power sudo[669996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:35 power sudo[669996]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:38 power sudo[670196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep 11 05:10:38 power sudo[670196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:39 power sudo[670196]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:39 power sudo[670217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sssoluti --output=json'
Sep 11 05:10:39 power sudo[670217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:39 power sudo[670217]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:44 power sudo[670346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti /bin/sh -c 'cd /home/sssoluti/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:10:44 power sudo[670346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:44 power sudo[670346]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:44 power sudo[670352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sssoluti --user-current --json'
Sep 11 05:10:44 power sudo[670352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:44 power sudo[670352]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:44 power sudo[670364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti LangPHP php_get_vhost_versions --output=json'
Sep 11 05:10:44 power sudo[670364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:44 power sudo[670364]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:44 power sudo[670370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:10:44 power sudo[670370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:44 power sudo[670370]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:45 power sudo[670385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DomainInfo single_domain_data domain=sssolutions.mk return_https_redirect_status=1 --output=json'
Sep 11 05:10:45 power sudo[670385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:45 power sudo[670385]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:45 power sudo[670392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti Mime list_redirects --output=json'
Sep 11 05:10:45 power sudo[670392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:45 power sudo[670392]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:48 power sudo[670473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DirectoryPrivacy is_directory_protected dir=/home/sssoluti/public_html --output=json'
Sep 11 05:10:48 power sudo[670473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:48 power sudo[670473]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:51 power sudo[670673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep 11 05:10:51 power sudo[670673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:52 power sudo[670673]: pam_unix(sudo:session): session closed for user root
Sep 11 05:10:52 power sudo[670678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=supremel --output=json'
Sep 11 05:10:52 power sudo[670678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:10:52 power sudo[670678]: pam_unix(sudo:session): session closed for user root
Sep 11 05:11:20 power sudo[671048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:11:20 power sudo[671048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:11:20 power sudo[671048]: pam_unix(sudo:session): session closed for user root
Sep 11 05:11:20 power sudo[671054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep 11 05:11:20 power sudo[671054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:11:21 power sudo[671054]: pam_unix(sudo:session): session closed for user root
Sep 11 05:11:21 power sudo[671069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel LangPHP php_get_vhost_versions --output=json'
Sep 11 05:11:21 power sudo[671069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:11:21 power sudo[671069]: pam_unix(sudo:session): session closed for user root
Sep 11 05:11:21 power sudo[671079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:11:21 power sudo[671079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:11:21 power sudo[671079]: pam_unix(sudo:session): session closed for user root
Sep 11 05:11:21 power sudo[671097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=supremeleader.eu return_https_redirect_status=1 --output=json'
Sep 11 05:11:21 power sudo[671097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:11:22 power sudo[671097]: pam_unix(sudo:session): session closed for user root
Sep 11 05:11:22 power sudo[671103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel Mime list_redirects --output=json'
Sep 11 05:11:22 power sudo[671103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:11:22 power sudo[671103]: pam_unix(sudo:session): session closed for user root
Sep 11 05:11:26 power sudo[671230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/public_html --output=json'
Sep 11 05:11:26 power sudo[671230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:11:26 power sudo[671230]: pam_unix(sudo:session): session closed for user root
Sep 11 05:11:55 power sudo[671808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep 11 05:11:55 power sudo[671808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:11:55 power sudo[671808]: pam_unix(sudo:session): session closed for user root
Sep 11 05:11:55 power sudo[671819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=tehnodro --output=json'
Sep 11 05:11:55 power sudo[671819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:11:55 power sudo[671819]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:00 power sudo[671938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:12:00 power sudo[671938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:00 power sudo[671938]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:00 power sudo[671948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user tehnodro --user-current --json'
Sep 11 05:12:00 power sudo[671948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:00 power sudo[671948]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:00 power sudo[671953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro LangPHP php_get_vhost_versions --output=json'
Sep 11 05:12:00 power sudo[671953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:01 power sudo[671953]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:01 power sudo[671963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:12:01 power sudo[671963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:01 power sudo[671963]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:01 power systemd[671998]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 05:12:01 power sudo[672008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DomainInfo single_domain_data domain=tehnodrom.mk return_https_redirect_status=1 --output=json'
Sep 11 05:12:01 power sudo[672008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:01 power sudo[672008]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:01 power sudo[672022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro Mime list_redirects --output=json'
Sep 11 05:12:02 power sudo[672022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:02 power sudo[672022]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:05 power sudo[672114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DirectoryPrivacy is_directory_protected dir=/home/tehnodro/public_html --output=json'
Sep 11 05:12:05 power sudo[672114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:05 power sudo[672114]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:06 power sudo[672188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:12:06 power sudo[672188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:06 power sudo[672188]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:06 power sudo[672193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:12:06 power sudo[672193]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:12:06 power sudo[672193]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:12:06 power sudo[672193]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:12:06 power sudo[672193]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:12:06 power sudo[672193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:06 power sudo[672193]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:06 power sudo[672199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:12:06 power sudo[672199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:12:06 power sudo[672199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:12:06 power sudo[672199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:12:06 power sudo[672199]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:12:06 power sudo[672199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:06 power sudo[672199]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:06 power sudo[672206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:12:06 power sudo[672206]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:12:06 power sudo[672206]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:12:06 power sudo[672206]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:12:06 power sudo[672206]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:12:06 power sudo[672206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:06 power sudo[672206]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:08 power sudo[672352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:12:08 power sudo[672352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:08 power sudo[672352]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:08 power sudo[672357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:12:08 power sudo[672357]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:12:08 power sudo[672357]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:12:08 power sudo[672357]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:12:08 power sudo[672357]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:12:08 power sudo[672357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:08 power sudo[672357]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:08 power sudo[672362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:12:08 power sudo[672362]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:12:08 power sudo[672362]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:12:08 power sudo[672362]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:12:08 power sudo[672362]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:12:08 power sudo[672362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:08 power sudo[672362]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:08 power sudo[672372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:12:08 power sudo[672372]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:12:08 power sudo[672372]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:12:08 power sudo[672372]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:12:08 power sudo[672372]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:12:08 power sudo[672372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:08 power sudo[672372]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:14 power sudo[672522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/theuniversalgroup.net && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:12:15 power sudo[672522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:15 power sudo[672522]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:15 power sudo[672528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep 11 05:12:15 power sudo[672528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:15 power sudo[672528]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:15 power sudo[672537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:12:15 power sudo[672537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:15 power sudo[672537]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:15 power sudo[672550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=theuniversalgroup.net return_https_redirect_status=1 --output=json'
Sep 11 05:12:15 power sudo[672550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:15 power sudo[672550]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:18 power sudo[672639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/theuniversalgroup.net --output=json'
Sep 11 05:12:18 power sudo[672639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:18 power sudo[672639]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:21 power sudo[672836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep 11 05:12:21 power sudo[672836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:22 power sudo[672836]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:22 power sudo[672844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=viewinn --output=json'
Sep 11 05:12:22 power sudo[672844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:22 power sudo[672844]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:24 power sudo[672902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn /bin/sh -c 'cd /home/viewinn/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:12:24 power sudo[672902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:24 power sudo[672902]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:24 power sudo[672908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user viewinn --user-current --json'
Sep 11 05:12:24 power sudo[672908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:24 power sudo[672908]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:24 power sudo[672916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn LangPHP php_get_vhost_versions --output=json'
Sep 11 05:12:24 power sudo[672916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:24 power sudo[672916]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:24 power sudo[672921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:12:25 power sudo[672921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:25 power sudo[672921]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:25 power sudo[672938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DomainInfo single_domain_data domain=viewinn.mk return_https_redirect_status=1 --output=json'
Sep 11 05:12:25 power sudo[672938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:25 power sudo[672938]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:25 power sudo[672944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn Mime list_redirects --output=json'
Sep 11 05:12:25 power sudo[672944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:25 power sudo[672944]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:27 power sudo[673024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DirectoryPrivacy is_directory_protected dir=/home/viewinn/public_html --output=json'
Sep 11 05:12:27 power sudo[673024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:27 power sudo[673024]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:30 power sudo[673223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep 11 05:12:30 power sudo[673223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:30 power sudo[673223]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:30 power sudo[673228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wikicamp --output=json'
Sep 11 05:12:30 power sudo[673228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:30 power sudo[673228]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:38 power sudo[673342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp /bin/sh -c 'cd /home/wikicamp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:12:38 power sudo[673342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:38 power sudo[673342]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:38 power sudo[673348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wikicamp --user-current --json'
Sep 11 05:12:38 power sudo[673348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:39 power sudo[673348]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:39 power sudo[673355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp LangPHP php_get_vhost_versions --output=json'
Sep 11 05:12:39 power sudo[673355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:39 power sudo[673355]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:39 power sudo[673363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:12:39 power sudo[673363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:39 power sudo[673363]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:39 power sudo[673378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DomainInfo single_domain_data domain=wikicamp.mk return_https_redirect_status=1 --output=json'
Sep 11 05:12:39 power sudo[673378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:39 power sudo[673378]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:39 power sudo[673397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp Mime list_redirects --output=json'
Sep 11 05:12:39 power sudo[673397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:39 power sudo[673397]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:43 power sudo[673528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DirectoryPrivacy is_directory_protected dir=/home/wikicamp/public_html --output=json'
Sep 11 05:12:43 power sudo[673528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:43 power sudo[673528]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:46 power sudo[673751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep 11 05:12:46 power sudo[673751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:46 power sudo[673751]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:46 power sudo[673756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workandt --output=json'
Sep 11 05:12:46 power sudo[673756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:46 power sudo[673756]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:52 power sudo[673855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt /bin/sh -c 'cd /home/workandt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:12:52 power sudo[673855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:52 power sudo[673855]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:52 power sudo[673863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workandt --user-current --json'
Sep 11 05:12:52 power sudo[673863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:52 power sudo[673863]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:52 power sudo[673870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt LangPHP php_get_vhost_versions --output=json'
Sep 11 05:12:52 power sudo[673870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:52 power sudo[673870]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:52 power sudo[673875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:12:52 power sudo[673875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:52 power sudo[673875]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:53 power sudo[673895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DomainInfo single_domain_data domain=workandtravel.mk return_https_redirect_status=1 --output=json'
Sep 11 05:12:53 power sudo[673895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:53 power sudo[673895]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:53 power sudo[673901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt Mime list_redirects --output=json'
Sep 11 05:12:53 power sudo[673901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:53 power sudo[673901]: pam_unix(sudo:session): session closed for user root
Sep 11 05:12:56 power sudo[674015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DirectoryPrivacy is_directory_protected dir=/home/workandt/public_html --output=json'
Sep 11 05:12:56 power sudo[674015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:12:56 power sudo[674015]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:04 power sudo[674338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/yoe.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:13:04 power sudo[674338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:04 power sudo[674338]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:04 power sudo[674344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 11 05:13:04 power sudo[674344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:04 power sudo[674344]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:04 power sudo[674351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:13:05 power sudo[674351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:05 power sudo[674351]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:05 power sudo[674368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=yoe.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 11 05:13:05 power sudo[674368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:05 power sudo[674368]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:08 power sudo[674463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/yoe.cetplatform.mk --output=json'
Sep 11 05:13:08 power sudo[674463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:08 power sudo[674463]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:12 power sudo[674691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep 11 05:13:12 power sudo[674691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:12 power sudo[674691]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:12 power sudo[674701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=youthgua --output=json'
Sep 11 05:13:12 power sudo[674701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:12 power sudo[674701]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:16 power sudo[674775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua /bin/sh -c 'cd /home/youthgua/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:13:16 power sudo[674775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:16 power sudo[674775]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:16 power sudo[674781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user youthgua --user-current --json'
Sep 11 05:13:16 power sudo[674781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:17 power sudo[674781]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:17 power sudo[674789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua LangPHP php_get_vhost_versions --output=json'
Sep 11 05:13:17 power sudo[674789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:17 power sudo[674789]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:17 power sudo[674794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:13:17 power sudo[674794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:17 power sudo[674794]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:17 power sudo[674811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DomainInfo single_domain_data domain=youthguarantee-wb.eu return_https_redirect_status=1 --output=json'
Sep 11 05:13:17 power sudo[674811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:17 power sudo[674811]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:17 power sudo[674818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua Mime list_redirects --output=json'
Sep 11 05:13:17 power sudo[674818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:18 power sudo[674818]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:20 power sudo[674910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DirectoryPrivacy is_directory_protected dir=/home/youthgua/public_html --output=json'
Sep 11 05:13:20 power sudo[674910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:21 power sudo[674910]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:24 power sudo[675112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep 11 05:13:24 power sudo[675112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:24 power sudo[675112]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:24 power sudo[675119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=zampmk --output=json'
Sep 11 05:13:24 power sudo[675119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:24 power sudo[675119]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:28 power sudo[675203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk /bin/sh -c 'cd /home/zampmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:13:28 power sudo[675203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:28 power sudo[675203]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:28 power sudo[675209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user zampmk --user-current --json'
Sep 11 05:13:28 power sudo[675209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:28 power sudo[675209]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:28 power sudo[675215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk LangPHP php_get_vhost_versions --output=json'
Sep 11 05:13:28 power sudo[675215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:29 power sudo[675215]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:29 power sudo[675222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:13:29 power sudo[675222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:29 power sudo[675222]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:29 power sudo[675245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DomainInfo single_domain_data domain=zamp.mk return_https_redirect_status=1 --output=json'
Sep 11 05:13:29 power sudo[675245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:29 power sudo[675245]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:29 power sudo[675251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk Mime list_redirects --output=json'
Sep 11 05:13:29 power sudo[675251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:29 power sudo[675251]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:32 power sudo[675339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DirectoryPrivacy is_directory_protected dir=/home/zampmk/public_html --output=json'
Sep 11 05:13:32 power sudo[675339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:32 power sudo[675339]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:36 power sudo[675532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep 11 05:13:36 power sudo[675532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:36 power sudo[675532]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:36 power sudo[675542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ivanjord --output=json'
Sep 11 05:13:36 power sudo[675542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:36 power sudo[675542]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:45 power sudo[675785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord /bin/sh -c 'cd /home/ivanjord/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:13:45 power sudo[675785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:45 power sudo[675785]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:45 power sudo[675791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ivanjord --user-current --json'
Sep 11 05:13:45 power sudo[675791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:46 power sudo[675791]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:46 power sudo[675796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord LangPHP php_get_vhost_versions --output=json'
Sep 11 05:13:46 power sudo[675796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:46 power sudo[675796]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:46 power sudo[675805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:13:46 power sudo[675805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:46 power sudo[675805]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:46 power sudo[675822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DomainInfo single_domain_data domain=novaidninazastip.mk return_https_redirect_status=1 --output=json'
Sep 11 05:13:46 power sudo[675822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:46 power sudo[675822]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:46 power sudo[675829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord Mime list_redirects --output=json'
Sep 11 05:13:47 power sudo[675829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:47 power sudo[675829]: pam_unix(sudo:session): session closed for user root
Sep 11 05:13:52 power sudo[675963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DirectoryPrivacy is_directory_protected dir=/home/ivanjord/public_html --output=json'
Sep 11 05:13:52 power sudo[675963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:13:52 power sudo[675963]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:01 power systemd[677247]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:15:04 power sudo[677401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:15:04 power sudo[677401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:04 power sudo[677401]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:04 power sudo[677411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep 11 05:15:04 power sudo[677411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:04 power sudo[677411]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:04 power sudo[677423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:15:04 power sudo[677423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:04 power sudo[677423]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:05 power sudo[677442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=izzo.mk return_https_redirect_status=1 --output=json'
Sep 11 05:15:05 power sudo[677442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:05 power sudo[677442]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:07 power sudo[677621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/public_html/wp --output=json'
Sep 11 05:15:07 power sudo[677621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:07 power sudo[677621]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:11 power sudo[677919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep 11 05:15:11 power sudo[677919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:11 power sudo[677919]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:11 power sudo[677925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=janiboja --output=json'
Sep 11 05:15:11 power sudo[677925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:11 power sudo[677925]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:14 power sudo[678089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:15:14 power sudo[678089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:14 power sudo[678089]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:14 power sudo[678098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user janiboja --user-current --json'
Sep 11 05:15:14 power sudo[678098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:15 power sudo[678098]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:15 power sudo[678106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja LangPHP php_get_vhost_versions --output=json'
Sep 11 05:15:15 power sudo[678106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:15 power sudo[678106]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:15 power sudo[678115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:15:15 power sudo[678115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:15 power sudo[678115]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:15 power sudo[678129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DomainInfo single_domain_data domain=janibojadzi.com return_https_redirect_status=1 --output=json'
Sep 11 05:15:15 power sudo[678129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:15 power sudo[678129]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:15 power sudo[678135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja Mime list_redirects --output=json'
Sep 11 05:15:15 power sudo[678135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:15 power sudo[678135]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:17 power sudo[678211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DirectoryPrivacy is_directory_protected dir=/home/janiboja/public_html --output=json'
Sep 11 05:15:17 power sudo[678211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:17 power sudo[678211]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:18 power sudo[678275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:18 power sudo[678275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:18 power sudo[678275]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:18 power sudo[678280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:15:18 power sudo[678280]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:15:18 power sudo[678280]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:15:18 power sudo[678280]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:15:18 power sudo[678280]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:18 power sudo[678280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:18 power sudo[678280]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:18 power sudo[678285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:15:18 power sudo[678285]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:15:18 power sudo[678285]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:15:18 power sudo[678285]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:15:18 power sudo[678285]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:18 power sudo[678285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:18 power sudo[678285]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:18 power sudo[678291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:15:18 power sudo[678291]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:15:18 power sudo[678291]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:15:18 power sudo[678291]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:15:18 power sudo[678291]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:18 power sudo[678291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:18 power sudo[678291]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:20 power sudo[678411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:20 power sudo[678411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:20 power sudo[678411]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:20 power sudo[678416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:15:20 power sudo[678416]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:15:20 power sudo[678416]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:15:20 power sudo[678416]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:15:20 power sudo[678416]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:20 power sudo[678416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:20 power sudo[678416]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:20 power sudo[678421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:15:20 power sudo[678421]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:15:20 power sudo[678421]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:15:20 power sudo[678421]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:15:20 power sudo[678421]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:20 power sudo[678421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:20 power sudo[678421]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:20 power sudo[678426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:15:20 power sudo[678426]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:15:20 power sudo[678426]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:15:20 power sudo[678426]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:15:20 power sudo[678426]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:20 power sudo[678426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:20 power sudo[678426]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:21 power sudo[678479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep 11 05:15:21 power sudo[678479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:21 power sudo[678479]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:21 power sudo[678484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jaramk --output=json'
Sep 11 05:15:21 power sudo[678484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:21 power sudo[678484]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:26 power sudo[678592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:15:26 power sudo[678592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:26 power sudo[678592]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:26 power sudo[678598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jaramk --user-current --json'
Sep 11 05:15:26 power sudo[678598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:27 power sudo[678598]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:27 power sudo[678604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk LangPHP php_get_vhost_versions --output=json'
Sep 11 05:15:27 power sudo[678604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:27 power sudo[678604]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:27 power sudo[678612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:15:27 power sudo[678612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:27 power sudo[678612]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:27 power sudo[678630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DomainInfo single_domain_data domain=jara.mk return_https_redirect_status=1 --output=json'
Sep 11 05:15:27 power sudo[678630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:27 power sudo[678630]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:27 power sudo[678637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk Mime list_redirects --output=json'
Sep 11 05:15:27 power sudo[678637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:27 power sudo[678637]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:30 power sudo[678721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DirectoryPrivacy is_directory_protected dir=/home/jaramk/public_html --output=json'
Sep 11 05:15:30 power sudo[678721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:30 power sudo[678721]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:31 power sudo[678796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:31 power sudo[678796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:31 power sudo[678796]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:31 power sudo[678801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep 11 05:15:31 power sudo[678801]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep 11 05:15:31 power sudo[678801]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep 11 05:15:31 power sudo[678801]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep 11 05:15:31 power sudo[678801]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:31 power sudo[678801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:31 power sudo[678801]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:31 power sudo[678806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 05:15:31 power sudo[678806]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 05:15:31 power sudo[678806]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 05:15:31 power sudo[678806]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 05:15:31 power sudo[678806]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:31 power sudo[678806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:31 power sudo[678806]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:31 power sudo[678811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 05:15:31 power sudo[678811]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 05:15:31 power sudo[678811]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 05:15:31 power sudo[678811]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 05:15:31 power sudo[678811]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:31 power sudo[678811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:31 power sudo[678811]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:33 power sudo[678922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:33 power sudo[678922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:33 power sudo[678922]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:33 power sudo[678927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep 11 05:15:33 power sudo[678927]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep 11 05:15:33 power sudo[678927]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep 11 05:15:33 power sudo[678927]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep 11 05:15:33 power sudo[678927]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:33 power sudo[678927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:33 power sudo[678927]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:33 power sudo[678932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 05:15:33 power sudo[678932]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 05:15:33 power sudo[678932]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 05:15:33 power sudo[678932]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 05:15:33 power sudo[678932]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:33 power sudo[678932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:33 power sudo[678932]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:33 power sudo[678937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 11 05:15:33 power sudo[678937]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 11 05:15:33 power sudo[678937]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 11 05:15:33 power sudo[678937]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 11 05:15:33 power sudo[678937]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:15:33 power sudo[678937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:33 power sudo[678937]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:34 power sudo[678975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep 11 05:15:34 power sudo[678975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:34 power sudo[678975]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:34 power sudo[678988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=innofabl --output=json'
Sep 11 05:15:34 power sudo[678988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:34 power sudo[678988]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:48 power sudo[679276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/kupireciklirano.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:15:48 power sudo[679276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:48 power sudo[679276]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:48 power sudo[679282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep 11 05:15:48 power sudo[679282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:49 power sudo[679282]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:49 power sudo[679287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl LangPHP php_get_vhost_versions --output=json'
Sep 11 05:15:49 power sudo[679287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:49 power sudo[679287]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:49 power sudo[679295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:15:49 power sudo[679295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:49 power sudo[679295]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:51 power sudo[679337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=kupireciklirano.mk return_https_redirect_status=1 --output=json'
Sep 11 05:15:51 power sudo[679337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:51 power sudo[679337]: pam_unix(sudo:session): session closed for user root
Sep 11 05:15:51 power sudo[679346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl Mime list_redirects --output=json'
Sep 11 05:15:51 power sudo[679346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:15:51 power sudo[679346]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:00 power sudo[679535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/kupireciklirano.mk --output=json'
Sep 11 05:16:00 power sudo[679535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:00 power sudo[679535]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:04 power sudo[679759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep 11 05:16:04 power sudo[679759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:04 power sudo[679759]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:04 power sudo[679770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mapaspla --output=json'
Sep 11 05:16:04 power sudo[679770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:04 power sudo[679770]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:07 power sudo[679844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:16:07 power sudo[679844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:07 power sudo[679844]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:07 power sudo[679850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep 11 05:16:07 power sudo[679850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:08 power sudo[679850]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:08 power sudo[679856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla LangPHP php_get_vhost_versions --output=json'
Sep 11 05:16:08 power sudo[679856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:08 power sudo[679856]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:08 power sudo[679864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:16:08 power sudo[679864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:08 power sudo[679864]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:09 power sudo[679880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DomainInfo single_domain_data domain=mapasplastik.com return_https_redirect_status=1 --output=json'
Sep 11 05:16:09 power sudo[679880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:09 power sudo[679880]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:09 power sudo[679887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla Mime list_redirects --output=json'
Sep 11 05:16:09 power sudo[679887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:09 power sudo[679887]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:11 power sudo[679990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html/eng --output=json'
Sep 11 05:16:11 power sudo[679990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:11 power sudo[679990]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:28 power sudo[680486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:16:28 power sudo[680486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:28 power sudo[680486]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:28 power sudo[680492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep 11 05:16:28 power sudo[680492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:28 power sudo[680492]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:28 power sudo[680502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:16:28 power sudo[680502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:28 power sudo[680502]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:32 power sudo[680627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html --output=json'
Sep 11 05:16:32 power sudo[680627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:32 power sudo[680627]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:37 power sudo[680834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep 11 05:16:37 power sudo[680834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:38 power sudo[680834]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:38 power sudo[680840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mediatag --output=json'
Sep 11 05:16:38 power sudo[680840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:38 power sudo[680840]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:43 power sudo[680983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag /bin/sh -c 'cd /home/mediatag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:16:43 power sudo[680983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:43 power sudo[680983]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:43 power sudo[681000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mediatag --user-current --json'
Sep 11 05:16:43 power sudo[681000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:43 power sudo[681000]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:43 power sudo[681032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag LangPHP php_get_vhost_versions --output=json'
Sep 11 05:16:43 power sudo[681032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:43 power sudo[681032]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:43 power sudo[681054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:16:43 power sudo[681054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:43 power sudo[681054]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:44 power sudo[681084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DomainInfo single_domain_data domain=mediatag.mk return_https_redirect_status=1 --output=json'
Sep 11 05:16:44 power sudo[681084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:44 power sudo[681084]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:44 power sudo[681094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag Mime list_redirects --output=json'
Sep 11 05:16:44 power sudo[681094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:44 power sudo[681094]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:48 power sudo[681212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DirectoryPrivacy is_directory_protected dir=/home/mediatag/public_html --output=json'
Sep 11 05:16:48 power sudo[681212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:48 power sudo[681212]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:59 power sudo[681504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/mulprotex.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:16:59 power sudo[681504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:59 power sudo[681504]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:59 power sudo[681514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep 11 05:16:59 power sudo[681514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:59 power sudo[681514]: pam_unix(sudo:session): session closed for user root
Sep 11 05:16:59 power sudo[681519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:16:59 power sudo[681519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:16:59 power sudo[681519]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:00 power sudo[681538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=mulprotex.com return_https_redirect_status=1 --output=json'
Sep 11 05:17:00 power sudo[681538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:00 power sudo[681538]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:04 power sudo[681649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/mulprotex.com --output=json'
Sep 11 05:17:04 power sudo[681649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:04 power sudo[681649]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:08 power sudo[681856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep 11 05:17:08 power sudo[681856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:08 power sudo[681856]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:08 power sudo[681862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nefrolog --output=json'
Sep 11 05:17:08 power sudo[681862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:08 power sudo[681862]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:12 power sudo[681984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog /bin/sh -c 'cd /home/nefrolog/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:17:12 power sudo[681984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:12 power sudo[681984]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:12 power sudo[681990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nefrolog --user-current --json'
Sep 11 05:17:12 power sudo[681990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:12 power sudo[681990]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:12 power sudo[682002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog LangPHP php_get_vhost_versions --output=json'
Sep 11 05:17:12 power sudo[682002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:12 power sudo[682002]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:12 power sudo[682009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:17:12 power sudo[682009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:12 power sudo[682009]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:13 power sudo[682036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DomainInfo single_domain_data domain=nefrologija.mk return_https_redirect_status=1 --output=json'
Sep 11 05:17:13 power sudo[682036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:13 power sudo[682036]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:13 power sudo[682047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog Mime list_redirects --output=json'
Sep 11 05:17:13 power sudo[682047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:13 power sudo[682047]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:15 power sudo[682164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DirectoryPrivacy is_directory_protected dir=/home/nefrolog/public_html --output=json'
Sep 11 05:17:15 power sudo[682164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:15 power sudo[682164]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:19 power sudo[682360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep 11 05:17:19 power sudo[682360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:19 power sudo[682360]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:19 power sudo[682369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikimare --output=json'
Sep 11 05:17:19 power sudo[682369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:19 power sudo[682369]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:26 power sudo[682493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:17:26 power sudo[682493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:26 power sudo[682493]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:26 power sudo[682502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep 11 05:17:26 power sudo[682502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:26 power sudo[682502]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:26 power sudo[682509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare LangPHP php_get_vhost_versions --output=json'
Sep 11 05:17:26 power sudo[682509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:26 power sudo[682509]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:26 power sudo[682514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:17:26 power sudo[682514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:26 power sudo[682514]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:27 power sudo[682532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DomainInfo single_domain_data domain=niki-mare.com return_https_redirect_status=1 --output=json'
Sep 11 05:17:27 power sudo[682532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:27 power sudo[682532]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:27 power sudo[682538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare Mime list_redirects --output=json'
Sep 11 05:17:27 power sudo[682538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:27 power sudo[682538]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:31 power sudo[682666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html/wp --output=json'
Sep 11 05:17:31 power sudo[682666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:31 power sudo[682666]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:41 power sudo[683010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:17:41 power sudo[683010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:41 power sudo[683010]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:41 power sudo[683017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep 11 05:17:41 power sudo[683017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:41 power sudo[683017]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:41 power sudo[683027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:17:41 power sudo[683027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:41 power sudo[683027]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:45 power sudo[683203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html --output=json'
Sep 11 05:17:45 power sudo[683203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:45 power sudo[683203]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:49 power sudo[683410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep 11 05:17:49 power sudo[683410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:49 power sudo[683410]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:49 power sudo[683418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nucktra1 --output=json'
Sep 11 05:17:49 power sudo[683418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:49 power sudo[683418]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:54 power sudo[683495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:17:54 power sudo[683495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:54 power sudo[683495]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:54 power sudo[683505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep 11 05:17:54 power sudo[683505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:54 power sudo[683505]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:54 power sudo[683517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 LangPHP php_get_vhost_versions --output=json'
Sep 11 05:17:54 power sudo[683517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:54 power sudo[683517]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:54 power sudo[683523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php56 --output=json'
Sep 11 05:17:54 power sudo[683523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:55 power sudo[683523]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:55 power sudo[683536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:17:55 power sudo[683536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:55 power sudo[683536]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:55 power sudo[683555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep 11 05:17:55 power sudo[683555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:55 power sudo[683555]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:55 power sudo[683563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 Mime list_redirects --output=json'
Sep 11 05:17:55 power sudo[683563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:55 power sudo[683563]: pam_unix(sudo:session): session closed for user root
Sep 11 05:17:59 power sudo[683671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/public_html --output=json'
Sep 11 05:17:59 power sudo[683671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:17:59 power sudo[683671]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:05 power sudo[683902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep 11 05:18:05 power sudo[683902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:05 power sudo[683902]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:05 power sudo[683910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pravekom --output=json'
Sep 11 05:18:05 power sudo[683910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:05 power sudo[683910]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:16 power sudo[684110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom /bin/sh -c 'cd /home/pravekom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:18:16 power sudo[684110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:16 power sudo[684110]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:16 power sudo[684116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pravekom --user-current --json'
Sep 11 05:18:16 power sudo[684116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:17 power sudo[684116]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:17 power sudo[684122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom LangPHP php_get_vhost_versions --output=json'
Sep 11 05:18:17 power sudo[684122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:17 power sudo[684122]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:17 power sudo[684129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:18:17 power sudo[684129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:17 power sudo[684129]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:17 power sudo[684147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DomainInfo single_domain_data domain=praveko.mk return_https_redirect_status=1 --output=json'
Sep 11 05:18:17 power sudo[684147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:17 power sudo[684147]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:17 power sudo[684154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom Mime list_redirects --output=json'
Sep 11 05:18:17 power sudo[684154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:17 power sudo[684154]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:23 power sudo[684267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DirectoryPrivacy is_directory_protected dir=/home/pravekom/public_html --output=json'
Sep 11 05:18:23 power sudo[684267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:23 power sudo[684267]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:26 power sudo[684466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep 11 05:18:26 power sudo[684466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:27 power sudo[684466]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:27 power sudo[684471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=proverim --output=json'
Sep 11 05:18:27 power sudo[684471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:27 power sudo[684471]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:33 power sudo[684621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:18:33 power sudo[684621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:33 power sudo[684621]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:33 power sudo[684627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user proverim --user-current --json'
Sep 11 05:18:33 power sudo[684627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:33 power sudo[684627]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:33 power sudo[684637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim LangPHP php_get_vhost_versions --output=json'
Sep 11 05:18:33 power sudo[684637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:33 power sudo[684637]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:33 power sudo[684644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:18:33 power sudo[684644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:33 power sudo[684644]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:34 power sudo[684659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DomainInfo single_domain_data domain=proveri.mk return_https_redirect_status=1 --output=json'
Sep 11 05:18:34 power sudo[684659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:34 power sudo[684659]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:34 power sudo[684667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim Mime list_redirects --output=json'
Sep 11 05:18:34 power sudo[684667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:34 power sudo[684667]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:36 power sudo[684779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DirectoryPrivacy is_directory_protected dir=/home/proverim/public_html --output=json'
Sep 11 05:18:36 power sudo[684779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:36 power sudo[684779]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:37 power sudo[684843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:37 power sudo[684843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:37 power sudo[684843]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:37 power sudo[684848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:18:37 power sudo[684848]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:18:37 power sudo[684848]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:18:37 power sudo[684848]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:18:37 power sudo[684848]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:37 power sudo[684848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:37 power sudo[684848]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:37 power sudo[684853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:18:37 power sudo[684853]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:18:37 power sudo[684853]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:18:37 power sudo[684853]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:18:37 power sudo[684853]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:37 power sudo[684853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:37 power sudo[684853]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:37 power sudo[684858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:18:37 power sudo[684858]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:18:37 power sudo[684858]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:18:37 power sudo[684858]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:18:37 power sudo[684858]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:37 power sudo[684858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:38 power sudo[684858]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:39 power sudo[684977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:39 power sudo[684977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:39 power sudo[684977]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:39 power sudo[684982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:18:39 power sudo[684982]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:18:39 power sudo[684982]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:18:39 power sudo[684982]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:18:39 power sudo[684982]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:39 power sudo[684982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:39 power sudo[684982]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:39 power sudo[684988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:18:39 power sudo[684988]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:18:39 power sudo[684988]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:18:39 power sudo[684988]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:18:39 power sudo[684988]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:39 power sudo[684988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:39 power sudo[684988]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:39 power sudo[684993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:18:39 power sudo[684993]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:18:39 power sudo[684993]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:18:39 power sudo[684993]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:18:39 power sudo[684993]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:39 power sudo[684993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:40 power sudo[684993]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:40 power sudo[685038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep 11 05:18:40 power sudo[685038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:40 power sudo[685038]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:40 power sudo[685046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rastiraz --output=json'
Sep 11 05:18:40 power sudo[685046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:41 power sudo[685046]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:43 power sudo[685133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:18:44 power sudo[685133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:44 power sudo[685133]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:44 power sudo[685139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rastiraz --user-current --json'
Sep 11 05:18:44 power sudo[685139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:44 power sudo[685139]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:44 power sudo[685144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz LangPHP php_get_vhost_versions --output=json'
Sep 11 05:18:44 power sudo[685144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:44 power sudo[685144]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:44 power sudo[685152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:18:44 power sudo[685152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:44 power sudo[685152]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:44 power sudo[685169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DomainInfo single_domain_data domain=rastirazvoj.mk return_https_redirect_status=1 --output=json'
Sep 11 05:18:44 power sudo[685169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:44 power sudo[685169]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:44 power sudo[685177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz Mime list_redirects --output=json'
Sep 11 05:18:44 power sudo[685177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:44 power sudo[685177]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:46 power sudo[685289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DirectoryPrivacy is_directory_protected dir=/home/rastiraz/public_html --output=json'
Sep 11 05:18:46 power sudo[685289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:46 power sudo[685289]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:47 power sudo[685349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:47 power sudo[685349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:47 power sudo[685349]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:47 power sudo[685354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:18:47 power sudo[685354]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:18:47 power sudo[685354]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:18:47 power sudo[685354]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:18:47 power sudo[685354]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:47 power sudo[685354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:47 power sudo[685354]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:47 power sudo[685359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:18:47 power sudo[685359]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:18:47 power sudo[685359]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:18:47 power sudo[685359]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:18:47 power sudo[685359]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:47 power sudo[685359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:47 power sudo[685359]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:47 power sudo[685364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:18:47 power sudo[685364]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:18:47 power sudo[685364]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:18:47 power sudo[685364]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:18:47 power sudo[685364]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:47 power sudo[685364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:47 power sudo[685364]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:49 power sudo[685470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:49 power sudo[685470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:49 power sudo[685470]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:49 power sudo[685475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:18:49 power sudo[685475]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:18:49 power sudo[685475]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:18:49 power sudo[685475]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:18:49 power sudo[685475]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:49 power sudo[685475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:49 power sudo[685475]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:49 power sudo[685480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:18:49 power sudo[685480]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:18:49 power sudo[685480]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:18:49 power sudo[685480]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:18:49 power sudo[685480]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:49 power sudo[685480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:49 power sudo[685480]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:49 power sudo[685485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:18:49 power sudo[685485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:18:49 power sudo[685485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:18:49 power sudo[685485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:18:49 power sudo[685485]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:18:49 power sudo[685485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:49 power sudo[685485]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:50 power sudo[685526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep 11 05:18:50 power sudo[685526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:50 power sudo[685526]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:50 power sudo[685531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=conserva --output=json'
Sep 11 05:18:50 power sudo[685531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:50 power sudo[685531]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:54 power sudo[685612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva /bin/sh -c 'cd /home/conserva/RebornMacedonia.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:18:54 power sudo[685612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:54 power sudo[685612]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:54 power sudo[685618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user conserva --user-current --json'
Sep 11 05:18:54 power sudo[685618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:54 power sudo[685618]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:54 power sudo[685633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva LangPHP php_get_vhost_versions --output=json'
Sep 11 05:18:54 power sudo[685633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:54 power sudo[685633]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:54 power sudo[685642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:18:54 power sudo[685642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:54 power sudo[685642]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:55 power sudo[685660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DomainInfo single_domain_data domain=rebornmacedonia.com return_https_redirect_status=1 --output=json'
Sep 11 05:18:55 power sudo[685660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:55 power sudo[685660]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:55 power sudo[685669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva Mime list_redirects --output=json'
Sep 11 05:18:55 power sudo[685669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:55 power sudo[685669]: pam_unix(sudo:session): session closed for user root
Sep 11 05:18:58 power sudo[685768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DirectoryPrivacy is_directory_protected dir=/home/conserva/RebornMacedonia.com --output=json'
Sep 11 05:18:58 power sudo[685768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:18:58 power sudo[685768]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:01 power sudo[685999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep 11 05:19:01 power sudo[685999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:01 power sudo[685999]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:01 power sudo[686006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=maleshne --output=json'
Sep 11 05:19:01 power sudo[686006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:01 power sudo[686006]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:05 power sudo[686133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:19:05 power sudo[686133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:05 power sudo[686133]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:05 power sudo[686140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user maleshne --user-current --json'
Sep 11 05:19:05 power sudo[686140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:06 power sudo[686140]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:06 power sudo[686152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne LangPHP php_get_vhost_versions --output=json'
Sep 11 05:19:06 power sudo[686152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:06 power sudo[686152]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:06 power sudo[686160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:19:06 power sudo[686160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:06 power sudo[686160]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:06 power sudo[686176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DomainInfo single_domain_data domain=restoranmrs.mk return_https_redirect_status=1 --output=json'
Sep 11 05:19:06 power sudo[686176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:06 power sudo[686176]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:06 power sudo[686183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne Mime list_redirects --output=json'
Sep 11 05:19:06 power sudo[686183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:06 power sudo[686183]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:08 power sudo[686277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DirectoryPrivacy is_directory_protected dir=/home/maleshne/public_html --output=json'
Sep 11 05:19:08 power sudo[686277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:09 power sudo[686277]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:09 power sudo[686354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:09 power sudo[686354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:09 power sudo[686354]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:09 power sudo[686359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:19:09 power sudo[686359]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:19:09 power sudo[686359]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:19:09 power sudo[686359]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:19:09 power sudo[686359]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:09 power sudo[686359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:09 power sudo[686359]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:09 power sudo[686364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:19:09 power sudo[686364]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:19:09 power sudo[686364]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:19:09 power sudo[686364]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:19:09 power sudo[686364]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:09 power sudo[686364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:10 power sudo[686364]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:12 power sudo[686523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:12 power sudo[686523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:12 power sudo[686523]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:12 power sudo[686529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:19:12 power sudo[686529]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:19:12 power sudo[686529]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:19:12 power sudo[686529]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:19:12 power sudo[686529]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:12 power sudo[686529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:12 power sudo[686529]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:12 power sudo[686534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:19:12 power sudo[686534]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:19:12 power sudo[686534]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:19:12 power sudo[686534]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:19:12 power sudo[686534]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:12 power sudo[686534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:12 power sudo[686534]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:13 power sudo[686578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep 11 05:19:13 power sudo[686578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:13 power sudo[686578]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:13 power sudo[686587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=samasped --output=json'
Sep 11 05:19:13 power sudo[686587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:13 power sudo[686587]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:20 power sudo[686762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped /bin/sh -c 'cd /home/samasped/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:19:20 power sudo[686762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:20 power sudo[686762]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:20 power sudo[686768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user samasped --user-current --json'
Sep 11 05:19:20 power sudo[686768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:21 power sudo[686768]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:21 power sudo[686779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped LangPHP php_get_vhost_versions --output=json'
Sep 11 05:19:21 power sudo[686779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:21 power sudo[686779]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:21 power sudo[686784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:19:21 power sudo[686784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:21 power sudo[686784]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:21 power sudo[686800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DomainInfo single_domain_data domain=samasped.mk return_https_redirect_status=1 --output=json'
Sep 11 05:19:21 power sudo[686800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:21 power sudo[686800]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:21 power sudo[686808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped Mime list_redirects --output=json'
Sep 11 05:19:21 power sudo[686808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:21 power sudo[686808]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:26 power sudo[686925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DirectoryPrivacy is_directory_protected dir=/home/samasped/public_html --output=json'
Sep 11 05:19:26 power sudo[686925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:26 power sudo[686925]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:29 power sudo[687142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep 11 05:19:29 power sudo[687142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:29 power sudo[687142]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:29 power sudo[687153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=seloviro --output=json'
Sep 11 05:19:29 power sudo[687153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:30 power sudo[687153]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:36 power sudo[687307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:19:36 power sudo[687307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:36 power sudo[687307]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:36 power sudo[687317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user seloviro --user-current --json'
Sep 11 05:19:36 power sudo[687317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:36 power sudo[687317]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:36 power sudo[687328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro LangPHP php_get_vhost_versions --output=json'
Sep 11 05:19:36 power sudo[687328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:36 power sudo[687328]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:36 power sudo[687334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:19:36 power sudo[687334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:36 power sudo[687334]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:37 power sudo[687353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DomainInfo single_domain_data domain=selovirovo.mk return_https_redirect_status=1 --output=json'
Sep 11 05:19:37 power sudo[687353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:37 power sudo[687353]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:37 power sudo[687362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro Mime list_redirects --output=json'
Sep 11 05:19:37 power sudo[687362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:37 power sudo[687362]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:40 power sudo[687482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DirectoryPrivacy is_directory_protected dir=/home/seloviro/public_html --output=json'
Sep 11 05:19:40 power sudo[687482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:40 power sudo[687482]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:41 power sudo[687545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:41 power sudo[687545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:41 power sudo[687545]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:41 power sudo[687551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:19:41 power sudo[687551]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:19:41 power sudo[687551]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:19:41 power sudo[687551]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:19:41 power sudo[687551]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:41 power sudo[687551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:41 power sudo[687551]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:41 power sudo[687557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:19:41 power sudo[687557]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:19:41 power sudo[687557]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:19:41 power sudo[687557]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:19:41 power sudo[687557]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:41 power sudo[687557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:41 power sudo[687557]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:41 power sudo[687563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:19:41 power sudo[687563]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:19:41 power sudo[687563]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:19:41 power sudo[687563]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:19:41 power sudo[687563]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:41 power sudo[687563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:41 power sudo[687563]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:43 power sudo[687688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:43 power sudo[687688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:43 power sudo[687688]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:43 power sudo[687693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:19:43 power sudo[687693]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:19:43 power sudo[687693]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:19:43 power sudo[687693]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:19:43 power sudo[687693]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:43 power sudo[687693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:43 power sudo[687693]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:43 power sudo[687699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:19:43 power sudo[687699]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:19:43 power sudo[687699]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:19:43 power sudo[687699]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:19:43 power sudo[687699]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:43 power sudo[687699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:43 power sudo[687699]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:43 power sudo[687706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:19:43 power sudo[687706]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:19:43 power sudo[687706]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:19:43 power sudo[687706]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:19:43 power sudo[687706]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:19:43 power sudo[687706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:44 power sudo[687706]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:44 power sudo[687742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep 11 05:19:44 power sudo[687742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:44 power sudo[687742]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:44 power sudo[687748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=skyapart --output=json'
Sep 11 05:19:44 power sudo[687748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:44 power sudo[687748]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:47 power sudo[687865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart /bin/sh -c 'cd /home/skyapart/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:19:47 power sudo[687865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:47 power sudo[687865]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:47 power sudo[687873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user skyapart --user-current --json'
Sep 11 05:19:47 power sudo[687873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:47 power sudo[687873]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:47 power sudo[687879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart LangPHP php_get_vhost_versions --output=json'
Sep 11 05:19:47 power sudo[687879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:47 power sudo[687879]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:47 power sudo[687886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:19:47 power sudo[687886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:47 power sudo[687886]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:48 power sudo[687907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DomainInfo single_domain_data domain=skyapartments.mk return_https_redirect_status=1 --output=json'
Sep 11 05:19:48 power sudo[687907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:48 power sudo[687907]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:48 power sudo[687914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart Mime list_redirects --output=json'
Sep 11 05:19:48 power sudo[687914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:48 power sudo[687914]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:50 power sudo[687980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DirectoryPrivacy is_directory_protected dir=/home/skyapart/public_html --output=json'
Sep 11 05:19:50 power sudo[687980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:50 power sudo[687980]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:54 power sudo[688197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep 11 05:19:54 power sudo[688197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:54 power sudo[688197]: pam_unix(sudo:session): session closed for user root
Sep 11 05:19:54 power sudo[688204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=socioloz --output=json'
Sep 11 05:19:54 power sudo[688204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:19:54 power sudo[688204]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:01 power systemd[688510]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:20:06 power sudo[688655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz /bin/sh -c 'cd /home/socioloz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:20:06 power sudo[688655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:06 power sudo[688655]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:06 power sudo[688661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user socioloz --user-current --json'
Sep 11 05:20:06 power sudo[688661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:07 power sudo[688661]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:07 power sudo[688668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz LangPHP php_get_vhost_versions --output=json'
Sep 11 05:20:07 power sudo[688668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:07 power sudo[688668]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:07 power sudo[688677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:20:07 power sudo[688677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:07 power sudo[688677]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:07 power sudo[688693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DomainInfo single_domain_data domain=sociolozi.org.mk return_https_redirect_status=1 --output=json'
Sep 11 05:20:07 power sudo[688693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:07 power sudo[688693]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:07 power sudo[688700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz Mime list_redirects --output=json'
Sep 11 05:20:07 power sudo[688700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:07 power sudo[688700]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:13 power sudo[688851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DirectoryPrivacy is_directory_protected dir=/home/socioloz/public_html --output=json'
Sep 11 05:20:13 power sudo[688851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:13 power sudo[688851]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:18 power sudo[689040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep 11 05:20:18 power sudo[689040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:18 power sudo[689040]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:18 power sudo[689045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stojnevi --output=json'
Sep 11 05:20:18 power sudo[689045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:18 power sudo[689045]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:21 power sudo[689116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi /bin/sh -c 'cd /home/stojnevi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:20:21 power sudo[689116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:21 power sudo[689116]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:21 power sudo[689122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stojnevi --user-current --json'
Sep 11 05:20:21 power sudo[689122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:22 power sudo[689122]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:22 power sudo[689135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi LangPHP php_get_vhost_versions --output=json'
Sep 11 05:20:22 power sudo[689135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:22 power sudo[689135]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:22 power sudo[689143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:20:22 power sudo[689143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:22 power sudo[689143]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:22 power sudo[689163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DomainInfo single_domain_data domain=stojnevi.mk return_https_redirect_status=1 --output=json'
Sep 11 05:20:22 power sudo[689163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:22 power sudo[689163]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:22 power sudo[689169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi Mime list_redirects --output=json'
Sep 11 05:20:22 power sudo[689169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:22 power sudo[689169]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:25 power sudo[689285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DirectoryPrivacy is_directory_protected dir=/home/stojnevi/public_html --output=json'
Sep 11 05:20:25 power sudo[689285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:25 power sudo[689285]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:35 power sudo[689628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/teatar.nucktrajkoprokopiev.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:20:35 power sudo[689628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:35 power sudo[689628]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:35 power sudo[689635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep 11 05:20:35 power sudo[689635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:35 power sudo[689635]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:35 power sudo[689642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:20:35 power sudo[689642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:35 power sudo[689642]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:36 power sudo[689659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=teatar.nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep 11 05:20:36 power sudo[689659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:36 power sudo[689659]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:39 power sudo[689773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/teatar.nucktrajkoprokopiev.mk/mk --output=json'
Sep 11 05:20:39 power sudo[689773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:39 power sudo[689773]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:43 power sudo[689969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep 11 05:20:43 power sudo[689969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:43 power sudo[689969]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:43 power sudo[689975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=trudovop --output=json'
Sep 11 05:20:43 power sudo[689975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:43 power sudo[689975]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:51 power sudo[690151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop /bin/sh -c 'cd /home/trudovop/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:20:51 power sudo[690151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:51 power sudo[690151]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:51 power sudo[690157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user trudovop --user-current --json'
Sep 11 05:20:51 power sudo[690157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:51 power sudo[690157]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:51 power sudo[690165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop LangPHP php_get_vhost_versions --output=json'
Sep 11 05:20:51 power sudo[690165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:51 power sudo[690165]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:51 power sudo[690173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:20:51 power sudo[690173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:51 power sudo[690173]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:52 power sudo[690191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DomainInfo single_domain_data domain=trudovopravo.mk return_https_redirect_status=1 --output=json'
Sep 11 05:20:52 power sudo[690191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:52 power sudo[690191]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:52 power sudo[690198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop Mime list_redirects --output=json'
Sep 11 05:20:52 power sudo[690198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:52 power sudo[690198]: pam_unix(sudo:session): session closed for user root
Sep 11 05:20:56 power sudo[690290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DirectoryPrivacy is_directory_protected dir=/home/trudovop/public_html --output=json'
Sep 11 05:20:56 power sudo[690290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:20:56 power sudo[690290]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:00 power sudo[690482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep 11 05:21:00 power sudo[690482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:00 power sudo[690482]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:00 power sudo[690489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=urbanexp --output=json'
Sep 11 05:21:00 power sudo[690489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:00 power sudo[690489]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:07 power sudo[690662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp /bin/sh -c 'cd /home/urbanexp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:21:07 power sudo[690662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:07 power sudo[690662]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:07 power sudo[690668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user urbanexp --user-current --json'
Sep 11 05:21:07 power sudo[690668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:07 power sudo[690668]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:07 power sudo[690674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp LangPHP php_get_vhost_versions --output=json'
Sep 11 05:21:07 power sudo[690674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:07 power sudo[690674]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:07 power sudo[690679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:21:07 power sudo[690679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:07 power sudo[690679]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:07 power sudo[690696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DomainInfo single_domain_data domain=urbanexpert.mk return_https_redirect_status=1 --output=json'
Sep 11 05:21:07 power sudo[690696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:08 power sudo[690696]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:08 power sudo[690704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp Mime list_redirects --output=json'
Sep 11 05:21:08 power sudo[690704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:08 power sudo[690704]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:11 power sudo[690819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DirectoryPrivacy is_directory_protected dir=/home/urbanexp/public_html --output=json'
Sep 11 05:21:11 power sudo[690819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:11 power sudo[690819]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:14 power sudo[691028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep 11 05:21:14 power sudo[691028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:14 power sudo[691028]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:14 power sudo[691034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vfxnestc --output=json'
Sep 11 05:21:14 power sudo[691034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:14 power sudo[691034]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:20 power sudo[691189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc /bin/sh -c 'cd /home/vfxnestc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:21:20 power sudo[691189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:20 power sudo[691189]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:20 power sudo[691195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vfxnestc --user-current --json'
Sep 11 05:21:20 power sudo[691195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:21 power sudo[691195]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:21 power sudo[691206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc LangPHP php_get_vhost_versions --output=json'
Sep 11 05:21:21 power sudo[691206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:21 power sudo[691206]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:21 power sudo[691215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:21:21 power sudo[691215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:21 power sudo[691215]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:21 power sudo[691229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DomainInfo single_domain_data domain=vfxnest.com return_https_redirect_status=1 --output=json'
Sep 11 05:21:21 power sudo[691229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:21 power sudo[691229]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:21 power sudo[691235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc Mime list_redirects --output=json'
Sep 11 05:21:21 power sudo[691235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:21 power sudo[691235]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:25 power sudo[691370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DirectoryPrivacy is_directory_protected dir=/home/vfxnestc/public_html --output=json'
Sep 11 05:21:25 power sudo[691370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:25 power sudo[691370]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:30 power sudo[691633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep 11 05:21:30 power sudo[691633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:30 power sudo[691633]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:30 power sudo[691641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=volkanco --output=json'
Sep 11 05:21:30 power sudo[691641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:31 power sudo[691641]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:35 power sudo[691726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:21:35 power sudo[691726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:35 power sudo[691726]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:35 power sudo[691732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep 11 05:21:35 power sudo[691732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:35 power sudo[691732]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:35 power sudo[691741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco LangPHP php_get_vhost_versions --output=json'
Sep 11 05:21:35 power sudo[691741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:35 power sudo[691741]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:35 power sudo[691748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:21:35 power sudo[691748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:35 power sudo[691748]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:35 power sudo[691761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DomainInfo single_domain_data domain=volkan.com.mk return_https_redirect_status=1 --output=json'
Sep 11 05:21:35 power sudo[691761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:35 power sudo[691761]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:35 power sudo[691767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mime list_redirects --output=json'
Sep 11 05:21:36 power sudo[691767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:36 power sudo[691767]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:38 power sudo[691864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DirectoryPrivacy is_directory_protected dir=/home/volkanco/public_html --output=json'
Sep 11 05:21:38 power sudo[691864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:38 power sudo[691864]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:39 power sudo[691941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:21:39 power sudo[691941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:39 power sudo[691941]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:39 power sudo[691946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:21:39 power sudo[691946]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:21:39 power sudo[691946]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:21:39 power sudo[691946]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:21:39 power sudo[691946]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:21:39 power sudo[691946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:39 power sudo[691946]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:39 power sudo[691951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:21:39 power sudo[691951]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:21:39 power sudo[691951]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:21:39 power sudo[691951]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:21:39 power sudo[691951]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:21:39 power sudo[691951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:40 power sudo[691951]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:40 power sudo[691956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:21:40 power sudo[691956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:21:40 power sudo[691956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:21:40 power sudo[691956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:21:40 power sudo[691956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:21:40 power sudo[691956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:40 power sudo[691956]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:42 power sudo[692055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:21:42 power sudo[692055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:42 power sudo[692055]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:42 power sudo[692060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 05:21:42 power sudo[692060]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 05:21:42 power sudo[692060]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 05:21:42 power sudo[692060]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 05:21:42 power sudo[692060]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:21:42 power sudo[692060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:42 power sudo[692060]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:42 power sudo[692065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:21:42 power sudo[692065]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:21:42 power sudo[692065]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:21:42 power sudo[692065]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:21:42 power sudo[692065]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:21:42 power sudo[692065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:42 power sudo[692065]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:42 power sudo[692070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 05:21:42 power sudo[692070]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 05:21:42 power sudo[692070]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 05:21:42 power sudo[692070]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 05:21:42 power sudo[692070]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 05:21:42 power sudo[692070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:42 power sudo[692070]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:42 power sudo[692109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep 11 05:21:42 power sudo[692109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:43 power sudo[692109]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:43 power sudo[692115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=glammace --output=json'
Sep 11 05:21:43 power sudo[692115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:43 power sudo[692115]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:52 power sudo[692295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace /bin/sh -c 'cd /home/glammace/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:21:52 power sudo[692295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:53 power sudo[692295]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:53 power sudo[692302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user glammace --user-current --json'
Sep 11 05:21:53 power sudo[692302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:53 power sudo[692302]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:53 power sudo[692313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace LangPHP php_get_vhost_versions --output=json'
Sep 11 05:21:53 power sudo[692313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:53 power sudo[692313]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:53 power sudo[692319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:21:53 power sudo[692319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:53 power sudo[692319]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:53 power sudo[692333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DomainInfo single_domain_data domain=wikimedia.mk return_https_redirect_status=1 --output=json'
Sep 11 05:21:53 power sudo[692333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:53 power sudo[692333]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:53 power sudo[692340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace Mime list_redirects --output=json'
Sep 11 05:21:53 power sudo[692340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:53 power sudo[692340]: pam_unix(sudo:session): session closed for user root
Sep 11 05:21:59 power sudo[692466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DirectoryPrivacy is_directory_protected dir=/home/glammace/public_html --output=json'
Sep 11 05:21:59 power sudo[692466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:21:59 power sudo[692466]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:01 power sshd[692173]: Connection closed by 162.142.125.124 port 36050 [preauth]
Sep 11 05:22:10 power sudo[692847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:22:10 power sudo[692847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:10 power sudo[692847]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:10 power sudo[692853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep 11 05:22:10 power sudo[692853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:10 power sudo[692853]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:10 power sudo[692862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:22:10 power sudo[692862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:10 power sudo[692862]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:11 power sudo[692882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=wineberry.mk return_https_redirect_status=1 --output=json'
Sep 11 05:22:11 power sudo[692882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:11 power sudo[692882]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:15 power sudo[692985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/public_html --output=json'
Sep 11 05:22:15 power sudo[692985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:15 power sudo[692985]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:18 power sudo[693205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep 11 05:22:19 power sudo[693205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:19 power sudo[693205]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:19 power sudo[693210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workbenc --output=json'
Sep 11 05:22:19 power sudo[693210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:19 power sudo[693210]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:22 power sudo[693289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc /bin/sh -c 'cd /home/workbenc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 05:22:22 power sudo[693289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:22 power sudo[693289]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:22 power sudo[693295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workbenc --user-current --json'
Sep 11 05:22:22 power sudo[693295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:22 power sudo[693295]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:22 power sudo[693302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc LangPHP php_get_vhost_versions --output=json'
Sep 11 05:22:22 power sudo[693302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:22 power sudo[693302]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:22 power sudo[693307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 05:22:22 power sudo[693307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:22 power sudo[693307]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:23 power sudo[693320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DomainInfo single_domain_data domain=workbench-ent.com return_https_redirect_status=1 --output=json'
Sep 11 05:22:23 power sudo[693320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:23 power sudo[693320]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:23 power sudo[693329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc Mime list_redirects --output=json'
Sep 11 05:22:23 power sudo[693329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:23 power sudo[693329]: pam_unix(sudo:session): session closed for user root
Sep 11 05:22:25 power sudo[693403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DirectoryPrivacy is_directory_protected dir=/home/workbenc/public_html --output=json'
Sep 11 05:22:25 power sudo[693403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:22:25 power sudo[693403]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/hooks
Sep 11 05:23:32 power sudo[697465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697465]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep 11 05:23:32 power sudo[697471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697471]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697476]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697480]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697484]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697488]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697493]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697498]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697502]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697506]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697510]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697514]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697518]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697523]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697527]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697531]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697535]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697539]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697544]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697548]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697552]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697556]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/animatem/animate.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697560]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/animatem/animate.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697565]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697569]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697573]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697577]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697581]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697585]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:32 power sudo[697589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 11 05:23:32 power sudo[697589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:32 power sudo[697589]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697593]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697598]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697602]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697606]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697611]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697615]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697619]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697623]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697627]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697631]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697636]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697640]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697644]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697648]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697652]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697656]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697660]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697664]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697668]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697672]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697676]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697683]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697688]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697692]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697696]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697700]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697704]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697708]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697712]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697716]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697720]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697725]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697729]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697733]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697737]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697741]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697746]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697750]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697754]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697758]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697762]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697767]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697771]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697775]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697779]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697783]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697787]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697791]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697795]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697799]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697803]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697807]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697811]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697815]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697819]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697823]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697827]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697831]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697835]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697839]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697843]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697848]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697852]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697856]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697860]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697864]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697868]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697872]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697876]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:33 power sudo[697880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 11 05:23:33 power sudo[697880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:33 power sudo[697880]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697884]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697888]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697892]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697896]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697900]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697904]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697908]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697912]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697916]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697920]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697924]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697928]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697932]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697936]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697940]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697944]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697948]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697952]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697956]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697961]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697968]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697972]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697976]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697980]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697984]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697988]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697992]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[697996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[697996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[697996]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698000]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698004]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698012]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698016]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698020]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698024]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698028]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698032]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698036]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698040]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698044]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698048]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698052]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698056]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698064]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698068]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698072]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698076]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698080]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698084]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698089]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698093]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698097]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698101]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698105]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698109]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698113]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698117]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698121]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698126]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698130]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698134]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698138]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698142]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698146]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698151]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698155]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698159]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:34 power sudo[698163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep 11 05:23:34 power sudo[698163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:34 power sudo[698163]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698167]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698172]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698176]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep 11 05:23:35 power sudo[698180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698180]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698193]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698198]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698203]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698207]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698211]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698215]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698219]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698224]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698228]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698232]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698237]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698241]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698245]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698249]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698253]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698257]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698261]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698266]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698270]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698274]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698278]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698282]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698286]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698291]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698295]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698299]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698304]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698308]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698312]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698316]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698320]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698324]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698328]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698332]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698336]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698341]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698345]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698349]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698353]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698357]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698361]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698365]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698369]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698373]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 11 05:23:35 power sudo[698377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:35 power sudo[698377]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:35 power sudo[698381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698381]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698385]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698389]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698394]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698398]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698403]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698407]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698411]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698415]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698419]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698423]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698427]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698431]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698435]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698439]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698443]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698447]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698451]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698459]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698463]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698467]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698474]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698479]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698483]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698487]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698491]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698495]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698499]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698503]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698507]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698511]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698516]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698524]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698528]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698532]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698536]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698540]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698544]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698548]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698552]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698556]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698560]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698564]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698568]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698572]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698576]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698580]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698584]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698588]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698592]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698596]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698601]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698606]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698611]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698615]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698621]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698626]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698630]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698634]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698638]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698642]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698646]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698650]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698655]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698659]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698663]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698667]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:36 power sudo[698672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:36 power sudo[698672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:36 power sudo[698672]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698678]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698682]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698686]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698691]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698695]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698699]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698703]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698709]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698713]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698717]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698721]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698726]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698730]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698734]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698738]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698742]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698746]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698750]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698754]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698758]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698762]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698769]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698773]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698777]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698781]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698785]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698789]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698793]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698797]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698801]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698805]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698809]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698813]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698817]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698821]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698826]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698830]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698834]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698838]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698842]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698846]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698850]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698854]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698858]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698863]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698867]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698871]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698875]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698879]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698884]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698888]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698892]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698897]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698901]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698905]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698909]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698913]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698917]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698921]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698925]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698929]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:37 power sudo[698934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:37 power sudo[698934]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:37 power sudo[698938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698938]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698942]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698946]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698950]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698954]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698958]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698962]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698966]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698970]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698974]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698979]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698983]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698988]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698992]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[698996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[698996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[698996]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699000]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699004]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699008]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699012]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699016]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699020]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699025]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699031]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699035]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699039]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699043]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699047]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699051]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699055]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699059]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699063]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699067]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699071]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699075]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699079]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699083]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699087]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699091]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699095]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699099]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699103]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699107]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699111]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699115]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699119]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699123]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699127]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699131]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699135]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699139]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699143]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699147]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699151]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699159]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699163]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699167]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699171]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699175]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699179]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699183]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699187]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699191]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699195]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699199]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep 11 05:23:38 power sudo[699203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:38 power sudo[699203]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:38 power sudo[699207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep 11 05:23:38 power sudo[699207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699207]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699213]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699218]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699222]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699227]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699231]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699236]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699240]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699247]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699251]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699256]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699260]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699264]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699269]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699277]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699282]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699288]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699296]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699300]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699304]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699308]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699312]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699316]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699320]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699324]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699328]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699332]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699336]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699340]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699344]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699348]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699353]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699357]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699361]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699365]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699369]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699373]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699378]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699382]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699387]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699392]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699398]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699402]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699406]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699410]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699414]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699418]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699422]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699427]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699431]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:39 power sudo[699435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 11 05:23:39 power sudo[699435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:39 power sudo[699435]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699439]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699444]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699449]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699454]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699459]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699463]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699467]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699471]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699475]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699479]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699483]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699487]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699491]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699495]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699499]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699503]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699507]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699511]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699515]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699522]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699526]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699531]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699535]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699539]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699543]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699547]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699551]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699556]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699560]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699564]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699569]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699573]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699577]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699581]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699585]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699589]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699593]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699598]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699602]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699606]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699610]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699614]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699618]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699622]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699626]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699630]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699634]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699638]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699642]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699646]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699650]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699654]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699658]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699662]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699667]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699671]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699675]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699679]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699683]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699687]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699691]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699695]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699699]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699704]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:40 power sudo[699708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:40 power sudo[699708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:40 power sudo[699708]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699712]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699716]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699720]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699724]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699728]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699733]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699737]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699741]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699745]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699749]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699753]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699757]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699761]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699765]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699769]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699773]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699777]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699781]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699785]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699789]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699793]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699800]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699804]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699808]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699812]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699816]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699821]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699825]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699829]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699833]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699837]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699841]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699845]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699849]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699853]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699857]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699861]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699865]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699869]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699873]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699877]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699881]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699885]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699889]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699893]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699897]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699901]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699905]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699909]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699913]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699917]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699922]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699926]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699931]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699935]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699939]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699943]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699947]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699951]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699956]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699960]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699964]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699968]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699972]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699976]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699980]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699984]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699988]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep 11 05:23:41 power sudo[699992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:41 power sudo[699992]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:41 power sudo[699996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[699996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[699996]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700000]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700005]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700009]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700013]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700017]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700022]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700026]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700030]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700034]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700038]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700042]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700046]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700050]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700054]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700058]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700062]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700066]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700070]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700074]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700078]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700082]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700087]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700094]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700098]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700102]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700106]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700110]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700114]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700118]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700122]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700126]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700130]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700135]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700139]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700143]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700147]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700151]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700155]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700159]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700163]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700167]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700172]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700177]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700182]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700186]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700190]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700194]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700198]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700202]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700206]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700210]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700214]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700219]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700224]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700228]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700232]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700236]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700240]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700245]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700249]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700253]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700257]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700261]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700265]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700269]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700274]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700278]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700282]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:42 power sudo[700286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep 11 05:23:42 power sudo[700286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:42 power sudo[700286]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700290]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700294]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700298]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700302]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700306]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700310]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700314]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700318]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700323]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700327]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700331]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700335]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700339]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700343]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700347]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700351]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700355]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700359]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700363]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700367]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700371]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700375]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700387]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700391]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700395]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700399]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700403]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700407]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700411]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700415]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700419]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700423]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700427]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700431]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700435]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700439]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700443]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700447]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700452]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700456]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700460]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700464]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700469]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700473]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700477]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700481]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700485]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700489]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700493]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700497]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700501]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700505]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700509]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700513]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700517]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700521]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700525]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700529]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700533]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700537]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700541]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700545]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700549]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700554]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700558]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700562]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:43 power sudo[700566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep 11 05:23:43 power sudo[700566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:43 power sudo[700566]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700570]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700574]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700578]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700582]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700586]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700590]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700595]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700599]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700603]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700607]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700611]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700615]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700619]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700623]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700627]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700631]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700635]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700639]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700643]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700647]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700651]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700655]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700659]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700666]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700670]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700674]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700678]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700682]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700686]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700691]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700695]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700699]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700703]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700707]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700711]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700715]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700719]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700723]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700727]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700732]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700736]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700740]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700744]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700748]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700752]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700757]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700762]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700766]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700770]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700774]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700778]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700782]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700786]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700790]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700794]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700798]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700802]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700806]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700810]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700814]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700818]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700822]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700827]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700831]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700835]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700839]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700843]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700847]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700851]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700855]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700860]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:44 power sudo[700864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 11 05:23:44 power sudo[700864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:44 power sudo[700864]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:45 power sudo[700868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 11 05:23:45 power sudo[700868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:45 power sudo[700868]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:45 power sudo[700872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 11 05:23:45 power sudo[700872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:45 power sudo[700872]: pam_unix(sudo:session): session closed for user root
Sep 11 05:23:45 power sudo[700876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 11 05:23:45 power sudo[700876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:23:45 power sudo[700876]: pam_unix(sudo:session): session closed for user root
Sep 11 05:25:01 power systemd[702122]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:30:01 power systemd[706202]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:30:01 power systemd[706205]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 05:30:01 power systemd[706206]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 05:30:01 power systemd[706208]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 05:35:01 power systemd[710424]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:35:05 power systemd[710610]: pam_unix(systemd-user:session): session opened for user cetplatf(uid=1055) by cetplatf(uid=0)
Sep 11 05:35:05 power su[710606]: pam_unix(su:session): session opened for user cetplatf(uid=1055) by (uid=0)
Sep 11 05:35:05 power su[710606]: pam_unix(su:session): session closed for user cetplatf
Sep 11 05:36:01 power systemd[711344]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 05:37:01 power systemd[712053]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 05:40:01 power systemd[714241]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:42:01 power systemd[715751]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 05:42:09 power sudo[715910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 05:42:09 power sudo[715910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715910]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 05:42:09 power sudo[715915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715915]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 05:42:09 power sudo[715919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715919]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=1rDSSSSRRa'
Sep 11 05:42:09 power sudo[715923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715923]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 05:42:09 power sudo[715931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715931]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 05:42:09 power sudo[715935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715935]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 05:42:09 power sudo[715939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715939]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 05:42:09 power sudo[715943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715943]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 05:42:09 power sudo[715952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715952]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 05:42:09 power sudo[715956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715956]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 05:42:09 power sudo[715960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715960]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 05:42:09 power sudo[715965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715965]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 05:42:09 power sudo[715969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:09 power sudo[715969]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:09 power sudo[715974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 05:42:09 power sudo[715974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:10 power sudo[715974]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:11 power sudo[715996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 05:42:11 power sudo[715996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:11 power sudo[715996]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:12 power sudo[716011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 05:42:12 power sudo[716011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:12 power sudo[716011]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:12 power sudo[716020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mediasol user-2=bogdanos user-3=carrent1 user-4=apgrupmk user-5=kardiome user-6=euronic2 user-7=matratze user-8=intelek1 user-9=mediatag user-10=nucktra1 user-11=lblawcom user-12=aptekazd user-13=nikimare user-14=forzares user-15=nikolov1 user-16=hausmark user-17=imdskopj user-18=glammace user-19=albuname user-20=infopor1 user-21=vtranseu user-22=pravekom user-23=euromaki user-24=cosmatob user-25=zapovim1 user-26=elektrot user-27=chemhemc user-28=samasped user-29=nutrivim user-30=zdmgpsor user-31=gorsajmk user-32=aquatech user-33=v5srybi9dcdx user-34=supremel user-35=bozinovm user-36=dslmk user-37=prizmapl user-38=darkogor user-39=fnjorgmk user-40=premiumi user-41=innofabl user-42=vacuacti user-43=taneccom user-44=tehnologija user-45=modernar user-46=inkigaic user-47=fffhpcwr user-48=radekrat
Sep 11 05:42:12 power sudo[716020]: wp-toolkit : (command continued) user-49=starluxm user-50=ambitiou user-51=fiziosmk user-52=versusmk user-53=onlinesh user-54=nationa2 user-55=solemor1 user-56=mapaspla user-57=tcieuroc user-58=folklore user-59=bauerin2 user-60=euronic3 user-61=vegemk1 user-62=cupidpro user-63=conserva user-64=bonitavi user-65=evberasm user-66=tehnodro user-67=makdrone user-68=izzomk user-69=jpkomuna user-70=evacommk user-71=madzomk user-72=aptekafa user-73=gradbai1 user-74=eaptekam user-75=dimpalne user-76=peshkai1 user-77=fxxcom user-78=sssoluti user-79=atspedco user-80=progress user-81=animatem user-82=cleanerm user-83=taktcomm user-84=recorgmk user-85=jaramk user-86=solointe user-87=pelagini user-88=kaoilmk user-89=biplmk user-90=bbbustou user-91=workbenc user-92=ismassag user-93=mbmehani user-94=wineberr user-95=viplastc user-96=eurofarm user-97=solarinv user-98=golakkom user-99=trigemat user-100=naksorgm user-101=eliksirz user-102=electrol
Sep 11 05:42:12 power sudo[716020]: wp-toolkit : (command continued) user-103=edomcomm user-104=berbermk user-105=dikimk12 user-106=sprintst user-107=enochmk user-108=herbalpl user-109=seloviro user-110=centarba user-111=nlpmkorg user-112=kolened1 user-113=nolimits user-114=tealmk user-115=dadarmk user-116=proverim user-117=goodnews user-118=mstmmk user-119=gocruise user-120=tradeyou user-121=gjorgeiv user-122=dnevnoin user-123=pecakome user-124=wondersp user-125=robustco user-126=stravelm user-127=holiyayt user-128=rastiraz user-129=cajsproc user-130=hotammk user-131=youthgua user-132=anitermc user-133=stojnevi user-134=raremk user-135=oouslave user-136=uhostmk5 user-137=bauerbg user-138=enaspotc user-139=vmro user-140=viewinn user-141=trudovop user-142=avtogumi user-143=socioloz user-144=pelagoni user-145=evolvepl user-146=frizered user-147=hidrommk user-148=caramk user-149=nefrolog user-150=levantmk user-151=oncolog1 user-152=ekostoc1 user-153=datalink user-154=velmk
Sep 11 05:42:12 power sudo[716020]: wp-toolkit : (command continued) user-155=gogovan1 user-156=univerz1 user-157=kujnamon user-158=agrosind user-159=mpbmk user-160=getaldus user-161=simbiome user-162=delcevca user-163=barececo user-164=workandt user-165=volkanco user-166=goartsym user-167=dhamachi user-168=mfashion user-169=bianasho user-170=makoasmk user-171=skyapart user-172=rasmorgm user-173=wikicamp user-174=urbanexp user-175=spdcompu user-176=detskagr user-177=infobadi user-178=mspmk user-179=bizporta user-180=datelcom user-181=maleshne user-182=sedcmk user-183=groskome user-184=ivanjord user-185=vfxnestc user-186=polyeste user-187=palenzok user-188=zampmk user-189=zvskopje user-190=busymard user-191=custome1 user-192=sparkupm user-193=stokovna user-194=klimimk user-195=stojano1 user-196=bovincom user-197=janiboja user-198=itradeco user-199=vezilkac user-200=cabinetm user-201=jpparkin user-202=inotekso user-203=drleomk user-204=ideaplus user-205=nasaidni user-206=karpospo
Sep 11 05:42:12 power sudo[716020]: wp-toolkit : (command continued) user-207=screenme user-208=arturaco user-209=premiums user-210=butelmk user-211=daris user-212=kouzonco user-213=premiuma user-214=cetplatf user-215=dalmacom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 05:42:12 power sudo[716020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:12 power sudo[716020]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:12 power sudo[716026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 05:42:12 power sudo[716026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:12 power sudo[716026]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:12 power sudo[716030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Dc3P4qCCYEguuaaj.~
Sep 11 05:42:12 power sudo[716030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:12 power sudo[716030]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:12 power sudo[716034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Dc3P4qCCYEguuaaj.~\''
Sep 11 05:42:12 power sudo[716034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:12 power sudo[716034]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:12 power sudo[716039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Dc3P4qCCYEguuaaj.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 05:42:12 power sudo[716039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:12 power sudo[716039]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:12 power sudo[716043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 05:42:12 power sudo[716043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:12 power sudo[716043]: pam_unix(sudo:session): session closed for user root
Sep 11 05:42:17 power sudo[716989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 05:42:17 power sudo[716989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 05:42:17 power sudo[716989]: pam_unix(sudo:session): session closed for user root
Sep 11 05:45:01 power systemd[718828]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:50:01 power systemd[723098]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 05:55:01 power systemd[726738]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:00:01 power systemd[730693]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:00:01 power systemd[730698]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 06:00:01 power systemd[730699]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 06:00:01 power systemd[730702]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 06:05:01 power systemd[735578]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:06:01 power systemd[736589]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 06:07:01 power systemd[737342]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 06:10:02 power systemd[739639]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:12:01 power systemd[741205]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 06:15:01 power systemd[743780]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:20:01 power systemd[748067]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:23:36 power pam_imunify[331555]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 165.154.174.27 has been locked due to Imunify RBL
Sep 11 06:25:01 power systemd[751780]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:28:07 power sshd[754471]: error: kex_exchange_identification: banner line contains invalid characters
Sep 11 06:28:07 power sshd[754471]: banner exchange: Connection from 2.57.121.247 port 64761: invalid format
Sep 11 06:30:01 power systemd[756012]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:30:01 power systemd[756014]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 06:30:01 power systemd[756015]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 06:30:01 power systemd[756017]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 06:35:01 power systemd[760767]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:36:01 power systemd[761698]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 06:37:01 power systemd[762560]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 06:40:01 power systemd[764842]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:42:01 power systemd[766675]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 06:42:09 power sudo[766822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 06:42:09 power sudo[766822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766822]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 06:42:09 power sudo[766827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766827]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 06:42:09 power sudo[766831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766831]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=nDtJtcY5OR'
Sep 11 06:42:09 power sudo[766835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766835]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 06:42:09 power sudo[766840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766840]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 06:42:09 power sudo[766844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766844]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 06:42:09 power sudo[766849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766849]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 06:42:09 power sudo[766853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766853]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 06:42:09 power sudo[766859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766859]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 06:42:09 power sudo[766866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766866]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 06:42:09 power sudo[766870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766870]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 06:42:09 power sudo[766875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766875]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 06:42:09 power sudo[766879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:09 power sudo[766879]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:09 power sudo[766884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 06:42:09 power sudo[766884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:10 power sudo[766884]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:12 power sudo[766932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 06:42:12 power sudo[766932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:12 power sudo[766932]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:12 power sudo[766937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 06:42:12 power sudo[766937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:12 power sudo[766937]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:12 power sudo[766943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=onlinesh user-2=nationa2 user-3=solemor1 user-4=mapaspla user-5=tcieuroc user-6=fffhpcwr user-7=starluxm user-8=radekrat user-9=ambitiou user-10=fiziosmk user-11=versusmk user-12=fnjorgmk user-13=prizmapl user-14=darkogor user-15=dslmk user-16=bozinovm user-17=vacuacti user-18=premiumi user-19=innofabl user-20=taneccom user-21=tehnologija user-22=modernar user-23=inkigaic user-24=zdmgpsor user-25=aquatech user-26=gorsajmk user-27=v5srybi9dcdx user-28=supremel user-29=cosmatob user-30=euromaki user-31=elektrot user-32=zapovim1 user-33=samasped user-34=chemhemc user-35=nutrivim user-36=imdskopj user-37=albuname user-38=glammace user-39=infopor1 user-40=pravekom user-41=vtranseu user-42=mediatag user-43=intelek1 user-44=nucktra1 user-45=lblawcom user-46=nikimare user-47=aptekazd user-48=forzares
Sep 11 06:42:12 power sudo[766943]: wp-toolkit : (command continued) user-49=nikolov1 user-50=hausmark user-51=bogdanos user-52=carrent1 user-53=mediasol user-54=apgrupmk user-55=kardiome user-56=matratze user-57=euronic2 user-58=eurofarm user-59=solarinv user-60=golakkom user-61=eliksirz user-62=naksorgm user-63=trigemat user-64=electrol user-65=workbenc user-66=ismassag user-67=mbmehani user-68=wineberr user-69=viplastc user-70=pelagini user-71=kaoilmk user-72=biplmk user-73=bbbustou user-74=sssoluti user-75=atspedco user-76=progress user-77=cleanerm user-78=animatem user-79=recorgmk user-80=taktcomm user-81=jaramk user-82=solointe user-83=aptekafa user-84=madzomk user-85=evacommk user-86=gradbai1 user-87=eaptekam user-88=dimpalne user-89=fxxcom user-90=peshkai1 user-91=tehnodro user-92=makdrone user-93=izzomk user-94=jpkomuna user-95=euronic3 user-96=cupidpro user-97=vegemk1 user-98=conserva user-99=evberasm user-100=bonitavi user-101=folklore user-102=bauerin2
Sep 11 06:42:12 power sudo[766943]: wp-toolkit : (command continued) user-103=hidrommk user-104=frizered user-105=caramk user-106=ekostoc1 user-107=oncolog1 user-108=levantmk user-109=nefrolog user-110=socioloz user-111=avtogumi user-112=pelagoni user-113=evolvepl user-114=stojnevi user-115=oouslave user-116=raremk user-117=bauerbg user-118=uhostmk5 user-119=enaspotc user-120=trudovop user-121=viewinn user-122=vmro user-123=cajsproc user-124=hotammk user-125=anitermc user-126=youthgua user-127=tradeyou user-128=gjorgeiv user-129=dnevnoin user-130=pecakome user-131=stravelm user-132=robustco user-133=wondersp user-134=holiyayt user-135=rastiraz user-136=tealmk user-137=dadarmk user-138=proverim user-139=goodnews user-140=mstmmk user-141=gocruise user-142=seloviro user-143=kolened1 user-144=nlpmkorg user-145=centarba user-146=nolimits user-147=edomcomm user-148=berbermk user-149=dikimk12 user-150=enochmk user-151=herbalpl user-152=sprintst user-153=kouzonco user-154=premiuma
Sep 11 06:42:12 power sudo[766943]: wp-toolkit : (command continued) user-155=cetplatf user-156=dalmacom user-157=inotekso user-158=jpparkin user-159=drleomk user-160=nasaidni user-161=karpospo user-162=ideaplus user-163=arturaco user-164=screenme user-165=daris user-166=butelmk user-167=premiums user-168=stojano1 user-169=bovincom user-170=janiboja user-171=itradeco user-172=vezilkac user-173=cabinetm user-174=palenzok user-175=zvskopje user-176=busymard user-177=zampmk user-178=custome1 user-179=stokovna user-180=sparkupm user-181=klimimk user-182=bizporta user-183=maleshne user-184=datelcom user-185=sedcmk user-186=groskome user-187=ivanjord user-188=polyeste user-189=vfxnestc user-190=wikicamp user-191=urbanexp user-192=spdcompu user-193=detskagr user-194=infobadi user-195=mspmk user-196=barececo user-197=simbiome user-198=getaldus user-199=delcevca user-200=workandt user-201=dhamachi user-202=volkanco user-203=goartsym user-204=mfashion user-205=skyapart user-206=bianasho
Sep 11 06:42:12 power sudo[766943]: wp-toolkit : (command continued) user-207=makoasmk user-208=rasmorgm user-209=datalink user-210=univerz1 user-211=kujnamon user-212=velmk user-213=gogovan1 user-214=mpbmk user-215=agrosind feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 06:42:12 power sudo[766943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:12 power sudo[766943]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:12 power sudo[766963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 06:42:13 power sudo[766963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:13 power sudo[766963]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:13 power sudo[766967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vYlT97GLOSulpKUS.~
Sep 11 06:42:13 power sudo[766967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:13 power sudo[766967]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:13 power sudo[766971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vYlT97GLOSulpKUS.~\''
Sep 11 06:42:13 power sudo[766971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:13 power sudo[766971]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:13 power sudo[766979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vYlT97GLOSulpKUS.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 06:42:13 power sudo[766979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:13 power sudo[766979]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:13 power sudo[766983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 06:42:13 power sudo[766983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:13 power sudo[766983]: pam_unix(sudo:session): session closed for user root
Sep 11 06:42:17 power sudo[767935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 06:42:17 power sudo[767935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 06:42:17 power sudo[767935]: pam_unix(sudo:session): session closed for user root
Sep 11 06:45:01 power systemd[769915]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:50:01 power systemd[774356]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 06:51:12 power sshd[775341]: error: kex_exchange_identification: banner line contains invalid characters
Sep 11 06:51:12 power sshd[775341]: banner exchange: Connection from 2.57.121.247 port 65177: invalid format
Sep 11 06:55:01 power systemd[778463]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:00:01 power systemd[782615]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:00:01 power systemd[782616]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 07:00:01 power systemd[782618]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 07:00:01 power systemd[782617]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 07:05:01 power systemd[787313]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:06:01 power systemd[788225]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 07:07:01 power systemd[788931]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 07:10:01 power systemd[791450]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:12:01 power systemd[793220]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 07:15:01 power systemd[795754]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:20:01 power systemd[799850]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:21:22 power sudo[801254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 07:21:22 power sudo[801254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:22 power sudo[801254]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:22 power sudo[801260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep 11 07:21:22 power sudo[801260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:22 power sudo[801260]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:22 power sudo[801269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi Mime list_redirects --output=json'
Sep 11 07:21:22 power sudo[801269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:22 power sudo[801269]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:31 power sudo[801351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 07:21:31 power sudo[801351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:31 power sudo[801351]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:31 power sudo[801356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status caramk'
Sep 11 07:21:31 power sudo[801356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:31 power sudo[801356]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:38 power sudo[801481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 07:21:38 power sudo[801481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:38 power sudo[801481]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:38 power sudo[801487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status darkogor'
Sep 11 07:21:38 power sudo[801487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:38 power sudo[801487]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:48 power sudo[801647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 07:21:48 power sudo[801647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:48 power sudo[801647]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:48 power sudo[801652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep 11 07:21:48 power sudo[801652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:48 power sudo[801652]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:48 power sudo[801659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr Mime list_redirects --output=json'
Sep 11 07:21:48 power sudo[801659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:48 power sudo[801659]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:56 power sudo[801787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 07:21:56 power sudo[801787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:56 power sudo[801787]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:56 power sudo[801792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 11 07:21:57 power sudo[801792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:57 power sudo[801792]: pam_unix(sudo:session): session closed for user root
Sep 11 07:21:57 power sudo[801800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 Mime list_redirects --output=json'
Sep 11 07:21:57 power sudo[801800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:21:57 power sudo[801800]: pam_unix(sudo:session): session closed for user root
Sep 11 07:25:01 power systemd[804760]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:30:01 power systemd[809486]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:30:01 power systemd[809489]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 07:30:01 power systemd[809491]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 07:30:01 power systemd[809492]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 07:35:01 power systemd[813997]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:36:01 power systemd[814940]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 07:37:01 power systemd[815798]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 07:40:01 power systemd[818112]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:42:01 power systemd[819762]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 07:42:09 power sudo[819935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 07:42:09 power sudo[819935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819935]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 07:42:09 power sudo[819939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819939]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 07:42:09 power sudo[819943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819943]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=ba42Fq9GBq'
Sep 11 07:42:09 power sudo[819947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819947]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 07:42:09 power sudo[819952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819952]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 07:42:09 power sudo[819956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819956]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 07:42:09 power sudo[819960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819960]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 07:42:09 power sudo[819964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819964]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 07:42:09 power sudo[819969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819969]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 07:42:09 power sudo[819973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819973]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 07:42:09 power sudo[819978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819978]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 07:42:09 power sudo[819983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819983]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:09 power sudo[819988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 07:42:09 power sudo[819988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:09 power sudo[819988]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:10 power sudo[819992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 07:42:10 power sudo[819992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:10 power sudo[819992]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:12 power sudo[820032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 07:42:12 power sudo[820032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:12 power sudo[820032]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:12 power sudo[820037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 07:42:12 power sudo[820037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:12 power sudo[820037]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:12 power sudo[820044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=solointe user-2=jaramk user-3=taktcomm user-4=recorgmk user-5=animatem user-6=cleanerm user-7=progress user-8=sssoluti user-9=atspedco user-10=bbbustou user-11=biplmk user-12=kaoilmk user-13=pelagini user-14=viplastc user-15=wineberr user-16=mbmehani user-17=ismassag user-18=workbenc user-19=electrol user-20=trigemat user-21=eliksirz user-22=naksorgm user-23=golakkom user-24=solarinv user-25=eurofarm user-26=bauerin2 user-27=folklore user-28=bonitavi user-29=evberasm user-30=conserva user-31=vegemk1 user-32=cupidpro user-33=euronic3 user-34=jpkomuna user-35=izzomk user-36=makdrone user-37=tehnodro user-38=peshkai1 user-39=fxxcom user-40=dimpalne user-41=eaptekam user-42=gradbai1 user-43=evacommk user-44=aptekafa user-45=madzomk user-46=supremel user-47=v5srybi9dcdx user-48=gorsajmk user-49=aquatech
Sep 11 07:42:12 power sudo[820044]: wp-toolkit : (command continued) user-50=zdmgpsor user-51=inkigaic user-52=modernar user-53=tehnologija user-54=taneccom user-55=innofabl user-56=premiumi user-57=vacuacti user-58=bozinovm user-59=prizmapl user-60=dslmk user-61=fnjorgmk user-62=darkogor user-63=versusmk user-64=fiziosmk user-65=ambitiou user-66=radekrat user-67=starluxm user-68=fffhpcwr user-69=tcieuroc user-70=mapaspla user-71=solemor1 user-72=nationa2 user-73=onlinesh user-74=euronic2 user-75=matratze user-76=kardiome user-77=apgrupmk user-78=mediasol user-79=carrent1 user-80=bogdanos user-81=hausmark user-82=nikolov1 user-83=forzares user-84=aptekazd user-85=nikimare user-86=lblawcom user-87=nucktra1 user-88=intelek1 user-89=mediatag user-90=vtranseu user-91=pravekom user-92=infopor1 user-93=glammace user-94=albuname user-95=imdskopj user-96=nutrivim user-97=samasped user-98=chemhemc user-99=elektrot user-100=zapovim1 user-101=euromaki user-102=cosmatob user-103=klimimk
Sep 11 07:42:12 power sudo[820044]: wp-toolkit : (command continued) user-104=sparkupm user-105=stokovna user-106=custome1 user-107=busymard user-108=zampmk user-109=zvskopje user-110=palenzok user-111=cabinetm user-112=vezilkac user-113=itradeco user-114=janiboja user-115=bovincom user-116=stojano1 user-117=premiums user-118=daris user-119=butelmk user-120=arturaco user-121=screenme user-122=ideaplus user-123=karpospo user-124=nasaidni user-125=drleomk user-126=jpparkin user-127=inotekso user-128=dalmacom user-129=cetplatf user-130=premiuma user-131=kouzonco user-132=agrosind user-133=mpbmk user-134=velmk user-135=gogovan1 user-136=univerz1 user-137=kujnamon user-138=datalink user-139=rasmorgm user-140=makoasmk user-141=bianasho user-142=skyapart user-143=mfashion user-144=volkanco user-145=goartsym user-146=dhamachi user-147=workandt user-148=delcevca user-149=getaldus user-150=simbiome user-151=barececo user-152=infobadi user-153=mspmk user-154=detskagr user-155=spdcompu
Sep 11 07:42:12 power sudo[820044]: wp-toolkit : (command continued) user-156=urbanexp user-157=wikicamp user-158=vfxnestc user-159=polyeste user-160=groskome user-161=ivanjord user-162=sedcmk user-163=datelcom user-164=maleshne user-165=bizporta user-166=youthgua user-167=anitermc user-168=hotammk user-169=cajsproc user-170=vmro user-171=trudovop user-172=viewinn user-173=enaspotc user-174=uhostmk5 user-175=bauerbg user-176=raremk user-177=oouslave user-178=stojnevi user-179=evolvepl user-180=pelagoni user-181=socioloz user-182=avtogumi user-183=nefrolog user-184=levantmk user-185=ekostoc1 user-186=oncolog1 user-187=caramk user-188=frizered user-189=hidrommk user-190=sprintst user-191=herbalpl user-192=enochmk user-193=dikimk12 user-194=berbermk user-195=edomcomm user-196=nolimits user-197=nlpmkorg user-198=centarba user-199=kolened1 user-200=seloviro user-201=gocruise user-202=mstmmk user-203=goodnews user-204=proverim user-205=dadarmk user-206=tealmk user-207=rastiraz
Sep 11 07:42:12 power sudo[820044]: wp-toolkit : (command continued) user-208=holiyayt user-209=wondersp user-210=stravelm user-211=robustco user-212=pecakome user-213=dnevnoin user-214=tradeyou user-215=gjorgeiv feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 07:42:12 power sudo[820044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:12 power sudo[820044]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:12 power sudo[820052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 07:42:12 power sudo[820052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:12 power sudo[820052]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:12 power sudo[820056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6yOyH7YEWGl933bL.~
Sep 11 07:42:12 power sudo[820056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:12 power sudo[820056]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:12 power sudo[820060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6yOyH7YEWGl933bL.~\''
Sep 11 07:42:12 power sudo[820060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:12 power sudo[820060]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:12 power sudo[820066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6yOyH7YEWGl933bL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 07:42:12 power sudo[820066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:12 power sudo[820066]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:12 power sudo[820070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 07:42:12 power sudo[820070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:12 power sudo[820070]: pam_unix(sudo:session): session closed for user root
Sep 11 07:42:16 power sudo[820501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 07:42:16 power sudo[820501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 07:42:16 power sudo[820501]: pam_unix(sudo:session): session closed for user root
Sep 11 07:45:01 power systemd[823771]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:50:01 power systemd[828654]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 07:55:01 power systemd[833199]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:00:01 power systemd[837754]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:00:01 power systemd[837761]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 08:00:01 power systemd[837762]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 08:00:01 power systemd[837764]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 08:00:01 power systemd[837766]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 11 08:05:01 power systemd[843201]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:06:01 power systemd[844266]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 08:07:01 power systemd[845319]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 08:10:01 power systemd[851104]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:12:01 power systemd[852980]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 08:15:01 power systemd[855806]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:20:01 power systemd[860924]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:25:01 power systemd[865955]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:30:01 power systemd[870774]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:30:01 power systemd[870777]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 08:30:01 power systemd[870778]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 08:30:01 power systemd[870780]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 08:35:01 power systemd[876366]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:36:02 power systemd[877539]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 08:37:01 power systemd[878738]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 08:40:01 power systemd[881724]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:42:01 power systemd[883837]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 08:42:09 power sudo[883997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 08:42:09 power sudo[883997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[883997]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 08:42:09 power sudo[884001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884001]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 08:42:09 power sudo[884005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884005]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=obSXNuNTKp'
Sep 11 08:42:09 power sudo[884009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884009]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 08:42:09 power sudo[884014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884014]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 08:42:09 power sudo[884020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884020]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 08:42:09 power sudo[884024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884024]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 08:42:09 power sudo[884028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884028]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 08:42:09 power sudo[884034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884034]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 08:42:09 power sudo[884038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884038]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 08:42:09 power sudo[884042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:09 power sudo[884042]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:09 power sudo[884046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 08:42:10 power sudo[884046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:10 power sudo[884046]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:10 power sudo[884050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 08:42:10 power sudo[884050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:10 power sudo[884050]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:10 power sudo[884055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 08:42:10 power sudo[884055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:10 power sudo[884055]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:12 power sudo[884160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 08:42:12 power sudo[884160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:12 power sudo[884160]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:12 power sudo[884173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 08:42:12 power sudo[884173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:12 power sudo[884173]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:12 power sudo[884180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pelagini user-2=kaoilmk user-3=biplmk user-4=bbbustou user-5=progress user-6=animatem user-7=cleanerm user-8=sssoluti user-9=atspedco user-10=jaramk user-11=solointe user-12=recorgmk user-13=taktcomm user-14=solarinv user-15=eurofarm user-16=trigemat user-17=eliksirz user-18=naksorgm user-19=electrol user-20=golakkom user-21=mbmehani user-22=workbenc user-23=ismassag user-24=wineberr user-25=viplastc user-26=conserva user-27=euronic3 user-28=vegemk1 user-29=cupidpro user-30=bonitavi user-31=evberasm user-32=bauerin2 user-33=folklore user-34=gradbai1 user-35=evacommk user-36=madzomk user-37=aptekafa user-38=peshkai1 user-39=fxxcom user-40=eaptekam user-41=dimpalne user-42=makdrone user-43=tehnodro user-44=izzomk user-45=jpkomuna user-46=taneccom user-47=tehnologija user-48=bozinovm user-49=darkogor
Sep 11 08:42:12 power sudo[884180]: wp-toolkit : (command continued) user-50=prizmapl user-51=fnjorgmk user-52=dslmk user-53=premiumi user-54=innofabl user-55=vacuacti user-56=inkigaic user-57=modernar user-58=zdmgpsor user-59=v5srybi9dcdx user-60=supremel user-61=gorsajmk user-62=aquatech user-63=solemor1 user-64=mapaspla user-65=onlinesh user-66=nationa2 user-67=tcieuroc user-68=radekrat user-69=starluxm user-70=fffhpcwr user-71=versusmk user-72=ambitiou user-73=fiziosmk user-74=nucktra1 user-75=lblawcom user-76=intelek1 user-77=mediatag user-78=nikolov1 user-79=hausmark user-80=aptekazd user-81=nikimare user-82=forzares user-83=kardiome user-84=mediasol user-85=carrent1 user-86=bogdanos user-87=apgrupmk user-88=euronic2 user-89=matratze user-90=elektrot user-91=zapovim1 user-92=euromaki user-93=cosmatob user-94=nutrivim user-95=chemhemc user-96=samasped user-97=glammace user-98=albuname user-99=imdskopj user-100=pravekom user-101=vtranseu user-102=infopor1 user-103=bovincom
Sep 11 08:42:12 power sudo[884180]: wp-toolkit : (command continued) user-104=stojano1 user-105=vezilkac user-106=cabinetm user-107=janiboja user-108=itradeco user-109=custome1 user-110=palenzok user-111=zampmk user-112=busymard user-113=zvskopje user-114=klimimk user-115=sparkupm user-116=stokovna user-117=cetplatf user-118=dalmacom user-119=kouzonco user-120=premiuma user-121=jpparkin user-122=inotekso user-123=drleomk user-124=premiums user-125=daris user-126=butelmk user-127=ideaplus user-128=karpospo user-129=nasaidni user-130=screenme user-131=arturaco user-132=volkanco user-133=goartsym user-134=dhamachi user-135=mfashion user-136=delcevca user-137=getaldus user-138=simbiome user-139=barececo user-140=workandt user-141=rasmorgm user-142=bianasho user-143=makoasmk user-144=skyapart user-145=velmk user-146=gogovan1 user-147=kujnamon user-148=univerz1 user-149=datalink user-150=agrosind user-151=mpbmk user-152=datelcom user-153=maleshne user-154=bizporta user-155=vfxnestc
Sep 11 08:42:12 power sudo[884180]: wp-toolkit : (command continued) user-156=polyeste user-157=sedcmk user-158=ivanjord user-159=groskome user-160=wikicamp user-161=urbanexp user-162=mspmk user-163=infobadi user-164=spdcompu user-165=detskagr user-166=raremk user-167=oouslave user-168=uhostmk5 user-169=bauerbg user-170=stojnevi user-171=enaspotc user-172=vmro user-173=trudovop user-174=viewinn user-175=cajsproc user-176=hotammk user-177=youthgua user-178=anitermc user-179=caramk user-180=frizered user-181=hidrommk user-182=nefrolog user-183=levantmk user-184=ekostoc1 user-185=oncolog1 user-186=pelagoni user-187=socioloz user-188=avtogumi user-189=evolvepl user-190=seloviro user-191=nolimits user-192=nlpmkorg user-193=centarba user-194=kolened1 user-195=edomcomm user-196=berbermk user-197=dikimk12 user-198=sprintst user-199=enochmk user-200=herbalpl user-201=dnevnoin user-202=gjorgeiv user-203=tradeyou user-204=holiyayt user-205=rastiraz user-206=pecakome user-207=wondersp
Sep 11 08:42:12 power sudo[884180]: wp-toolkit : (command continued) user-208=stravelm user-209=robustco user-210=dadarmk user-211=proverim user-212=tealmk user-213=gocruise user-214=goodnews user-215=mstmmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 08:42:12 power sudo[884180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:12 power sudo[884180]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:12 power sudo[884188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 08:42:12 power sudo[884188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:12 power sudo[884188]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:12 power sudo[884193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Rlb7SpqaKP1fozBJ.~
Sep 11 08:42:12 power sudo[884193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:12 power sudo[884193]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:12 power sudo[884198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Rlb7SpqaKP1fozBJ.~\''
Sep 11 08:42:12 power sudo[884198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:12 power sudo[884198]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:12 power sudo[884203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Rlb7SpqaKP1fozBJ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 08:42:12 power sudo[884203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:12 power sudo[884203]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:12 power sudo[884207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 08:42:12 power sudo[884207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:12 power sudo[884207]: pam_unix(sudo:session): session closed for user root
Sep 11 08:42:17 power sudo[885132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 08:42:17 power sudo[885132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 08:42:17 power sudo[885132]: pam_unix(sudo:session): session closed for user root
Sep 11 08:45:01 power systemd[887637]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:50:01 power systemd[894995]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 08:55:01 power systemd[900329]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:00:01 power systemd[907227]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:00:01 power systemd[907229]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 09:00:01 power systemd[907230]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 09:00:01 power systemd[907232]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 09:00:01 power systemd[907234]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 11 09:05:01 power systemd[914023]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:06:01 power systemd[915153]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 09:07:01 power systemd[916337]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 09:10:01 power systemd[919315]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:12:01 power systemd[921720]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 09:15:01 power systemd[924869]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:20:01 power systemd[930346]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:25:01 power systemd[935879]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:30:01 power systemd[941123]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:30:01 power systemd[941125]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 09:30:01 power systemd[941126]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 09:30:01 power systemd[941128]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 09:35:01 power systemd[948280]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:36:01 power systemd[949478]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 09:37:01 power systemd[950812]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 09:40:01 power systemd[954543]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:42:02 power systemd[957804]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 09:42:09 power sudo[958005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 09:42:09 power sudo[958005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:09 power sudo[958005]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:09 power sudo[958009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 09:42:09 power sudo[958009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:09 power sudo[958009]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:09 power sudo[958013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 09:42:09 power sudo[958013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:09 power sudo[958013]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:09 power sudo[958019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=SRHJh8qFBK'
Sep 11 09:42:09 power sudo[958019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:09 power sudo[958019]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:09 power sudo[958025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 09:42:09 power sudo[958025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:09 power sudo[958025]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:09 power sudo[958031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 09:42:09 power sudo[958031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:09 power sudo[958031]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:09 power sudo[958042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 09:42:09 power sudo[958042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:09 power sudo[958042]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:09 power sudo[958048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 09:42:09 power sudo[958048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:10 power sudo[958048]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:10 power sudo[958068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 09:42:10 power sudo[958068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:10 power sudo[958068]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:10 power sudo[958073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 09:42:10 power sudo[958073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:10 power sudo[958073]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:10 power sudo[958078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 09:42:10 power sudo[958078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:10 power sudo[958078]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:10 power sudo[958084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 09:42:10 power sudo[958084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:10 power sudo[958084]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:10 power sudo[958091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 09:42:10 power sudo[958091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:10 power sudo[958091]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:10 power sudo[958100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 09:42:10 power sudo[958100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:10 power sudo[958100]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:34 power sudo[959153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 09:42:34 power sudo[959153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:34 power sudo[959153]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:34 power sudo[959159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 09:42:34 power sudo[959159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:34 power sudo[959159]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:34 power sudo[959165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=ismassag user-2=workbenc user-3=mbmehani user-4=viplastc user-5=wineberr user-6=eurofarm user-7=solarinv user-8=golakkom user-9=electrol user-10=eliksirz user-11=naksorgm user-12=trigemat user-13=sssoluti user-14=atspedco user-15=cleanerm user-16=animatem user-17=progress user-18=recorgmk user-19=taktcomm user-20=solointe user-21=jaramk user-22=pelagini user-23=bbbustou user-24=kaoilmk user-25=biplmk user-26=tehnodro user-27=makdrone user-28=jpkomuna user-29=izzomk user-30=aptekafa user-31=madzomk user-32=evacommk user-33=gradbai1 user-34=dimpalne user-35=eaptekam user-36=fxxcom user-37=peshkai1 user-38=folklore user-39=bauerin2 user-40=cupidpro user-41=vegemk1 user-42=euronic3 user-43=conserva user-44=evberasm user-45=bonitavi user-46=fffhpcwr user-47=starluxm user-48=radekrat user-49=fiziosmk
Sep 11 09:42:34 power sudo[959165]: wp-toolkit : (command continued) user-50=ambitiou user-51=versusmk user-52=nationa2 user-53=onlinesh user-54=mapaspla user-55=solemor1 user-56=tcieuroc user-57=zdmgpsor user-58=aquatech user-59=gorsajmk user-60=supremel user-61=v5srybi9dcdx user-62=vacuacti user-63=premiumi user-64=innofabl user-65=prizmapl user-66=fnjorgmk user-67=darkogor user-68=dslmk user-69=bozinovm user-70=tehnologija user-71=taneccom user-72=modernar user-73=inkigaic user-74=imdskopj user-75=albuname user-76=glammace user-77=infopor1 user-78=pravekom user-79=vtranseu user-80=euromaki user-81=cosmatob user-82=zapovim1 user-83=elektrot user-84=samasped user-85=chemhemc user-86=nutrivim user-87=apgrupmk user-88=carrent1 user-89=bogdanos user-90=mediasol user-91=kardiome user-92=matratze user-93=euronic2 user-94=mediatag user-95=intelek1 user-96=lblawcom user-97=nucktra1 user-98=forzares user-99=nikimare user-100=aptekazd user-101=nikolov1 user-102=hausmark user-103=drleomk
Sep 11 09:42:34 power sudo[959165]: wp-toolkit : (command continued) user-104=inotekso user-105=jpparkin user-106=screenme user-107=arturaco user-108=karpospo user-109=nasaidni user-110=ideaplus user-111=butelmk user-112=daris user-113=premiums user-114=premiuma user-115=kouzonco user-116=dalmacom user-117=cetplatf user-118=zvskopje user-119=zampmk user-120=busymard user-121=palenzok user-122=custome1 user-123=stokovna user-124=sparkupm user-125=klimimk user-126=stojano1 user-127=bovincom user-128=itradeco user-129=janiboja user-130=cabinetm user-131=vezilkac user-132=urbanexp user-133=wikicamp user-134=detskagr user-135=spdcompu user-136=infobadi user-137=mspmk user-138=bizporta user-139=maleshne user-140=datelcom user-141=groskome user-142=ivanjord user-143=sedcmk user-144=polyeste user-145=vfxnestc user-146=datalink user-147=kujnamon user-148=univerz1 user-149=velmk user-150=gogovan1 user-151=mpbmk user-152=agrosind user-153=workandt user-154=barececo user-155=getaldus
Sep 11 09:42:34 power sudo[959165]: wp-toolkit : (command continued) user-156=simbiome user-157=delcevca user-158=mfashion user-159=dhamachi user-160=volkanco user-161=goartsym user-162=skyapart user-163=bianasho user-164=makoasmk user-165=rasmorgm user-166=avtogumi user-167=socioloz user-168=pelagoni user-169=evolvepl user-170=hidrommk user-171=frizered user-172=caramk user-173=ekostoc1 user-174=oncolog1 user-175=levantmk user-176=nefrolog user-177=hotammk user-178=cajsproc user-179=anitermc user-180=youthgua user-181=stojnevi user-182=bauerbg user-183=uhostmk5 user-184=oouslave user-185=raremk user-186=trudovop user-187=viewinn user-188=vmro user-189=enaspotc user-190=tealmk user-191=proverim user-192=dadarmk user-193=mstmmk user-194=goodnews user-195=gocruise user-196=gjorgeiv user-197=tradeyou user-198=dnevnoin user-199=stravelm user-200=robustco user-201=wondersp user-202=pecakome user-203=rastiraz user-204=holiyayt user-205=berbermk user-206=edomcomm user-207=herbalpl
Sep 11 09:42:34 power sudo[959165]: wp-toolkit : (command continued) user-208=enochmk user-209=sprintst user-210=dikimk12 user-211=seloviro user-212=kolened1 user-213=centarba user-214=nlpmkorg user-215=nolimits feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 09:42:34 power sudo[959165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:35 power sudo[959165]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:35 power sudo[959187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 09:42:35 power sudo[959187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:35 power sudo[959187]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:35 power sudo[959192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-J55tcwrnzrJs2qvi.~
Sep 11 09:42:35 power sudo[959192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:35 power sudo[959192]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:35 power sudo[959198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-J55tcwrnzrJs2qvi.~\''
Sep 11 09:42:35 power sudo[959198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:35 power sudo[959198]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:35 power sudo[959204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-J55tcwrnzrJs2qvi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 09:42:35 power sudo[959204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:35 power sudo[959204]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:35 power sudo[959209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 09:42:35 power sudo[959209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:35 power sudo[959209]: pam_unix(sudo:session): session closed for user root
Sep 11 09:42:39 power sudo[959810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 09:42:39 power sudo[959810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:42:39 power sudo[959810]: pam_unix(sudo:session): session closed for user root
Sep 11 09:45:01 power systemd[964364]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:47:20 power sudo[968072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 09:47:20 power sudo[968072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:47:20 power sudo[968072]: pam_unix(sudo:session): session closed for user root
Sep 11 09:47:20 power sudo[968079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 09:47:20 power sudo[968079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:47:20 power sudo[968079]: pam_unix(sudo:session): session closed for user root
Sep 11 09:47:20 power sudo[968090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 11 09:47:20 power sudo[968090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:47:20 power sudo[968090]: pam_unix(sudo:session): session closed for user root
Sep 11 09:47:20 power sudo[968095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 11 09:47:20 power sudo[968095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:47:20 power sudo[968095]: pam_unix(sudo:session): session closed for user root
Sep 11 09:47:20 power sudo[968099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit.conf
Sep 11 09:47:20 power sudo[968099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:47:20 power sudo[968099]: pam_unix(sudo:session): session closed for user root
Sep 11 09:49:16 power sudo[971793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 09:49:16 power sudo[971793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:49:16 power sudo[971793]: pam_unix(sudo:session): session closed for user root
Sep 11 09:49:16 power sudo[971801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 11 09:49:16 power sudo[971801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 09:49:16 power sudo[971801]: pam_unix(sudo:session): session closed for user root
Sep 11 09:50:01 power systemd[973344]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 09:55:01 power systemd[1010532]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:00:01 power systemd[1071501]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:00:01 power systemd[1071503]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 10:00:01 power systemd[1071504]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 10:00:01 power systemd[1071506]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 10:05:02 power systemd[1127441]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:06:01 power systemd[1137949]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 10:07:01 power systemd[1139455]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 10:10:01 power systemd[1144234]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:12:01 power systemd[1147516]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 10:15:01 power systemd[1151638]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:20:01 power systemd[1158973]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:25:01 power systemd[1166980]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:30:01 power systemd[1174953]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:30:01 power systemd[1174954]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 10:30:01 power systemd[1174955]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 10:30:01 power systemd[1174956]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 10:35:01 power systemd[1182210]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:36:01 power systemd[1183438]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 10:37:01 power systemd[1184740]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 10:40:01 power systemd[1188036]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:42:01 power systemd[1190344]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 10:42:09 power sudo[1190524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 10:42:09 power sudo[1190524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:09 power sudo[1190524]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:09 power sudo[1190528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 10:42:09 power sudo[1190528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:09 power sudo[1190528]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:09 power sudo[1190533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 10:42:09 power sudo[1190533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:09 power sudo[1190533]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:09 power sudo[1190537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=bE22f7bjtf'
Sep 11 10:42:09 power sudo[1190537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:09 power sudo[1190537]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:09 power sudo[1190542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 10:42:09 power sudo[1190542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:09 power sudo[1190542]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:09 power sudo[1190546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 10:42:09 power sudo[1190546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:09 power sudo[1190546]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:09 power sudo[1190551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 10:42:09 power sudo[1190551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:09 power sudo[1190551]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:09 power sudo[1190555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 10:42:09 power sudo[1190555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:09 power sudo[1190555]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:09 power sudo[1190560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 10:42:10 power sudo[1190560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:10 power sudo[1190560]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:10 power sudo[1190564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 10:42:10 power sudo[1190564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:10 power sudo[1190564]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:10 power sudo[1190569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 10:42:10 power sudo[1190569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:10 power sudo[1190569]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:10 power sudo[1190574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 10:42:10 power sudo[1190574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:10 power sudo[1190574]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:10 power sudo[1190578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 10:42:10 power sudo[1190578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:10 power sudo[1190578]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:10 power sudo[1190585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 10:42:10 power sudo[1190585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:10 power sudo[1190585]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:12 power sudo[1190642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 10:42:12 power sudo[1190642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:12 power sudo[1190642]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:12 power sudo[1190647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 10:42:12 power sudo[1190647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:12 power sudo[1190647]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:12 power sudo[1190656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=euronic2 user-2=matratze user-3=kardiome user-4=apgrupmk user-5=mediasol user-6=carrent1 user-7=bogdanos user-8=nikolov1 user-9=hausmark user-10=forzares user-11=aptekazd user-12=nikimare user-13=lblawcom user-14=nucktra1 user-15=intelek1 user-16=mediatag user-17=vtranseu user-18=pravekom user-19=infopor1 user-20=glammace user-21=albuname user-22=imdskopj user-23=nutrivim user-24=chemhemc user-25=samasped user-26=zapovim1 user-27=elektrot user-28=cosmatob user-29=euromaki user-30=supremel user-31=v5srybi9dcdx user-32=gorsajmk user-33=aquatech user-34=zdmgpsor user-35=inkigaic user-36=modernar user-37=tehnologija user-38=taneccom user-39=innofabl user-40=premiumi user-41=vacuacti user-42=bozinovm user-43=darkogor user-44=prizmapl user-45=dslmk user-46=fnjorgmk user-47=versusmk user-48=fiziosmk
Sep 11 10:42:12 power sudo[1190656]: wp-toolkit : (command continued) user-49=ambitiou user-50=radekrat user-51=starluxm user-52=fffhpcwr user-53=tcieuroc user-54=mapaspla user-55=solemor1 user-56=nationa2 user-57=onlinesh user-58=bauerin2 user-59=folklore user-60=bonitavi user-61=evberasm user-62=conserva user-63=vegemk1 user-64=cupidpro user-65=euronic3 user-66=jpkomuna user-67=izzomk user-68=makdrone user-69=tehnodro user-70=peshkai1 user-71=fxxcom user-72=dimpalne user-73=eaptekam user-74=gradbai1 user-75=evacommk user-76=madzomk user-77=aptekafa user-78=solointe user-79=jaramk user-80=recorgmk user-81=taktcomm user-82=animatem user-83=cleanerm user-84=progress user-85=atspedco user-86=sssoluti user-87=bbbustou user-88=kaoilmk user-89=biplmk user-90=pelagini user-91=viplastc user-92=wineberr user-93=mbmehani user-94=ismassag user-95=workbenc user-96=electrol user-97=trigemat user-98=naksorgm user-99=eliksirz user-100=golakkom user-101=solarinv user-102=eurofarm
Sep 11 10:42:12 power sudo[1190656]: wp-toolkit : (command continued) user-103=sprintst user-104=herbalpl user-105=enochmk user-106=dikimk12 user-107=berbermk user-108=edomcomm user-109=nolimits user-110=nlpmkorg user-111=centarba user-112=kolened1 user-113=seloviro user-114=gocruise user-115=mstmmk user-116=goodnews user-117=proverim user-118=dadarmk user-119=tealmk user-120=rastiraz user-121=holiyayt user-122=wondersp user-123=stravelm user-124=robustco user-125=pecakome user-126=dnevnoin user-127=gjorgeiv user-128=tradeyou user-129=youthgua user-130=anitermc user-131=hotammk user-132=cajsproc user-133=vmro user-134=viewinn user-135=trudovop user-136=enaspotc user-137=uhostmk5 user-138=bauerbg user-139=raremk user-140=oouslave user-141=stojnevi user-142=evolvepl user-143=pelagoni user-144=socioloz user-145=avtogumi user-146=nefrolog user-147=ekostoc1 user-148=levantmk user-149=oncolog1 user-150=caramk user-151=frizered user-152=hidrommk user-153=agrosind user-154=mpbmk
Sep 11 10:42:12 power sudo[1190656]: wp-toolkit : (command continued) user-155=gogovan1 user-156=velmk user-157=kujnamon user-158=univerz1 user-159=datalink user-160=rasmorgm user-161=makoasmk user-162=bianasho user-163=skyapart user-164=mfashion user-165=goartsym user-166=volkanco user-167=dhamachi user-168=workandt user-169=delcevca user-170=getaldus user-171=simbiome user-172=barececo user-173=mspmk user-174=infobadi user-175=detskagr user-176=spdcompu user-177=urbanexp user-178=wikicamp user-179=vfxnestc user-180=polyeste user-181=groskome user-182=ivanjord user-183=sedcmk user-184=datelcom user-185=maleshne user-186=bizporta user-187=klimimk user-188=sparkupm user-189=stokovna user-190=custome1 user-191=busymard user-192=zampmk user-193=zvskopje user-194=palenzok user-195=cabinetm user-196=vezilkac user-197=itradeco user-198=janiboja user-199=bovincom user-200=stojano1 user-201=premiums user-202=daris user-203=butelmk user-204=screenme user-205=arturaco user-206=ideaplus
Sep 11 10:42:12 power sudo[1190656]: wp-toolkit : (command continued) user-207=nasaidni user-208=karpospo user-209=drleomk user-210=jpparkin user-211=inotekso user-212=dalmacom user-213=cetplatf user-214=premiuma user-215=kouzonco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 10:42:12 power sudo[1190656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:12 power sudo[1190656]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:12 power sudo[1190667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 10:42:12 power sudo[1190667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:12 power sudo[1190667]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:12 power sudo[1190672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-doviwG3uro1wUzRq.~
Sep 11 10:42:12 power sudo[1190672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:12 power sudo[1190672]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:12 power sudo[1190676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-doviwG3uro1wUzRq.~\''
Sep 11 10:42:12 power sudo[1190676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:12 power sudo[1190676]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:12 power sudo[1190681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-doviwG3uro1wUzRq.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 10:42:12 power sudo[1190681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:12 power sudo[1190681]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:12 power sudo[1190685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 10:42:12 power sudo[1190685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:12 power sudo[1190685]: pam_unix(sudo:session): session closed for user root
Sep 11 10:42:17 power sudo[1191446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 10:42:17 power sudo[1191446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 10:42:17 power sudo[1191446]: pam_unix(sudo:session): session closed for user root
Sep 11 10:45:01 power systemd[1194722]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:50:01 power systemd[1202913]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 10:55:01 power systemd[1252700]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 10:55:01 power systemd[1252703]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:00:01 power systemd[1296752]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:00:01 power systemd[1296749]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:00:01 power systemd[1296753]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 11:00:01 power systemd[1296755]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 11:00:02 power systemd[1296757]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 11:04:01 power systemd[1303468]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:05:01 power systemd[1305352]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:05:01 power systemd[1305359]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:06:01 power systemd[1306741]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 11:07:01 power systemd[1308276]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 11:09:01 power systemd[1310801]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:10:01 power systemd[1312098]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:10:01 power systemd[1312099]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:12:01 power systemd[1314756]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 11:14:52 power sudo[1317883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=tehnologija Locale get_user_locale --output=json'
Sep 11 11:14:52 power systemd[1317888]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:14:53 power sudo[1317883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317883]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 11:14:53 power sudo[1317913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317913]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 11:14:53 power sudo[1317918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317918]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep 11 11:14:53 power sudo[1317924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317924]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnologija'
Sep 11 11:14:53 power sudo[1317935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317935]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnologija/demo.tehnologija.mk/wp-toolkit.conf
Sep 11 11:14:53 power sudo[1317944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317944]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnologija/demo.tehnologija.mk/wp-toolkit.conf
Sep 11 11:14:53 power sudo[1317948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317948]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnologija/demo.tehnologija.mk/wp-toolkit.conf
Sep 11 11:14:53 power sudo[1317952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317952]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnologija/tehnologija.com.mk/wp-toolkit.conf
Sep 11 11:14:53 power sudo[1317957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317957]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnologija/tehnologija.com.mk/wp-toolkit.conf
Sep 11 11:14:53 power sudo[1317961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317961]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnologija/tehnologija.com.mk/wp-toolkit.conf
Sep 11 11:14:53 power sudo[1317965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317965]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnologija/tehnologija.mk/wp-toolkit.conf
Sep 11 11:14:53 power sudo[1317969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317969]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnologija/tehnologija.mk/wp-toolkit.conf
Sep 11 11:14:53 power sudo[1317974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317974]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnologija/tehnologija.mk/wp-toolkit.conf
Sep 11 11:14:53 power sudo[1317979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317979]: pam_unix(sudo:session): session closed for user root
Sep 11 11:14:53 power sudo[1317983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'find -H /home/tehnologija/public_html/demo.tehnologija.mk -type d -name wp-includes -printf \'%h\\0\''
Sep 11 11:14:53 power sudo[1317983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:14:53 power sudo[1317983]: pam_unix(sudo:session): session closed for user root
Sep 11 11:15:01 power systemd[1318247]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:15:47 power sudo[1319942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 11:15:47 power systemd[1319947]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:15:47 power sudo[1319942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:15:47 power sudo[1319942]: pam_unix(sudo:session): session closed for user root
Sep 11 11:15:47 power sudo[1319968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnologija'
Sep 11 11:15:48 power sudo[1319968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:15:48 power sudo[1319968]: pam_unix(sudo:session): session closed for user root
Sep 11 11:16:26 power sshd[1321222]: error: kex_exchange_identification: Connection closed by remote host
Sep 11 11:16:26 power sshd[1321222]: Connection closed by 98.159.233.31 port 34791
Sep 11 11:18:18 power sshd[1323330]: Connection closed by 206.168.34.70 port 51870 [preauth]
Sep 11 11:20:01 power systemd[1325654]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:20:01 power systemd[1325655]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:25:01 power systemd[1331542]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:25:01 power systemd[1331544]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:30:01 power systemd[1337485]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:30:01 power systemd[1337488]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:30:01 power systemd[1337489]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 11:30:01 power systemd[1337490]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 11:30:01 power systemd[1337492]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 11:35:01 power systemd[1343772]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:35:01 power systemd[1343773]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:36:01 power systemd[1344946]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 11:37:01 power systemd[1346187]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 11:39:01 power systemd[1348541]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:40:01 power systemd[1349710]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:40:01 power systemd[1349714]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:42:01 power systemd[1351930]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 11:42:09 power sudo[1352085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 11:42:09 power systemd[1352090]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:42:09 power sudo[1352085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:09 power sudo[1352085]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:09 power sudo[1352104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 11:42:09 power sudo[1352104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:09 power sudo[1352104]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:09 power sudo[1352108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 11:42:09 power sudo[1352108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:09 power sudo[1352108]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:09 power sudo[1352112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=ktalGksRP9'
Sep 11 11:42:09 power sudo[1352112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:09 power sudo[1352112]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:09 power sudo[1352119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 11:42:09 power sudo[1352119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:09 power sudo[1352119]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:09 power sudo[1352123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 11:42:09 power sudo[1352123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:09 power sudo[1352123]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:09 power sudo[1352127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 11:42:09 power sudo[1352127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:09 power sudo[1352127]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:09 power sudo[1352131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 11:42:09 power sudo[1352131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:10 power sudo[1352131]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:10 power sudo[1352136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 11:42:10 power sudo[1352136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:10 power sudo[1352136]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:10 power sudo[1352141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 11:42:10 power sudo[1352141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:10 power sudo[1352141]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:10 power sudo[1352145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 11:42:10 power sudo[1352145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:10 power sudo[1352145]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:10 power sudo[1352149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 11:42:10 power sudo[1352149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:10 power sudo[1352149]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:10 power sudo[1352153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 11:42:10 power sudo[1352153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:10 power sudo[1352153]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:10 power sudo[1352157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 11:42:10 power sudo[1352157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:10 power sudo[1352157]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:12 power sudo[1352215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 11:42:12 power sudo[1352215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:12 power sudo[1352215]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:12 power sudo[1352220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 11:42:12 power sudo[1352220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:12 power sudo[1352220]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:12 power sudo[1352227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=folklore user-2=bauerin2 user-3=bonitavi user-4=evberasm user-5=euronic3 user-6=vegemk1 user-7=cupidpro user-8=conserva user-9=izzomk user-10=jpkomuna user-11=tehnodro user-12=makdrone user-13=eaptekam user-14=dimpalne user-15=peshkai1 user-16=fxxcom user-17=evacommk user-18=madzomk user-19=aptekafa user-20=gradbai1 user-21=recorgmk user-22=taktcomm user-23=jaramk user-24=solointe user-25=sssoluti user-26=atspedco user-27=progress user-28=animatem user-29=cleanerm user-30=kaoilmk user-31=biplmk user-32=bbbustou user-33=pelagini user-34=wineberr user-35=viplastc user-36=workbenc user-37=ismassag user-38=mbmehani user-39=golakkom user-40=trigemat user-41=eliksirz user-42=naksorgm user-43=electrol user-44=eurofarm user-45=solarinv user-46=euronic2 user-47=matratze user-48=mediasol user-49=carrent1
Sep 11 11:42:12 power sudo[1352227]: wp-toolkit : (command continued) user-50=bogdanos user-51=apgrupmk user-52=kardiome user-53=aptekazd user-54=nikimare user-55=forzares user-56=hausmark user-57=nikolov1 user-58=intelek1 user-59=mediatag user-60=nucktra1 user-61=lblawcom user-62=infopor1 user-63=vtranseu user-64=pravekom user-65=imdskopj user-66=glammace user-67=albuname user-68=samasped user-69=chemhemc user-70=nutrivim user-71=cosmatob user-72=euromaki user-73=elektrot user-74=zapovim1 user-75=gorsajmk user-76=aquatech user-77=v5srybi9dcdx user-78=supremel user-79=zdmgpsor user-80=modernar user-81=inkigaic user-82=bozinovm user-83=prizmapl user-84=darkogor user-85=fnjorgmk user-86=dslmk user-87=innofabl user-88=premiumi user-89=vacuacti user-90=taneccom user-91=tehnologija user-92=ambitiou user-93=fiziosmk user-94=versusmk user-95=fffhpcwr user-96=radekrat user-97=starluxm user-98=tcieuroc user-99=onlinesh user-100=nationa2 user-101=solemor1 user-102=mapaspla user-103=agrosind
Sep 11 11:42:12 power sudo[1352227]: wp-toolkit : (command continued) user-104=mpbmk user-105=datalink user-106=velmk user-107=gogovan1 user-108=univerz1 user-109=kujnamon user-110=makoasmk user-111=bianasho user-112=skyapart user-113=rasmorgm user-114=delcevca user-115=getaldus user-116=simbiome user-117=barececo user-118=workandt user-119=goartsym user-120=volkanco user-121=dhamachi user-122=mfashion user-123=spdcompu user-124=detskagr user-125=infobadi user-126=mspmk user-127=wikicamp user-128=urbanexp user-129=sedcmk user-130=ivanjord user-131=groskome user-132=vfxnestc user-133=polyeste user-134=bizporta user-135=datelcom user-136=maleshne user-137=sparkupm user-138=stokovna user-139=klimimk user-140=palenzok user-141=busymard user-142=zampmk user-143=zvskopje user-144=custome1 user-145=janiboja user-146=itradeco user-147=vezilkac user-148=cabinetm user-149=stojano1 user-150=bovincom user-151=ideaplus user-152=karpospo user-153=nasaidni user-154=screenme user-155=arturaco
Sep 11 11:42:12 power sudo[1352227]: wp-toolkit : (command continued) user-156=premiums user-157=daris user-158=butelmk user-159=jpparkin user-160=inotekso user-161=drleomk user-162=kouzonco user-163=premiuma user-164=cetplatf user-165=dalmacom user-166=dikimk12 user-167=sprintst user-168=herbalpl user-169=enochmk user-170=edomcomm user-171=berbermk user-172=centarba user-173=nlpmkorg user-174=kolened1 user-175=nolimits user-176=seloviro user-177=goodnews user-178=mstmmk user-179=gocruise user-180=tealmk user-181=dadarmk user-182=proverim user-183=pecakome user-184=wondersp user-185=robustco user-186=stravelm user-187=holiyayt user-188=rastiraz user-189=gjorgeiv user-190=tradeyou user-191=dnevnoin user-192=youthgua user-193=anitermc user-194=cajsproc user-195=hotammk user-196=enaspotc user-197=vmro user-198=trudovop user-199=viewinn user-200=stojnevi user-201=raremk user-202=oouslave user-203=uhostmk5 user-204=bauerbg user-205=evolvepl user-206=socioloz user-207=avtogumi
Sep 11 11:42:12 power sudo[1352227]: wp-toolkit : (command continued) user-208=pelagoni user-209=nefrolog user-210=oncolog1 user-211=levantmk user-212=ekostoc1 user-213=frizered user-214=hidrommk user-215=caramk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 11:42:12 power sudo[1352227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:13 power sudo[1352227]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:13 power sudo[1352234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 11:42:13 power sudo[1352234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:13 power sudo[1352234]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:13 power sudo[1352238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-75v6yIQrsYbSkqr0.~
Sep 11 11:42:13 power sudo[1352238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:13 power sudo[1352238]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:13 power sudo[1352242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-75v6yIQrsYbSkqr0.~\''
Sep 11 11:42:13 power sudo[1352242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:13 power sudo[1352242]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:13 power sudo[1352247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-75v6yIQrsYbSkqr0.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 11:42:13 power sudo[1352247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:13 power sudo[1352247]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:13 power sudo[1352251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 11:42:13 power sudo[1352251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:13 power sudo[1352251]: pam_unix(sudo:session): session closed for user root
Sep 11 11:42:17 power sudo[1353209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 11:42:17 power sudo[1353209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:42:17 power sudo[1353209]: pam_unix(sudo:session): session closed for user root
Sep 11 11:45:01 power systemd[1355836]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:45:01 power systemd[1355837]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:50:01 power systemd[1361665]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:50:01 power systemd[1361668]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:55:01 power systemd[1367160]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:55:01 power systemd[1367161]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 11:59:31 power sudo[1371709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 11:59:31 power systemd[1371714]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:59:31 power sudo[1371709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:31 power sudo[1371709]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:31 power sudo[1371733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 11:59:31 power sudo[1371733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:31 power sudo[1371733]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:31 power sudo[1371743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 11:59:31 power sudo[1371743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:31 power sudo[1371743]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:31 power sudo[1371754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 11:59:31 power sudo[1371754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:31 power sudo[1371754]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:31 power sudo[1371764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=ambitiou user-2=fiziosmk user-3=versusmk user-4=fffhpcwr user-5=starluxm user-6=radekrat user-7=tcieuroc user-8=onlinesh user-9=nationa2 user-10=solemor1 user-11=mapaspla user-12=aquatech user-13=gorsajmk user-14=v5srybi9dcdx user-15=supremel user-16=zdmgpsor user-17=modernar user-18=inkigaic user-19=fnjorgmk user-20=darkogor user-21=prizmapl user-22=dslmk user-23=bozinovm user-24=vacuacti user-25=innofabl user-26=premiumi user-27=taneccom user-28=tehnologija user-29=infopor1 user-30=pravekom user-31=vtranseu user-32=imdskopj user-33=albuname user-34=glammace user-35=samasped user-36=chemhemc user-37=nutrivim user-38=euromaki user-39=cosmatob user-40=elektrot user-41=zapovim1 user-42=matratze user-43=euronic2 user-44=carrent1 user-45=bogdanos user-46=mediasol user-47=apgrupmk user-48=kardiome user-49=nikimare
Sep 11 11:59:31 power sudo[1371764]: wp-toolkit : (command continued) user-50=aptekazd user-51=forzares user-52=nikolov1 user-53=hausmark user-54=mediatag user-55=intelek1 user-56=nucktra1 user-57=lblawcom user-58=wineberr user-59=viplastc user-60=workbenc user-61=ismassag user-62=mbmehani user-63=golakkom user-64=eliksirz user-65=naksorgm user-66=trigemat user-67=electrol user-68=eurofarm user-69=solarinv user-70=taktcomm user-71=recorgmk user-72=jaramk user-73=solointe user-74=sssoluti user-75=atspedco user-76=progress user-77=cleanerm user-78=animatem user-79=biplmk user-80=kaoilmk user-81=bbbustou user-82=pelagini user-83=izzomk user-84=jpkomuna user-85=tehnodro user-86=makdrone user-87=eaptekam user-88=dimpalne user-89=fxxcom user-90=peshkai1 user-91=madzomk user-92=aptekafa user-93=evacommk user-94=gradbai1 user-95=folklore user-96=bauerin2 user-97=evberasm user-98=bonitavi user-99=euronic3 user-100=cupidpro user-101=vegemk1 user-102=conserva user-103=evolvepl
Sep 11 11:59:31 power sudo[1371764]: wp-toolkit : (command continued) user-104=avtogumi user-105=socioloz user-106=pelagoni user-107=ekostoc1 user-108=levantmk user-109=oncolog1 user-110=nefrolog user-111=hidrommk user-112=frizered user-113=caramk user-114=anitermc user-115=youthgua user-116=cajsproc user-117=hotammk user-118=enaspotc user-119=trudovop user-120=viewinn user-121=vmro user-122=stojnevi user-123=oouslave user-124=raremk user-125=bauerbg user-126=uhostmk5 user-127=goodnews user-128=mstmmk user-129=gocruise user-130=tealmk user-131=dadarmk user-132=proverim user-133=pecakome user-134=stravelm user-135=robustco user-136=wondersp user-137=holiyayt user-138=rastiraz user-139=gjorgeiv user-140=tradeyou user-141=dnevnoin user-142=dikimk12 user-143=enochmk user-144=herbalpl user-145=sprintst user-146=edomcomm user-147=berbermk user-148=kolened1 user-149=centarba user-150=nlpmkorg user-151=nolimits user-152=seloviro user-153=karpospo user-154=nasaidni user-155=ideaplus
Sep 11 11:59:31 power sudo[1371764]: wp-toolkit : (command continued) user-156=arturaco user-157=screenme user-158=daris user-159=butelmk user-160=premiums user-161=inotekso user-162=jpparkin user-163=drleomk user-164=kouzonco user-165=premiuma user-166=cetplatf user-167=dalmacom user-168=stokovna user-169=sparkupm user-170=klimimk user-171=palenzok user-172=zampmk user-173=busymard user-174=zvskopje user-175=custome1 user-176=janiboja user-177=itradeco user-178=vezilkac user-179=cabinetm user-180=stojano1 user-181=bovincom user-182=spdcompu user-183=detskagr user-184=mspmk user-185=infobadi user-186=wikicamp user-187=urbanexp user-188=sedcmk user-189=ivanjord user-190=groskome user-191=polyeste user-192=vfxnestc user-193=bizporta user-194=maleshne user-195=datelcom user-196=mpbmk user-197=agrosind user-198=datalink user-199=univerz1 user-200=kujnamon user-201=gogovan1 user-202=velmk user-203=skyapart user-204=bianasho user-205=makoasmk user-206=rasmorgm user-207=barececo
Sep 11 11:59:31 power sudo[1371764]: wp-toolkit : (command continued) user-208=simbiome user-209=getaldus user-210=delcevca user-211=workandt user-212=dhamachi user-213=volkanco user-214=goartsym user-215=mfashion feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 11:59:31 power sudo[1371764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:32 power sudo[1371764]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:32 power sudo[1371788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 11:59:32 power sudo[1371788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:32 power sudo[1371788]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:32 power sudo[1371793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 11:59:32 power sudo[1371793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:32 power sudo[1371793]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:35 power sudo[1371825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 11:59:35 power sudo[1371825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:35 power sudo[1371825]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:35 power sudo[1371833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 11:59:35 power sudo[1371833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:35 power sudo[1371833]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:35 power sudo[1371839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 11:59:35 power sudo[1371839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:35 power sudo[1371839]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:35 power sudo[1371844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=dimpalne user-2=eaptekam user-3=peshkai1 user-4=fxxcom user-5=evacommk user-6=madzomk user-7=aptekafa user-8=gradbai1 user-9=jpkomuna user-10=izzomk user-11=tehnodro user-12=makdrone user-13=bonitavi user-14=evberasm user-15=vegemk1 user-16=cupidpro user-17=euronic3 user-18=conserva user-19=folklore user-20=bauerin2 user-21=golakkom user-22=electrol user-23=trigemat user-24=eliksirz user-25=naksorgm user-26=eurofarm user-27=solarinv user-28=viplastc user-29=wineberr user-30=ismassag user-31=workbenc user-32=mbmehani user-33=bbbustou user-34=kaoilmk user-35=biplmk user-36=pelagini user-37=taktcomm user-38=recorgmk user-39=solointe user-40=jaramk user-41=sssoluti user-42=atspedco user-43=animatem user-44=cleanerm user-45=progress user-46=chemhemc user-47=samasped user-48=nutrivim user-49=euromaki
Sep 11 11:59:35 power sudo[1371844]: wp-toolkit : (command continued) user-50=cosmatob user-51=zapovim1 user-52=elektrot user-53=infopor1 user-54=pravekom user-55=vtranseu user-56=imdskopj user-57=glammace user-58=albuname user-59=forzares user-60=aptekazd user-61=nikimare user-62=hausmark user-63=nikolov1 user-64=intelek1 user-65=mediatag user-66=lblawcom user-67=nucktra1 user-68=euronic2 user-69=matratze user-70=apgrupmk user-71=mediasol user-72=carrent1 user-73=bogdanos user-74=kardiome user-75=tcieuroc user-76=nationa2 user-77=onlinesh user-78=mapaspla user-79=solemor1 user-80=fiziosmk user-81=ambitiou user-82=versusmk user-83=fffhpcwr user-84=radekrat user-85=starluxm user-86=modernar user-87=inkigaic user-88=innofabl user-89=premiumi user-90=vacuacti user-91=bozinovm user-92=darkogor user-93=prizmapl user-94=fnjorgmk user-95=dslmk user-96=tehnologija user-97=taneccom user-98=gorsajmk user-99=aquatech user-100=supremel user-101=v5srybi9dcdx user-102=zdmgpsor user-103=ivanjord
Sep 11 11:59:35 power sudo[1371844]: wp-toolkit : (command continued) user-104=groskome user-105=sedcmk user-106=vfxnestc user-107=polyeste user-108=bizporta user-109=datelcom user-110=maleshne user-111=detskagr user-112=spdcompu user-113=mspmk user-114=infobadi user-115=urbanexp user-116=wikicamp user-117=bianasho user-118=makoasmk user-119=skyapart user-120=rasmorgm user-121=workandt user-122=simbiome user-123=getaldus user-124=delcevca user-125=barececo user-126=mfashion user-127=volkanco user-128=goartsym user-129=dhamachi user-130=agrosind user-131=mpbmk user-132=datalink user-133=velmk user-134=gogovan1 user-135=univerz1 user-136=kujnamon user-137=premiuma user-138=kouzonco user-139=dalmacom user-140=cetplatf user-141=screenme user-142=arturaco user-143=ideaplus user-144=karpospo user-145=nasaidni user-146=premiums user-147=daris user-148=butelmk user-149=drleomk user-150=jpparkin user-151=inotekso user-152=itradeco user-153=janiboja user-154=cabinetm user-155=vezilkac
Sep 11 11:59:35 power sudo[1371844]: wp-toolkit : (command continued) user-156=stojano1 user-157=bovincom user-158=sparkupm user-159=stokovna user-160=klimimk user-161=busymard user-162=zampmk user-163=zvskopje user-164=palenzok user-165=custome1 user-166=wondersp user-167=robustco user-168=stravelm user-169=pecakome user-170=rastiraz user-171=holiyayt user-172=gjorgeiv user-173=tradeyou user-174=dnevnoin user-175=mstmmk user-176=goodnews user-177=gocruise user-178=tealmk user-179=proverim user-180=dadarmk user-181=nlpmkorg user-182=centarba user-183=kolened1 user-184=nolimits user-185=seloviro user-186=sprintst user-187=enochmk user-188=herbalpl user-189=dikimk12 user-190=berbermk user-191=edomcomm user-192=nefrolog user-193=levantmk user-194=oncolog1 user-195=ekostoc1 user-196=frizered user-197=hidrommk user-198=caramk user-199=evolvepl user-200=avtogumi user-201=socioloz user-202=pelagoni user-203=vmro user-204=trudovop user-205=viewinn user-206=enaspotc user-207=stojnevi
Sep 11 11:59:35 power sudo[1371844]: wp-toolkit : (command continued) user-208=uhostmk5 user-209=bauerbg user-210=raremk user-211=oouslave user-212=youthgua user-213=anitermc user-214=hotammk user-215=cajsproc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 11:59:35 power sudo[1371844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:35 power sudo[1371844]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:35 power sudo[1371859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk ResourceUsage get_usages --output=json'
Sep 11 11:59:35 power sudo[1371859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:36 power sudo[1371859]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:36 power sudo[1371879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=database_prefix --output=json'
Sep 11 11:59:36 power sudo[1371879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:36 power sudo[1371879]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:36 power sudo[1371884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql get_restrictions --output=json'
Sep 11 11:59:36 power sudo[1371884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:36 power sudo[1371884]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:36 power sudo[1371897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 11 11:59:36 power sudo[1371897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:37 power sudo[1371897]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:37 power sudo[1371906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/
Sep 11 11:59:37 power sudo[1371906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:37 power sudo[1371906]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:37 power sudo[1371912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk find /home/berbermk/public_html/ -mindepth 1 -maxdepth 1 -printf %f\\0
Sep 11 11:59:37 power sudo[1371912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:37 power sudo[1371912]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:37 power sudo[1371920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 11:59:37 power sudo[1371920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:37 power sudo[1371920]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:37 power sudo[1371927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql list_databases --output=json'
Sep 11 11:59:37 power sudo[1371927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:37 power sudo[1371927]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:38 power sudo[1371948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 11:59:38 power sudo[1371948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:38 power sudo[1371948]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:38 power sudo[1371961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 11:59:38 power sudo[1371961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:38 power sudo[1371961]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:38 power sudo[1371967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 11:59:38 power sudo[1371967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:38 power sudo[1371967]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:38 power sudo[1371974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bonitavi user-2=evberasm user-3=vegemk1 user-4=cupidpro user-5=euronic3 user-6=conserva user-7=folklore user-8=bauerin2 user-9=dimpalne user-10=eaptekam user-11=peshkai1 user-12=fxxcom user-13=evacommk user-14=aptekafa user-15=madzomk user-16=gradbai1 user-17=jpkomuna user-18=izzomk user-19=tehnodro user-20=makdrone user-21=bbbustou user-22=kaoilmk user-23=biplmk user-24=pelagini user-25=taktcomm user-26=recorgmk user-27=solointe user-28=jaramk user-29=sssoluti user-30=atspedco user-31=animatem user-32=cleanerm user-33=progress user-34=golakkom user-35=electrol user-36=trigemat user-37=naksorgm user-38=eliksirz user-39=eurofarm user-40=solarinv user-41=viplastc user-42=wineberr user-43=ismassag user-44=workbenc user-45=mbmehani user-46=forzares user-47=aptekazd user-48=nikimare user-49=nikolov1
Sep 11 11:59:38 power sudo[1371974]: wp-toolkit : (command continued) user-50=hausmark user-51=intelek1 user-52=mediatag user-53=lblawcom user-54=nucktra1 user-55=euronic2 user-56=matratze user-57=apgrupmk user-58=mediasol user-59=carrent1 user-60=bogdanos user-61=kardiome user-62=chemhemc user-63=samasped user-64=nutrivim user-65=cosmatob user-66=euromaki user-67=zapovim1 user-68=elektrot user-69=infopor1 user-70=pravekom user-71=vtranseu user-72=imdskopj user-73=glammace user-74=albuname user-75=modernar user-76=inkigaic user-77=innofabl user-78=premiumi user-79=vacuacti user-80=bozinovm user-81=prizmapl user-82=fnjorgmk user-83=dslmk user-84=darkogor user-85=tehnologija user-86=taneccom user-87=gorsajmk user-88=aquatech user-89=supremel user-90=v5srybi9dcdx user-91=zdmgpsor user-92=tcieuroc user-93=nationa2 user-94=onlinesh user-95=mapaspla user-96=solemor1 user-97=fiziosmk user-98=ambitiou user-99=versusmk user-100=fffhpcwr user-101=radekrat user-102=starluxm user-103=bianasho
Sep 11 11:59:38 power sudo[1371974]: wp-toolkit : (command continued) user-104=makoasmk user-105=skyapart user-106=rasmorgm user-107=workandt user-108=delcevca user-109=getaldus user-110=simbiome user-111=barececo user-112=mfashion user-113=volkanco user-114=goartsym user-115=dhamachi user-116=agrosind user-117=mpbmk user-118=datalink user-119=gogovan1 user-120=velmk user-121=univerz1 user-122=kujnamon user-123=groskome user-124=ivanjord user-125=sedcmk user-126=vfxnestc user-127=polyeste user-128=bizporta user-129=datelcom user-130=maleshne user-131=detskagr user-132=spdcompu user-133=mspmk user-134=infobadi user-135=urbanexp user-136=wikicamp user-137=itradeco user-138=janiboja user-139=cabinetm user-140=vezilkac user-141=stojano1 user-142=bovincom user-143=sparkupm user-144=stokovna user-145=klimimk user-146=zampmk user-147=zvskopje user-148=busymard user-149=palenzok user-150=custome1 user-151=premiuma user-152=kouzonco user-153=dalmacom user-154=cetplatf user-155=arturaco
Sep 11 11:59:38 power sudo[1371974]: wp-toolkit : (command continued) user-156=screenme user-157=ideaplus user-158=nasaidni user-159=karpospo user-160=premiums user-161=butelmk user-162=daris user-163=drleomk user-164=jpparkin user-165=inotekso user-166=nlpmkorg user-167=centarba user-168=kolened1 user-169=nolimits user-170=seloviro user-171=sprintst user-172=herbalpl user-173=enochmk user-174=dikimk12 user-175=berbermk user-176=edomcomm user-177=wondersp user-178=stravelm user-179=robustco user-180=pecakome user-181=rastiraz user-182=holiyayt user-183=tradeyou user-184=gjorgeiv user-185=dnevnoin user-186=mstmmk user-187=goodnews user-188=gocruise user-189=tealmk user-190=proverim user-191=dadarmk user-192=vmro user-193=trudovop user-194=viewinn user-195=enaspotc user-196=stojnevi user-197=uhostmk5 user-198=bauerbg user-199=raremk user-200=oouslave user-201=youthgua user-202=anitermc user-203=hotammk user-204=cajsproc user-205=nefrolog user-206=levantmk user-207=oncolog1
Sep 11 11:59:38 power sudo[1371974]: wp-toolkit : (command continued) user-208=ekostoc1 user-209=frizered user-210=hidrommk user-211=caramk user-212=evolvepl user-213=socioloz user-214=avtogumi user-215=pelagoni feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 11:59:38 power sudo[1371974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:38 power sudo[1371974]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:38 power sudo[1371984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 11 11:59:38 power sudo[1371984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:39 power sudo[1371984]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:39 power sudo[1371999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/
Sep 11 11:59:39 power sudo[1371999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:39 power sudo[1371999]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:39 power sudo[1372004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk find /home/berbermk/public_html/ -mindepth 1 -maxdepth 1 -printf %f\\0
Sep 11 11:59:39 power sudo[1372004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:39 power sudo[1372004]: pam_unix(sudo:session): session closed for user root
Sep 11 11:59:50 power sudo[1372255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 11:59:50 power systemd[1372260]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 11:59:50 power sudo[1372255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 11:59:50 power sudo[1372255]: pam_unix(sudo:session): session closed for user root
Sep 11 12:00:01 power systemd[1372643]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:00:01 power systemd[1372644]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:00:01 power systemd[1372650]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 12:00:01 power systemd[1372647]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 12:00:01 power systemd[1372652]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 12:00:01 power systemd[1372654]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 11 12:01:38 power sudo[1375487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:01:38 power systemd[1375492]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:01:39 power sudo[1375487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:39 power sudo[1375487]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:39 power sudo[1375510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:01:39 power sudo[1375510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:39 power sudo[1375510]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:39 power sudo[1375518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:01:39 power sudo[1375518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:39 power sudo[1375518]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:39 power sudo[1375534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=folklore user-2=bauerin2 user-3=evberasm user-4=bonitavi user-5=cupidpro user-6=vegemk1 user-7=euronic3 user-8=conserva user-9=jpkomuna user-10=izzomk user-11=tehnodro user-12=makdrone user-13=dimpalne user-14=eaptekam user-15=fxxcom user-16=peshkai1 user-17=madzomk user-18=aptekafa user-19=evacommk user-20=gradbai1 user-21=taktcomm user-22=recorgmk user-23=solointe user-24=jaramk user-25=sssoluti user-26=atspedco user-27=cleanerm user-28=animatem user-29=progress user-30=bbbustou user-31=kaoilmk user-32=biplmk user-33=pelagini user-34=viplastc user-35=wineberr user-36=ismassag user-37=workbenc user-38=mbmehani user-39=golakkom user-40=electrol user-41=eliksirz user-42=naksorgm user-43=trigemat user-44=eurofarm user-45=solarinv user-46=matratze user-47=euronic2 user-48=apgrupmk user-49=carrent1
Sep 11 12:01:39 power sudo[1375534]: wp-toolkit : (command continued) user-50=bogdanos user-51=mediasol user-52=kardiome user-53=forzares user-54=nikimare user-55=aptekazd user-56=hausmark user-57=nikolov1 user-58=mediatag user-59=intelek1 user-60=lblawcom user-61=nucktra1 user-62=infopor1 user-63=vtranseu user-64=pravekom user-65=imdskopj user-66=albuname user-67=glammace user-68=chemhemc user-69=samasped user-70=nutrivim user-71=euromaki user-72=cosmatob user-73=zapovim1 user-74=elektrot user-75=aquatech user-76=gorsajmk user-77=supremel user-78=v5srybi9dcdx user-79=zdmgpsor user-80=modernar user-81=inkigaic user-82=vacuacti user-83=premiumi user-84=innofabl user-85=darkogor user-86=prizmapl user-87=dslmk user-88=fnjorgmk user-89=bozinovm user-90=tehnologija user-91=taneccom user-92=fiziosmk user-93=ambitiou user-94=versusmk user-95=fffhpcwr user-96=starluxm user-97=radekrat user-98=tcieuroc user-99=nationa2 user-100=onlinesh user-101=mapaspla user-102=solemor1 user-103=mpbmk
Sep 11 12:01:39 power sudo[1375534]: wp-toolkit : (command continued) user-104=agrosind user-105=datalink user-106=kujnamon user-107=univerz1 user-108=gogovan1 user-109=velmk user-110=skyapart user-111=makoasmk user-112=bianasho user-113=rasmorgm user-114=workandt user-115=barececo user-116=getaldus user-117=delcevca user-118=simbiome user-119=mfashion user-120=dhamachi user-121=goartsym user-122=volkanco user-123=detskagr user-124=spdcompu user-125=mspmk user-126=infobadi user-127=urbanexp user-128=wikicamp user-129=groskome user-130=ivanjord user-131=sedcmk user-132=polyeste user-133=vfxnestc user-134=bizporta user-135=maleshne user-136=datelcom user-137=stokovna user-138=sparkupm user-139=klimimk user-140=zvskopje user-141=zampmk user-142=busymard user-143=palenzok user-144=custome1 user-145=itradeco user-146=janiboja user-147=cabinetm user-148=vezilkac user-149=stojano1 user-150=bovincom user-151=arturaco user-152=screenme user-153=karpospo user-154=nasaidni user-155=ideaplus
Sep 11 12:01:39 power sudo[1375534]: wp-toolkit : (command continued) user-156=butelmk user-157=daris user-158=premiums user-159=drleomk user-160=inotekso user-161=jpparkin user-162=premiuma user-163=kouzonco user-164=dalmacom user-165=cetplatf user-166=enochmk user-167=herbalpl user-168=sprintst user-169=dikimk12 user-170=berbermk user-171=edomcomm user-172=kolened1 user-173=nlpmkorg user-174=centarba user-175=nolimits user-176=seloviro user-177=mstmmk user-178=goodnews user-179=gocruise user-180=tealmk user-181=proverim user-182=dadarmk user-183=stravelm user-184=robustco user-185=wondersp user-186=pecakome user-187=rastiraz user-188=holiyayt user-189=gjorgeiv user-190=tradeyou user-191=dnevnoin user-192=anitermc user-193=youthgua user-194=hotammk user-195=cajsproc user-196=viewinn user-197=trudovop user-198=vmro user-199=enaspotc user-200=stojnevi user-201=bauerbg user-202=uhostmk5 user-203=oouslave user-204=raremk user-205=evolvepl user-206=socioloz user-207=avtogumi
Sep 11 12:01:39 power sudo[1375534]: wp-toolkit : (command continued) user-208=pelagoni user-209=levantmk user-210=ekostoc1 user-211=oncolog1 user-212=nefrolog user-213=hidrommk user-214=frizered user-215=caramk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:01:39 power sudo[1375534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:39 power sudo[1375534]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:39 power sudo[1375565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk ResourceUsage get_usages --output=json'
Sep 11 12:01:39 power sudo[1375565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:40 power sudo[1375565]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:40 power sudo[1375579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 11 12:01:40 power sudo[1375579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:40 power sudo[1375579]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:40 power sudo[1375587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/
Sep 11 12:01:40 power sudo[1375587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:40 power sudo[1375587]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:40 power sudo[1375593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk find /home/berbermk/public_html/ -mindepth 1 -maxdepth 1 -printf %f\\0
Sep 11 12:01:40 power sudo[1375593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:40 power sudo[1375593]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:40 power sudo[1375598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=database_prefix --output=json'
Sep 11 12:01:40 power sudo[1375598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:40 power sudo[1375598]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:40 power sudo[1375604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql get_restrictions --output=json'
Sep 11 12:01:40 power sudo[1375604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375604]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/
Sep 11 12:01:41 power sudo[1375615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375615]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk find /home/berbermk/public_html/ -mindepth 1 -maxdepth 1 -printf %f\\0
Sep 11 12:01:41 power sudo[1375621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375621]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 list_databases --output=json'
Sep 11 12:01:41 power sudo[1375626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375626]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 list_database_users --output=json'
Sep 11 12:01:41 power sudo[1375634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375634]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 12:01:41 power sudo[1375643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375643]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -r \'echo implode(\'"\'"\',\'"\'"\', get_loaded_extensions());\''
Sep 11 12:01:41 power sudo[1375663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375663]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk PasswdStrength get_required_strength app=mysql --output=json'
Sep 11 12:01:41 power sudo[1375674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375674]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk --input=json PasswdStrength get_password_strength --output=json'
Sep 11 12:01:41 power sudo[1375685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375685]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Variables get_user_information --output=json'
Sep 11 12:01:41 power sudo[1375691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375691]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:41 power sudo[1375730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:01:41 power sudo[1375730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:41 power sudo[1375730]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:01:42 power sudo[1375735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375735]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 11 12:01:42 power sudo[1375741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375741]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/berbermk/public_html/.wp-toolkit-ignore
Sep 11 12:01:42 power sudo[1375753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375753]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Variables get_user_information --output=json'
Sep 11 12:01:42 power sudo[1375757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375757]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 12:01:42 power sudo[1375763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375763]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 12:01:42 power sudo[1375767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375767]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -f /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress-6.8.2.zip
Sep 11 12:01:42 power sudo[1375798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375798]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress-6.8.2-wpt-tmp-KEOg3RjWn5Pfhnwf.zip
Sep 11 12:01:42 power sudo[1375804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375804]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user --no-cpu-limit --no-io-and-memory-limit berbermk /bin/sh -c 'cat > /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress-6.8.2-wpt-tmp-KEOg3RjWn5Pfhnwf.zip'
Sep 11 12:01:42 power sudo[1375809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375809]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress-6.8.2-wpt-tmp-KEOg3RjWn5Pfhnwf.zip /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress-6.8.2.zip
Sep 11 12:01:42 power sudo[1375817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:42 power sudo[1375817]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:42 power sudo[1375822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user --no-cpu-limit --no-io-and-memory-limit berbermk /bin/sh -c 'unzip -o /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress-6.8.2.zip -d /home/berbermk/public_html/wp68c29e06a6cc11.28119207'
Sep 11 12:01:42 power sudo[1375822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375822]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-activate.php /home/berbermk/public_html/wp-activate.php'
Sep 11 12:01:43 power sudo[1375858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375858]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/license.txt /home/berbermk/public_html/license.txt'
Sep 11 12:01:43 power sudo[1375872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375872]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-settings.php /home/berbermk/public_html/wp-settings.php'
Sep 11 12:01:43 power sudo[1375884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375884]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-login.php /home/berbermk/public_html/wp-login.php'
Sep 11 12:01:43 power sudo[1375895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375895]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-config-sample.php /home/berbermk/public_html/wp-config-sample.php'
Sep 11 12:01:43 power sudo[1375906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375906]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/readme.html /home/berbermk/public_html/readme.html'
Sep 11 12:01:43 power sudo[1375917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375917]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-links-opml.php /home/berbermk/public_html/wp-links-opml.php'
Sep 11 12:01:43 power sudo[1375928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375928]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-content /home/berbermk/public_html/wp-content'
Sep 11 12:01:43 power sudo[1375939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375939]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-cron.php /home/berbermk/public_html/wp-cron.php'
Sep 11 12:01:43 power sudo[1375951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375951]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/index.php /home/berbermk/public_html/index.php'
Sep 11 12:01:43 power sudo[1375964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375964]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-blog-header.php /home/berbermk/public_html/wp-blog-header.php'
Sep 11 12:01:43 power sudo[1375975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375975]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-mail.php /home/berbermk/public_html/wp-mail.php'
Sep 11 12:01:43 power sudo[1375986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375986]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1375999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-includes /home/berbermk/public_html/wp-includes'
Sep 11 12:01:43 power sudo[1375999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1375999]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1376010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/xmlrpc.php /home/berbermk/public_html/xmlrpc.php'
Sep 11 12:01:43 power sudo[1376010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1376010]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1376022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-load.php /home/berbermk/public_html/wp-load.php'
Sep 11 12:01:43 power sudo[1376022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1376022]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1376033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-admin /home/berbermk/public_html/wp-admin'
Sep 11 12:01:43 power sudo[1376033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1376033]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1376045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-comments-post.php /home/berbermk/public_html/wp-comments-post.php'
Sep 11 12:01:43 power sudo[1376045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1376045]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:43 power sudo[1376053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:01:43 power sudo[1376053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1376064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-signup.php /home/berbermk/public_html/wp-signup.php'
Sep 11 12:01:43 power sudo[1376064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:43 power sudo[1376064]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:44 power sudo[1376053]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:44 power sudo[1376077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'mv /home/berbermk/public_html/wp68c29e06a6cc11.28119207/wordpress/wp-trackback.php /home/berbermk/public_html/wp-trackback.php'
Sep 11 12:01:44 power sudo[1376077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:44 power sudo[1376077]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:44 power sudo[1376095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql list_databases --output=json'
Sep 11 12:01:44 power sudo[1376095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:44 power sudo[1376095]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:44 power sudo[1376103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql create_database name=berbermk_wp_db --output=json'
Sep 11 12:01:44 power sudo[1376103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:44 power sudo[1376103]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:44 power sudo[1376117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk --input=json Mysql create_user --output=json'
Sep 11 12:01:44 power sudo[1376117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:44 power sudo[1376117]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:44 power sudo[1376124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mysql set_privileges_on_database user=berbermk_admin_db database=berbermk_wp_db \'privileges=ALL PRIVILEGES\' --output=json'
Sep 11 12:01:44 power sudo[1376124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:44 power sudo[1376124]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:44 power sudo[1376135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 remote_mysql_read_profiles --output=json'
Sep 11 12:01:44 power sudo[1376135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:44 power sudo[1376135]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:46 power sudo[1376239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:01:46 power sudo[1376239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:46 power sudo[1376239]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:48 power sudo[1376285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:01:48 power sudo[1376285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:48 power sudo[1376285]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:50 power sudo[1376405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -exec chmod 644 \'{}\' \';\''
Sep 11 12:01:50 power sudo[1376405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:50 power sudo[1376405]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:50 power sudo[1376410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html/wp-admin \'(\' \'(\' -type d \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\'
Sep 11 12:01:50 power sudo[1376410]: wp-toolkit : (command continued) -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\'
Sep 11 12:01:50 power sudo[1376410]: wp-toolkit : (command continued) -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\'
Sep 11 12:01:50 power sudo[1376410]: wp-toolkit : (command continued) -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' -exec chmod 755 \'{}\' \';\''
Sep 11 12:01:50 power sudo[1376410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:50 power sudo[1376410]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:50 power sudo[1376415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html/wp-admin \'(\' \'(\' -type f \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -exec chmod 644 \'{}\' \';\''
Sep 11 12:01:50 power sudo[1376415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:50 power sudo[1376415]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:50 power sudo[1376421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html/wp-content \'(\' \'(\' -type d \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\'
Sep 11 12:01:50 power sudo[1376421]: wp-toolkit : (command continued) -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\'
Sep 11 12:01:50 power sudo[1376421]: wp-toolkit : (command continued) -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\'
Sep 11 12:01:50 power sudo[1376421]: wp-toolkit : (command continued) -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' -exec chmod 755 \'{}\' \';\''
Sep 11 12:01:50 power sudo[1376421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:50 power sudo[1376421]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:50 power sudo[1376426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html/wp-content \'(\' \'(\' -type f \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -exec chmod 644 \'{}\' \';\''
Sep 11 12:01:50 power sudo[1376426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:50 power sudo[1376426]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:50 power sudo[1376431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html/wp-includes \'(\' \'(\' -type d \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\'
Sep 11 12:01:50 power sudo[1376431]: wp-toolkit : (command continued) -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\'
Sep 11 12:01:50 power sudo[1376431]: wp-toolkit : (command continued) -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\'
Sep 11 12:01:50 power sudo[1376431]: wp-toolkit : (command continued) -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' -exec chmod 755 \'{}\' \';\''
Sep 11 12:01:50 power sudo[1376431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:50 power sudo[1376431]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:50 power sudo[1376436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html/wp-includes \'(\' \'(\' -type f \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -exec chmod 644 \'{}\' \';\''
Sep 11 12:01:50 power sudo[1376436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:50 power sudo[1376436]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:50 power sudo[1376457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:01:50 power sudo[1376457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:50 power sudo[1376457]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:51 power sudo[1376504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:01:51 power sudo[1376504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:51 power sudo[1376504]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:51 power sudo[1376512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:01:51 power sudo[1376512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:51 power sudo[1376512]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:51 power sudo[1376522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=rastiraz user-2=holiyayt user-3=stravelm user-4=robustco user-5=wondersp user-6=pecakome user-7=dnevnoin user-8=gjorgeiv user-9=tradeyou user-10=gocruise user-11=mstmmk user-12=goodnews user-13=proverim user-14=dadarmk user-15=tealmk user-16=nolimits user-17=kolened1 user-18=centarba user-19=nlpmkorg user-20=seloviro user-21=herbalpl user-22=enochmk user-23=sprintst user-24=dikimk12 user-25=berbermk user-26=edomcomm user-27=oncolog1 user-28=ekostoc1 user-29=levantmk user-30=nefrolog user-31=caramk user-32=hidrommk user-33=frizered user-34=evolvepl user-35=pelagoni user-36=avtogumi user-37=socioloz user-38=viewinn user-39=trudovop user-40=vmro user-41=enaspotc user-42=bauerbg user-43=uhostmk5 user-44=oouslave user-45=raremk user-46=stojnevi user-47=anitermc user-48=youthgua user-49=hotammk user-50=cajsproc
Sep 11 12:01:51 power sudo[1376522]: wp-toolkit : (command continued) user-51=polyeste user-52=vfxnestc user-53=groskome user-54=ivanjord user-55=sedcmk user-56=maleshne user-57=datelcom user-58=bizporta user-59=infobadi user-60=mspmk user-61=detskagr user-62=spdcompu user-63=urbanexp user-64=wikicamp user-65=rasmorgm user-66=skyapart user-67=makoasmk user-68=bianasho user-69=mfashion user-70=dhamachi user-71=goartsym user-72=volkanco user-73=workandt user-74=barececo user-75=simbiome user-76=getaldus user-77=delcevca user-78=mpbmk user-79=agrosind user-80=univerz1 user-81=kujnamon user-82=gogovan1 user-83=velmk user-84=datalink user-85=dalmacom user-86=cetplatf user-87=premiuma user-88=kouzonco user-89=butelmk user-90=daris user-91=premiums user-92=arturaco user-93=screenme user-94=karpospo user-95=nasaidni user-96=ideaplus user-97=drleomk user-98=inotekso user-99=jpparkin user-100=cabinetm user-101=vezilkac user-102=itradeco user-103=janiboja user-104=bovincom user-105=stojano1
Sep 11 12:01:51 power sudo[1376522]: wp-toolkit : (command continued) user-106=klimimk user-107=stokovna user-108=sparkupm user-109=custome1 user-110=zampmk user-111=busymard user-112=zvskopje user-113=palenzok user-114=nutrivim user-115=samasped user-116=chemhemc user-117=elektrot user-118=zapovim1 user-119=cosmatob user-120=euromaki user-121=vtranseu user-122=pravekom user-123=infopor1 user-124=albuname user-125=glammace user-126=imdskopj user-127=hausmark user-128=nikolov1 user-129=forzares user-130=nikimare user-131=aptekazd user-132=lblawcom user-133=nucktra1 user-134=mediatag user-135=intelek1 user-136=matratze user-137=euronic2 user-138=kardiome user-139=apgrupmk user-140=bogdanos user-141=carrent1 user-142=mediasol user-143=tcieuroc user-144=mapaspla user-145=solemor1 user-146=nationa2 user-147=onlinesh user-148=versusmk user-149=fiziosmk user-150=ambitiou user-151=starluxm user-152=radekrat user-153=fffhpcwr user-154=inkigaic user-155=modernar user-156=tehnologija
Sep 11 12:01:51 power sudo[1376522]: wp-toolkit : (command continued) user-157=taneccom user-158=vacuacti user-159=premiumi user-160=innofabl user-161=dslmk user-162=darkogor user-163=fnjorgmk user-164=prizmapl user-165=bozinovm user-166=supremel user-167=v5srybi9dcdx user-168=aquatech user-169=gorsajmk user-170=zdmgpsor user-171=fxxcom user-172=peshkai1 user-173=dimpalne user-174=eaptekam user-175=gradbai1 user-176=madzomk user-177=aptekafa user-178=evacommk user-179=jpkomuna user-180=izzomk user-181=makdrone user-182=tehnodro user-183=evberasm user-184=bonitavi user-185=conserva user-186=cupidpro user-187=vegemk1 user-188=euronic3 user-189=bauerin2 user-190=folklore user-191=electrol user-192=naksorgm user-193=eliksirz user-194=trigemat user-195=golakkom user-196=solarinv user-197=eurofarm user-198=viplastc user-199=wineberr user-200=mbmehani user-201=ismassag user-202=workbenc user-203=bbbustou user-204=kaoilmk user-205=biplmk user-206=pelagini user-207=solointe user-208=jaramk
Sep 11 12:01:51 power sudo[1376522]: wp-toolkit : (command continued) user-209=taktcomm user-210=recorgmk user-211=cleanerm user-212=animatem user-213=progress user-214=atspedco user-215=sssoluti feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:01:51 power sudo[1376522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376522]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep 11 12:01:52 power sudo[1376538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376538]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 11 12:01:52 power sudo[1376542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376542]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk
Sep 11 12:01:52 power sudo[1376546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376546]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mkdir -p /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk
Sep 11 12:01:52 power sudo[1376551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376551]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 11 12:01:52 power sudo[1376555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376555]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit-wpt-tmp-MpavZdFZWslkUIdt.conf
Sep 11 12:01:52 power sudo[1376559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376559]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit-wpt-tmp-MpavZdFZWslkUIdt.conf'
Sep 11 12:01:52 power sudo[1376563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376563]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit-wpt-tmp-MpavZdFZWslkUIdt.conf /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 11 12:01:52 power sudo[1376568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376568]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 11 12:01:52 power sudo[1376572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376572]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk
Sep 11 12:01:52 power sudo[1376576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376576]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mkdir -p /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk
Sep 11 12:01:52 power sudo[1376580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376580]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 11 12:01:52 power sudo[1376584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376584]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit-wpt-tmp-kilSZ1dGvZCZjFDX.conf
Sep 11 12:01:52 power sudo[1376588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376588]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit-wpt-tmp-kilSZ1dGvZCZjFDX.conf'
Sep 11 12:01:52 power sudo[1376592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376592]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit-wpt-tmp-kilSZ1dGvZCZjFDX.conf /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 11 12:01:52 power sudo[1376597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376597]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit.conf
Sep 11 12:01:52 power sudo[1376601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376601]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/berbermk/berber.mk
Sep 11 12:01:52 power sudo[1376605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376605]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mkdir -p /etc/nginx/conf.d/users/berbermk/berber.mk
Sep 11 12:01:52 power sudo[1376609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376609]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit.conf
Sep 11 12:01:52 power sudo[1376613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376613]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit-wpt-tmp-cMXf2GC6fo77dAoV.conf
Sep 11 12:01:52 power sudo[1376617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376617]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit-wpt-tmp-cMXf2GC6fo77dAoV.conf'
Sep 11 12:01:52 power sudo[1376621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376621]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:52 power sudo[1376626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit-wpt-tmp-cMXf2GC6fo77dAoV.conf /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit.conf
Sep 11 12:01:52 power sudo[1376626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:52 power sudo[1376626]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:53 power sudo[1376676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 11 12:01:53 power sudo[1376676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:53 power sudo[1376676]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:53 power sudo[1376681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 11 12:01:53 power sudo[1376681]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 11 12:01:53 power sudo[1376681]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 11 12:01:53 power sudo[1376681]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 11 12:01:53 power sudo[1376681]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 12:01:53 power sudo[1376681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:53 power sudo[1376681]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:53 power sudo[1376687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 12:01:53 power sudo[1376687]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 12:01:53 power sudo[1376687]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 12:01:53 power sudo[1376687]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 12:01:53 power sudo[1376687]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 12:01:53 power sudo[1376687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:53 power sudo[1376687]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:53 power sudo[1376692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && find /home/berbermk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user berbermk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 11 12:01:53 power sudo[1376692]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 11 12:01:53 power sudo[1376692]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 11 12:01:53 power sudo[1376692]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 11 12:01:53 power sudo[1376692]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 11 12:01:53 power sudo[1376692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:53 power sudo[1376692]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:53 power sudo[1376736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:01:53 power sudo[1376736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:54 power sudo[1376736]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:54 power sudo[1376788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=berbermk --output=json'
Sep 11 12:01:54 power sudo[1376788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:54 power sudo[1376788]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:56 power sudo[1376872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 11 12:01:56 power sudo[1376872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:56 power sudo[1376872]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:56 power sudo[1376878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user berbermk --user-current --json'
Sep 11 12:01:56 power sudo[1376878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:56 power sudo[1376878]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:56 power sudo[1376887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk LangPHP php_get_vhost_versions --output=json'
Sep 11 12:01:56 power sudo[1376887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:56 power sudo[1376887]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:56 power sudo[1376893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php84 --output=json'
Sep 11 12:01:56 power sudo[1376893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:56 power sudo[1376917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:01:56 power sudo[1376917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:57 power sudo[1376917]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:57 power sudo[1376893]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:57 power sudo[1376943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 11 12:01:57 power sudo[1376943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:57 power sudo[1376943]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:57 power sudo[1376990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk DomainInfo single_domain_data domain=berber.mk return_https_redirect_status=1 --output=json'
Sep 11 12:01:57 power sudo[1376990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:57 power sudo[1376990]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:57 power sudo[1377001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_vhost_ssl_components --output=json'
Sep 11 12:01:57 power sudo[1377001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:57 power sudo[1377001]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:57 power sudo[1377012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_ssl_vhosts --output=json'
Sep 11 12:01:57 power sudo[1377012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:58 power sudo[1377012]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:58 power sudo[1377019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mime list_redirects --output=json'
Sep 11 12:01:58 power sudo[1377019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:58 power sudo[1377019]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:58 power sudo[1377062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/scripts/rebuildhttpdconf
Sep 11 12:01:58 power sudo[1377062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:58 power sudo[1377062]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:58 power sudo[1377067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c /usr/local/cpanel/scripts/rebuildhttpdconf
Sep 11 12:01:58 power sudo[1377067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:58 power sudo[1377077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:01:58 power sudo[1377077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:58 power sudo[1377077]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:59 power sudo[1377084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:01:59 power sudo[1377084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:59 power sudo[1377084]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:59 power sudo[1377067]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:59 power sudo[1377107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/scripts/restartsrv_httpd
Sep 11 12:01:59 power sudo[1377107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:59 power sudo[1377107]: pam_unix(sudo:session): session closed for user root
Sep 11 12:01:59 power sudo[1377111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c /usr/local/cpanel/scripts/restartsrv_httpd
Sep 11 12:01:59 power sudo[1377111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:01:59 power sudo[1377128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:00 power sudo[1377128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:00 power sudo[1377128]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:00 power sudo[1377139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:00 power sudo[1377139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:00 power sudo[1377139]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:00 power sudo[1377146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:00 power sudo[1377146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:00 power sudo[1377146]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:00 power sudo[1377154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:00 power sudo[1377154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:00 power sudo[1377154]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:00 power sudo[1377161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=anitermc user-2=youthgua user-3=hotammk user-4=cajsproc user-5=viewinn user-6=trudovop user-7=vmro user-8=enaspotc user-9=bauerbg user-10=uhostmk5 user-11=oouslave user-12=raremk user-13=stojnevi user-14=evolvepl user-15=pelagoni user-16=avtogumi user-17=socioloz user-18=ekostoc1 user-19=levantmk user-20=oncolog1 user-21=nefrolog user-22=caramk user-23=hidrommk user-24=frizered user-25=herbalpl user-26=enochmk user-27=sprintst user-28=dikimk12 user-29=berbermk user-30=edomcomm user-31=nolimits user-32=kolened1 user-33=nlpmkorg user-34=centarba user-35=seloviro user-36=gocruise user-37=mstmmk user-38=goodnews user-39=proverim user-40=dadarmk user-41=tealmk user-42=rastiraz user-43=holiyayt user-44=robustco user-45=stravelm user-46=wondersp user-47=pecakome user-48=dnevnoin user-49=gjorgeiv user-50=tradeyou
Sep 11 12:02:00 power sudo[1377161]: wp-toolkit : (command continued) user-51=klimimk user-52=stokovna user-53=sparkupm user-54=custome1 user-55=zampmk user-56=zvskopje user-57=busymard user-58=palenzok user-59=cabinetm user-60=vezilkac user-61=itradeco user-62=janiboja user-63=bovincom user-64=stojano1 user-65=butelmk user-66=daris user-67=premiums user-68=screenme user-69=arturaco user-70=karpospo user-71=nasaidni user-72=ideaplus user-73=drleomk user-74=inotekso user-75=jpparkin user-76=dalmacom user-77=cetplatf user-78=premiuma user-79=kouzonco user-80=mpbmk user-81=agrosind user-82=kujnamon user-83=univerz1 user-84=gogovan1 user-85=velmk user-86=datalink user-87=rasmorgm user-88=skyapart user-89=bianasho user-90=makoasmk user-91=mfashion user-92=dhamachi user-93=goartsym user-94=volkanco user-95=workandt user-96=barececo user-97=getaldus user-98=simbiome user-99=delcevca user-100=infobadi user-101=mspmk user-102=detskagr user-103=spdcompu user-104=urbanexp user-105=wikicamp
Sep 11 12:02:00 power sudo[1377161]: wp-toolkit : (command continued) user-106=polyeste user-107=vfxnestc user-108=groskome user-109=ivanjord user-110=sedcmk user-111=maleshne user-112=datelcom user-113=bizporta user-114=supremel user-115=v5srybi9dcdx user-116=aquatech user-117=gorsajmk user-118=zdmgpsor user-119=inkigaic user-120=modernar user-121=tehnologija user-122=taneccom user-123=vacuacti user-124=premiumi user-125=innofabl user-126=prizmapl user-127=darkogor user-128=dslmk user-129=fnjorgmk user-130=bozinovm user-131=versusmk user-132=fiziosmk user-133=ambitiou user-134=starluxm user-135=radekrat user-136=fffhpcwr user-137=tcieuroc user-138=mapaspla user-139=solemor1 user-140=nationa2 user-141=onlinesh user-142=matratze user-143=euronic2 user-144=kardiome user-145=apgrupmk user-146=carrent1 user-147=bogdanos user-148=mediasol user-149=hausmark user-150=nikolov1 user-151=forzares user-152=nikimare user-153=aptekazd user-154=lblawcom user-155=nucktra1 user-156=mediatag
Sep 11 12:02:00 power sudo[1377161]: wp-toolkit : (command continued) user-157=intelek1 user-158=pravekom user-159=vtranseu user-160=infopor1 user-161=albuname user-162=glammace user-163=imdskopj user-164=nutrivim user-165=chemhemc user-166=samasped user-167=elektrot user-168=zapovim1 user-169=cosmatob user-170=euromaki user-171=solointe user-172=jaramk user-173=taktcomm user-174=recorgmk user-175=cleanerm user-176=animatem user-177=progress user-178=sssoluti user-179=atspedco user-180=bbbustou user-181=biplmk user-182=kaoilmk user-183=pelagini user-184=viplastc user-185=wineberr user-186=mbmehani user-187=ismassag user-188=workbenc user-189=electrol user-190=eliksirz user-191=naksorgm user-192=trigemat user-193=golakkom user-194=solarinv user-195=eurofarm user-196=bauerin2 user-197=folklore user-198=evberasm user-199=bonitavi user-200=conserva user-201=cupidpro user-202=vegemk1 user-203=euronic3 user-204=jpkomuna user-205=izzomk user-206=makdrone user-207=tehnodro user-208=fxxcom
Sep 11 12:02:00 power sudo[1377161]: wp-toolkit : (command continued) user-209=peshkai1 user-210=dimpalne user-211=eaptekam user-212=gradbai1 user-213=aptekafa user-214=madzomk user-215=evacommk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:00 power sudo[1377161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:00 power sudo[1377186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mkdir -p -m 755 /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp'
Sep 11 12:02:00 power sudo[1377186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:00 power sudo[1377186]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:00 power sudo[1377191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mktemp -p /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp -d instance-305.XXXXXXXXXXXX'
Sep 11 12:02:00 power sudo[1377191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:00 power sudo[1377191]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:00 power sudo[1377195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+rx,o+rx /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St'
Sep 11 12:02:00 power sudo[1377195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:00 power sudo[1377195]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:00 power sudo[1377200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'touch /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St/plugin_google-site-kit.1.161.0.zip'
Sep 11 12:02:01 power sudo[1377200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377200]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377161]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+r,o+r /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St/plugin_google-site-kit.1.161.0.zip'
Sep 11 12:02:01 power sudo[1377204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377204]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/3rdparty/wp-toolkit/var/tmp/plugin_google-site-kit.1.161.0.zip
Sep 11 12:02:01 power sudo[1377209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377209]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St/plugin_google-site-kit.1.161.0.zip
Sep 11 12:02:01 power sudo[1377213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377213]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/stat -c %a /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St/plugin_google-site-kit.1.161.0.zip
Sep 11 12:02:01 power sudo[1377217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377217]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St/plugin_google-site-kit.1.161.0-wpt-tmp-nZ8J2r6UohekNk7D.zip
Sep 11 12:02:01 power sudo[1377221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377221]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St/plugin_google-site-kit.1.161.0-wpt-tmp-nZ8J2r6UohekNk7D.zip'
Sep 11 12:02:01 power sudo[1377225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377225]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/chmod 644 /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St/plugin_google-site-kit.1.161.0-wpt-tmp-nZ8J2r6UohekNk7D.zip
Sep 11 12:02:01 power sudo[1377230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377230]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St/plugin_google-site-kit.1.161.0-wpt-tmp-nZ8J2r6UohekNk7D.zip /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St/plugin_google-site-kit.1.161.0.zip
Sep 11 12:02:01 power sudo[1377234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377234]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:01 power sudo[1377253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377253]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:01 power sudo[1377258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377258]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:01 power sudo[1377272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377272]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:01 power sudo[1377282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:01 power sudo[1377296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377296]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:01 power sudo[1377301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377282]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bovincom user-2=stojano1 user-3=vezilkac user-4=cabinetm user-5=janiboja user-6=itradeco user-7=custome1 user-8=palenzok user-9=zampmk user-10=zvskopje user-11=busymard user-12=klimimk user-13=stokovna user-14=sparkupm user-15=cetplatf user-16=dalmacom user-17=kouzonco user-18=premiuma user-19=inotekso user-20=jpparkin user-21=drleomk user-22=butelmk user-23=daris user-24=premiums user-25=karpospo user-26=nasaidni user-27=ideaplus user-28=arturaco user-29=screenme user-30=dhamachi user-31=goartsym user-32=volkanco user-33=mfashion user-34=barececo user-35=getaldus user-36=simbiome user-37=delcevca user-38=workandt user-39=rasmorgm user-40=skyapart user-41=makoasmk user-42=bianasho user-43=univerz1 user-44=kujnamon user-45=gogovan1 user-46=velmk user-47=datalink user-48=mpbmk user-49=agrosind user-50=maleshne
Sep 11 12:02:01 power sudo[1377307]: wp-toolkit : (command continued) user-51=datelcom user-52=bizporta user-53=polyeste user-54=vfxnestc user-55=sedcmk user-56=groskome user-57=ivanjord user-58=wikicamp user-59=urbanexp user-60=mspmk user-61=infobadi user-62=spdcompu user-63=detskagr user-64=oouslave user-65=raremk user-66=bauerbg user-67=uhostmk5 user-68=stojnevi user-69=enaspotc user-70=viewinn user-71=trudovop user-72=vmro user-73=cajsproc user-74=hotammk user-75=anitermc user-76=youthgua user-77=caramk user-78=hidrommk user-79=frizered user-80=oncolog1 user-81=ekostoc1 user-82=levantmk user-83=nefrolog user-84=pelagoni user-85=avtogumi user-86=socioloz user-87=evolvepl user-88=seloviro user-89=nolimits user-90=kolened1 user-91=nlpmkorg user-92=centarba user-93=edomcomm user-94=berbermk user-95=dikimk12 user-96=enochmk user-97=herbalpl user-98=sprintst user-99=dnevnoin user-100=tradeyou user-101=gjorgeiv user-102=holiyayt user-103=rastiraz user-104=pecakome user-105=robustco
Sep 11 12:02:01 power sudo[1377307]: wp-toolkit : (command continued) user-106=stravelm user-107=wondersp user-108=dadarmk user-109=proverim user-110=tealmk user-111=gocruise user-112=goodnews user-113=mstmmk user-114=pelagini user-115=biplmk user-116=kaoilmk user-117=bbbustou user-118=progress user-119=cleanerm user-120=animatem user-121=sssoluti user-122=atspedco user-123=jaramk user-124=solointe user-125=taktcomm user-126=recorgmk user-127=solarinv user-128=eurofarm user-129=eliksirz user-130=naksorgm user-131=trigemat user-132=electrol user-133=golakkom user-134=mbmehani user-135=workbenc user-136=ismassag user-137=wineberr user-138=viplastc user-139=conserva user-140=euronic3 user-141=cupidpro user-142=vegemk1 user-143=evberasm user-144=bonitavi user-145=bauerin2 user-146=folklore user-147=gradbai1 user-148=aptekafa user-149=madzomk user-150=evacommk user-151=fxxcom user-152=peshkai1 user-153=eaptekam user-154=dimpalne user-155=makdrone user-156=tehnodro user-157=izzomk
Sep 11 12:02:01 power sudo[1377307]: wp-toolkit : (command continued) user-158=jpkomuna user-159=taneccom user-160=tehnologija user-161=dslmk user-162=prizmapl user-163=darkogor user-164=fnjorgmk user-165=bozinovm user-166=vacuacti user-167=premiumi user-168=innofabl user-169=inkigaic user-170=modernar user-171=zdmgpsor user-172=v5srybi9dcdx user-173=supremel user-174=aquatech user-175=gorsajmk user-176=solemor1 user-177=mapaspla user-178=onlinesh user-179=nationa2 user-180=tcieuroc user-181=starluxm user-182=radekrat user-183=fffhpcwr user-184=versusmk user-185=ambitiou user-186=fiziosmk user-187=nucktra1 user-188=lblawcom user-189=mediatag user-190=intelek1 user-191=nikolov1 user-192=hausmark user-193=nikimare user-194=aptekazd user-195=forzares user-196=kardiome user-197=bogdanos user-198=carrent1 user-199=mediasol user-200=apgrupmk user-201=matratze user-202=euronic2 user-203=elektrot user-204=zapovim1 user-205=euromaki user-206=cosmatob user-207=nutrivim user-208=samasped
Sep 11 12:02:01 power sudo[1377307]: wp-toolkit : (command continued) user-209=chemhemc user-210=albuname user-211=glammace user-212=imdskopj user-213=pravekom user-214=vtranseu user-215=infopor1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:01 power sudo[1377301]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:01 power sudo[1377307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:01 power sudo[1377311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:01 power sudo[1377311]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377111]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/scripts/restartsrv_nginx
Sep 11 12:02:02 power sudo[1377375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:02 power sudo[1377375]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/scripts/ea-nginx
Sep 11 12:02:02 power sudo[1377380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:02 power sudo[1377380]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377307]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:02 power sudo[1377398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:02 power sudo[1377398]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:02 power sudo[1377408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:02 power sudo[1377408]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:02 power sudo[1377419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:02 power sudo[1377419]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:02 power sudo[1377449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:02 power sudo[1377449]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:02 power sudo[1377454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:02 power sudo[1377454]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:02 power sudo[1377459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:02 power sudo[1377459]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:02 power sudo[1377576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:03 power sudo[1377576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:03 power sudo[1377576]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:05 power sudo[1377692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:05 power sudo[1377692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:05 power sudo[1377692]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:07 power sudo[1377810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:07 power sudo[1377810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:07 power sudo[1377810]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:07 power sudo[1377817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:07 power sudo[1377817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:07 power sudo[1377817]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:07 power sudo[1377827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:07 power sudo[1377827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:07 power sudo[1377839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:07 power sudo[1377839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:07 power sudo[1377839]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:07 power sudo[1377827]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:07 power sudo[1377877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=wineberr user-2=viplastc user-3=mbmehani user-4=workbenc user-5=ismassag user-6=trigemat user-7=naksorgm user-8=eliksirz user-9=electrol user-10=golakkom user-11=solarinv user-12=eurofarm user-13=jaramk user-14=solointe user-15=taktcomm user-16=recorgmk user-17=progress user-18=animatem user-19=cleanerm user-20=sssoluti user-21=atspedco user-22=biplmk user-23=kaoilmk user-24=bbbustou user-25=pelagini user-26=izzomk user-27=jpkomuna user-28=makdrone user-29=tehnodro user-30=peshkai1 user-31=fxxcom user-32=eaptekam user-33=dimpalne user-34=gradbai1 user-35=evacommk user-36=aptekafa user-37=madzomk user-38=bauerin2 user-39=folklore user-40=bonitavi user-41=evberasm user-42=conserva user-43=euronic3 user-44=vegemk1 user-45=cupidpro user-46=versusmk user-47=ambitiou user-48=fiziosmk user-49=radekrat
Sep 11 12:02:07 power sudo[1377877]: wp-toolkit : (command continued) user-50=starluxm user-51=fffhpcwr user-52=tcieuroc user-53=solemor1 user-54=mapaspla user-55=onlinesh user-56=nationa2 user-57=v5srybi9dcdx user-58=supremel user-59=gorsajmk user-60=aquatech user-61=zdmgpsor user-62=inkigaic user-63=modernar user-64=taneccom user-65=tehnologija user-66=bozinovm user-67=dslmk user-68=darkogor user-69=prizmapl user-70=fnjorgmk user-71=innofabl user-72=premiumi user-73=vacuacti user-74=vtranseu user-75=pravekom user-76=infopor1 user-77=glammace user-78=albuname user-79=imdskopj user-80=nutrivim user-81=samasped user-82=chemhemc user-83=elektrot user-84=zapovim1 user-85=cosmatob user-86=euromaki user-87=euronic2 user-88=matratze user-89=kardiome user-90=mediasol user-91=bogdanos user-92=carrent1 user-93=apgrupmk user-94=hausmark user-95=nikolov1 user-96=aptekazd user-97=nikimare user-98=forzares user-99=nucktra1 user-100=lblawcom user-101=intelek1 user-102=mediatag user-103=premiums
Sep 11 12:02:07 power sudo[1377877]: wp-toolkit : (command continued) user-104=butelmk user-105=daris user-106=ideaplus user-107=karpospo user-108=nasaidni user-109=screenme user-110=arturaco user-111=jpparkin user-112=inotekso user-113=drleomk user-114=cetplatf user-115=dalmacom user-116=kouzonco user-117=premiuma user-118=klimimk user-119=sparkupm user-120=stokovna user-121=custome1 user-122=palenzok user-123=zampmk user-124=zvskopje user-125=busymard user-126=vezilkac user-127=cabinetm user-128=janiboja user-129=itradeco user-130=bovincom user-131=stojano1 user-132=infobadi user-133=mspmk user-134=spdcompu user-135=detskagr user-136=wikicamp user-137=urbanexp user-138=vfxnestc user-139=polyeste user-140=sedcmk user-141=groskome user-142=ivanjord user-143=datelcom user-144=maleshne user-145=bizporta user-146=agrosind user-147=mpbmk user-148=velmk user-149=gogovan1 user-150=univerz1 user-151=kujnamon user-152=datalink user-153=rasmorgm user-154=bianasho user-155=makoasmk
Sep 11 12:02:07 power sudo[1377877]: wp-toolkit : (command continued) user-156=skyapart user-157=goartsym user-158=volkanco user-159=dhamachi user-160=mfashion user-161=delcevca user-162=getaldus user-163=simbiome user-164=barececo user-165=workandt user-166=evolvepl user-167=pelagoni user-168=avtogumi user-169=socioloz user-170=nefrolog user-171=levantmk user-172=ekostoc1 user-173=oncolog1 user-174=caramk user-175=frizered user-176=hidrommk user-177=youthgua user-178=anitermc user-179=cajsproc user-180=hotammk user-181=enaspotc user-182=vmro user-183=trudovop user-184=viewinn user-185=raremk user-186=oouslave user-187=uhostmk5 user-188=bauerbg user-189=stojnevi user-190=gocruise user-191=goodnews user-192=mstmmk user-193=dadarmk user-194=proverim user-195=tealmk user-196=holiyayt user-197=rastiraz user-198=pecakome user-199=wondersp user-200=stravelm user-201=robustco user-202=dnevnoin user-203=gjorgeiv user-204=tradeyou user-205=dikimk12 user-206=sprintst user-207=enochmk
Sep 11 12:02:07 power sudo[1377877]: wp-toolkit : (command continued) user-208=herbalpl user-209=edomcomm user-210=berbermk user-211=nolimits user-212=nlpmkorg user-213=centarba user-214=kolened1 user-215=seloviro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:07 power sudo[1377877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:08 power sudo[1377877]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:09 power sudo[1377995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:09 power sudo[1377995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:09 power sudo[1377995]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:11 power sudo[1378030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:11 power sudo[1378030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:11 power sudo[1378030]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:14 power sudo[1378079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:14 power sudo[1378079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:14 power sudo[1378079]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:16 power sudo[1378148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:16 power sudo[1378148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:16 power sudo[1378148]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:18 power sudo[1378188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:18 power sudo[1378188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:18 power sudo[1378188]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:20 power sudo[1378256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:20 power sudo[1378256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:20 power sudo[1378256]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:21 power sudo[1378279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/rm -rf /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.tW5iTMKBf0St
Sep 11 12:02:21 power sudo[1378279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:21 power sudo[1378279]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:22 power sudo[1378366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:22 power sudo[1378366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:22 power sudo[1378366]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:24 power sudo[1378448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:25 power sudo[1378448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378448]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mktemp -p /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp -d instance-305.XXXXXXXXXXXX'
Sep 11 12:02:25 power sudo[1378459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378459]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+rx,o+rx /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK'
Sep 11 12:02:25 power sudo[1378464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378464]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'touch /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK/plugin_wp-super-cache.3.0.1.zip'
Sep 11 12:02:25 power sudo[1378468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378468]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+r,o+r /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK/plugin_wp-super-cache.3.0.1.zip'
Sep 11 12:02:25 power sudo[1378472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378472]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/3rdparty/wp-toolkit/var/tmp/plugin_wp-super-cache.3.0.1.zip
Sep 11 12:02:25 power sudo[1378476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378476]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK/plugin_wp-super-cache.3.0.1.zip
Sep 11 12:02:25 power sudo[1378481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378481]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/stat -c %a /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK/plugin_wp-super-cache.3.0.1.zip
Sep 11 12:02:25 power sudo[1378485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378485]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK/plugin_wp-super-cache.3.0.1-wpt-tmp-z9BywUDtCjNpsV0Q.zip
Sep 11 12:02:25 power sudo[1378489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378489]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK/plugin_wp-super-cache.3.0.1-wpt-tmp-z9BywUDtCjNpsV0Q.zip'
Sep 11 12:02:25 power sudo[1378493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378493]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/chmod 644 /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK/plugin_wp-super-cache.3.0.1-wpt-tmp-z9BywUDtCjNpsV0Q.zip
Sep 11 12:02:25 power sudo[1378500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378500]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:25 power sudo[1378504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK/plugin_wp-super-cache.3.0.1-wpt-tmp-z9BywUDtCjNpsV0Q.zip /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK/plugin_wp-super-cache.3.0.1.zip
Sep 11 12:02:25 power sudo[1378504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:25 power sudo[1378504]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:27 power sudo[1378578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:27 power sudo[1378578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:27 power sudo[1378578]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:29 power sudo[1378649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:29 power sudo[1378649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:29 power sudo[1378649]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:29 power sudo[1378659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/rm -rf /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.7Da7jBsokOKK
Sep 11 12:02:29 power sudo[1378659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:29 power sudo[1378659]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:31 power sudo[1378795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:31 power sudo[1378795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:31 power sudo[1378795]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:32 power sudo[1378853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:32 power sudo[1378853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:32 power sudo[1378853]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:32 power sudo[1378860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:32 power sudo[1378860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:32 power sudo[1378871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:32 power sudo[1378860]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:32 power sudo[1378874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:32 power sudo[1378871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:32 power sudo[1378874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:32 power sudo[1378871]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:32 power sudo[1378882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:32 power sudo[1378882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:32 power sudo[1378882]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:32 power sudo[1378888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:33 power sudo[1378888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378874]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mpbmk user-2=agrosind user-3=datalink user-4=kujnamon user-5=univerz1 user-6=gogovan1 user-7=velmk user-8=skyapart user-9=bianasho user-10=makoasmk user-11=rasmorgm user-12=barececo user-13=delcevca user-14=getaldus user-15=simbiome user-16=workandt user-17=dhamachi user-18=goartsym user-19=volkanco user-20=mfashion user-21=spdcompu user-22=detskagr user-23=mspmk user-24=infobadi user-25=wikicamp user-26=urbanexp user-27=sedcmk user-28=groskome user-29=ivanjord user-30=polyeste user-31=vfxnestc user-32=bizporta user-33=maleshne user-34=datelcom user-35=stokovna user-36=sparkupm user-37=klimimk user-38=palenzok user-39=zampmk user-40=zvskopje user-41=busymard user-42=custome1 user-43=janiboja user-44=itradeco user-45=vezilkac user-46=cabinetm user-47=stojano1 user-48=bovincom user-49=karpospo user-50=nasaidni
Sep 11 12:02:33 power sudo[1378893]: wp-toolkit : (command continued) user-51=ideaplus user-52=arturaco user-53=screenme user-54=butelmk user-55=daris user-56=premiums user-57=inotekso user-58=jpparkin user-59=drleomk user-60=kouzonco user-61=premiuma user-62=cetplatf user-63=dalmacom user-64=dikimk12 user-65=enochmk user-66=herbalpl user-67=sprintst user-68=edomcomm user-69=berbermk user-70=kolened1 user-71=nlpmkorg user-72=centarba user-73=nolimits user-74=seloviro user-75=goodnews user-76=mstmmk user-77=gocruise user-78=tealmk user-79=dadarmk user-80=proverim user-81=pecakome user-82=stravelm user-83=robustco user-84=wondersp user-85=holiyayt user-86=rastiraz user-87=tradeyou user-88=gjorgeiv user-89=dnevnoin user-90=anitermc user-91=youthgua user-92=cajsproc user-93=hotammk user-94=enaspotc user-95=viewinn user-96=trudovop user-97=vmro user-98=stojnevi user-99=oouslave user-100=raremk user-101=bauerbg user-102=uhostmk5 user-103=evolvepl user-104=avtogumi user-105=socioloz
Sep 11 12:02:33 power sudo[1378893]: wp-toolkit : (command continued) user-106=pelagoni user-107=oncolog1 user-108=levantmk user-109=ekostoc1 user-110=nefrolog user-111=hidrommk user-112=frizered user-113=caramk user-114=folklore user-115=bauerin2 user-116=evberasm user-117=bonitavi user-118=euronic3 user-119=cupidpro user-120=vegemk1 user-121=conserva user-122=izzomk user-123=jpkomuna user-124=tehnodro user-125=makdrone user-126=eaptekam user-127=dimpalne user-128=fxxcom user-129=peshkai1 user-130=aptekafa user-131=madzomk user-132=evacommk user-133=gradbai1 user-134=taktcomm user-135=recorgmk user-136=jaramk user-137=solointe user-138=atspedco user-139=sssoluti user-140=progress user-141=cleanerm user-142=animatem user-143=kaoilmk user-144=biplmk user-145=bbbustou user-146=pelagini user-147=wineberr user-148=viplastc user-149=workbenc user-150=ismassag user-151=mbmehani user-152=golakkom user-153=naksorgm user-154=eliksirz user-155=trigemat user-156=electrol user-157=eurofarm
Sep 11 12:02:33 power sudo[1378893]: wp-toolkit : (command continued) user-158=solarinv user-159=matratze user-160=euronic2 user-161=bogdanos user-162=carrent1 user-163=mediasol user-164=apgrupmk user-165=kardiome user-166=nikimare user-167=aptekazd user-168=forzares user-169=hausmark user-170=nikolov1 user-171=mediatag user-172=intelek1 user-173=nucktra1 user-174=lblawcom user-175=infopor1 user-176=pravekom user-177=vtranseu user-178=imdskopj user-179=albuname user-180=glammace user-181=samasped user-182=chemhemc user-183=nutrivim user-184=euromaki user-185=cosmatob user-186=zapovim1 user-187=elektrot user-188=aquatech user-189=gorsajmk user-190=v5srybi9dcdx user-191=supremel user-192=zdmgpsor user-193=modernar user-194=inkigaic user-195=prizmapl user-196=fnjorgmk user-197=darkogor user-198=dslmk user-199=bozinovm user-200=vacuacti user-201=premiumi user-202=innofabl user-203=taneccom user-204=tehnologija user-205=ambitiou user-206=fiziosmk user-207=versusmk user-208=fffhpcwr
Sep 11 12:02:33 power sudo[1378893]: wp-toolkit : (command continued) user-209=starluxm user-210=radekrat user-211=tcieuroc user-212=onlinesh user-213=nationa2 user-214=solemor1 user-215=mapaspla feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:33 power sudo[1378893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378888]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=viplastc user-2=wineberr user-3=mbmehani user-4=ismassag user-5=workbenc user-6=electrol user-7=trigemat user-8=naksorgm user-9=eliksirz user-10=golakkom user-11=solarinv user-12=eurofarm user-13=solointe user-14=jaramk user-15=taktcomm user-16=recorgmk user-17=animatem user-18=cleanerm user-19=progress user-20=atspedco user-21=sssoluti user-22=bbbustou user-23=kaoilmk user-24=biplmk user-25=pelagini user-26=jpkomuna user-27=izzomk user-28=makdrone user-29=tehnodro user-30=peshkai1 user-31=fxxcom user-32=dimpalne user-33=eaptekam user-34=gradbai1 user-35=evacommk user-36=aptekafa user-37=madzomk user-38=bauerin2 user-39=folklore user-40=bonitavi user-41=evberasm user-42=conserva user-43=vegemk1 user-44=cupidpro user-45=euronic3 user-46=versusmk user-47=fiziosmk user-48=ambitiou user-49=radekrat
Sep 11 12:02:33 power sudo[1378899]: wp-toolkit : (command continued) user-50=starluxm user-51=fffhpcwr user-52=tcieuroc user-53=mapaspla user-54=solemor1 user-55=nationa2 user-56=onlinesh user-57=supremel user-58=v5srybi9dcdx user-59=gorsajmk user-60=aquatech user-61=zdmgpsor user-62=inkigaic user-63=modernar user-64=tehnologija user-65=taneccom user-66=innofabl user-67=premiumi user-68=vacuacti user-69=bozinovm user-70=prizmapl user-71=dslmk user-72=fnjorgmk user-73=darkogor user-74=vtranseu user-75=pravekom user-76=infopor1 user-77=glammace user-78=albuname user-79=imdskopj user-80=nutrivim user-81=chemhemc user-82=samasped user-83=elektrot user-84=zapovim1 user-85=euromaki user-86=cosmatob user-87=euronic2 user-88=matratze user-89=kardiome user-90=apgrupmk user-91=mediasol user-92=bogdanos user-93=carrent1 user-94=hausmark user-95=nikolov1 user-96=forzares user-97=aptekazd user-98=nikimare user-99=lblawcom user-100=nucktra1 user-101=intelek1 user-102=mediatag user-103=premiums
Sep 11 12:02:33 power sudo[1378899]: wp-toolkit : (command continued) user-104=butelmk user-105=daris user-106=screenme user-107=arturaco user-108=ideaplus user-109=karpospo user-110=nasaidni user-111=drleomk user-112=jpparkin user-113=inotekso user-114=dalmacom user-115=cetplatf user-116=premiuma user-117=kouzonco user-118=klimimk user-119=sparkupm user-120=stokovna user-121=custome1 user-122=busymard user-123=zampmk user-124=zvskopje user-125=palenzok user-126=cabinetm user-127=vezilkac user-128=itradeco user-129=janiboja user-130=bovincom user-131=stojano1 user-132=infobadi user-133=mspmk user-134=detskagr user-135=spdcompu user-136=urbanexp user-137=wikicamp user-138=vfxnestc user-139=polyeste user-140=ivanjord user-141=groskome user-142=sedcmk user-143=datelcom user-144=maleshne user-145=bizporta user-146=agrosind user-147=mpbmk user-148=gogovan1 user-149=velmk user-150=univerz1 user-151=kujnamon user-152=datalink user-153=rasmorgm user-154=makoasmk user-155=bianasho
Sep 11 12:02:33 power sudo[1378899]: wp-toolkit : (command continued) user-156=skyapart user-157=mfashion user-158=volkanco user-159=goartsym user-160=dhamachi user-161=workandt user-162=getaldus user-163=simbiome user-164=delcevca user-165=barececo user-166=evolvepl user-167=pelagoni user-168=avtogumi user-169=socioloz user-170=nefrolog user-171=ekostoc1 user-172=levantmk user-173=oncolog1 user-174=caramk user-175=frizered user-176=hidrommk user-177=youthgua user-178=anitermc user-179=hotammk user-180=cajsproc user-181=vmro user-182=trudovop user-183=viewinn user-184=enaspotc user-185=uhostmk5 user-186=bauerbg user-187=raremk user-188=oouslave user-189=stojnevi user-190=gocruise user-191=mstmmk user-192=goodnews user-193=proverim user-194=dadarmk user-195=tealmk user-196=rastiraz user-197=holiyayt user-198=wondersp user-199=robustco user-200=stravelm user-201=pecakome user-202=dnevnoin user-203=tradeyou user-204=gjorgeiv user-205=sprintst user-206=enochmk user-207=herbalpl
Sep 11 12:02:33 power sudo[1378899]: wp-toolkit : (command continued) user-208=dikimk12 user-209=berbermk user-210=edomcomm user-211=nolimits user-212=nlpmkorg user-213=centarba user-214=kolened1 user-215=seloviro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:33 power sudo[1378899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378893]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mktemp -p /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp -d instance-305.XXXXXXXXXXXX'
Sep 11 12:02:33 power sudo[1378912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378912]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+rx,o+rx /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm'
Sep 11 12:02:33 power sudo[1378917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378917]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'touch /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm/plugin_wordpress-seo.25.9.zip'
Sep 11 12:02:33 power sudo[1378921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378921]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+r,o+r /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm/plugin_wordpress-seo.25.9.zip'
Sep 11 12:02:33 power sudo[1378926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378926]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/3rdparty/wp-toolkit/var/tmp/plugin_wordpress-seo.25.9.zip
Sep 11 12:02:33 power sudo[1378937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:33 power sudo[1378934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378934]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm/plugin_wordpress-seo.25.9.zip
Sep 11 12:02:33 power sudo[1378945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378945]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378937]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/stat -c %a /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm/plugin_wordpress-seo.25.9.zip
Sep 11 12:02:33 power sudo[1378951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378951]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm/plugin_wordpress-seo.25.9-wpt-tmp-lqfIz1aqm5xnV3vg.zip
Sep 11 12:02:33 power sudo[1378957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378957]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm/plugin_wordpress-seo.25.9-wpt-tmp-lqfIz1aqm5xnV3vg.zip'
Sep 11 12:02:33 power sudo[1378961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378961]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/chmod 644 /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm/plugin_wordpress-seo.25.9-wpt-tmp-lqfIz1aqm5xnV3vg.zip
Sep 11 12:02:33 power sudo[1378966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378966]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378899]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm/plugin_wordpress-seo.25.9-wpt-tmp-lqfIz1aqm5xnV3vg.zip /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm/plugin_wordpress-seo.25.9.zip
Sep 11 12:02:33 power sudo[1378971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378971]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:33 power sudo[1378991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378991]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1378996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:33 power sudo[1378996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:33 power sudo[1378996]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:33 power sudo[1379001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:33 power sudo[1379001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:34 power sudo[1379001]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:34 power sudo[1379010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=anitermc user-2=youthgua user-3=hotammk user-4=cajsproc user-5=viewinn user-6=trudovop user-7=vmro user-8=enaspotc user-9=bauerbg user-10=uhostmk5 user-11=oouslave user-12=raremk user-13=stojnevi user-14=evolvepl user-15=pelagoni user-16=socioloz user-17=avtogumi user-18=levantmk user-19=oncolog1 user-20=ekostoc1 user-21=nefrolog user-22=caramk user-23=hidrommk user-24=frizered user-25=enochmk user-26=herbalpl user-27=sprintst user-28=dikimk12 user-29=berbermk user-30=edomcomm user-31=nolimits user-32=kolened1 user-33=centarba user-34=nlpmkorg user-35=seloviro user-36=gocruise user-37=mstmmk user-38=goodnews user-39=proverim user-40=dadarmk user-41=tealmk user-42=rastiraz user-43=holiyayt user-44=robustco user-45=stravelm user-46=wondersp user-47=pecakome user-48=dnevnoin user-49=tradeyou user-50=gjorgeiv
Sep 11 12:02:34 power sudo[1379010]: wp-toolkit : (command continued) user-51=klimimk user-52=stokovna user-53=sparkupm user-54=custome1 user-55=zvskopje user-56=zampmk user-57=busymard user-58=palenzok user-59=cabinetm user-60=vezilkac user-61=itradeco user-62=janiboja user-63=bovincom user-64=stojano1 user-65=butelmk user-66=daris user-67=premiums user-68=arturaco user-69=screenme user-70=nasaidni user-71=karpospo user-72=ideaplus user-73=drleomk user-74=inotekso user-75=jpparkin user-76=dalmacom user-77=cetplatf user-78=premiuma user-79=kouzonco user-80=mpbmk user-81=agrosind user-82=kujnamon user-83=univerz1 user-84=velmk user-85=gogovan1 user-86=datalink user-87=rasmorgm user-88=skyapart user-89=makoasmk user-90=bianasho user-91=mfashion user-92=dhamachi user-93=volkanco user-94=goartsym user-95=workandt user-96=barececo user-97=getaldus user-98=delcevca user-99=simbiome user-100=mspmk user-101=infobadi user-102=detskagr user-103=spdcompu user-104=urbanexp user-105=wikicamp
Sep 11 12:02:34 power sudo[1379010]: wp-toolkit : (command continued) user-106=polyeste user-107=vfxnestc user-108=ivanjord user-109=groskome user-110=sedcmk user-111=maleshne user-112=datelcom user-113=bizporta user-114=supremel user-115=v5srybi9dcdx user-116=aquatech user-117=gorsajmk user-118=zdmgpsor user-119=inkigaic user-120=modernar user-121=tehnologija user-122=taneccom user-123=vacuacti user-124=premiumi user-125=innofabl user-126=dslmk user-127=darkogor user-128=fnjorgmk user-129=prizmapl user-130=bozinovm user-131=versusmk user-132=fiziosmk user-133=ambitiou user-134=starluxm user-135=radekrat user-136=fffhpcwr user-137=tcieuroc user-138=mapaspla user-139=solemor1 user-140=nationa2 user-141=onlinesh user-142=matratze user-143=euronic2 user-144=kardiome user-145=apgrupmk user-146=carrent1 user-147=bogdanos user-148=mediasol user-149=hausmark user-150=nikolov1 user-151=forzares user-152=nikimare user-153=aptekazd user-154=lblawcom user-155=nucktra1 user-156=mediatag
Sep 11 12:02:34 power sudo[1379010]: wp-toolkit : (command continued) user-157=intelek1 user-158=pravekom user-159=vtranseu user-160=infopor1 user-161=albuname user-162=glammace user-163=imdskopj user-164=nutrivim user-165=chemhemc user-166=samasped user-167=elektrot user-168=zapovim1 user-169=cosmatob user-170=euromaki user-171=solointe user-172=jaramk user-173=recorgmk user-174=taktcomm user-175=cleanerm user-176=animatem user-177=progress user-178=atspedco user-179=sssoluti user-180=bbbustou user-181=kaoilmk user-182=biplmk user-183=pelagini user-184=viplastc user-185=wineberr user-186=mbmehani user-187=ismassag user-188=workbenc user-189=electrol user-190=naksorgm user-191=eliksirz user-192=trigemat user-193=golakkom user-194=solarinv user-195=eurofarm user-196=bauerin2 user-197=folklore user-198=evberasm user-199=bonitavi user-200=conserva user-201=cupidpro user-202=vegemk1 user-203=euronic3 user-204=jpkomuna user-205=izzomk user-206=makdrone user-207=tehnodro user-208=fxxcom
Sep 11 12:02:34 power sudo[1379010]: wp-toolkit : (command continued) user-209=peshkai1 user-210=dimpalne user-211=eaptekam user-212=gradbai1 user-213=aptekafa user-214=madzomk user-215=evacommk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:34 power sudo[1379010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:34 power sudo[1379010]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:35 power sudo[1379046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:35 power sudo[1379046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:35 power sudo[1379046]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:35 power sudo[1379059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:35 power sudo[1379059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:35 power sudo[1379059]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:36 power sudo[1379076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:36 power sudo[1379076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:36 power sudo[1379076]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:36 power sudo[1379084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:36 power sudo[1379084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:36 power sudo[1379084]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:36 power sudo[1379089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:36 power sudo[1379089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:36 power sudo[1379089]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:36 power sudo[1379099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=viplastc user-2=wineberr user-3=ismassag user-4=workbenc user-5=mbmehani user-6=golakkom user-7=electrol user-8=trigemat user-9=naksorgm user-10=eliksirz user-11=eurofarm user-12=solarinv user-13=taktcomm user-14=recorgmk user-15=solointe user-16=jaramk user-17=sssoluti user-18=atspedco user-19=animatem user-20=cleanerm user-21=progress user-22=bbbustou user-23=kaoilmk user-24=biplmk user-25=pelagini user-26=jpkomuna user-27=izzomk user-28=tehnodro user-29=makdrone user-30=dimpalne user-31=eaptekam user-32=peshkai1 user-33=fxxcom user-34=evacommk user-35=madzomk user-36=aptekafa user-37=gradbai1 user-38=folklore user-39=bauerin2 user-40=bonitavi user-41=evberasm user-42=vegemk1 user-43=cupidpro user-44=euronic3 user-45=conserva user-46=fiziosmk user-47=ambitiou user-48=versusmk user-49=fffhpcwr
Sep 11 12:02:36 power sudo[1379099]: wp-toolkit : (command continued) user-50=radekrat user-51=starluxm user-52=tcieuroc user-53=nationa2 user-54=onlinesh user-55=mapaspla user-56=solemor1 user-57=gorsajmk user-58=aquatech user-59=supremel user-60=v5srybi9dcdx user-61=zdmgpsor user-62=modernar user-63=inkigaic user-64=premiumi user-65=innofabl user-66=vacuacti user-67=bozinovm user-68=fnjorgmk user-69=prizmapl user-70=darkogor user-71=dslmk user-72=tehnologija user-73=taneccom user-74=infopor1 user-75=pravekom user-76=vtranseu user-77=imdskopj user-78=glammace user-79=albuname user-80=chemhemc user-81=samasped user-82=nutrivim user-83=euromaki user-84=cosmatob user-85=elektrot user-86=zapovim1 user-87=euronic2 user-88=matratze user-89=apgrupmk user-90=mediasol user-91=bogdanos user-92=carrent1 user-93=kardiome user-94=forzares user-95=aptekazd user-96=nikimare user-97=hausmark user-98=nikolov1 user-99=intelek1 user-100=mediatag user-101=lblawcom user-102=nucktra1 user-103=arturaco
Sep 11 12:02:36 power sudo[1379099]: wp-toolkit : (command continued) user-104=screenme user-105=ideaplus user-106=nasaidni user-107=karpospo user-108=premiums user-109=daris user-110=butelmk user-111=drleomk user-112=jpparkin user-113=inotekso user-114=premiuma user-115=kouzonco user-116=dalmacom user-117=cetplatf user-118=sparkupm user-119=stokovna user-120=klimimk user-121=zvskopje user-122=zampmk user-123=busymard user-124=palenzok user-125=custome1 user-126=itradeco user-127=janiboja user-128=cabinetm user-129=vezilkac user-130=stojano1 user-131=bovincom user-132=detskagr user-133=spdcompu user-134=mspmk user-135=infobadi user-136=urbanexp user-137=wikicamp user-138=ivanjord user-139=groskome user-140=sedcmk user-141=vfxnestc user-142=polyeste user-143=bizporta user-144=datelcom user-145=maleshne user-146=agrosind user-147=mpbmk user-148=datalink user-149=velmk user-150=gogovan1 user-151=univerz1 user-152=kujnamon user-153=makoasmk user-154=bianasho user-155=skyapart
Sep 11 12:02:36 power sudo[1379099]: wp-toolkit : (command continued) user-156=rasmorgm user-157=workandt user-158=delcevca user-159=getaldus user-160=simbiome user-161=barececo user-162=mfashion user-163=goartsym user-164=volkanco user-165=dhamachi user-166=evolvepl user-167=avtogumi user-168=socioloz user-169=pelagoni user-170=nefrolog user-171=ekostoc1 user-172=levantmk user-173=oncolog1 user-174=frizered user-175=hidrommk user-176=caramk user-177=youthgua user-178=anitermc user-179=hotammk user-180=cajsproc user-181=vmro user-182=trudovop user-183=viewinn user-184=enaspotc user-185=stojnevi user-186=uhostmk5 user-187=bauerbg user-188=raremk user-189=oouslave user-190=mstmmk user-191=goodnews user-192=gocruise user-193=tealmk user-194=proverim user-195=dadarmk user-196=wondersp user-197=stravelm user-198=robustco user-199=pecakome user-200=rastiraz user-201=holiyayt user-202=gjorgeiv user-203=tradeyou user-204=dnevnoin user-205=sprintst user-206=enochmk user-207=herbalpl
Sep 11 12:02:36 power sudo[1379099]: wp-toolkit : (command continued) user-208=dikimk12 user-209=berbermk user-210=edomcomm user-211=centarba user-212=nlpmkorg user-213=kolened1 user-214=nolimits user-215=seloviro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:36 power sudo[1379099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:36 power sudo[1379099]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:37 power sudo[1379138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:37 power sudo[1379138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:37 power sudo[1379138]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:39 power sudo[1379193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:39 power sudo[1379193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:39 power sudo[1379193]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:39 power sudo[1379202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:39 power sudo[1379202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:39 power sudo[1379202]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:39 power sudo[1379210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:39 power sudo[1379210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:39 power sudo[1379210]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:39 power sudo[1379217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=maleshne user-2=datelcom user-3=bizporta user-4=polyeste user-5=vfxnestc user-6=ivanjord user-7=groskome user-8=sedcmk user-9=urbanexp user-10=wikicamp user-11=infobadi user-12=mspmk user-13=detskagr user-14=spdcompu user-15=mfashion user-16=dhamachi user-17=goartsym user-18=volkanco user-19=workandt user-20=barececo user-21=delcevca user-22=getaldus user-23=simbiome user-24=rasmorgm user-25=skyapart user-26=makoasmk user-27=bianasho user-28=univerz1 user-29=kujnamon user-30=velmk user-31=gogovan1 user-32=datalink user-33=mpbmk user-34=agrosind user-35=dalmacom user-36=cetplatf user-37=premiuma user-38=kouzonco user-39=drleomk user-40=inotekso user-41=jpparkin user-42=daris user-43=butelmk user-44=premiums user-45=screenme user-46=arturaco user-47=nasaidni user-48=karpospo user-49=ideaplus user-50=bovincom
Sep 11 12:02:39 power sudo[1379217]: wp-toolkit : (command continued) user-51=stojano1 user-52=cabinetm user-53=vezilkac user-54=itradeco user-55=janiboja user-56=custome1 user-57=zvskopje user-58=zampmk user-59=busymard user-60=palenzok user-61=klimimk user-62=stokovna user-63=sparkupm user-64=dnevnoin user-65=gjorgeiv user-66=tradeyou user-67=rastiraz user-68=holiyayt user-69=stravelm user-70=robustco user-71=wondersp user-72=pecakome user-73=proverim user-74=dadarmk user-75=tealmk user-76=gocruise user-77=mstmmk user-78=goodnews user-79=seloviro user-80=nolimits user-81=kolened1 user-82=centarba user-83=nlpmkorg user-84=berbermk user-85=edomcomm user-86=herbalpl user-87=enochmk user-88=sprintst user-89=dikimk12 user-90=caramk user-91=hidrommk user-92=frizered user-93=oncolog1 user-94=levantmk user-95=ekostoc1 user-96=nefrolog user-97=pelagoni user-98=avtogumi user-99=socioloz user-100=evolvepl user-101=bauerbg user-102=uhostmk5 user-103=oouslave user-104=raremk user-105=stojnevi
Sep 11 12:02:39 power sudo[1379217]: wp-toolkit : (command continued) user-106=viewinn user-107=trudovop user-108=vmro user-109=enaspotc user-110=hotammk user-111=cajsproc user-112=anitermc user-113=youthgua user-114=gradbai1 user-115=madzomk user-116=aptekafa user-117=evacommk user-118=fxxcom user-119=peshkai1 user-120=dimpalne user-121=eaptekam user-122=makdrone user-123=tehnodro user-124=jpkomuna user-125=izzomk user-126=conserva user-127=cupidpro user-128=vegemk1 user-129=euronic3 user-130=evberasm user-131=bonitavi user-132=bauerin2 user-133=folklore user-134=solarinv user-135=eurofarm user-136=electrol user-137=eliksirz user-138=naksorgm user-139=trigemat user-140=golakkom user-141=mbmehani user-142=ismassag user-143=workbenc user-144=viplastc user-145=wineberr user-146=pelagini user-147=bbbustou user-148=kaoilmk user-149=biplmk user-150=cleanerm user-151=animatem user-152=progress user-153=atspedco user-154=sssoluti user-155=solointe user-156=jaramk user-157=taktcomm
Sep 11 12:02:39 power sudo[1379217]: wp-toolkit : (command continued) user-158=recorgmk user-159=zapovim1 user-160=elektrot user-161=cosmatob user-162=euromaki user-163=nutrivim user-164=samasped user-165=chemhemc user-166=albuname user-167=glammace user-168=imdskopj user-169=pravekom user-170=vtranseu user-171=infopor1 user-172=lblawcom user-173=nucktra1 user-174=mediatag user-175=intelek1 user-176=hausmark user-177=nikolov1 user-178=forzares user-179=nikimare user-180=aptekazd user-181=kardiome user-182=apgrupmk user-183=carrent1 user-184=bogdanos user-185=mediasol user-186=matratze user-187=euronic2 user-188=mapaspla user-189=solemor1 user-190=nationa2 user-191=onlinesh user-192=tcieuroc user-193=starluxm user-194=radekrat user-195=fffhpcwr user-196=versusmk user-197=fiziosmk user-198=ambitiou user-199=tehnologija user-200=taneccom user-201=vacuacti user-202=innofabl user-203=premiumi user-204=fnjorgmk user-205=prizmapl user-206=darkogor user-207=dslmk user-208=bozinovm
Sep 11 12:02:39 power sudo[1379217]: wp-toolkit : (command continued) user-209=inkigaic user-210=modernar user-211=zdmgpsor user-212=supremel user-213=v5srybi9dcdx user-214=aquatech user-215=gorsajmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:39 power sudo[1379217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:40 power sudo[1379229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:40 power sudo[1379229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:40 power sudo[1379229]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:40 power sudo[1379217]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:42 power sudo[1379286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:42 power sudo[1379286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:42 power sudo[1379286]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:42 power sudo[1379298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:42 power sudo[1379306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:42 power sudo[1379298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:42 power sudo[1379306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:42 power sudo[1379306]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:42 power sudo[1379298]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:42 power sudo[1379320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:42 power sudo[1379320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:42 power sudo[1379320]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:42 power sudo[1379345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=ekostoc1 user-2=levantmk user-3=oncolog1 user-4=nefrolog user-5=caramk user-6=hidrommk user-7=frizered user-8=evolvepl user-9=pelagoni user-10=socioloz user-11=avtogumi user-12=enaspotc user-13=trudovop user-14=viewinn user-15=vmro user-16=oouslave user-17=raremk user-18=bauerbg user-19=uhostmk5 user-20=stojnevi user-21=anitermc user-22=youthgua user-23=cajsproc user-24=hotammk user-25=holiyayt user-26=rastiraz user-27=pecakome user-28=stravelm user-29=robustco user-30=wondersp user-31=dnevnoin user-32=gjorgeiv user-33=tradeyou user-34=gocruise user-35=goodnews user-36=mstmmk user-37=dadarmk user-38=proverim user-39=tealmk user-40=nolimits user-41=kolened1 user-42=centarba user-43=nlpmkorg user-44=seloviro user-45=dikimk12 user-46=enochmk user-47=herbalpl user-48=sprintst user-49=edomcomm user-50=berbermk
Sep 11 12:02:42 power sudo[1379345]: wp-toolkit : (command continued) user-51=cetplatf user-52=dalmacom user-53=kouzonco user-54=premiuma user-55=daris user-56=butelmk user-57=premiums user-58=karpospo user-59=nasaidni user-60=ideaplus user-61=arturaco user-62=screenme user-63=inotekso user-64=jpparkin user-65=drleomk user-66=vezilkac user-67=cabinetm user-68=janiboja user-69=itradeco user-70=bovincom user-71=stojano1 user-72=klimimk user-73=stokovna user-74=sparkupm user-75=custome1 user-76=palenzok user-77=zampmk user-78=busymard user-79=zvskopje user-80=polyeste user-81=vfxnestc user-82=sedcmk user-83=ivanjord user-84=groskome user-85=maleshne user-86=datelcom user-87=bizporta user-88=infobadi user-89=mspmk user-90=spdcompu user-91=detskagr user-92=wikicamp user-93=urbanexp user-94=rasmorgm user-95=skyapart user-96=bianasho user-97=makoasmk user-98=dhamachi user-99=volkanco user-100=goartsym user-101=mfashion user-102=barececo user-103=getaldus user-104=delcevca
Sep 11 12:02:42 power sudo[1379345]: wp-toolkit : (command continued) user-105=simbiome user-106=workandt user-107=mpbmk user-108=agrosind user-109=kujnamon user-110=univerz1 user-111=velmk user-112=gogovan1 user-113=datalink user-114=tcieuroc user-115=solemor1 user-116=mapaspla user-117=onlinesh user-118=nationa2 user-119=versusmk user-120=ambitiou user-121=fiziosmk user-122=starluxm user-123=radekrat user-124=fffhpcwr user-125=inkigaic user-126=modernar user-127=taneccom user-128=tehnologija user-129=prizmapl user-130=darkogor user-131=fnjorgmk user-132=dslmk user-133=bozinovm user-134=vacuacti user-135=innofabl user-136=premiumi user-137=v5srybi9dcdx user-138=supremel user-139=aquatech user-140=gorsajmk user-141=zdmgpsor user-142=nutrivim user-143=chemhemc user-144=samasped user-145=elektrot user-146=zapovim1 user-147=euromaki user-148=cosmatob user-149=vtranseu user-150=pravekom user-151=infopor1 user-152=albuname user-153=glammace user-154=imdskopj user-155=nikolov1
Sep 11 12:02:42 power sudo[1379345]: wp-toolkit : (command continued) user-156=hausmark user-157=nikimare user-158=aptekazd user-159=forzares user-160=nucktra1 user-161=lblawcom user-162=mediatag user-163=intelek1 user-164=matratze user-165=euronic2 user-166=kardiome user-167=bogdanos user-168=carrent1 user-169=mediasol user-170=apgrupmk user-171=naksorgm user-172=eliksirz user-173=trigemat user-174=electrol user-175=golakkom user-176=solarinv user-177=eurofarm user-178=wineberr user-179=viplastc user-180=mbmehani user-181=workbenc user-182=ismassag user-183=biplmk user-184=kaoilmk user-185=bbbustou user-186=pelagini user-187=jaramk user-188=solointe user-189=recorgmk user-190=taktcomm user-191=progress user-192=cleanerm user-193=animatem user-194=sssoluti user-195=atspedco user-196=fxxcom user-197=peshkai1 user-198=eaptekam user-199=dimpalne user-200=gradbai1 user-201=aptekafa user-202=madzomk user-203=evacommk user-204=izzomk user-205=jpkomuna user-206=makdrone user-207=tehnodro
Sep 11 12:02:42 power sudo[1379345]: wp-toolkit : (command continued) user-208=evberasm user-209=bonitavi user-210=conserva user-211=euronic3 user-212=cupidpro user-213=vegemk1 user-214=bauerin2 user-215=folklore feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:42 power sudo[1379345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:42 power sudo[1379345]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:44 power sudo[1379405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:44 power sudo[1379406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:44 power sudo[1379405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:44 power sudo[1379406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:44 power sudo[1379405]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:44 power sudo[1379406]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:44 power sudo[1379423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:44 power sudo[1379423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:44 power sudo[1379426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:44 power sudo[1379426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:44 power sudo[1379428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:44 power sudo[1379428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:44 power sudo[1379423]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:44 power sudo[1379426]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:44 power sudo[1379428]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:44 power sudo[1379441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:44 power sudo[1379443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:44 power sudo[1379441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:44 power sudo[1379443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:44 power sudo[1379443]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:44 power sudo[1379441]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:44 power sudo[1379462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=imdskopj user-2=glammace user-3=albuname user-4=infopor1 user-5=vtranseu user-6=pravekom user-7=euromaki user-8=cosmatob user-9=elektrot user-10=zapovim1 user-11=samasped user-12=chemhemc user-13=nutrivim user-14=mediasol user-15=carrent1 user-16=bogdanos user-17=apgrupmk user-18=kardiome user-19=euronic2 user-20=matratze user-21=intelek1 user-22=mediatag user-23=nucktra1 user-24=lblawcom user-25=aptekazd user-26=nikimare user-27=forzares user-28=hausmark user-29=nikolov1 user-30=fffhpcwr user-31=radekrat user-32=starluxm user-33=ambitiou user-34=fiziosmk user-35=versusmk user-36=onlinesh user-37=nationa2 user-38=solemor1 user-39=mapaspla user-40=tcieuroc user-41=zdmgpsor user-42=gorsajmk user-43=aquatech user-44=v5srybi9dcdx user-45=supremel user-46=bozinovm user-47=fnjorgmk user-48=prizmapl user-49=darkogor
Sep 11 12:02:44 power sudo[1379462]: wp-toolkit : (command continued) user-50=dslmk user-51=innofabl user-52=premiumi user-53=vacuacti user-54=taneccom user-55=tehnologija user-56=modernar user-57=inkigaic user-58=tehnodro user-59=makdrone user-60=izzomk user-61=jpkomuna user-62=evacommk user-63=madzomk user-64=aptekafa user-65=gradbai1 user-66=eaptekam user-67=dimpalne user-68=peshkai1 user-69=fxxcom user-70=folklore user-71=bauerin2 user-72=euronic3 user-73=vegemk1 user-74=cupidpro user-75=conserva user-76=bonitavi user-77=evberasm user-78=workbenc user-79=ismassag user-80=mbmehani user-81=wineberr user-82=viplastc user-83=eurofarm user-84=solarinv user-85=golakkom user-86=trigemat user-87=naksorgm user-88=eliksirz user-89=electrol user-90=atspedco user-91=sssoluti user-92=progress user-93=animatem user-94=cleanerm user-95=recorgmk user-96=taktcomm user-97=jaramk user-98=solointe user-99=pelagini user-100=kaoilmk user-101=biplmk user-102=bbbustou user-103=tealmk user-104=dadarmk
Sep 11 12:02:44 power sudo[1379462]: wp-toolkit : (command continued) user-105=proverim user-106=goodnews user-107=mstmmk user-108=gocruise user-109=gjorgeiv user-110=tradeyou user-111=dnevnoin user-112=pecakome user-113=wondersp user-114=robustco user-115=stravelm user-116=holiyayt user-117=rastiraz user-118=edomcomm user-119=berbermk user-120=dikimk12 user-121=sprintst user-122=herbalpl user-123=enochmk user-124=seloviro user-125=centarba user-126=nlpmkorg user-127=kolened1 user-128=nolimits user-129=socioloz user-130=avtogumi user-131=pelagoni user-132=evolvepl user-133=frizered user-134=hidrommk user-135=caramk user-136=nefrolog user-137=oncolog1 user-138=levantmk user-139=ekostoc1 user-140=cajsproc user-141=hotammk user-142=youthgua user-143=anitermc user-144=stojnevi user-145=raremk user-146=oouslave user-147=uhostmk5 user-148=bauerbg user-149=enaspotc user-150=vmro user-151=trudovop user-152=viewinn user-153=wikicamp user-154=urbanexp user-155=spdcompu user-156=detskagr
Sep 11 12:02:44 power sudo[1379462]: wp-toolkit : (command continued) user-157=mspmk user-158=infobadi user-159=bizporta user-160=datelcom user-161=maleshne user-162=sedcmk user-163=groskome user-164=ivanjord user-165=vfxnestc user-166=polyeste user-167=datalink user-168=gogovan1 user-169=velmk user-170=kujnamon user-171=univerz1 user-172=agrosind user-173=mpbmk user-174=getaldus user-175=simbiome user-176=delcevca user-177=barececo user-178=workandt user-179=goartsym user-180=volkanco user-181=dhamachi user-182=mfashion user-183=bianasho user-184=makoasmk user-185=skyapart user-186=rasmorgm user-187=jpparkin user-188=inotekso user-189=drleomk user-190=ideaplus user-191=nasaidni user-192=karpospo user-193=arturaco user-194=screenme user-195=premiums user-196=butelmk user-197=daris user-198=kouzonco user-199=premiuma user-200=cetplatf user-201=dalmacom user-202=palenzok user-203=zvskopje user-204=zampmk user-205=busymard user-206=custome1 user-207=sparkupm user-208=stokovna
Sep 11 12:02:44 power sudo[1379462]: wp-toolkit : (command continued) user-209=klimimk user-210=stojano1 user-211=bovincom user-212=janiboja user-213=itradeco user-214=vezilkac user-215=cabinetm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:44 power sudo[1379464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mspmk user-2=infobadi user-3=spdcompu user-4=detskagr user-5=wikicamp user-6=urbanexp user-7=polyeste user-8=vfxnestc user-9=sedcmk user-10=ivanjord user-11=groskome user-12=maleshne user-13=datelcom user-14=bizporta user-15=mpbmk user-16=agrosind user-17=kujnamon user-18=univerz1 user-19=gogovan1 user-20=velmk user-21=datalink user-22=rasmorgm user-23=skyapart user-24=makoasmk user-25=bianasho user-26=dhamachi user-27=goartsym user-28=volkanco user-29=mfashion user-30=barececo user-31=getaldus user-32=delcevca user-33=simbiome user-34=workandt user-35=daris user-36=butelmk user-37=premiums user-38=karpospo user-39=nasaidni user-40=ideaplus user-41=screenme user-42=arturaco user-43=inotekso user-44=jpparkin user-45=drleomk user-46=cetplatf user-47=dalmacom user-48=kouzonco user-49=premiuma user-50=klimimk
Sep 11 12:02:44 power sudo[1379464]: wp-toolkit : (command continued) user-51=stokovna user-52=sparkupm user-53=custome1 user-54=palenzok user-55=zampmk user-56=busymard user-57=zvskopje user-58=vezilkac user-59=cabinetm user-60=janiboja user-61=itradeco user-62=bovincom user-63=stojano1 user-64=gocruise user-65=goodnews user-66=mstmmk user-67=dadarmk user-68=proverim user-69=tealmk user-70=holiyayt user-71=rastiraz user-72=pecakome user-73=stravelm user-74=robustco user-75=wondersp user-76=dnevnoin user-77=gjorgeiv user-78=tradeyou user-79=dikimk12 user-80=herbalpl user-81=enochmk user-82=sprintst user-83=edomcomm user-84=berbermk user-85=nolimits user-86=kolened1 user-87=nlpmkorg user-88=centarba user-89=seloviro user-90=evolvepl user-91=pelagoni user-92=avtogumi user-93=socioloz user-94=ekostoc1 user-95=levantmk user-96=oncolog1 user-97=nefrolog user-98=caramk user-99=hidrommk user-100=frizered user-101=anitermc user-102=youthgua user-103=cajsproc user-104=hotammk
Sep 11 12:02:44 power sudo[1379464]: wp-toolkit : (command continued) user-105=enaspotc user-106=viewinn user-107=trudovop user-108=vmro user-109=oouslave user-110=raremk user-111=bauerbg user-112=uhostmk5 user-113=stojnevi user-114=izzomk user-115=jpkomuna user-116=makdrone user-117=tehnodro user-118=fxxcom user-119=peshkai1 user-120=eaptekam user-121=dimpalne user-122=gradbai1 user-123=madzomk user-124=aptekafa user-125=evacommk user-126=bauerin2 user-127=folklore user-128=evberasm user-129=bonitavi user-130=conserva user-131=euronic3 user-132=cupidpro user-133=vegemk1 user-134=wineberr user-135=viplastc user-136=mbmehani user-137=workbenc user-138=ismassag user-139=eliksirz user-140=naksorgm user-141=trigemat user-142=electrol user-143=golakkom user-144=solarinv user-145=eurofarm user-146=jaramk user-147=solointe user-148=recorgmk user-149=taktcomm user-150=progress user-151=cleanerm user-152=animatem user-153=atspedco user-154=sssoluti user-155=kaoilmk user-156=biplmk
Sep 11 12:02:44 power sudo[1379464]: wp-toolkit : (command continued) user-157=bbbustou user-158=pelagini user-159=pravekom user-160=vtranseu user-161=infopor1 user-162=albuname user-163=glammace user-164=imdskopj user-165=nutrivim user-166=chemhemc user-167=samasped user-168=elektrot user-169=zapovim1 user-170=cosmatob user-171=euromaki user-172=matratze user-173=euronic2 user-174=kardiome user-175=carrent1 user-176=bogdanos user-177=mediasol user-178=apgrupmk user-179=nikolov1 user-180=hausmark user-181=nikimare user-182=aptekazd user-183=forzares user-184=nucktra1 user-185=lblawcom user-186=mediatag user-187=intelek1 user-188=versusmk user-189=ambitiou user-190=fiziosmk user-191=starluxm user-192=radekrat user-193=fffhpcwr user-194=tcieuroc user-195=solemor1 user-196=mapaspla user-197=onlinesh user-198=nationa2 user-199=v5srybi9dcdx user-200=supremel user-201=aquatech user-202=gorsajmk user-203=zdmgpsor user-204=inkigaic user-205=modernar user-206=taneccom user-207=tehnologija
Sep 11 12:02:44 power sudo[1379464]: wp-toolkit : (command continued) user-208=dslmk user-209=prizmapl user-210=darkogor user-211=fnjorgmk user-212=bozinovm user-213=vacuacti user-214=innofabl user-215=premiumi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:44 power sudo[1379462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:44 power sudo[1379464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:45 power sudo[1379462]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:45 power sudo[1379464]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:45 power sudo[1379492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:45 power sudo[1379492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:45 power sudo[1379492]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:45 power sudo[1379500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:45 power sudo[1379500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:45 power sudo[1379500]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:45 power sudo[1379506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:45 power sudo[1379506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:45 power sudo[1379506]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:45 power sudo[1379513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=rasmorgm user-2=skyapart user-3=makoasmk user-4=bianasho user-5=dhamachi user-6=goartsym user-7=volkanco user-8=mfashion user-9=barececo user-10=getaldus user-11=simbiome user-12=delcevca user-13=workandt user-14=mpbmk user-15=agrosind user-16=kujnamon user-17=univerz1 user-18=gogovan1 user-19=velmk user-20=datalink user-21=polyeste user-22=vfxnestc user-23=sedcmk user-24=ivanjord user-25=groskome user-26=maleshne user-27=datelcom user-28=bizporta user-29=mspmk user-30=infobadi user-31=spdcompu user-32=detskagr user-33=wikicamp user-34=urbanexp user-35=vezilkac user-36=cabinetm user-37=janiboja user-38=itradeco user-39=bovincom user-40=stojano1 user-41=klimimk user-42=stokovna user-43=sparkupm user-44=custome1 user-45=palenzok user-46=zvskopje user-47=zampmk user-48=busymard user-49=cetplatf user-50=dalmacom
Sep 11 12:02:45 power sudo[1379513]: wp-toolkit : (command continued) user-51=kouzonco user-52=premiuma user-53=butelmk user-54=daris user-55=premiums user-56=karpospo user-57=nasaidni user-58=ideaplus user-59=screenme user-60=arturaco user-61=inotekso user-62=jpparkin user-63=drleomk user-64=nolimits user-65=kolened1 user-66=centarba user-67=nlpmkorg user-68=seloviro user-69=dikimk12 user-70=herbalpl user-71=enochmk user-72=sprintst user-73=edomcomm user-74=berbermk user-75=holiyayt user-76=rastiraz user-77=pecakome user-78=robustco user-79=stravelm user-80=wondersp user-81=dnevnoin user-82=gjorgeiv user-83=tradeyou user-84=gocruise user-85=goodnews user-86=mstmmk user-87=dadarmk user-88=proverim user-89=tealmk user-90=enaspotc user-91=trudovop user-92=viewinn user-93=vmro user-94=oouslave user-95=raremk user-96=bauerbg user-97=uhostmk5 user-98=stojnevi user-99=anitermc user-100=youthgua user-101=cajsproc user-102=hotammk user-103=levantmk user-104=oncolog1 user-105=ekostoc1
Sep 11 12:02:45 power sudo[1379513]: wp-toolkit : (command continued) user-106=nefrolog user-107=caramk user-108=hidrommk user-109=frizered user-110=evolvepl user-111=pelagoni user-112=avtogumi user-113=socioloz user-114=evberasm user-115=bonitavi user-116=conserva user-117=euronic3 user-118=cupidpro user-119=vegemk1 user-120=bauerin2 user-121=folklore user-122=fxxcom user-123=peshkai1 user-124=eaptekam user-125=dimpalne user-126=gradbai1 user-127=madzomk user-128=aptekafa user-129=evacommk user-130=izzomk user-131=jpkomuna user-132=makdrone user-133=tehnodro user-134=kaoilmk user-135=biplmk user-136=bbbustou user-137=pelagini user-138=jaramk user-139=solointe user-140=taktcomm user-141=recorgmk user-142=progress user-143=cleanerm user-144=animatem user-145=atspedco user-146=sssoluti user-147=eliksirz user-148=naksorgm user-149=trigemat user-150=electrol user-151=golakkom user-152=solarinv user-153=eurofarm user-154=wineberr user-155=viplastc user-156=mbmehani user-157=workbenc
Sep 11 12:02:45 power sudo[1379513]: wp-toolkit : (command continued) user-158=ismassag user-159=nikolov1 user-160=hausmark user-161=nikimare user-162=aptekazd user-163=forzares user-164=nucktra1 user-165=lblawcom user-166=mediatag user-167=intelek1 user-168=matratze user-169=euronic2 user-170=kardiome user-171=carrent1 user-172=bogdanos user-173=mediasol user-174=apgrupmk user-175=nutrivim user-176=samasped user-177=chemhemc user-178=zapovim1 user-179=elektrot user-180=euromaki user-181=cosmatob user-182=pravekom user-183=vtranseu user-184=infopor1 user-185=albuname user-186=glammace user-187=imdskopj user-188=inkigaic user-189=modernar user-190=taneccom user-191=tehnologija user-192=prizmapl user-193=darkogor user-194=fnjorgmk user-195=dslmk user-196=bozinovm user-197=vacuacti user-198=premiumi user-199=innofabl user-200=v5srybi9dcdx user-201=supremel user-202=aquatech user-203=gorsajmk user-204=zdmgpsor user-205=tcieuroc user-206=solemor1 user-207=mapaspla user-208=onlinesh
Sep 11 12:02:45 power sudo[1379513]: wp-toolkit : (command continued) user-209=nationa2 user-210=versusmk user-211=ambitiou user-212=fiziosmk user-213=starluxm user-214=radekrat user-215=fffhpcwr feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:45 power sudo[1379513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:46 power sudo[1379526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:46 power sudo[1379526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:46 power sudo[1379526]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:46 power sudo[1379513]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:46 power sudo[1379543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:02:46 power sudo[1379543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:46 power sudo[1379543]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:46 power sudo[1379551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:02:46 power sudo[1379551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:46 power sudo[1379551]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:46 power sudo[1379559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:02:46 power sudo[1379559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:46 power sudo[1379568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:46 power sudo[1379568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:46 power sudo[1379568]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:46 power sudo[1379559]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:46 power sudo[1379577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=klimimk user-2=sparkupm user-3=stokovna user-4=custome1 user-5=zampmk user-6=zvskopje user-7=busymard user-8=palenzok user-9=cabinetm user-10=vezilkac user-11=itradeco user-12=janiboja user-13=bovincom user-14=stojano1 user-15=premiums user-16=daris user-17=butelmk user-18=arturaco user-19=screenme user-20=ideaplus user-21=nasaidni user-22=karpospo user-23=drleomk user-24=jpparkin user-25=inotekso user-26=dalmacom user-27=cetplatf user-28=premiuma user-29=kouzonco user-30=agrosind user-31=mpbmk user-32=gogovan1 user-33=velmk user-34=kujnamon user-35=univerz1 user-36=datalink user-37=rasmorgm user-38=makoasmk user-39=bianasho user-40=skyapart user-41=mfashion user-42=goartsym user-43=volkanco user-44=dhamachi user-45=workandt user-46=getaldus user-47=simbiome user-48=delcevca user-49=barececo user-50=infobadi
Sep 11 12:02:46 power sudo[1379577]: wp-toolkit : (command continued) user-51=mspmk user-52=detskagr user-53=spdcompu user-54=urbanexp user-55=wikicamp user-56=vfxnestc user-57=polyeste user-58=groskome user-59=ivanjord user-60=sedcmk user-61=datelcom user-62=maleshne user-63=bizporta user-64=youthgua user-65=anitermc user-66=hotammk user-67=cajsproc user-68=vmro user-69=trudovop user-70=viewinn user-71=enaspotc user-72=uhostmk5 user-73=bauerbg user-74=raremk user-75=oouslave user-76=stojnevi user-77=evolvepl user-78=pelagoni user-79=avtogumi user-80=socioloz user-81=nefrolog user-82=levantmk user-83=ekostoc1 user-84=oncolog1 user-85=caramk user-86=frizered user-87=hidrommk user-88=sprintst user-89=herbalpl user-90=enochmk user-91=dikimk12 user-92=berbermk user-93=edomcomm user-94=nolimits user-95=nlpmkorg user-96=centarba user-97=kolened1 user-98=seloviro user-99=gocruise user-100=mstmmk user-101=goodnews user-102=proverim user-103=dadarmk user-104=tealmk user-105=rastiraz
Sep 11 12:02:46 power sudo[1379577]: wp-toolkit : (command continued) user-106=holiyayt user-107=wondersp user-108=stravelm user-109=robustco user-110=pecakome user-111=dnevnoin user-112=gjorgeiv user-113=tradeyou user-114=solointe user-115=jaramk user-116=recorgmk user-117=taktcomm user-118=animatem user-119=cleanerm user-120=progress user-121=sssoluti user-122=atspedco user-123=bbbustou user-124=kaoilmk user-125=biplmk user-126=pelagini user-127=viplastc user-128=wineberr user-129=mbmehani user-130=ismassag user-131=workbenc user-132=electrol user-133=trigemat user-134=eliksirz user-135=naksorgm user-136=golakkom user-137=solarinv user-138=eurofarm user-139=bauerin2 user-140=folklore user-141=bonitavi user-142=evberasm user-143=conserva user-144=vegemk1 user-145=cupidpro user-146=euronic3 user-147=jpkomuna user-148=izzomk user-149=makdrone user-150=tehnodro user-151=peshkai1 user-152=fxxcom user-153=dimpalne user-154=eaptekam user-155=gradbai1 user-156=evacommk user-157=madzomk
Sep 11 12:02:46 power sudo[1379577]: wp-toolkit : (command continued) user-158=aptekafa user-159=supremel user-160=v5srybi9dcdx user-161=gorsajmk user-162=aquatech user-163=zdmgpsor user-164=inkigaic user-165=modernar user-166=tehnologija user-167=taneccom user-168=innofabl user-169=premiumi user-170=vacuacti user-171=bozinovm user-172=darkogor user-173=prizmapl user-174=fnjorgmk user-175=dslmk user-176=versusmk user-177=fiziosmk user-178=ambitiou user-179=radekrat user-180=starluxm user-181=fffhpcwr user-182=tcieuroc user-183=mapaspla user-184=solemor1 user-185=nationa2 user-186=onlinesh user-187=euronic2 user-188=matratze user-189=kardiome user-190=apgrupmk user-191=mediasol user-192=carrent1 user-193=bogdanos user-194=nikolov1 user-195=hausmark user-196=forzares user-197=aptekazd user-198=nikimare user-199=lblawcom user-200=nucktra1 user-201=intelek1 user-202=mediatag user-203=vtranseu user-204=pravekom user-205=infopor1 user-206=glammace user-207=albuname user-208=imdskopj
Sep 11 12:02:46 power sudo[1379577]: wp-toolkit : (command continued) user-209=nutrivim user-210=samasped user-211=chemhemc user-212=elektrot user-213=zapovim1 user-214=cosmatob user-215=euromaki feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:02:46 power sudo[1379577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:47 power sudo[1379577]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:48 power sudo[1379613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:48 power sudo[1379613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:48 power sudo[1379613]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:50 power sudo[1379674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:50 power sudo[1379674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:50 power sudo[1379674]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:52 power sudo[1379729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:52 power sudo[1379729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:53 power sudo[1379729]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:53 power sudo[1379744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/rm -rf /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.I8AINKTOKxGm
Sep 11 12:02:53 power sudo[1379744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:53 power sudo[1379744]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:55 power sudo[1379831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:55 power sudo[1379831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:55 power sudo[1379831]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:57 power sudo[1379920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379920]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mktemp -p /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp -d instance-305.XXXXXXXXXXXX'
Sep 11 12:02:57 power sudo[1379932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379932]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+rx,o+rx /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa'
Sep 11 12:02:57 power sudo[1379938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379938]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'touch /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa/plugin_contact-form-7.6.1.1.zip'
Sep 11 12:02:57 power sudo[1379942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379942]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+r,o+r /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa/plugin_contact-form-7.6.1.1.zip'
Sep 11 12:02:57 power sudo[1379946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379946]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/3rdparty/wp-toolkit/var/tmp/plugin_contact-form-7.6.1.1.zip
Sep 11 12:02:57 power sudo[1379950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379950]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa/plugin_contact-form-7.6.1.1.zip
Sep 11 12:02:57 power sudo[1379954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379954]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/stat -c %a /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa/plugin_contact-form-7.6.1.1.zip
Sep 11 12:02:57 power sudo[1379958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379958]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa/plugin_contact-form-7.6.1.1-wpt-tmp-r9rXm4klc6jKhwkz.zip
Sep 11 12:02:57 power sudo[1379962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379962]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa/plugin_contact-form-7.6.1.1-wpt-tmp-r9rXm4klc6jKhwkz.zip'
Sep 11 12:02:57 power sudo[1379967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379967]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/chmod 644 /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa/plugin_contact-form-7.6.1.1-wpt-tmp-r9rXm4klc6jKhwkz.zip
Sep 11 12:02:57 power sudo[1379972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379972]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:57 power sudo[1379976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa/plugin_contact-form-7.6.1.1-wpt-tmp-r9rXm4klc6jKhwkz.zip /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa/plugin_contact-form-7.6.1.1.zip
Sep 11 12:02:57 power sudo[1379976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:57 power sudo[1379976]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:59 power sudo[1380008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/rm -rf /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.4SGnl1GwxgMa
Sep 11 12:02:59 power sudo[1380008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:59 power sudo[1380008]: pam_unix(sudo:session): session closed for user root
Sep 11 12:02:59 power sudo[1380035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:02:59 power sudo[1380035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:02:59 power sudo[1380035]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:01 power sudo[1380118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:01 power sudo[1380118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:01 power sudo[1380118]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mktemp -p /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp -d instance-305.XXXXXXXXXXXX'
Sep 11 12:03:03 power sudo[1380173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380173]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+rx,o+rx /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ'
Sep 11 12:03:03 power sudo[1380177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380177]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'touch /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ/plugin_limit-login-attempts-reloaded.2.26.23.zip'
Sep 11 12:03:03 power sudo[1380181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380181]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+r,o+r /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ/plugin_limit-login-attempts-reloaded.2.26.23.zip'
Sep 11 12:03:03 power sudo[1380185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380185]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/3rdparty/wp-toolkit/var/tmp/plugin_limit-login-attempts-reloaded.2.26.23.zip
Sep 11 12:03:03 power sudo[1380189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380189]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ/plugin_limit-login-attempts-reloaded.2.26.23.zip
Sep 11 12:03:03 power sudo[1380193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380193]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/stat -c %a /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ/plugin_limit-login-attempts-reloaded.2.26.23.zip
Sep 11 12:03:03 power sudo[1380197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380197]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ/plugin_limit-login-attempts-reloaded.2.26.23-wpt-tmp-JVUB5YTXd1GczcOn.zip
Sep 11 12:03:03 power sudo[1380201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380201]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ/plugin_limit-login-attempts-reloaded.2.26.23-wpt-tmp-JVUB5YTXd1GczcOn.zip'
Sep 11 12:03:03 power sudo[1380205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380205]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/chmod 644 /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ/plugin_limit-login-attempts-reloaded.2.26.23-wpt-tmp-JVUB5YTXd1GczcOn.zip
Sep 11 12:03:03 power sudo[1380210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380210]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ/plugin_limit-login-attempts-reloaded.2.26.23-wpt-tmp-JVUB5YTXd1GczcOn.zip /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ/plugin_limit-login-attempts-reloaded.2.26.23.zip
Sep 11 12:03:03 power sudo[1380214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380214]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:03 power sudo[1380228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:03 power sudo[1380228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:03 power sudo[1380228]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:06 power sudo[1380281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:06 power sudo[1380281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:06 power sudo[1380281]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:07 power sudo[1380325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:03:07 power sudo[1380325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:07 power sudo[1380325]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:07 power sudo[1380330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:03:07 power sudo[1380330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:07 power sudo[1380330]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:07 power sudo[1380336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:03:07 power sudo[1380336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:08 power sudo[1380347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:08 power sudo[1380347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:08 power sudo[1380336]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:08 power sudo[1380352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=berbermk user-2=edomcomm user-3=sprintst user-4=enochmk user-5=herbalpl user-6=dikimk12 user-7=seloviro user-8=nolimits user-9=centarba user-10=nlpmkorg user-11=kolened1 user-12=proverim user-13=dadarmk user-14=tealmk user-15=gocruise user-16=mstmmk user-17=goodnews user-18=dnevnoin user-19=tradeyou user-20=gjorgeiv user-21=rastiraz user-22=holiyayt user-23=wondersp user-24=robustco user-25=stravelm user-26=pecakome user-27=hotammk user-28=cajsproc user-29=youthgua user-30=anitermc user-31=uhostmk5 user-32=bauerbg user-33=raremk user-34=oouslave user-35=stojnevi user-36=vmro user-37=viewinn user-38=trudovop user-39=enaspotc user-40=pelagoni user-41=socioloz user-42=avtogumi user-43=evolvepl user-44=caramk user-45=frizered user-46=hidrommk user-47=nefrolog user-48=ekostoc1 user-49=levantmk user-50=oncolog1
Sep 11 12:03:08 power sudo[1380352]: wp-toolkit : (command continued) user-51=velmk user-52=gogovan1 user-53=kujnamon user-54=univerz1 user-55=datalink user-56=agrosind user-57=mpbmk user-58=mfashion user-59=goartsym user-60=volkanco user-61=dhamachi user-62=workandt user-63=delcevca user-64=getaldus user-65=simbiome user-66=barececo user-67=rasmorgm user-68=bianasho user-69=makoasmk user-70=skyapart user-71=urbanexp user-72=wikicamp user-73=mspmk user-74=infobadi user-75=detskagr user-76=spdcompu user-77=datelcom user-78=maleshne user-79=bizporta user-80=vfxnestc user-81=polyeste user-82=groskome user-83=ivanjord user-84=sedcmk user-85=custome1 user-86=zampmk user-87=zvskopje user-88=busymard user-89=palenzok user-90=klimimk user-91=sparkupm user-92=stokovna user-93=bovincom user-94=stojano1 user-95=cabinetm user-96=vezilkac user-97=itradeco user-98=janiboja user-99=drleomk user-100=jpparkin user-101=inotekso user-102=premiums user-103=butelmk user-104=daris user-105=screenme
Sep 11 12:03:08 power sudo[1380352]: wp-toolkit : (command continued) user-106=arturaco user-107=ideaplus user-108=nasaidni user-109=karpospo user-110=dalmacom user-111=cetplatf user-112=premiuma user-113=kouzonco user-114=kardiome user-115=apgrupmk user-116=mediasol user-117=carrent1 user-118=bogdanos user-119=euronic2 user-120=matratze user-121=lblawcom user-122=nucktra1 user-123=intelek1 user-124=mediatag user-125=hausmark user-126=nikolov1 user-127=forzares user-128=aptekazd user-129=nikimare user-130=glammace user-131=albuname user-132=imdskopj user-133=vtranseu user-134=pravekom user-135=infopor1 user-136=elektrot user-137=zapovim1 user-138=cosmatob user-139=euromaki user-140=nutrivim user-141=chemhemc user-142=samasped user-143=zdmgpsor user-144=supremel user-145=v5srybi9dcdx user-146=gorsajmk user-147=aquatech user-148=tehnologija user-149=taneccom user-150=premiumi user-151=innofabl user-152=vacuacti user-153=bozinovm user-154=prizmapl user-155=fnjorgmk user-156=darkogor
Sep 11 12:03:08 power sudo[1380352]: wp-toolkit : (command continued) user-157=dslmk user-158=inkigaic user-159=modernar user-160=radekrat user-161=starluxm user-162=fffhpcwr user-163=versusmk user-164=fiziosmk user-165=ambitiou user-166=mapaspla user-167=solemor1 user-168=nationa2 user-169=onlinesh user-170=tcieuroc user-171=bauerin2 user-172=folklore user-173=conserva user-174=vegemk1 user-175=cupidpro user-176=euronic3 user-177=bonitavi user-178=evberasm user-179=makdrone user-180=tehnodro user-181=jpkomuna user-182=izzomk user-183=gradbai1 user-184=evacommk user-185=aptekafa user-186=madzomk user-187=peshkai1 user-188=fxxcom user-189=dimpalne user-190=eaptekam user-191=animatem user-192=cleanerm user-193=progress user-194=atspedco user-195=sssoluti user-196=solointe user-197=jaramk user-198=recorgmk user-199=taktcomm user-200=pelagini user-201=bbbustou user-202=biplmk user-203=kaoilmk user-204=mbmehani user-205=ismassag user-206=workbenc user-207=viplastc user-208=wineberr
Sep 11 12:03:08 power sudo[1380352]: wp-toolkit : (command continued) user-209=solarinv user-210=eurofarm user-211=electrol user-212=trigemat user-213=eliksirz user-214=naksorgm user-215=golakkom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:03:08 power sudo[1380352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:08 power sudo[1380347]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:08 power sudo[1380352]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:09 power sudo[1380423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/rm -rf /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.Inph8zEz8aaJ
Sep 11 12:03:09 power sudo[1380423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:09 power sudo[1380423]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:10 power sudo[1380455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:10 power sudo[1380455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:10 power sudo[1380455]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:12 power sudo[1380535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:12 power sudo[1380535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:12 power sudo[1380535]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:14 power sudo[1380588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:14 power sudo[1380588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:14 power sudo[1380588]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mktemp -p /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp -d instance-305.XXXXXXXXXXXX'
Sep 11 12:03:15 power sudo[1380607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380607]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+rx,o+rx /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7'
Sep 11 12:03:15 power sudo[1380612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380612]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'touch /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7/plugin_jetpack.15.0.zip'
Sep 11 12:03:15 power sudo[1380616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380616]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'chmod g+r,o+r /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7/plugin_jetpack.15.0.zip'
Sep 11 12:03:15 power sudo[1380620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380620]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/3rdparty/wp-toolkit/var/tmp/plugin_jetpack.15.0.zip
Sep 11 12:03:15 power sudo[1380624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380624]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7/plugin_jetpack.15.0.zip
Sep 11 12:03:15 power sudo[1380628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380628]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/stat -c %a /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7/plugin_jetpack.15.0.zip
Sep 11 12:03:15 power sudo[1380634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380634]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7/plugin_jetpack.15.0-wpt-tmp-hQzGx2CgrDxDaZxz.zip
Sep 11 12:03:15 power sudo[1380638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380638]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7/plugin_jetpack.15.0-wpt-tmp-hQzGx2CgrDxDaZxz.zip'
Sep 11 12:03:15 power sudo[1380642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380642]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/chmod 644 /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7/plugin_jetpack.15.0-wpt-tmp-hQzGx2CgrDxDaZxz.zip
Sep 11 12:03:15 power sudo[1380647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380647]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:15 power sudo[1380651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7/plugin_jetpack.15.0-wpt-tmp-hQzGx2CgrDxDaZxz.zip /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7/plugin_jetpack.15.0.zip
Sep 11 12:03:15 power sudo[1380651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:15 power sudo[1380651]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:16 power sudo[1380678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:16 power sudo[1380678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:16 power sudo[1380678]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:19 power sudo[1380713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:19 power sudo[1380713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:19 power sudo[1380713]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:21 power sudo[1380752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:21 power sudo[1380752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:21 power sudo[1380752]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:23 power sudo[1380817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:23 power sudo[1380817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:23 power sudo[1380817]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:25 power sudo[1380858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:26 power sudo[1380858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:26 power sudo[1380858]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:28 power sudo[1380936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:29 power sudo[1380936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:29 power sudo[1380936]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:31 power sudo[1381000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:31 power sudo[1381000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:32 power sudo[1381000]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:34 power sudo[1381083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:34 power sudo[1381083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:35 power sudo[1381083]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:37 power sudo[1381140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:37 power sudo[1381140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:38 power sudo[1381140]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:40 power sudo[1381215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:41 power sudo[1381215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:41 power sudo[1381215]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:43 power sudo[1381320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:44 power sudo[1381320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:44 power sudo[1381320]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:46 power sudo[1381380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:46 power sudo[1381380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:47 power sudo[1381380]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:49 power sudo[1381422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:49 power sudo[1381422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:50 power sudo[1381422]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:52 power sudo[1381477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:53 power sudo[1381477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:53 power sudo[1381477]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:55 power sudo[1381536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:55 power sudo[1381536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:56 power sudo[1381536]: pam_unix(sudo:session): session closed for user root
Sep 11 12:03:58 power sudo[1381581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:03:59 power sudo[1381581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:03:59 power sudo[1381581]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:01 power sudo[1381654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:02 power sudo[1381654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:02 power sudo[1381654]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:04 power sudo[1381741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:04 power sudo[1381741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:05 power sudo[1381741]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:07 power sudo[1381793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:08 power sudo[1381793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:08 power sudo[1381793]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:10 power sudo[1381861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:11 power sudo[1381861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:11 power sudo[1381861]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:13 power sudo[1381931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:14 power sudo[1381931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:14 power sudo[1381931]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:16 power sudo[1381982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:17 power sudo[1381982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:17 power sudo[1381982]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:19 power sudo[1382021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:19 power sudo[1382021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:20 power sudo[1382021]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:22 power sudo[1382075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:23 power sudo[1382075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:23 power sudo[1382075]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:23 power sudo[1382102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/rm -rf /usr/local/cpanel/3rdparty/wp-toolkit/local-server-tmp/instance-305.qWfOQ0mSndO7
Sep 11 12:04:23 power sudo[1382102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:23 power sudo[1382102]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:25 power sudo[1382206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:26 power sudo[1382206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:26 power sudo[1382206]: pam_unix(sudo:session): session closed for user root
Sep 11 12:04:28 power sudo[1382288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 12:04:29 power sudo[1382288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:04:29 power sudo[1382288]: pam_unix(sudo:session): session closed for user root
Sep 11 12:05:01 power systemd[1382935]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:05:01 power systemd[1382937]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:06:02 power systemd[1384074]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 12:07:01 power systemd[1385292]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 12:09:01 power systemd[1387596]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:10:01 power systemd[1388908]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:10:01 power systemd[1388907]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:12:02 power systemd[1391770]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 12:15:01 power systemd[1395198]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:15:01 power systemd[1395199]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:20:02 power systemd[1401412]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:20:02 power systemd[1401414]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:25:01 power systemd[1407620]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:25:01 power systemd[1407622]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:30:01 power systemd[1413853]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:30:01 power systemd[1413856]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:30:01 power systemd[1413857]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 12:30:01 power systemd[1413861]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 12:30:01 power systemd[1413859]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 12:35:01 power systemd[1420201]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:35:01 power systemd[1420202]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:36:01 power systemd[1421644]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 12:37:01 power systemd[1422853]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 12:39:00 power sudo[1425357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:39:00 power systemd[1425362]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:39:01 power sudo[1425357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:39:01 power sudo[1425357]: pam_unix(sudo:session): session closed for user root
Sep 11 12:39:01 power sudo[1425379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:39:01 power sudo[1425379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:39:01 power sudo[1425379]: pam_unix(sudo:session): session closed for user root
Sep 11 12:39:01 power sudo[1425391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:39:01 power sudo[1425391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:39:01 power sudo[1425391]: pam_unix(sudo:session): session closed for user root
Sep 11 12:39:01 power sudo[1425410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=ekostoc1 user-2=levantmk user-3=oncolog1 user-4=nefrolog user-5=hidrommk user-6=frizered user-7=caramk user-8=evolvepl user-9=socioloz user-10=avtogumi user-11=pelagoni user-12=enaspotc user-13=viewinn user-14=trudovop user-15=vmro user-16=stojnevi user-17=oouslave user-18=raremk user-19=bauerbg user-20=uhostmk5 user-21=anitermc user-22=youthgua user-23=cajsproc user-24=hotammk user-25=pecakome user-26=stravelm user-27=robustco user-28=wondersp user-29=holiyayt user-30=rastiraz user-31=tradeyou user-32=gjorgeiv user-33=dnevnoin user-34=goodnews user-35=mstmmk user-36=gocruise user-37=tealmk user-38=dadarmk user-39=proverim user-40=kolened1 user-41=nlpmkorg user-42=centarba user-43=nolimits user-44=seloviro user-45=dikimk12 user-46=enochmk user-47=herbalpl user-48=sprintst user-49=edomcomm user-50=berbermk
Sep 11 12:39:01 power sudo[1425410]: wp-toolkit : (command continued) user-51=kouzonco user-52=premiuma user-53=cetplatf user-54=dalmacom user-55=karpospo user-56=nasaidni user-57=ideaplus user-58=arturaco user-59=screenme user-60=daris user-61=butelmk user-62=premiums user-63=inotekso user-64=jpparkin user-65=drleomk user-66=janiboja user-67=itradeco user-68=vezilkac user-69=cabinetm user-70=stojano1 user-71=bovincom user-72=stokovna user-73=sparkupm user-74=klimimk user-75=palenzok user-76=zampmk user-77=zvskopje user-78=busymard user-79=custome1 user-80=sedcmk user-81=ivanjord user-82=groskome user-83=polyeste user-84=vfxnestc user-85=bizporta user-86=maleshne user-87=datelcom user-88=spdcompu user-89=detskagr user-90=mspmk user-91=infobadi user-92=wikicamp user-93=urbanexp user-94=skyapart user-95=bianasho user-96=makoasmk user-97=rasmorgm user-98=barececo user-99=delcevca user-100=getaldus user-101=simbiome user-102=workandt user-103=dhamachi user-104=goartsym
Sep 11 12:39:01 power sudo[1425410]: wp-toolkit : (command continued) user-105=volkanco user-106=mfashion user-107=mpbmk user-108=agrosind user-109=datalink user-110=univerz1 user-111=kujnamon user-112=gogovan1 user-113=velmk user-114=tcieuroc user-115=onlinesh user-116=nationa2 user-117=solemor1 user-118=mapaspla user-119=ambitiou user-120=fiziosmk user-121=versusmk user-122=fffhpcwr user-123=starluxm user-124=radekrat user-125=modernar user-126=inkigaic user-127=fnjorgmk user-128=prizmapl user-129=darkogor user-130=dslmk user-131=bozinovm user-132=vacuacti user-133=innofabl user-134=premiumi user-135=taneccom user-136=tehnologija user-137=aquatech user-138=gorsajmk user-139=v5srybi9dcdx user-140=supremel user-141=zdmgpsor user-142=chemhemc user-143=samasped user-144=nutrivim user-145=euromaki user-146=cosmatob user-147=elektrot user-148=zapovim1 user-149=infopor1 user-150=vtranseu user-151=pravekom user-152=imdskopj user-153=albuname user-154=glammace user-155=nikimare
Sep 11 12:39:01 power sudo[1425410]: wp-toolkit : (command continued) user-156=aptekazd user-157=forzares user-158=hausmark user-159=nikolov1 user-160=mediatag user-161=intelek1 user-162=nucktra1 user-163=lblawcom user-164=matratze user-165=euronic2 user-166=carrent1 user-167=bogdanos user-168=mediasol user-169=apgrupmk user-170=kardiome user-171=golakkom user-172=naksorgm user-173=eliksirz user-174=trigemat user-175=electrol user-176=eurofarm user-177=solarinv user-178=wineberr user-179=viplastc user-180=workbenc user-181=ismassag user-182=mbmehani user-183=biplmk user-184=kaoilmk user-185=bbbustou user-186=pelagini user-187=recorgmk user-188=taktcomm user-189=jaramk user-190=solointe user-191=atspedco user-192=sssoluti user-193=progress user-194=cleanerm user-195=animatem user-196=eaptekam user-197=dimpalne user-198=fxxcom user-199=peshkai1 user-200=aptekafa user-201=madzomk user-202=evacommk user-203=gradbai1 user-204=izzomk user-205=jpkomuna user-206=tehnodro user-207=makdrone
Sep 11 12:39:01 power sudo[1425410]: wp-toolkit : (command continued) user-208=evberasm user-209=bonitavi user-210=euronic3 user-211=cupidpro user-212=vegemk1 user-213=conserva user-214=folklore user-215=bauerin2 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:39:01 power sudo[1425410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:39:01 power sudo[1425410]: pam_unix(sudo:session): session closed for user root
Sep 11 12:40:02 power systemd[1426622]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:40:02 power systemd[1426623]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:42:01 power systemd[1429088]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 12:42:09 power sudo[1429415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 12:42:09 power systemd[1429421]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:42:09 power sudo[1429415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:09 power sudo[1429415]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:09 power sudo[1429440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 12:42:09 power sudo[1429440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:09 power sudo[1429440]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:09 power sudo[1429444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 12:42:09 power sudo[1429444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:09 power sudo[1429444]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:09 power sudo[1429448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=FUqJf1uOGz'
Sep 11 12:42:09 power sudo[1429448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:09 power sudo[1429448]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:09 power sudo[1429453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 12:42:09 power sudo[1429453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:09 power sudo[1429453]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:09 power sudo[1429458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 12:42:09 power sudo[1429458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:09 power sudo[1429458]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:09 power sudo[1429462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 12:42:09 power sudo[1429462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:09 power sudo[1429462]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:10 power sudo[1429467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 12:42:10 power sudo[1429467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:10 power sudo[1429467]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:10 power sudo[1429473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 12:42:10 power sudo[1429473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:10 power sudo[1429473]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:10 power sudo[1429478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 12:42:10 power sudo[1429478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:10 power sudo[1429478]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:10 power sudo[1429482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 12:42:10 power sudo[1429482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:10 power sudo[1429482]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:10 power sudo[1429486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 12:42:10 power sudo[1429486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:10 power sudo[1429486]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:10 power sudo[1429491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 12:42:10 power sudo[1429491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:10 power sudo[1429491]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:10 power sudo[1429496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 12:42:10 power sudo[1429496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:10 power sudo[1429496]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:12 power sudo[1429595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 12:42:12 power sudo[1429595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:12 power sudo[1429595]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:12 power sudo[1429600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 12:42:12 power sudo[1429600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:12 power sudo[1429600]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:12 power sudo[1429605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=gradbai1 user-2=evacommk user-3=madzomk user-4=aptekafa user-5=peshkai1 user-6=fxxcom user-7=dimpalne user-8=eaptekam user-9=makdrone user-10=tehnodro user-11=jpkomuna user-12=izzomk user-13=conserva user-14=vegemk1 user-15=cupidpro user-16=euronic3 user-17=bonitavi user-18=evberasm user-19=bauerin2 user-20=folklore user-21=solarinv user-22=eurofarm user-23=electrol user-24=trigemat user-25=eliksirz user-26=naksorgm user-27=golakkom user-28=mbmehani user-29=ismassag user-30=workbenc user-31=viplastc user-32=wineberr user-33=pelagini user-34=bbbustou user-35=biplmk user-36=kaoilmk user-37=animatem user-38=cleanerm user-39=progress user-40=atspedco user-41=sssoluti user-42=solointe user-43=jaramk user-44=taktcomm user-45=recorgmk user-46=zapovim1 user-47=elektrot user-48=cosmatob user-49=euromaki
Sep 11 12:42:12 power sudo[1429605]: wp-toolkit : (command continued) user-50=nutrivim user-51=chemhemc user-52=samasped user-53=glammace user-54=albuname user-55=imdskopj user-56=pravekom user-57=vtranseu user-58=infopor1 user-59=lblawcom user-60=nucktra1 user-61=intelek1 user-62=mediatag user-63=nikolov1 user-64=hausmark user-65=forzares user-66=aptekazd user-67=nikimare user-68=kardiome user-69=apgrupmk user-70=mediasol user-71=carrent1 user-72=bogdanos user-73=euronic2 user-74=matratze user-75=mapaspla user-76=solemor1 user-77=nationa2 user-78=onlinesh user-79=tcieuroc user-80=radekrat user-81=starluxm user-82=fffhpcwr user-83=versusmk user-84=fiziosmk user-85=ambitiou user-86=tehnologija user-87=taneccom user-88=premiumi user-89=innofabl user-90=vacuacti user-91=bozinovm user-92=darkogor user-93=fnjorgmk user-94=prizmapl user-95=dslmk user-96=inkigaic user-97=modernar user-98=zdmgpsor user-99=supremel user-100=v5srybi9dcdx user-101=gorsajmk user-102=aquatech user-103=datelcom
Sep 11 12:42:12 power sudo[1429605]: wp-toolkit : (command continued) user-104=maleshne user-105=bizporta user-106=vfxnestc user-107=polyeste user-108=ivanjord user-109=groskome user-110=sedcmk user-111=urbanexp user-112=wikicamp user-113=mspmk user-114=infobadi user-115=detskagr user-116=spdcompu user-117=mfashion user-118=volkanco user-119=goartsym user-120=dhamachi user-121=workandt user-122=getaldus user-123=delcevca user-124=simbiome user-125=barececo user-126=rasmorgm user-127=makoasmk user-128=bianasho user-129=skyapart user-130=velmk user-131=gogovan1 user-132=univerz1 user-133=kujnamon user-134=datalink user-135=agrosind user-136=mpbmk user-137=dalmacom user-138=cetplatf user-139=premiuma user-140=kouzonco user-141=drleomk user-142=jpparkin user-143=inotekso user-144=premiums user-145=butelmk user-146=daris user-147=screenme user-148=arturaco user-149=ideaplus user-150=karpospo user-151=nasaidni user-152=bovincom user-153=stojano1 user-154=cabinetm user-155=vezilkac
Sep 11 12:42:12 power sudo[1429605]: wp-toolkit : (command continued) user-156=itradeco user-157=janiboja user-158=custome1 user-159=busymard user-160=zampmk user-161=zvskopje user-162=palenzok user-163=klimimk user-164=sparkupm user-165=stokovna user-166=dnevnoin user-167=tradeyou user-168=gjorgeiv user-169=rastiraz user-170=holiyayt user-171=wondersp user-172=stravelm user-173=robustco user-174=pecakome user-175=proverim user-176=dadarmk user-177=tealmk user-178=gocruise user-179=mstmmk user-180=goodnews user-181=seloviro user-182=nolimits user-183=nlpmkorg user-184=centarba user-185=kolened1 user-186=berbermk user-187=edomcomm user-188=sprintst user-189=enochmk user-190=herbalpl user-191=dikimk12 user-192=caramk user-193=frizered user-194=hidrommk user-195=nefrolog user-196=levantmk user-197=ekostoc1 user-198=oncolog1 user-199=pelagoni user-200=socioloz user-201=avtogumi user-202=evolvepl user-203=uhostmk5 user-204=bauerbg user-205=raremk user-206=oouslave user-207=stojnevi
Sep 11 12:42:12 power sudo[1429605]: wp-toolkit : (command continued) user-208=vmro user-209=trudovop user-210=viewinn user-211=enaspotc user-212=hotammk user-213=cajsproc user-214=youthgua user-215=anitermc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 12:42:12 power sudo[1429605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:13 power sudo[1429605]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:13 power sudo[1429616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 12:42:13 power sudo[1429616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:13 power sudo[1429616]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:13 power sudo[1429620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Yp70FQDngWSMIHZN.~
Sep 11 12:42:13 power sudo[1429620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:13 power sudo[1429620]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:13 power sudo[1429624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Yp70FQDngWSMIHZN.~\''
Sep 11 12:42:13 power sudo[1429624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:13 power sudo[1429624]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:13 power sudo[1429629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Yp70FQDngWSMIHZN.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 12:42:13 power sudo[1429629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:13 power sudo[1429629]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:13 power sudo[1429634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 12:42:13 power sudo[1429634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:13 power sudo[1429634]: pam_unix(sudo:session): session closed for user root
Sep 11 12:42:16 power sudo[1429955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 12:42:17 power sudo[1429955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 12:42:17 power sudo[1429955]: pam_unix(sudo:session): session closed for user root
Sep 11 12:45:01 power systemd[1434104]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:45:01 power systemd[1434105]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:50:01 power systemd[1440765]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:50:01 power systemd[1440768]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 12:55:01 power systemd[1446850]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 12:55:01 power systemd[1446851]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:00:01 power systemd[1452836]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:00:01 power systemd[1452839]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:00:01 power systemd[1452840]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 13:00:01 power systemd[1452842]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 13:00:02 power systemd[1452843]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 13:04:02 power systemd[1459265]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:05:01 power systemd[1460487]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:05:01 power systemd[1460488]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:06:01 power systemd[1461661]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 13:06:49 power sudo[1462609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 13:06:49 power systemd[1462617]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:06:49 power sudo[1462609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:49 power sudo[1462609]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:49 power sudo[1462634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 13:06:49 power sudo[1462634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:49 power sudo[1462634]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:49 power sudo[1462640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 13:06:49 power sudo[1462640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:49 power sudo[1462640]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:49 power sudo[1462645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 13:06:49 power sudo[1462645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:50 power sudo[1462645]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:50 power sudo[1462654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=evacommk user-2=madzomk user-3=aptekafa user-4=gradbai1 user-5=eaptekam user-6=dimpalne user-7=peshkai1 user-8=fxxcom user-9=tehnodro user-10=makdrone user-11=izzomk user-12=jpkomuna user-13=euronic3 user-14=vegemk1 user-15=cupidpro user-16=conserva user-17=bonitavi user-18=evberasm user-19=folklore user-20=bauerin2 user-21=eurofarm user-22=solarinv user-23=golakkom user-24=trigemat user-25=eliksirz user-26=naksorgm user-27=electrol user-28=workbenc user-29=ismassag user-30=mbmehani user-31=wineberr user-32=viplastc user-33=pelagini user-34=biplmk user-35=kaoilmk user-36=bbbustou user-37=sssoluti user-38=atspedco user-39=progress user-40=animatem user-41=cleanerm user-42=taktcomm user-43=recorgmk user-44=jaramk user-45=solointe user-46=euromaki user-47=cosmatob user-48=zapovim1 user-49=elektrot
Sep 11 13:06:50 power sudo[1462654]: wp-toolkit : (command continued) user-50=chemhemc user-51=samasped user-52=nutrivim user-53=imdskopj user-54=glammace user-55=albuname user-56=infopor1 user-57=vtranseu user-58=pravekom user-59=intelek1 user-60=mediatag user-61=nucktra1 user-62=lblawcom user-63=aptekazd user-64=nikimare user-65=forzares user-66=nikolov1 user-67=hausmark user-68=mediasol user-69=bogdanos user-70=carrent1 user-71=apgrupmk user-72=kardiome user-73=euronic2 user-74=matratze user-75=onlinesh user-76=nationa2 user-77=solemor1 user-78=mapaspla user-79=tcieuroc user-80=fffhpcwr user-81=radekrat user-82=starluxm user-83=ambitiou user-84=fiziosmk user-85=versusmk user-86=bozinovm user-87=darkogor user-88=dslmk user-89=prizmapl user-90=fnjorgmk user-91=innofabl user-92=premiumi user-93=vacuacti user-94=taneccom user-95=tehnologija user-96=modernar user-97=inkigaic user-98=zdmgpsor user-99=gorsajmk user-100=aquatech user-101=v5srybi9dcdx user-102=supremel user-103=bizporta
Sep 11 13:06:50 power sudo[1462654]: wp-toolkit : (command continued) user-104=datelcom user-105=maleshne user-106=sedcmk user-107=groskome user-108=ivanjord user-109=vfxnestc user-110=polyeste user-111=wikicamp user-112=urbanexp user-113=spdcompu user-114=detskagr user-115=infobadi user-116=mspmk user-117=delcevca user-118=getaldus user-119=simbiome user-120=barececo user-121=workandt user-122=goartsym user-123=volkanco user-124=dhamachi user-125=mfashion user-126=bianasho user-127=makoasmk user-128=skyapart user-129=rasmorgm user-130=datalink user-131=gogovan1 user-132=velmk user-133=univerz1 user-134=kujnamon user-135=agrosind user-136=mpbmk user-137=kouzonco user-138=premiuma user-139=cetplatf user-140=dalmacom user-141=jpparkin user-142=inotekso user-143=drleomk user-144=ideaplus user-145=nasaidni user-146=karpospo user-147=screenme user-148=arturaco user-149=premiums user-150=daris user-151=butelmk user-152=stojano1 user-153=bovincom user-154=janiboja user-155=itradeco
Sep 11 13:06:50 power sudo[1462654]: wp-toolkit : (command continued) user-156=vezilkac user-157=cabinetm user-158=palenzok user-159=zampmk user-160=busymard user-161=zvskopje user-162=custome1 user-163=sparkupm user-164=stokovna user-165=klimimk user-166=tradeyou user-167=gjorgeiv user-168=dnevnoin user-169=pecakome user-170=wondersp user-171=robustco user-172=stravelm user-173=holiyayt user-174=rastiraz user-175=tealmk user-176=dadarmk user-177=proverim user-178=goodnews user-179=mstmmk user-180=gocruise user-181=seloviro user-182=centarba user-183=nlpmkorg user-184=kolened1 user-185=nolimits user-186=edomcomm user-187=berbermk user-188=dikimk12 user-189=sprintst user-190=enochmk user-191=herbalpl user-192=frizered user-193=hidrommk user-194=caramk user-195=nefrolog user-196=levantmk user-197=oncolog1 user-198=ekostoc1 user-199=socioloz user-200=avtogumi user-201=pelagoni user-202=evolvepl user-203=stojnevi user-204=raremk user-205=oouslave user-206=uhostmk5 user-207=bauerbg
Sep 11 13:06:50 power sudo[1462654]: wp-toolkit : (command continued) user-208=enaspotc user-209=vmro user-210=viewinn user-211=trudovop user-212=cajsproc user-213=hotammk user-214=youthgua user-215=anitermc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 13:06:50 power sudo[1462654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:50 power sudo[1462654]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:50 power sudo[1462685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 13:06:50 power sudo[1462685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:50 power sudo[1462685]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:51 power sudo[1462690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 13:06:51 power sudo[1462690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:51 power sudo[1462690]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:51 power sudo[1462699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 13:06:51 power sudo[1462699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:51 power sudo[1462699]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:51 power sudo[1462709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=ivanjord user-2=groskome user-3=sedcmk user-4=vfxnestc user-5=polyeste user-6=bizporta user-7=datelcom user-8=maleshne user-9=detskagr user-10=spdcompu user-11=mspmk user-12=infobadi user-13=urbanexp user-14=wikicamp user-15=makoasmk user-16=bianasho user-17=skyapart user-18=rasmorgm user-19=workandt user-20=getaldus user-21=delcevca user-22=simbiome user-23=barececo user-24=mfashion user-25=goartsym user-26=volkanco user-27=dhamachi user-28=agrosind user-29=mpbmk user-30=datalink user-31=gogovan1 user-32=velmk user-33=univerz1 user-34=kujnamon user-35=premiuma user-36=kouzonco user-37=dalmacom user-38=cetplatf user-39=screenme user-40=arturaco user-41=ideaplus user-42=karpospo user-43=nasaidni user-44=premiums user-45=daris user-46=butelmk user-47=drleomk user-48=jpparkin user-49=inotekso user-50=itradeco
Sep 11 13:06:51 power sudo[1462709]: wp-toolkit : (command continued) user-51=janiboja user-52=cabinetm user-53=vezilkac user-54=stojano1 user-55=bovincom user-56=sparkupm user-57=stokovna user-58=klimimk user-59=zampmk user-60=busymard user-61=zvskopje user-62=palenzok user-63=custome1 user-64=wondersp user-65=robustco user-66=stravelm user-67=pecakome user-68=rastiraz user-69=holiyayt user-70=gjorgeiv user-71=tradeyou user-72=dnevnoin user-73=mstmmk user-74=goodnews user-75=gocruise user-76=tealmk user-77=proverim user-78=dadarmk user-79=nlpmkorg user-80=centarba user-81=kolened1 user-82=nolimits user-83=seloviro user-84=sprintst user-85=herbalpl user-86=enochmk user-87=dikimk12 user-88=berbermk user-89=edomcomm user-90=nefrolog user-91=levantmk user-92=ekostoc1 user-93=oncolog1 user-94=frizered user-95=hidrommk user-96=caramk user-97=evolvepl user-98=avtogumi user-99=socioloz user-100=pelagoni user-101=vmro user-102=trudovop user-103=viewinn user-104=enaspotc user-105=stojnevi
Sep 11 13:06:51 power sudo[1462709]: wp-toolkit : (command continued) user-106=uhostmk5 user-107=bauerbg user-108=raremk user-109=oouslave user-110=youthgua user-111=anitermc user-112=hotammk user-113=cajsproc user-114=dimpalne user-115=eaptekam user-116=peshkai1 user-117=fxxcom user-118=evacommk user-119=aptekafa user-120=madzomk user-121=gradbai1 user-122=jpkomuna user-123=izzomk user-124=tehnodro user-125=makdrone user-126=bonitavi user-127=evberasm user-128=vegemk1 user-129=cupidpro user-130=euronic3 user-131=conserva user-132=folklore user-133=bauerin2 user-134=golakkom user-135=electrol user-136=trigemat user-137=naksorgm user-138=eliksirz user-139=eurofarm user-140=solarinv user-141=viplastc user-142=wineberr user-143=ismassag user-144=workbenc user-145=mbmehani user-146=bbbustou user-147=biplmk user-148=kaoilmk user-149=pelagini user-150=recorgmk user-151=taktcomm user-152=solointe user-153=jaramk user-154=atspedco user-155=sssoluti user-156=animatem user-157=cleanerm
Sep 11 13:06:51 power sudo[1462709]: wp-toolkit : (command continued) user-158=progress user-159=chemhemc user-160=samasped user-161=nutrivim user-162=euromaki user-163=cosmatob user-164=zapovim1 user-165=elektrot user-166=infopor1 user-167=vtranseu user-168=pravekom user-169=imdskopj user-170=glammace user-171=albuname user-172=forzares user-173=aptekazd user-174=nikimare user-175=nikolov1 user-176=hausmark user-177=intelek1 user-178=mediatag user-179=lblawcom user-180=nucktra1 user-181=euronic2 user-182=matratze user-183=apgrupmk user-184=mediasol user-185=bogdanos user-186=carrent1 user-187=kardiome user-188=tcieuroc user-189=nationa2 user-190=onlinesh user-191=mapaspla user-192=solemor1 user-193=fiziosmk user-194=ambitiou user-195=versusmk user-196=fffhpcwr user-197=radekrat user-198=starluxm user-199=modernar user-200=inkigaic user-201=premiumi user-202=innofabl user-203=vacuacti user-204=bozinovm user-205=prizmapl user-206=fnjorgmk user-207=dslmk user-208=darkogor
Sep 11 13:06:51 power sudo[1462709]: wp-toolkit : (command continued) user-209=tehnologija user-210=taneccom user-211=gorsajmk user-212=aquatech user-213=supremel user-214=v5srybi9dcdx user-215=zdmgpsor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 13:06:51 power sudo[1462709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:51 power sudo[1462709]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:51 power sudo[1462738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 13:06:51 power sudo[1462738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:52 power sudo[1462738]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:52 power sudo[1462743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 13:06:52 power sudo[1462743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:52 power sudo[1462743]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:52 power sudo[1462748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 13:06:52 power sudo[1462748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:52 power sudo[1462748]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:52 power sudo[1462763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 11 13:06:52 power sudo[1462763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:52 power sudo[1462763]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:52 power sudo[1462768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 13:06:52 power sudo[1462768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:52 power sudo[1462768]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:52 power sudo[1462773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 13:06:52 power sudo[1462773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:52 power sudo[1462773]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:54 power sudo[1462799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 13:06:54 power sudo[1462799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:54 power sudo[1462799]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:54 power sudo[1462805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 13:06:54 power sudo[1462805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:54 power sudo[1462805]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:54 power sudo[1462810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 13:06:54 power sudo[1462810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:54 power sudo[1462810]: pam_unix(sudo:session): session closed for user root
Sep 11 13:06:54 power sudo[1462815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=intelek1 user-2=mediatag user-3=nucktra1 user-4=lblawcom user-5=aptekazd user-6=nikimare user-7=forzares user-8=hausmark user-9=nikolov1 user-10=mediasol user-11=bogdanos user-12=carrent1 user-13=apgrupmk user-14=kardiome user-15=euronic2 user-16=matratze user-17=euromaki user-18=cosmatob user-19=elektrot user-20=zapovim1 user-21=samasped user-22=chemhemc user-23=nutrivim user-24=imdskopj user-25=glammace user-26=albuname user-27=infopor1 user-28=vtranseu user-29=pravekom user-30=bozinovm user-31=fnjorgmk user-32=darkogor user-33=dslmk user-34=prizmapl user-35=innofabl user-36=premiumi user-37=vacuacti user-38=taneccom user-39=tehnologija user-40=modernar user-41=inkigaic user-42=zdmgpsor user-43=gorsajmk user-44=aquatech user-45=v5srybi9dcdx user-46=supremel user-47=onlinesh user-48=nationa2 user-49=solemor1
Sep 11 13:06:54 power sudo[1462815]: wp-toolkit : (command continued) user-50=mapaspla user-51=tcieuroc user-52=fffhpcwr user-53=radekrat user-54=starluxm user-55=ambitiou user-56=fiziosmk user-57=versusmk user-58=euronic3 user-59=vegemk1 user-60=cupidpro user-61=conserva user-62=bonitavi user-63=evberasm user-64=folklore user-65=bauerin2 user-66=evacommk user-67=madzomk user-68=aptekafa user-69=gradbai1 user-70=eaptekam user-71=dimpalne user-72=peshkai1 user-73=fxxcom user-74=tehnodro user-75=makdrone user-76=izzomk user-77=jpkomuna user-78=pelagini user-79=kaoilmk user-80=biplmk user-81=bbbustou user-82=atspedco user-83=sssoluti user-84=progress user-85=animatem user-86=cleanerm user-87=taktcomm user-88=recorgmk user-89=jaramk user-90=solointe user-91=eurofarm user-92=solarinv user-93=golakkom user-94=trigemat user-95=eliksirz user-96=naksorgm user-97=electrol user-98=workbenc user-99=ismassag user-100=mbmehani user-101=wineberr user-102=viplastc user-103=seloviro
Sep 11 13:06:54 power sudo[1462815]: wp-toolkit : (command continued) user-104=centarba user-105=nlpmkorg user-106=kolened1 user-107=nolimits user-108=edomcomm user-109=berbermk user-110=dikimk12 user-111=sprintst user-112=herbalpl user-113=enochmk user-114=tradeyou user-115=gjorgeiv user-116=dnevnoin user-117=pecakome user-118=wondersp user-119=stravelm user-120=robustco user-121=holiyayt user-122=rastiraz user-123=tealmk user-124=dadarmk user-125=proverim user-126=goodnews user-127=mstmmk user-128=gocruise user-129=stojnevi user-130=raremk user-131=oouslave user-132=uhostmk5 user-133=bauerbg user-134=enaspotc user-135=vmro user-136=viewinn user-137=trudovop user-138=cajsproc user-139=hotammk user-140=youthgua user-141=anitermc user-142=frizered user-143=hidrommk user-144=caramk user-145=nefrolog user-146=levantmk user-147=oncolog1 user-148=ekostoc1 user-149=avtogumi user-150=socioloz user-151=pelagoni user-152=evolvepl user-153=simbiome user-154=getaldus user-155=delcevca
Sep 11 13:06:54 power sudo[1462815]: wp-toolkit : (command continued) user-156=barececo user-157=workandt user-158=volkanco user-159=goartsym user-160=dhamachi user-161=mfashion user-162=bianasho user-163=makoasmk user-164=skyapart user-165=rasmorgm user-166=datalink user-167=gogovan1 user-168=velmk user-169=univerz1 user-170=kujnamon user-171=agrosind user-172=mpbmk user-173=bizporta user-174=datelcom user-175=maleshne user-176=sedcmk user-177=ivanjord user-178=groskome user-179=vfxnestc user-180=polyeste user-181=wikicamp user-182=urbanexp user-183=spdcompu user-184=detskagr user-185=mspmk user-186=infobadi user-187=stojano1 user-188=bovincom user-189=janiboja user-190=itradeco user-191=vezilkac user-192=cabinetm user-193=palenzok user-194=zampmk user-195=busymard user-196=zvskopje user-197=custome1 user-198=sparkupm user-199=stokovna user-200=klimimk user-201=kouzonco user-202=premiuma user-203=cetplatf user-204=dalmacom user-205=jpparkin user-206=inotekso user-207=drleomk
Sep 11 13:06:54 power sudo[1462815]: wp-toolkit : (command continued) user-208=ideaplus user-209=nasaidni user-210=karpospo user-211=arturaco user-212=screenme user-213=premiums user-214=butelmk user-215=daris feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 13:06:54 power sudo[1462815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:06:55 power sudo[1462815]: pam_unix(sudo:session): session closed for user root
Sep 11 13:07:01 power systemd[1462962]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 13:07:08 power sshd[1463001]: error: kex_exchange_identification: read: Connection reset by peer
Sep 11 13:07:08 power sshd[1463001]: Connection reset by 199.45.155.93 port 51050
Sep 11 13:07:27 power sshd[1463259]: Connection closed by 199.45.155.93 port 43450 [preauth]
Sep 11 13:09:01 power systemd[1465172]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:10:01 power systemd[1466317]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:10:01 power systemd[1466318]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:12:01 power systemd[1468632]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 13:13:59 power sshd[1475706]: error: kex_exchange_identification: read: Connection reset by peer
Sep 11 13:13:59 power sshd[1475706]: Connection reset by 206.168.34.66 port 36596
Sep 11 13:14:18 power sshd[1475897]: Connection closed by 206.168.34.66 port 38294 [preauth]
Sep 11 13:15:01 power systemd[1476988]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:15:01 power systemd[1476989]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:20:01 power systemd[1489561]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:20:01 power systemd[1489562]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:21:15 power sshd[1492831]: error: kex_exchange_identification: Connection closed by remote host
Sep 11 13:21:15 power sshd[1492831]: Connection closed by 87.236.176.30 port 39815
Sep 11 13:21:15 power sshd[1492880]: Connection closed by 87.236.176.30 port 53463 [preauth]
Sep 11 13:25:01 power systemd[1502680]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:25:01 power systemd[1502681]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:30:01 power systemd[1515974]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:30:01 power systemd[1515975]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:30:01 power systemd[1515976]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 13:30:01 power systemd[1515978]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 13:30:01 power systemd[1515980]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 13:35:01 power systemd[1530033]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:35:01 power systemd[1530035]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:36:01 power systemd[1532827]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 13:37:01 power systemd[1535486]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 13:39:01 power systemd[1540803]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:40:01 power systemd[1543617]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:40:01 power systemd[1543618]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:42:01 power systemd[1549285]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 13:42:09 power sudo[1549619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 13:42:09 power systemd[1549626]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:42:09 power sudo[1549619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:09 power sudo[1549619]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:09 power sudo[1549652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 13:42:09 power sudo[1549652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:09 power sudo[1549652]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:09 power sudo[1549658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 13:42:09 power sudo[1549658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:09 power sudo[1549658]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:09 power sudo[1549664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=GwMwYtvNXC'
Sep 11 13:42:09 power sudo[1549664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:09 power sudo[1549664]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:09 power sudo[1549672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 13:42:09 power sudo[1549672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:09 power sudo[1549672]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:09 power sudo[1549677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 13:42:09 power sudo[1549677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:09 power sudo[1549677]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:09 power sudo[1549683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 13:42:09 power sudo[1549683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:09 power sudo[1549683]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:09 power sudo[1549688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 13:42:09 power sudo[1549688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:10 power sudo[1549688]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:10 power sudo[1549705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 13:42:10 power sudo[1549705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:10 power sudo[1549705]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:10 power sudo[1549709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 13:42:10 power sudo[1549709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:10 power sudo[1549709]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:10 power sudo[1549715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 13:42:10 power sudo[1549715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:10 power sudo[1549715]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:10 power sudo[1549720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 13:42:10 power sudo[1549720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:10 power sudo[1549720]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:10 power sudo[1549724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 13:42:10 power sudo[1549724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:10 power sudo[1549724]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:10 power sudo[1549728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 13:42:10 power sudo[1549728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:10 power sudo[1549728]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:12 power sudo[1549784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 13:42:12 power sudo[1549784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:12 power sudo[1549784]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:12 power sudo[1549790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 13:42:12 power sudo[1549790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:12 power sudo[1549790]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:12 power sudo[1549797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=elektrot user-2=zapovim1 user-3=cosmatob user-4=euromaki user-5=nutrivim user-6=samasped user-7=chemhemc user-8=albuname user-9=glammace user-10=imdskopj user-11=pravekom user-12=vtranseu user-13=infopor1 user-14=lblawcom user-15=nucktra1 user-16=mediatag user-17=intelek1 user-18=hausmark user-19=nikolov1 user-20=forzares user-21=nikimare user-22=aptekazd user-23=kardiome user-24=apgrupmk user-25=bogdanos user-26=carrent1 user-27=mediasol user-28=matratze user-29=euronic2 user-30=mapaspla user-31=solemor1 user-32=nationa2 user-33=onlinesh user-34=tcieuroc user-35=starluxm user-36=radekrat user-37=fffhpcwr user-38=versusmk user-39=fiziosmk user-40=ambitiou user-41=tehnologija user-42=taneccom user-43=vacuacti user-44=premiumi user-45=innofabl user-46=fnjorgmk user-47=prizmapl user-48=darkogor user-49=dslmk
Sep 11 13:42:12 power sudo[1549797]: wp-toolkit : (command continued) user-50=bozinovm user-51=inkigaic user-52=modernar user-53=zdmgpsor user-54=supremel user-55=v5srybi9dcdx user-56=aquatech user-57=gorsajmk user-58=gradbai1 user-59=aptekafa user-60=madzomk user-61=evacommk user-62=fxxcom user-63=peshkai1 user-64=dimpalne user-65=eaptekam user-66=makdrone user-67=tehnodro user-68=jpkomuna user-69=izzomk user-70=conserva user-71=cupidpro user-72=vegemk1 user-73=euronic3 user-74=evberasm user-75=bonitavi user-76=bauerin2 user-77=folklore user-78=solarinv user-79=eurofarm user-80=electrol user-81=naksorgm user-82=eliksirz user-83=trigemat user-84=golakkom user-85=mbmehani user-86=ismassag user-87=workbenc user-88=viplastc user-89=wineberr user-90=pelagini user-91=bbbustou user-92=biplmk user-93=kaoilmk user-94=cleanerm user-95=animatem user-96=progress user-97=atspedco user-98=sssoluti user-99=solointe user-100=jaramk user-101=taktcomm user-102=recorgmk user-103=dnevnoin
Sep 11 13:42:12 power sudo[1549797]: wp-toolkit : (command continued) user-104=gjorgeiv user-105=tradeyou user-106=rastiraz user-107=holiyayt user-108=robustco user-109=stravelm user-110=wondersp user-111=pecakome user-112=proverim user-113=dadarmk user-114=tealmk user-115=gocruise user-116=mstmmk user-117=goodnews user-118=seloviro user-119=nolimits user-120=kolened1 user-121=centarba user-122=nlpmkorg user-123=berbermk user-124=edomcomm user-125=enochmk user-126=herbalpl user-127=sprintst user-128=dikimk12 user-129=caramk user-130=hidrommk user-131=frizered user-132=levantmk user-133=ekostoc1 user-134=oncolog1 user-135=nefrolog user-136=pelagoni user-137=avtogumi user-138=socioloz user-139=evolvepl user-140=bauerbg user-141=uhostmk5 user-142=oouslave user-143=raremk user-144=stojnevi user-145=viewinn user-146=trudovop user-147=vmro user-148=enaspotc user-149=hotammk user-150=cajsproc user-151=anitermc user-152=youthgua user-153=maleshne user-154=datelcom user-155=bizporta
Sep 11 13:42:12 power sudo[1549797]: wp-toolkit : (command continued) user-156=polyeste user-157=vfxnestc user-158=ivanjord user-159=groskome user-160=sedcmk user-161=urbanexp user-162=wikicamp user-163=mspmk user-164=infobadi user-165=detskagr user-166=spdcompu user-167=mfashion user-168=dhamachi user-169=goartsym user-170=volkanco user-171=workandt user-172=barececo user-173=getaldus user-174=delcevca user-175=simbiome user-176=rasmorgm user-177=skyapart user-178=makoasmk user-179=bianasho user-180=kujnamon user-181=univerz1 user-182=gogovan1 user-183=velmk user-184=datalink user-185=mpbmk user-186=agrosind user-187=dalmacom user-188=cetplatf user-189=premiuma user-190=kouzonco user-191=drleomk user-192=inotekso user-193=jpparkin user-194=daris user-195=butelmk user-196=premiums user-197=screenme user-198=arturaco user-199=karpospo user-200=nasaidni user-201=ideaplus user-202=bovincom user-203=stojano1 user-204=cabinetm user-205=vezilkac user-206=itradeco user-207=janiboja
Sep 11 13:42:12 power sudo[1549797]: wp-toolkit : (command continued) user-208=custome1 user-209=zampmk user-210=busymard user-211=zvskopje user-212=palenzok user-213=klimimk user-214=stokovna user-215=sparkupm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 13:42:12 power sudo[1549797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:13 power sudo[1549797]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:13 power sudo[1549826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 13:42:13 power sudo[1549826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:13 power sudo[1549826]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:13 power sudo[1549832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hxQFXBtRSLXnB5yl.~
Sep 11 13:42:13 power sudo[1549832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:13 power sudo[1549832]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:13 power sudo[1549838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hxQFXBtRSLXnB5yl.~\''
Sep 11 13:42:13 power sudo[1549838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:13 power sudo[1549838]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:13 power sudo[1549843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hxQFXBtRSLXnB5yl.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 13:42:13 power sudo[1549843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:13 power sudo[1549843]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:13 power sudo[1549848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 13:42:13 power sudo[1549848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:13 power sudo[1549848]: pam_unix(sudo:session): session closed for user root
Sep 11 13:42:14 power sudo[1550836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 13:42:14 power sudo[1550836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 13:42:14 power sudo[1550836]: pam_unix(sudo:session): session closed for user root
Sep 11 13:45:01 power systemd[1558088]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:45:01 power systemd[1558089]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:50:01 power systemd[1572181]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:50:01 power systemd[1572182]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 13:55:01 power systemd[1579120]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 13:55:01 power systemd[1579121]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:00:01 power systemd[1585110]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:00:01 power systemd[1585111]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:00:01 power systemd[1585112]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 14:00:01 power systemd[1585114]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 14:00:01 power systemd[1585116]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 14:04:01 power systemd[1590609]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:05:01 power systemd[1591808]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:05:01 power systemd[1591809]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:06:01 power systemd[1593038]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 14:07:01 power systemd[1594054]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 14:09:01 power systemd[1596843]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:10:01 power systemd[1598741]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:10:01 power systemd[1598742]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:12:01 power systemd[1601432]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 14:15:01 power systemd[1605293]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:15:01 power systemd[1605295]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:20:01 power systemd[1611679]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:20:01 power systemd[1611681]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:25:01 power systemd[1617773]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:25:01 power systemd[1617775]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:30:01 power systemd[1623815]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:30:01 power systemd[1623816]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:30:01 power systemd[1623817]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 14:30:01 power systemd[1623819]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 14:30:01 power systemd[1623821]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 14:35:01 power systemd[1630422]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:35:01 power systemd[1630423]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:36:01 power systemd[1631787]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 14:37:01 power systemd[1632975]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 14:39:01 power systemd[1635242]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:40:01 power systemd[1636326]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:40:01 power systemd[1636329]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:42:01 power systemd[1638498]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 14:42:09 power sudo[1638685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 14:42:09 power systemd[1638690]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:42:09 power sudo[1638685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:09 power sudo[1638685]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:09 power sudo[1638704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 14:42:09 power sudo[1638704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:09 power sudo[1638704]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:09 power sudo[1638709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 14:42:09 power sudo[1638709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:09 power sudo[1638709]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:09 power sudo[1638713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=ERJaY7zact'
Sep 11 14:42:09 power sudo[1638713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:09 power sudo[1638713]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:09 power sudo[1638718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 14:42:09 power sudo[1638718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:09 power sudo[1638718]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:09 power sudo[1638722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 14:42:09 power sudo[1638722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:09 power sudo[1638722]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:09 power sudo[1638726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 14:42:09 power sudo[1638726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:10 power sudo[1638726]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:10 power sudo[1638731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 14:42:10 power sudo[1638731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:10 power sudo[1638731]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:10 power sudo[1638736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 14:42:10 power sudo[1638736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:10 power sudo[1638736]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:10 power sudo[1638740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 14:42:10 power sudo[1638740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:10 power sudo[1638740]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:10 power sudo[1638744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 14:42:10 power sudo[1638744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:10 power sudo[1638744]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:10 power sudo[1638751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 14:42:10 power sudo[1638751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:10 power sudo[1638751]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:10 power sudo[1638755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 14:42:10 power sudo[1638755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:10 power sudo[1638755]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:10 power sudo[1638760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 14:42:10 power sudo[1638760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:10 power sudo[1638760]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:17 power sudo[1638885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 14:42:17 power sudo[1638885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:17 power sudo[1638885]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:17 power sudo[1638891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 14:42:17 power sudo[1638891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:17 power sudo[1638891]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:17 power sudo[1638897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=samasped user-2=chemhemc user-3=nutrivim user-4=euromaki user-5=cosmatob user-6=elektrot user-7=zapovim1 user-8=infopor1 user-9=vtranseu user-10=pravekom user-11=imdskopj user-12=glammace user-13=albuname user-14=aptekazd user-15=nikimare user-16=forzares user-17=hausmark user-18=nikolov1 user-19=intelek1 user-20=mediatag user-21=nucktra1 user-22=lblawcom user-23=euronic2 user-24=matratze user-25=mediasol user-26=carrent1 user-27=bogdanos user-28=apgrupmk user-29=kardiome user-30=tcieuroc user-31=onlinesh user-32=nationa2 user-33=solemor1 user-34=mapaspla user-35=ambitiou user-36=fiziosmk user-37=versusmk user-38=fffhpcwr user-39=radekrat user-40=starluxm user-41=modernar user-42=inkigaic user-43=bozinovm user-44=darkogor user-45=fnjorgmk user-46=prizmapl user-47=dslmk user-48=premiumi user-49=innofabl
Sep 11 14:42:17 power sudo[1638897]: wp-toolkit : (command continued) user-50=vacuacti user-51=taneccom user-52=tehnologija user-53=gorsajmk user-54=aquatech user-55=v5srybi9dcdx user-56=supremel user-57=zdmgpsor user-58=eaptekam user-59=dimpalne user-60=peshkai1 user-61=fxxcom user-62=evacommk user-63=aptekafa user-64=madzomk user-65=gradbai1 user-66=izzomk user-67=jpkomuna user-68=tehnodro user-69=makdrone user-70=bonitavi user-71=evberasm user-72=euronic3 user-73=vegemk1 user-74=cupidpro user-75=conserva user-76=folklore user-77=bauerin2 user-78=golakkom user-79=trigemat user-80=naksorgm user-81=eliksirz user-82=electrol user-83=eurofarm user-84=solarinv user-85=wineberr user-86=viplastc user-87=workbenc user-88=ismassag user-89=mbmehani user-90=biplmk user-91=kaoilmk user-92=bbbustou user-93=pelagini user-94=recorgmk user-95=taktcomm user-96=jaramk user-97=solointe user-98=sssoluti user-99=atspedco user-100=progress user-101=animatem user-102=cleanerm user-103=pecakome
Sep 11 14:42:17 power sudo[1638897]: wp-toolkit : (command continued) user-104=wondersp user-105=robustco user-106=stravelm user-107=holiyayt user-108=rastiraz user-109=tradeyou user-110=gjorgeiv user-111=dnevnoin user-112=goodnews user-113=mstmmk user-114=gocruise user-115=tealmk user-116=dadarmk user-117=proverim user-118=nlpmkorg user-119=centarba user-120=kolened1 user-121=nolimits user-122=seloviro user-123=dikimk12 user-124=sprintst user-125=enochmk user-126=herbalpl user-127=edomcomm user-128=berbermk user-129=nefrolog user-130=levantmk user-131=ekostoc1 user-132=oncolog1 user-133=frizered user-134=hidrommk user-135=caramk user-136=evolvepl user-137=socioloz user-138=avtogumi user-139=pelagoni user-140=enaspotc user-141=vmro user-142=trudovop user-143=viewinn user-144=stojnevi user-145=raremk user-146=oouslave user-147=uhostmk5 user-148=bauerbg user-149=youthgua user-150=anitermc user-151=cajsproc user-152=hotammk user-153=sedcmk user-154=groskome user-155=ivanjord
Sep 11 14:42:17 power sudo[1638897]: wp-toolkit : (command continued) user-156=vfxnestc user-157=polyeste user-158=bizporta user-159=datelcom user-160=maleshne user-161=spdcompu user-162=detskagr user-163=mspmk user-164=infobadi user-165=wikicamp user-166=urbanexp user-167=bianasho user-168=makoasmk user-169=skyapart user-170=rasmorgm user-171=delcevca user-172=getaldus user-173=simbiome user-174=barececo user-175=workandt user-176=volkanco user-177=goartsym user-178=dhamachi user-179=mfashion user-180=agrosind user-181=mpbmk user-182=datalink user-183=gogovan1 user-184=velmk user-185=univerz1 user-186=kujnamon user-187=kouzonco user-188=premiuma user-189=cetplatf user-190=dalmacom user-191=ideaplus user-192=karpospo user-193=nasaidni user-194=arturaco user-195=screenme user-196=premiums user-197=daris user-198=butelmk user-199=jpparkin user-200=inotekso user-201=drleomk user-202=janiboja user-203=itradeco user-204=vezilkac user-205=cabinetm user-206=stojano1 user-207=bovincom
Sep 11 14:42:17 power sudo[1638897]: wp-toolkit : (command continued) user-208=sparkupm user-209=stokovna user-210=klimimk user-211=palenzok user-212=busymard user-213=zampmk user-214=zvskopje user-215=custome1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 14:42:17 power sudo[1638897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:18 power sudo[1638897]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:18 power sudo[1638904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep 11 14:42:18 power sudo[1638904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:18 power sudo[1638904]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:18 power sudo[1638912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro test -e /home/vmro/wordpress-backups
Sep 11 14:42:18 power sudo[1638912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:18 power sudo[1638912]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:18 power sudo[1638923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep 11 14:42:18 power sudo[1638923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:18 power sudo[1638923]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:18 power sudo[1638928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep 11 14:42:18 power sudo[1638928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:18 power sudo[1638928]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:18 power sudo[1638939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep 11 14:42:18 power sudo[1638939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:18 power sudo[1638939]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:18 power sudo[1638946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind test -e /home/agrosind/wordpress-backups
Sep 11 14:42:18 power sudo[1638946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:18 power sudo[1638946]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:18 power sudo[1638957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep 11 14:42:18 power sudo[1638957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:19 power sudo[1638957]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:19 power sudo[1638968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep 11 14:42:19 power sudo[1638968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:19 power sudo[1638968]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:19 power sudo[1638979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep 11 14:42:19 power sudo[1638979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:19 power sudo[1638979]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:19 power sudo[1638989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep 11 14:42:19 power sudo[1638989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:19 power sudo[1638989]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:19 power sudo[1639001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep 11 14:42:19 power sudo[1639001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:19 power sudo[1639001]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:19 power sudo[1639008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem test -e /home/animatem/wordpress-backups
Sep 11 14:42:19 power sudo[1639008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:19 power sudo[1639008]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:19 power sudo[1639019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep 11 14:42:19 power sudo[1639019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:19 power sudo[1639019]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:19 power sudo[1639027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc test -e /home/anitermc/wordpress-backups
Sep 11 14:42:19 power sudo[1639027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:19 power sudo[1639027]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:19 power sudo[1639039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep 11 14:42:19 power sudo[1639039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:20 power sudo[1639039]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:20 power sudo[1639051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep 11 14:42:20 power sudo[1639051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:20 power sudo[1639051]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:20 power sudo[1639062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep 11 14:42:20 power sudo[1639062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:20 power sudo[1639062]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:20 power sudo[1639074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd test -e /home/aptekazd/wordpress-backups
Sep 11 14:42:20 power sudo[1639074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:20 power sudo[1639074]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:20 power sudo[1639087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep 11 14:42:20 power sudo[1639087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:20 power sudo[1639087]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:20 power sudo[1639097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress test -e /home/progress/wordpress-backups
Sep 11 14:42:20 power sudo[1639097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:20 power sudo[1639097]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:20 power sudo[1639108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep 11 14:42:20 power sudo[1639108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:20 power sudo[1639108]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:20 power sudo[1639114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep 11 14:42:20 power sudo[1639114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:20 power sudo[1639114]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:20 power sudo[1639125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep 11 14:42:20 power sudo[1639125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:21 power sudo[1639125]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:21 power sudo[1639134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 test -e /home/nationa2/wordpress-backups
Sep 11 14:42:21 power sudo[1639134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:21 power sudo[1639134]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:21 power sudo[1639145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep 11 14:42:21 power sudo[1639145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:21 power sudo[1639145]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:21 power sudo[1639158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 11 14:42:21 power sudo[1639158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:21 power sudo[1639158]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:21 power sudo[1639169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep 11 14:42:21 power sudo[1639169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:21 power sudo[1639169]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:21 power sudo[1639178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho test -e /home/bianasho/wordpress-backups
Sep 11 14:42:21 power sudo[1639178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:21 power sudo[1639178]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:21 power sudo[1639189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep 11 14:42:21 power sudo[1639189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:21 power sudo[1639189]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:21 power sudo[1639195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk test -e /home/velmk/wordpress-backups
Sep 11 14:42:22 power sudo[1639195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:22 power sudo[1639195]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:22 power sudo[1639207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep 11 14:42:22 power sudo[1639207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:22 power sudo[1639207]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:22 power sudo[1639212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep 11 14:42:22 power sudo[1639212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:22 power sudo[1639212]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:22 power sudo[1639224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep 11 14:42:22 power sudo[1639224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:22 power sudo[1639224]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:22 power sudo[1639233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi test -e /home/bonitavi/wordpress-backups
Sep 11 14:42:22 power sudo[1639233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:22 power sudo[1639233]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:22 power sudo[1639244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep 11 14:42:22 power sudo[1639244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:22 power sudo[1639244]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:22 power sudo[1639250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom test -e /home/bovincom/wordpress-backups
Sep 11 14:42:22 power sudo[1639250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:22 power sudo[1639250]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:22 power sudo[1639261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep 11 14:42:22 power sudo[1639261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:22 power sudo[1639261]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:22 power sudo[1639275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk test -e /home/butelmk/wordpress-backups
Sep 11 14:42:22 power sudo[1639275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639275]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep 11 14:42:23 power sudo[1639286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639286]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep 11 14:42:23 power sudo[1639293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639293]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 11 14:42:23 power sudo[1639305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639305]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 11 14:42:23 power sudo[1639320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639320]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep 11 14:42:23 power sudo[1639331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639331]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep 11 14:42:23 power sudo[1639341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639341]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep 11 14:42:23 power sudo[1639352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639352]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob test -e /home/cosmatob/wordpress-backups
Sep 11 14:42:23 power sudo[1639357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639357]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep 11 14:42:23 power sudo[1639369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:23 power sudo[1639369]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:23 power sudo[1639383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep 11 14:42:23 power sudo[1639383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639383]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca test -e /home/delcevca/wordpress-backups
Sep 11 14:42:24 power sudo[1639390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639390]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep 11 14:42:24 power sudo[1639401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639401]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 11 14:42:24 power sudo[1639417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639417]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 11 14:42:24 power sudo[1639428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639428]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 11 14:42:24 power sudo[1639439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639439]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep 11 14:42:24 power sudo[1639451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639451]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr test -e /home/detskagr/wordpress-backups
Sep 11 14:42:24 power sudo[1639458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639458]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep 11 14:42:24 power sudo[1639469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639469]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam test -e /home/eaptekam/wordpress-backups
Sep 11 14:42:24 power sudo[1639484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:24 power sudo[1639484]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:24 power sudo[1639496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep 11 14:42:24 power sudo[1639496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:25 power sudo[1639496]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:25 power sudo[1639501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne test -e /home/dimpalne/wordpress-backups
Sep 11 14:42:25 power sudo[1639501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:25 power sudo[1639501]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:25 power sudo[1639512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep 11 14:42:25 power sudo[1639512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:25 power sudo[1639512]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:25 power sudo[1639532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin test -e /home/dnevnoin/wordpress-backups
Sep 11 14:42:25 power sudo[1639532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:25 power sudo[1639532]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:25 power sudo[1639543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep 11 14:42:25 power sudo[1639543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:25 power sudo[1639543]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:25 power sudo[1639554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep 11 14:42:25 power sudo[1639554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:25 power sudo[1639554]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:25 power sudo[1639563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk test -e /home/drleomk/wordpress-backups
Sep 11 14:42:25 power sudo[1639563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:25 power sudo[1639563]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:25 power sudo[1639574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep 11 14:42:25 power sudo[1639574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:25 power sudo[1639574]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:25 power sudo[1639580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 11 14:42:26 power sudo[1639580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:26 power sudo[1639580]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:26 power sudo[1639591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep 11 14:42:26 power sudo[1639591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:26 power sudo[1639591]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:26 power sudo[1639596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol test -e /home/electrol/wordpress-backups
Sep 11 14:42:26 power sudo[1639596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:26 power sudo[1639596]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:26 power sudo[1639607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep 11 14:42:26 power sudo[1639607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:26 power sudo[1639607]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:26 power sudo[1639615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot test -e /home/elektrot/wordpress-backups
Sep 11 14:42:26 power sudo[1639615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:26 power sudo[1639615]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:26 power sudo[1639626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep 11 14:42:26 power sudo[1639626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:26 power sudo[1639626]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:26 power sudo[1639637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep 11 14:42:26 power sudo[1639637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:26 power sudo[1639637]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:26 power sudo[1639644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk test -e /home/enochmk/wordpress-backups
Sep 11 14:42:26 power sudo[1639644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:26 power sudo[1639644]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:26 power sudo[1639656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 11 14:42:26 power sudo[1639656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:26 power sudo[1639656]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:26 power sudo[1639667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep 11 14:42:26 power sudo[1639667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:27 power sudo[1639667]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:27 power sudo[1639675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm test -e /home/eurofarm/wordpress-backups
Sep 11 14:42:27 power sudo[1639675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:27 power sudo[1639675]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:27 power sudo[1639686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep 11 14:42:27 power sudo[1639686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:27 power sudo[1639686]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:27 power sudo[1639694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki test -e /home/euromaki/wordpress-backups
Sep 11 14:42:27 power sudo[1639694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:27 power sudo[1639694]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:27 power sudo[1639710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep 11 14:42:27 power sudo[1639710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:27 power sudo[1639710]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:27 power sudo[1639716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm test -e /home/evberasm/wordpress-backups
Sep 11 14:42:27 power sudo[1639716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:27 power sudo[1639716]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:27 power sudo[1639729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep 11 14:42:27 power sudo[1639729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:27 power sudo[1639729]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:27 power sudo[1639737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl test -e /home/evolvepl/wordpress-backups
Sep 11 14:42:27 power sudo[1639737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:27 power sudo[1639737]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:27 power sudo[1639750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 11 14:42:27 power sudo[1639750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:27 power sudo[1639750]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:27 power sudo[1639764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep 11 14:42:27 power sudo[1639764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:28 power sudo[1639764]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:28 power sudo[1639776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 11 14:42:28 power sudo[1639776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:28 power sudo[1639776]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:28 power sudo[1639787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep 11 14:42:28 power sudo[1639787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:28 power sudo[1639787]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:28 power sudo[1639799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep 11 14:42:28 power sudo[1639799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:28 power sudo[1639799]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:28 power sudo[1639814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep 11 14:42:28 power sudo[1639814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:28 power sudo[1639814]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:28 power sudo[1639822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore test -e /home/folklore/wordpress-backups
Sep 11 14:42:28 power sudo[1639822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:28 power sudo[1639822]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:28 power sudo[1639833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep 11 14:42:28 power sudo[1639833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:28 power sudo[1639833]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:28 power sudo[1639838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares test -e /home/forzares/wordpress-backups
Sep 11 14:42:28 power sudo[1639838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:28 power sudo[1639838]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:28 power sudo[1639849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep 11 14:42:28 power sudo[1639849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:29 power sudo[1639849]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:29 power sudo[1639856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus test -e /home/getaldus/wordpress-backups
Sep 11 14:42:29 power sudo[1639856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:29 power sudo[1639856]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:29 power sudo[1639867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep 11 14:42:29 power sudo[1639867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:29 power sudo[1639867]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:29 power sudo[1639876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise test -e /home/gocruise/wordpress-backups
Sep 11 14:42:29 power sudo[1639876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:29 power sudo[1639876]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:29 power sudo[1639887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep 11 14:42:29 power sudo[1639887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:29 power sudo[1639887]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:29 power sudo[1639894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 test -e /home/gogovan1/wordpress-backups
Sep 11 14:42:29 power sudo[1639894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:29 power sudo[1639894]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:29 power sudo[1639905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep 11 14:42:29 power sudo[1639905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:29 power sudo[1639905]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:29 power sudo[1639914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom test -e /home/golakkom/wordpress-backups
Sep 11 14:42:29 power sudo[1639914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:29 power sudo[1639914]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:29 power sudo[1639925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 11 14:42:29 power sudo[1639925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:29 power sudo[1639925]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:29 power sudo[1639936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep 11 14:42:29 power sudo[1639936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1639936]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1639942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl test -e /home/herbalpl/wordpress-backups
Sep 11 14:42:30 power sudo[1639942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1639942]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1639954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 11 14:42:30 power sudo[1639954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1639954]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1639965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 11 14:42:30 power sudo[1639965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1639965]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1639977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep 11 14:42:30 power sudo[1639977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1639977]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1639989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 11 14:42:30 power sudo[1639989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1639989]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1640000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 11 14:42:30 power sudo[1640000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1640000]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1640011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 11 14:42:30 power sudo[1640011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1640011]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1640022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 11 14:42:30 power sudo[1640022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1640022]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1640034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 11 14:42:30 power sudo[1640034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1640034]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1640046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep 11 14:42:30 power sudo[1640046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1640046]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1640058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk test -e /home/madzomk/wordpress-backups
Sep 11 14:42:30 power sudo[1640058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:30 power sudo[1640058]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:30 power sudo[1640071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep 11 14:42:30 power sudo[1640071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:31 power sudo[1640071]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:31 power sudo[1640097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj test -e /home/imdskopj/wordpress-backups
Sep 11 14:42:31 power sudo[1640097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:31 power sudo[1640097]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:31 power sudo[1640110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep 11 14:42:31 power sudo[1640110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:31 power sudo[1640110]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:31 power sudo[1640145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 test -e /home/infopor1/wordpress-backups
Sep 11 14:42:31 power sudo[1640145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:31 power sudo[1640145]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:31 power sudo[1640162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep 11 14:42:31 power sudo[1640162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:31 power sudo[1640162]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:31 power sudo[1640191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user inkigaic test -e /home/inkigaic/wordpress-backups
Sep 11 14:42:31 power sudo[1640191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:31 power sudo[1640191]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:31 power sudo[1640205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep 11 14:42:31 power sudo[1640205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:31 power sudo[1640205]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:31 power sudo[1640221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 test -e /home/intelek1/wordpress-backups
Sep 11 14:42:31 power sudo[1640221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:31 power sudo[1640221]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:31 power sudo[1640233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 11 14:42:31 power sudo[1640233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:31 power sudo[1640233]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:31 power sudo[1640244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep 11 14:42:31 power sudo[1640244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640244]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:32 power sudo[1640250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin test -e /home/jpparkin/wordpress-backups
Sep 11 14:42:32 power sudo[1640250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640250]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:32 power sudo[1640261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep 11 14:42:32 power sudo[1640261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640261]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:32 power sudo[1640269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo test -e /home/karpospo/wordpress-backups
Sep 11 14:42:32 power sudo[1640269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640269]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:32 power sudo[1640280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 11 14:42:32 power sudo[1640280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640280]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:32 power sudo[1640291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 11 14:42:32 power sudo[1640291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640291]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:32 power sudo[1640302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep 11 14:42:32 power sudo[1640302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640302]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:32 power sudo[1640308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 test -e /home/kolened1/wordpress-backups
Sep 11 14:42:32 power sudo[1640308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640308]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:32 power sudo[1640319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep 11 14:42:32 power sudo[1640319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640319]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:32 power sudo[1640325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco test -e /home/kouzonco/wordpress-backups
Sep 11 14:42:32 power sudo[1640325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:32 power sudo[1640325]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:33 power sudo[1640336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep 11 14:42:33 power sudo[1640336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:33 power sudo[1640336]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:33 power sudo[1640342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst test -e /home/sprintst/wordpress-backups
Sep 11 14:42:33 power sudo[1640342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:33 power sudo[1640342]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:33 power sudo[1640353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep 11 14:42:33 power sudo[1640353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:33 power sudo[1640353]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:33 power sudo[1640362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon test -e /home/kujnamon/wordpress-backups
Sep 11 14:42:33 power sudo[1640362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:33 power sudo[1640362]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:33 power sudo[1640374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 11 14:42:33 power sudo[1640374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:33 power sudo[1640374]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:33 power sudo[1640385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep 11 14:42:33 power sudo[1640385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:33 power sudo[1640385]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:33 power sudo[1640400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone test -e /home/makdrone/wordpress-backups
Sep 11 14:42:33 power sudo[1640400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:33 power sudo[1640400]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:33 power sudo[1640412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep 11 14:42:33 power sudo[1640412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:34 power sudo[1640412]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:34 power sudo[1640442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk test -e /home/makoasmk/wordpress-backups
Sep 11 14:42:34 power sudo[1640442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:34 power sudo[1640442]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:34 power sudo[1640458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep 11 14:42:34 power sudo[1640458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:34 power sudo[1640458]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:34 power sudo[1640474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 11 14:42:34 power sudo[1640474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:34 power sudo[1640474]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:34 power sudo[1640488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep 11 14:42:34 power sudo[1640488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:34 power sudo[1640488]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:34 power sudo[1640511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar test -e /home/modernar/wordpress-backups
Sep 11 14:42:34 power sudo[1640511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:34 power sudo[1640511]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:34 power sudo[1640522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep 11 14:42:34 power sudo[1640522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:34 power sudo[1640522]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:34 power sudo[1640536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep 11 14:42:34 power sudo[1640536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:34 power sudo[1640536]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:34 power sudo[1640550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk test -e /home/mpbmk/wordpress-backups
Sep 11 14:42:34 power sudo[1640550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:34 power sudo[1640550]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:37 power sudo[1640596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep 11 14:42:37 power sudo[1640596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:37 power sudo[1640596]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:37 power sudo[1640601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk test -e /home/mspmk/wordpress-backups
Sep 11 14:42:37 power sudo[1640601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:37 power sudo[1640601]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:37 power sudo[1640612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep 11 14:42:37 power sudo[1640612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:37 power sudo[1640612]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:37 power sudo[1640619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk test -e /home/mstmmk/wordpress-backups
Sep 11 14:42:37 power sudo[1640619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:37 power sudo[1640619]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:37 power sudo[1640630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep 11 14:42:37 power sudo[1640630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:38 power sudo[1640630]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:38 power sudo[1640643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm test -e /home/naksorgm/wordpress-backups
Sep 11 14:42:38 power sudo[1640643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:38 power sudo[1640643]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:38 power sudo[1640655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep 11 14:42:38 power sudo[1640655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:38 power sudo[1640655]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:38 power sudo[1640665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep 11 14:42:38 power sudo[1640665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:38 power sudo[1640665]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:38 power sudo[1640676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep 11 14:42:38 power sudo[1640676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:38 power sudo[1640676]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:38 power sudo[1640687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep 11 14:42:38 power sudo[1640687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:38 power sudo[1640687]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:38 power sudo[1640701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag test -e /home/ismassag/wordpress-backups
Sep 11 14:42:38 power sudo[1640701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:38 power sudo[1640701]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:38 power sudo[1640712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep 11 14:42:38 power sudo[1640712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:38 power sudo[1640712]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:38 power sudo[1640723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep 11 14:42:38 power sudo[1640723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:39 power sudo[1640723]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:39 power sudo[1640748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 test -e /home/nikolov1/wordpress-backups
Sep 11 14:42:39 power sudo[1640748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:39 power sudo[1640748]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:39 power sudo[1640763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep 11 14:42:39 power sudo[1640763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:39 power sudo[1640763]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:39 power sudo[1640781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits test -e /home/nolimits/wordpress-backups
Sep 11 14:42:39 power sudo[1640781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:39 power sudo[1640781]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:39 power sudo[1640795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep 11 14:42:39 power sudo[1640795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:39 power sudo[1640795]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:39 power sudo[1640813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh test -e /home/onlinesh/wordpress-backups
Sep 11 14:42:39 power sudo[1640813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:39 power sudo[1640813]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:39 power sudo[1640825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep 11 14:42:39 power sudo[1640825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:39 power sudo[1640825]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:39 power sudo[1640830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok test -e /home/palenzok/wordpress-backups
Sep 11 14:42:39 power sudo[1640830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:39 power sudo[1640830]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:39 power sudo[1640841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep 11 14:42:39 power sudo[1640841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:40 power sudo[1640841]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:40 power sudo[1640850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni test -e /home/pelagoni/wordpress-backups
Sep 11 14:42:40 power sudo[1640850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:40 power sudo[1640850]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:40 power sudo[1640862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep 11 14:42:40 power sudo[1640862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:40 power sudo[1640862]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:40 power sudo[1640872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk test -e /home/biplmk/wordpress-backups
Sep 11 14:42:40 power sudo[1640872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:40 power sudo[1640872]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:40 power sudo[1640884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep 11 14:42:40 power sudo[1640884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:40 power sudo[1640884]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:40 power sudo[1640896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi test -e /home/premiumi/wordpress-backups
Sep 11 14:42:40 power sudo[1640896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:40 power sudo[1640896]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:40 power sudo[1640907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep 11 14:42:40 power sudo[1640907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:40 power sudo[1640907]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:40 power sudo[1640919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep 11 14:42:40 power sudo[1640919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:40 power sudo[1640919]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:40 power sudo[1640927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat test -e /home/radekrat/wordpress-backups
Sep 11 14:42:40 power sudo[1640927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:40 power sudo[1640927]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:40 power sudo[1640938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep 11 14:42:40 power sudo[1640938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:41 power sudo[1640938]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:41 power sudo[1640944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm test -e /home/rasmorgm/wordpress-backups
Sep 11 14:42:41 power sudo[1640944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:41 power sudo[1640944]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:41 power sudo[1640955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep 11 14:42:41 power sudo[1640955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:41 power sudo[1640955]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:41 power sudo[1640964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk test -e /home/recorgmk/wordpress-backups
Sep 11 14:42:41 power sudo[1640964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:41 power sudo[1640964]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:41 power sudo[1640981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep 11 14:42:41 power sudo[1640981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:41 power sudo[1640981]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:41 power sudo[1640990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm test -e /home/stravelm/wordpress-backups
Sep 11 14:42:41 power sudo[1640990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:41 power sudo[1640990]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:41 power sudo[1641001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep 11 14:42:41 power sudo[1641001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:41 power sudo[1641001]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:41 power sudo[1641007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome test -e /home/simbiome/wordpress-backups
Sep 11 14:42:41 power sudo[1641007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:41 power sudo[1641007]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:41 power sudo[1641018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 11 14:42:41 power sudo[1641018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:41 power sudo[1641018]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:41 power sudo[1641029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 11 14:42:41 power sudo[1641029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:42 power sudo[1641029]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:42 power sudo[1641039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep 11 14:42:42 power sudo[1641039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:42 power sudo[1641039]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:42 power sudo[1641050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep 11 14:42:42 power sudo[1641050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:42 power sudo[1641050]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:42 power sudo[1641061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep 11 14:42:42 power sudo[1641061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:42 power sudo[1641061]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:42 power sudo[1641072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti test -e /home/sssoluti/wordpress-backups
Sep 11 14:42:42 power sudo[1641072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:42 power sudo[1641072]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:42 power sudo[1641085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep 11 14:42:42 power sudo[1641085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:42 power sudo[1641085]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:42 power sudo[1641097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep 11 14:42:42 power sudo[1641097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:42 power sudo[1641097]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:42 power sudo[1641109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep 11 14:42:42 power sudo[1641109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:42 power sudo[1641109]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:42 power sudo[1641120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro test -e /home/tehnodro/wordpress-backups
Sep 11 14:42:43 power sudo[1641120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:43 power sudo[1641120]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:43 power sudo[1641131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep 11 14:42:43 power sudo[1641131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:43 power sudo[1641131]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:43 power sudo[1641142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep 11 14:42:43 power sudo[1641142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:43 power sudo[1641142]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:43 power sudo[1641149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn test -e /home/viewinn/wordpress-backups
Sep 11 14:42:43 power sudo[1641149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:43 power sudo[1641149]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:43 power sudo[1641161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep 11 14:42:43 power sudo[1641161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:43 power sudo[1641161]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:43 power sudo[1641175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp test -e /home/wikicamp/wordpress-backups
Sep 11 14:42:43 power sudo[1641175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:43 power sudo[1641175]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:43 power sudo[1641187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep 11 14:42:43 power sudo[1641187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:43 power sudo[1641187]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:43 power sudo[1641193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt test -e /home/workandt/wordpress-backups
Sep 11 14:42:43 power sudo[1641193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:43 power sudo[1641193]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:43 power sudo[1641204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 11 14:42:43 power sudo[1641204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:43 power sudo[1641204]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:43 power sudo[1641215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep 11 14:42:43 power sudo[1641215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:44 power sudo[1641215]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:44 power sudo[1641225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua test -e /home/youthgua/wordpress-backups
Sep 11 14:42:44 power sudo[1641225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:44 power sudo[1641225]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:44 power sudo[1641236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep 11 14:42:44 power sudo[1641236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:44 power sudo[1641236]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:44 power sudo[1641247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk test -e /home/zampmk/wordpress-backups
Sep 11 14:42:44 power sudo[1641247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:44 power sudo[1641247]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:44 power sudo[1641258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep 11 14:42:44 power sudo[1641258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:44 power sudo[1641258]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:44 power sudo[1641266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord test -e /home/ivanjord/wordpress-backups
Sep 11 14:42:44 power sudo[1641266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:44 power sudo[1641266]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:44 power sudo[1641280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep 11 14:42:44 power sudo[1641280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:44 power sudo[1641280]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:44 power sudo[1641291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep 11 14:42:44 power sudo[1641291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:44 power sudo[1641291]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:44 power sudo[1641300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja test -e /home/janiboja/wordpress-backups
Sep 11 14:42:44 power sudo[1641300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:44 power sudo[1641300]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:44 power sudo[1641311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep 11 14:42:44 power sudo[1641311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:45 power sudo[1641311]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:45 power sudo[1641317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk test -e /home/jaramk/wordpress-backups
Sep 11 14:42:45 power sudo[1641317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:45 power sudo[1641317]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:45 power sudo[1641330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep 11 14:42:45 power sudo[1641330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:45 power sudo[1641330]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:45 power sudo[1641339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep 11 14:42:45 power sudo[1641339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:45 power sudo[1641339]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:45 power sudo[1641351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep 11 14:42:45 power sudo[1641351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:45 power sudo[1641351]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:45 power sudo[1641357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep 11 14:42:45 power sudo[1641357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:45 power sudo[1641357]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:45 power sudo[1641368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep 11 14:42:45 power sudo[1641368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:45 power sudo[1641368]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:45 power sudo[1641379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep 11 14:42:45 power sudo[1641379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641379]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag test -e /home/mediatag/wordpress-backups
Sep 11 14:42:46 power sudo[1641389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641389]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep 11 14:42:46 power sudo[1641400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641400]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep 11 14:42:46 power sudo[1641411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641411]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog test -e /home/nefrolog/wordpress-backups
Sep 11 14:42:46 power sudo[1641419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641419]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep 11 14:42:46 power sudo[1641433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641433]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep 11 14:42:46 power sudo[1641440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641440]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep 11 14:42:46 power sudo[1641451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641451]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep 11 14:42:46 power sudo[1641462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641462]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep 11 14:42:46 power sudo[1641468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:46 power sudo[1641468]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:46 power sudo[1641479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep 11 14:42:46 power sudo[1641479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:47 power sudo[1641479]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:47 power sudo[1641484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom test -e /home/pravekom/wordpress-backups
Sep 11 14:42:47 power sudo[1641484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:47 power sudo[1641484]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:47 power sudo[1641495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep 11 14:42:47 power sudo[1641495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:47 power sudo[1641495]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:47 power sudo[1641505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim test -e /home/proverim/wordpress-backups
Sep 11 14:42:47 power sudo[1641505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:47 power sudo[1641505]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:47 power sudo[1641516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep 11 14:42:47 power sudo[1641516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:47 power sudo[1641516]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:47 power sudo[1641522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz test -e /home/rastiraz/wordpress-backups
Sep 11 14:42:47 power sudo[1641522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:47 power sudo[1641522]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:47 power sudo[1641534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep 11 14:42:47 power sudo[1641534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:47 power sudo[1641534]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:47 power sudo[1641542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva test -e /home/conserva/wordpress-backups
Sep 11 14:42:47 power sudo[1641542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:47 power sudo[1641542]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:47 power sudo[1641553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep 11 14:42:47 power sudo[1641553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:48 power sudo[1641553]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:48 power sudo[1641565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne test -e /home/maleshne/wordpress-backups
Sep 11 14:42:48 power sudo[1641565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:48 power sudo[1641565]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:48 power sudo[1641576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep 11 14:42:48 power sudo[1641576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:48 power sudo[1641576]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:48 power sudo[1641591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped test -e /home/samasped/wordpress-backups
Sep 11 14:42:48 power sudo[1641591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:48 power sudo[1641591]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:48 power sudo[1641602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep 11 14:42:48 power sudo[1641602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:48 power sudo[1641602]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:48 power sudo[1641609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro test -e /home/seloviro/wordpress-backups
Sep 11 14:42:48 power sudo[1641609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:48 power sudo[1641609]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:48 power sudo[1641621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep 11 14:42:48 power sudo[1641621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:48 power sudo[1641621]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:48 power sudo[1641626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart test -e /home/skyapart/wordpress-backups
Sep 11 14:42:48 power sudo[1641626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:48 power sudo[1641626]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:48 power sudo[1641637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep 11 14:42:48 power sudo[1641637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:49 power sudo[1641637]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:49 power sudo[1641642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz test -e /home/socioloz/wordpress-backups
Sep 11 14:42:49 power sudo[1641642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:49 power sudo[1641642]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:49 power sudo[1641654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep 11 14:42:49 power sudo[1641654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:49 power sudo[1641654]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:49 power sudo[1641665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi test -e /home/stojnevi/wordpress-backups
Sep 11 14:42:49 power sudo[1641665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:49 power sudo[1641665]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:49 power sudo[1641676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep 11 14:42:49 power sudo[1641676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:49 power sudo[1641676]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:49 power sudo[1641691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep 11 14:42:49 power sudo[1641691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:49 power sudo[1641691]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:49 power sudo[1641700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop test -e /home/trudovop/wordpress-backups
Sep 11 14:42:49 power sudo[1641700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:49 power sudo[1641700]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:49 power sudo[1641711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep 11 14:42:49 power sudo[1641711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:49 power sudo[1641711]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:49 power sudo[1641716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp test -e /home/urbanexp/wordpress-backups
Sep 11 14:42:49 power sudo[1641716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:49 power sudo[1641716]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:49 power sudo[1641731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep 11 14:42:49 power sudo[1641731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:50 power sudo[1641731]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:50 power sudo[1641751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc test -e /home/vfxnestc/wordpress-backups
Sep 11 14:42:50 power sudo[1641751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:50 power sudo[1641751]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:50 power sudo[1641767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep 11 14:42:50 power sudo[1641767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:50 power sudo[1641767]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:50 power sudo[1641782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/wordpress-backups
Sep 11 14:42:50 power sudo[1641782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:50 power sudo[1641782]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:50 power sudo[1641793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep 11 14:42:50 power sudo[1641793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:50 power sudo[1641793]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:50 power sudo[1641798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace test -e /home/glammace/wordpress-backups
Sep 11 14:42:50 power sudo[1641798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:50 power sudo[1641798]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:50 power sudo[1641811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep 11 14:42:50 power sudo[1641811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:50 power sudo[1641811]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:50 power sudo[1641822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep 11 14:42:50 power sudo[1641822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:50 power sudo[1641822]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:50 power sudo[1641828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc test -e /home/workbenc/wordpress-backups
Sep 11 14:42:50 power sudo[1641828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:50 power sudo[1641828]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:50 power sudo[1641840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 11 14:42:50 power sudo[1641840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:51 power sudo[1641840]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:51 power sudo[1641850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/wordpress-backups
Sep 11 14:42:51 power sudo[1641850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:51 power sudo[1641850]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:51 power sudo[1641855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk mkdir -m 0700 /home/berbermk/wordpress-backups
Sep 11 14:42:51 power sudo[1641855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:51 power sudo[1641855]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:51 power sudo[1641866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 11 14:42:51 power sudo[1641866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:51 power sudo[1641866]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:52 power sudo[1643212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json'
Sep 11 14:42:52 power sudo[1643212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:52 power sudo[1643212]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:52 power sudo[1643217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=5.9.96.240 --output=json'
Sep 11 14:42:52 power sudo[1643217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:52 power sudo[1643217]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:55 power sudo[1643259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 14:42:55 power sudo[1643259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:55 power sudo[1643259]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:55 power sudo[1643264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wdTYkMYAY8rzgfak.~
Sep 11 14:42:55 power sudo[1643264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:55 power sudo[1643264]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:55 power sudo[1643268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wdTYkMYAY8rzgfak.~\''
Sep 11 14:42:55 power sudo[1643268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:55 power sudo[1643268]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:55 power sudo[1643274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wdTYkMYAY8rzgfak.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 14:42:55 power sudo[1643274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:55 power sudo[1643274]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:55 power sudo[1643281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 14:42:55 power sudo[1643281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:55 power sudo[1643281]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:59 power sudo[1644265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 gethostname --output=json'
Sep 11 14:42:59 power sudo[1644265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:59 power sudo[1644275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 14:42:59 power sudo[1644275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:59 power sudo[1644265]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:59 power sudo[1644280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom Themes get_theme_base --output=json'
Sep 11 14:42:59 power sudo[1644280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:59 power sudo[1644275]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:59 power sudo[1644280]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:59 power sudo[1644293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews Themes get_theme_base --output=json'
Sep 11 14:42:59 power sudo[1644293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:59 power sudo[1644293]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:59 power sudo[1644306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk Themes get_theme_base --output=json'
Sep 11 14:42:59 power sudo[1644306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:42:59 power sudo[1644306]: pam_unix(sudo:session): session closed for user root
Sep 11 14:42:59 power sudo[1644312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare Themes get_theme_base --output=json'
Sep 11 14:43:00 power sudo[1644312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:43:00 power sudo[1644312]: pam_unix(sudo:session): session closed for user root
Sep 11 14:43:00 power sudo[1644317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare Themes get_theme_base --output=json'
Sep 11 14:43:00 power sudo[1644317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:43:00 power sudo[1644317]: pam_unix(sudo:session): session closed for user root
Sep 11 14:43:00 power sudo[1644323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 Themes get_theme_base --output=json'
Sep 11 14:43:00 power sudo[1644323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:43:00 power sudo[1644323]: pam_unix(sudo:session): session closed for user root
Sep 11 14:43:00 power sudo[1644329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz Themes get_theme_base --output=json'
Sep 11 14:43:00 power sudo[1644329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:43:00 power sudo[1644329]: pam_unix(sudo:session): session closed for user root
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped WpToolkitNotification send_admin_vulnerability_found_notification \'message=WP Toolkit has detected new vulnerabilities on WordPress sites under your care. It is strongly recommended to update or disable vulnerable assets on these sites. You can also configure WP Toolkit to perform automatic actions when vulnerabilities are detected. <br/><br/>The following vulnerabilities need your attention because they have to be addressed manually:<br/><br/>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) <td colspan="2">Site: <span style="color: black">bovin.mk</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/26/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">The Events Calendar &lt;= 6.15.1 -  Unauthenticated SQL Injection</span><br/>#012
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) <div style="line-height: 1.5em; font-size: 0.9em">The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</div>#012                <div style=\'"\'"\'line-height:1em;\'"\'"\'><a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://wordfence.com\'"\'"\' style=\'"\'"\'color: #737373; font-size: 0.7em; text-decoration: none;\'"\'"\'>This record contains material that is subject to copyright.</a></div>#012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\'
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) href=\'"\'"\'https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea2ce90-6c8c-4a31-8faa-4ab99879d8b8?source=api-prod\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Wordfence</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012            <td colspan="2">Site: <span style="color: black">goodnews.mk</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/90/checkSecurity/1/activeTab/1"
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">The Events Calendar &lt;= 6.15.1 -  Unauthenticated SQL Injection</span><br/>#012                <div style="line-height: 1.5em; font-size: 0.9em">The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</div>#012                <div style=\'"\'"\'line-height:1em;\'"\'"\'><a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://wordfence.com\'"\'"\' style=\'"\'"\'color: #737373; font-size: 0.7em; text-decoration: none;\'"\'"\'>This record contains material that is subject to copyright.</a></div>#012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea2ce90-6c8c-4a31-8faa-4ab99879d8b8?source=api-prod\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Wordfence</a></b>#012            </td>#012
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) <td>&nbsp;</td>#012        </tr>#012    </table>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012            <td colspan="2">Site: <span style="color: black">rec.org.mk</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/184/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center"
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">The Events Calendar &lt;= 6.15.1 -  Unauthenticated SQL Injection</span><br/>#012                <div style="line-height: 1.5em; font-size: 0.9em">The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) used to extract sensitive information from the database.</div>#012                <div style=\'"\'"\'line-height:1em;\'"\'"\'><a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://wordfence.com\'"\'"\' style=\'"\'"\'color: #737373; font-size: 0.7em; text-decoration: none;\'"\'"\'>This record contains material that is subject to copyright.</a></div>#012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea2ce90-6c8c-4a31-8faa-4ab99879d8b8?source=api-prod\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Wordfence</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012            <td colspan="2">Site: <span style="color: black">niki-mare.com/wp</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/268/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color:
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">The Events Calendar &lt;= 6.15.1 -  Unauthenticated SQL Injection</span><br/>#012                <div style="line-height: 1.5em; font-size: 0.9em">The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</div>#012                <div style=\'"\'"\'line-height:1em;\'"\'"\'><a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://wordfence.com\'"\'"\' style=\'"\'"\'color: #737373;
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) font-size: 0.7em; text-decoration: none;\'"\'"\'>This record contains material that is subject to copyright.</a></div>#012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea2ce90-6c8c-4a31-8faa-4ab99879d8b8?source=api-prod\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Wordfence</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012            <td
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) colspan="2">Site: <span style="color: black">niki-mare.com</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/269/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">The Events Calendar &lt;= 6.15.1 -  Unauthenticated SQL Injection</span><br/>#012
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) <div style="line-height: 1.5em; font-size: 0.9em">The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</div>#012                <div style=\'"\'"\'line-height:1em;\'"\'"\'><a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://wordfence.com\'"\'"\' style=\'"\'"\'color: #737373; font-size: 0.7em; text-decoration: none;\'"\'"\'>This record contains material that is subject to copyright.</a></div>#012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\'
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) href=\'"\'"\'https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea2ce90-6c8c-4a31-8faa-4ab99879d8b8?source=api-prod\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Wordfence</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012            <td colspan="2">Site: <span style="color: black">sociolozi.org.mk</span></td>#012            <td align="right"><a
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/283/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">The Events Calendar &lt;= 6.15.1 -  Unauthenticated SQL Injection</span><br/>#012                <div style="line-height: 1.5em; font-size: 0.9em">The The Events Calendar plugin for WordPress is
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</div>#012                <div style=\'"\'"\'line-height:1em;\'"\'"\'><a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://wordfence.com\'"\'"\' style=\'"\'"\'color: #737373; font-size: 0.7em; text-decoration: none;\'"\'"\'>This record contains material that is subject to copyright.</a></div>#012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\'
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) href=\'"\'"\'https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea2ce90-6c8c-4a31-8faa-4ab99879d8b8?source=api-prod\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Wordfence</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table><br/>The following vulnerabilities were found in deactivated assets and have to be addressed manually:<br/>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012            <td colspan="2">Site: <span style="color: black">nucktrajkoprokopiev.mk</span></td>#012            <td align="right"><a
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/271/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">The Events Calendar &lt;= 6.15.1 -  Unauthenticated SQL Injection</span><br/>#012                <div style="line-height: 1.5em; font-size: 0.9em">The The Events Calendar plugin for WordPress is
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</div>#012                <div style=\'"\'"\'line-height:1em;\'"\'"\'><a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://wordfence.com\'"\'"\' style=\'"\'"\'color: #737373; font-size: 0.7em; text-decoration: none;\'"\'"\'>This record contains material that is subject to copyright.</a></div>#012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\'
Sep 11 14:43:00 power sudo[1644335]: wp-toolkit : (command continued) href=\'"\'"\'https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea2ce90-6c8c-4a31-8faa-4ab99879d8b8?source=api-prod\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Wordfence</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table><br/>More vulnerabilities were found, please go to WP Toolkit for the full list. <br/><br/>Automatic actions can be defined on the site autoupdate policy screen.\' --output=json'
Sep 11 14:43:00 power sudo[1644335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 14:43:00 power sudo[1644335]: pam_unix(sudo:session): session closed for user root
Sep 11 14:45:01 power systemd[1646747]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:45:01 power systemd[1646748]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:50:01 power systemd[1653330]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 14:50:01 power systemd[1653329]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:55:01 power systemd[1661953]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 14:55:01 power systemd[1661954]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:00:01 power systemd[1667439]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:00:01 power systemd[1667437]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:00:01 power systemd[1667440]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 15:00:01 power systemd[1667442]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 15:00:01 power systemd[1667444]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 15:04:01 power systemd[1673687]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:05:01 power systemd[1674894]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:05:01 power systemd[1674896]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:06:01 power systemd[1676293]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 15:07:01 power systemd[1677607]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 15:09:01 power systemd[1680061]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:10:01 power systemd[1681105]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:10:01 power systemd[1681106]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:12:01 power systemd[1683300]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 15:15:01 power systemd[1686538]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:15:01 power systemd[1686539]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:20:01 power systemd[1692394]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:20:01 power systemd[1692395]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:25:01 power systemd[1698052]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:25:01 power systemd[1698051]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:30:01 power systemd[1703464]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:30:01 power systemd[1703474]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:30:01 power systemd[1703477]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 15:30:01 power systemd[1703475]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 15:30:01 power systemd[1703479]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 15:35:01 power systemd[1710588]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:35:01 power systemd[1710590]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:36:01 power systemd[1711665]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 15:37:01 power systemd[1712563]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 15:39:01 power systemd[1714706]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:40:01 power systemd[1716119]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:40:01 power systemd[1716120]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:42:01 power systemd[1718351]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 15:42:09 power sudo[1718472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 15:42:09 power systemd[1718477]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:42:09 power sudo[1718472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:09 power sudo[1718472]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:09 power sudo[1718492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 15:42:09 power sudo[1718492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:09 power sudo[1718492]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:09 power sudo[1718496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 15:42:09 power sudo[1718496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:09 power sudo[1718496]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:09 power sudo[1718500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=tfuDM1c2BB'
Sep 11 15:42:09 power sudo[1718500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:09 power sudo[1718500]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:09 power sudo[1718505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 15:42:09 power sudo[1718505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:09 power sudo[1718505]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:09 power sudo[1718509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 15:42:09 power sudo[1718509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:09 power sudo[1718509]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:10 power sudo[1718513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 15:42:10 power sudo[1718513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:10 power sudo[1718513]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:10 power sudo[1718517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 15:42:10 power sudo[1718517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:10 power sudo[1718517]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:10 power sudo[1718525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 15:42:10 power sudo[1718525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:10 power sudo[1718525]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:10 power sudo[1718529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 15:42:10 power sudo[1718529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:10 power sudo[1718529]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:10 power sudo[1718533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 15:42:10 power sudo[1718533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:10 power sudo[1718533]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:10 power sudo[1718537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 15:42:10 power sudo[1718537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:10 power sudo[1718537]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:10 power sudo[1718541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 15:42:10 power sudo[1718541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:10 power sudo[1718541]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:10 power sudo[1718546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 15:42:10 power sudo[1718546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:10 power sudo[1718546]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:12 power sudo[1718587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 15:42:12 power sudo[1718587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:12 power sudo[1718587]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:12 power sudo[1718604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 15:42:12 power sudo[1718604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:12 power sudo[1718604]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:12 power sudo[1718645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=izzomk user-2=jpkomuna user-3=makdrone user-4=tehnodro user-5=peshkai1 user-6=fxxcom user-7=eaptekam user-8=dimpalne user-9=gradbai1 user-10=evacommk user-11=aptekafa user-12=madzomk user-13=bauerin2 user-14=folklore user-15=bonitavi user-16=evberasm user-17=conserva user-18=euronic3 user-19=vegemk1 user-20=cupidpro user-21=wineberr user-22=viplastc user-23=mbmehani user-24=workbenc user-25=ismassag user-26=trigemat user-27=naksorgm user-28=eliksirz user-29=electrol user-30=golakkom user-31=solarinv user-32=eurofarm user-33=jaramk user-34=solointe user-35=recorgmk user-36=taktcomm user-37=progress user-38=animatem user-39=cleanerm user-40=atspedco user-41=sssoluti user-42=kaoilmk user-43=biplmk user-44=bbbustou user-45=pelagini user-46=vtranseu user-47=pravekom user-48=infopor1 user-49=glammace
Sep 11 15:42:12 power sudo[1718645]: wp-toolkit : (command continued) user-50=albuname user-51=imdskopj user-52=nutrivim user-53=chemhemc user-54=samasped user-55=zapovim1 user-56=elektrot user-57=euromaki user-58=cosmatob user-59=euronic2 user-60=matratze user-61=kardiome user-62=mediasol user-63=bogdanos user-64=carrent1 user-65=apgrupmk user-66=hausmark user-67=nikolov1 user-68=aptekazd user-69=nikimare user-70=forzares user-71=nucktra1 user-72=lblawcom user-73=intelek1 user-74=mediatag user-75=versusmk user-76=ambitiou user-77=fiziosmk user-78=radekrat user-79=starluxm user-80=fffhpcwr user-81=tcieuroc user-82=solemor1 user-83=mapaspla user-84=onlinesh user-85=nationa2 user-86=v5srybi9dcdx user-87=supremel user-88=gorsajmk user-89=aquatech user-90=zdmgpsor user-91=inkigaic user-92=modernar user-93=taneccom user-94=tehnologija user-95=bozinovm user-96=prizmapl user-97=fnjorgmk user-98=darkogor user-99=dslmk user-100=premiumi user-101=innofabl user-102=vacuacti user-103=mspmk
Sep 11 15:42:12 power sudo[1718645]: wp-toolkit : (command continued) user-104=infobadi user-105=spdcompu user-106=detskagr user-107=wikicamp user-108=urbanexp user-109=vfxnestc user-110=polyeste user-111=sedcmk user-112=groskome user-113=ivanjord user-114=datelcom user-115=maleshne user-116=bizporta user-117=agrosind user-118=mpbmk user-119=velmk user-120=gogovan1 user-121=univerz1 user-122=kujnamon user-123=datalink user-124=rasmorgm user-125=makoasmk user-126=bianasho user-127=skyapart user-128=volkanco user-129=goartsym user-130=dhamachi user-131=mfashion user-132=getaldus user-133=simbiome user-134=delcevca user-135=barececo user-136=workandt user-137=premiums user-138=daris user-139=butelmk user-140=ideaplus user-141=nasaidni user-142=karpospo user-143=screenme user-144=arturaco user-145=jpparkin user-146=inotekso user-147=drleomk user-148=cetplatf user-149=dalmacom user-150=kouzonco user-151=premiuma user-152=klimimk user-153=sparkupm user-154=stokovna user-155=custome1
Sep 11 15:42:12 power sudo[1718645]: wp-toolkit : (command continued) user-156=palenzok user-157=zampmk user-158=busymard user-159=zvskopje user-160=vezilkac user-161=cabinetm user-162=janiboja user-163=itradeco user-164=bovincom user-165=stojano1 user-166=gocruise user-167=goodnews user-168=mstmmk user-169=dadarmk user-170=proverim user-171=tealmk user-172=holiyayt user-173=rastiraz user-174=pecakome user-175=wondersp user-176=stravelm user-177=robustco user-178=dnevnoin user-179=tradeyou user-180=gjorgeiv user-181=dikimk12 user-182=sprintst user-183=herbalpl user-184=enochmk user-185=edomcomm user-186=berbermk user-187=nolimits user-188=centarba user-189=nlpmkorg user-190=kolened1 user-191=seloviro user-192=evolvepl user-193=pelagoni user-194=socioloz user-195=avtogumi user-196=nefrolog user-197=levantmk user-198=oncolog1 user-199=ekostoc1 user-200=caramk user-201=frizered user-202=hidrommk user-203=youthgua user-204=anitermc user-205=cajsproc user-206=hotammk user-207=enaspotc
Sep 11 15:42:12 power sudo[1718645]: wp-toolkit : (command continued) user-208=vmro user-209=trudovop user-210=viewinn user-211=raremk user-212=oouslave user-213=uhostmk5 user-214=bauerbg user-215=stojnevi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 15:42:12 power sudo[1718645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:13 power sudo[1718645]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:13 power sudo[1718695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 15:42:13 power sudo[1718695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:13 power sudo[1718695]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:13 power sudo[1718699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lFbu0OAebh5kyJQX.~
Sep 11 15:42:13 power sudo[1718699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:13 power sudo[1718699]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:13 power sudo[1718703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lFbu0OAebh5kyJQX.~\''
Sep 11 15:42:13 power sudo[1718703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:13 power sudo[1718703]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:13 power sudo[1718708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lFbu0OAebh5kyJQX.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 15:42:13 power sudo[1718708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:13 power sudo[1718708]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:13 power sudo[1718712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 15:42:13 power sudo[1718712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:13 power sudo[1718712]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:17 power sudo[1719095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 15:42:17 power sudo[1719095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:17 power sudo[1719095]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:17 power sudo[1719720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 gethostname --output=json'
Sep 11 15:42:17 power sudo[1719720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:17 power sudo[1719720]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:17 power sudo[1719725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Themes get_theme_base --output=json'
Sep 11 15:42:17 power sudo[1719725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:17 power sudo[1719725]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:17 power sudo[1719731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Themes get_theme_base --output=json'
Sep 11 15:42:17 power sudo[1719731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:17 power sudo[1719731]: pam_unix(sudo:session): session closed for user root
Sep 11 15:42:17 power sudo[1719736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk WpToolkitNotification send_admin_vulnerability_found_notification \'message=WP Toolkit has detected new vulnerabilities on WordPress sites under your care. It is strongly recommended to update or disable vulnerable assets on these sites. You can also configure WP Toolkit to perform automatic actions when vulnerabilities are detected. <br/><br/>The following vulnerabilities need your attention because they have to be addressed manually:<br/><br/>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012
Sep 11 15:42:17 power sudo[1719736]: wp-toolkit : (command continued) <td colspan="2">Site: <span style="color: black">pp.denicija.mk</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/103/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">WordPress Kalium Theme &lt;= 3.18.3 - Cross Site Scripting (XSS)
Sep 11 15:42:17 power sudo[1719736]: wp-toolkit : (command continued) Vulnerability</span><br/>#012                <div style="line-height: 1.5em; font-size: 0.9em">Cross Site Scripting (XSS) Vulnerability discovered by Ananda Dhakal (Patchstack) in WordPress Theme Kalium (versions &lt;= 3.18.3)</div>#012                #012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://patchstack.com/database/vulnerability/kalium/wordpress-kalium-theme-3-18-3-cross-site-scripting-xss-vulnerability?_a_id=110\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Patchstack</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table><br/>The following vulnerabilities were found in deactivated assets and have to be addressed manually:<br/>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color:
Sep 11 15:42:17 power sudo[1719736]: wp-toolkit : (command continued) #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012            <td colspan="2">Site: <span style="color: black">metatet.com</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/99/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color:
Sep 11 15:42:17 power sudo[1719736]: wp-toolkit : (command continued) rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">WordPress Kalium Theme &lt;= 3.18.3 - Cross Site Scripting (XSS) Vulnerability</span><br/>#012                <div style="line-height: 1.5em; font-size: 0.9em">Cross Site Scripting (XSS) Vulnerability discovered by Ananda Dhakal (Patchstack) in WordPress Theme Kalium (versions &lt;= 3.18.3)</div>#012                #012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://patchstack.com/database/vulnerability/kalium/wordpress-kalium-theme-3-18-3-cross-site-scripting-xss-vulnerability?_a_id=110\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Patchstack</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table><br/>More vulnerabilities were found,
Sep 11 15:42:17 power sudo[1719736]: wp-toolkit : (command continued) please go to WP Toolkit for the full list. <br/><br/>Automatic actions can be defined on the site autoupdate policy screen.\' --output=json'
Sep 11 15:42:17 power sudo[1719736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 15:42:18 power sudo[1719736]: pam_unix(sudo:session): session closed for user root
Sep 11 15:45:01 power systemd[1722506]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:45:01 power systemd[1722509]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:50:01 power systemd[1728798]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:50:01 power systemd[1728802]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 15:55:01 power systemd[1734151]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 15:55:01 power systemd[1734153]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:00:01 power systemd[1738945]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:00:01 power systemd[1738947]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:00:01 power systemd[1738949]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 16:00:01 power systemd[1738951]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 16:00:01 power systemd[1738953]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 16:04:01 power systemd[1743907]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:05:01 power systemd[1744960]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:05:01 power systemd[1744962]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:06:01 power systemd[1746029]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 16:07:01 power systemd[1746900]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 16:09:01 power systemd[1749767]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:10:01 power systemd[1750955]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:10:01 power systemd[1750956]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:12:01 power systemd[1753323]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 16:15:01 power systemd[1756812]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:15:01 power systemd[1756813]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:20:01 power systemd[1762871]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:20:01 power systemd[1762872]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:25:01 power systemd[1767840]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:25:01 power systemd[1767841]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:30:01 power systemd[1772318]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:30:01 power systemd[1772320]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 16:30:01 power systemd[1772319]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:30:01 power systemd[1772322]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 16:30:01 power systemd[1772323]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 16:35:01 power systemd[1777333]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:35:01 power systemd[1777335]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:36:01 power systemd[1778414]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 16:37:01 power systemd[1779273]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 16:39:01 power systemd[1781132]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:40:01 power systemd[1782268]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:40:01 power systemd[1782269]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:42:01 power systemd[1784443]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 16:42:09 power sudo[1784626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 16:42:09 power systemd[1784631]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:42:09 power sudo[1784626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:09 power sudo[1784626]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:09 power sudo[1784646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 16:42:09 power sudo[1784646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:09 power sudo[1784646]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:09 power sudo[1784650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 16:42:09 power sudo[1784650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:09 power sudo[1784650]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:09 power sudo[1784654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=Lb0HrEhSGJ'
Sep 11 16:42:09 power sudo[1784654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:09 power sudo[1784654]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 16:42:10 power sudo[1784662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784662]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 16:42:10 power sudo[1784666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784666]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 16:42:10 power sudo[1784671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784671]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 16:42:10 power sudo[1784676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784676]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 16:42:10 power sudo[1784684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784684]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 16:42:10 power sudo[1784688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784688]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 16:42:10 power sudo[1784692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784692]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 16:42:10 power sudo[1784696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784696]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 16:42:10 power sudo[1784700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784700]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:10 power sudo[1784705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 16:42:10 power sudo[1784705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:10 power sudo[1784705]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:12 power sudo[1784723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 16:42:12 power sudo[1784723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:12 power sudo[1784723]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:12 power sudo[1784729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 16:42:12 power sudo[1784729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:12 power sudo[1784729]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:12 power sudo[1784738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=dnevnoin user-2=gjorgeiv user-3=tradeyou user-4=holiyayt user-5=rastiraz user-6=pecakome user-7=robustco user-8=stravelm user-9=wondersp user-10=dadarmk user-11=proverim user-12=tealmk user-13=gocruise user-14=goodnews user-15=mstmmk user-16=seloviro user-17=nolimits user-18=kolened1 user-19=nlpmkorg user-20=centarba user-21=edomcomm user-22=berbermk user-23=dikimk12 user-24=herbalpl user-25=enochmk user-26=sprintst user-27=caramk user-28=hidrommk user-29=frizered user-30=ekostoc1 user-31=oncolog1 user-32=levantmk user-33=nefrolog user-34=pelagoni user-35=socioloz user-36=avtogumi user-37=evolvepl user-38=oouslave user-39=raremk user-40=bauerbg user-41=uhostmk5 user-42=stojnevi user-43=enaspotc user-44=trudovop user-45=viewinn user-46=vmro user-47=cajsproc user-48=hotammk user-49=anitermc user-50=youthgua
Sep 11 16:42:12 power sudo[1784738]: wp-toolkit : (command continued) user-51=maleshne user-52=datelcom user-53=bizporta user-54=polyeste user-55=vfxnestc user-56=sedcmk user-57=ivanjord user-58=groskome user-59=wikicamp user-60=urbanexp user-61=mspmk user-62=infobadi user-63=spdcompu user-64=detskagr user-65=dhamachi user-66=goartsym user-67=volkanco user-68=mfashion user-69=barececo user-70=delcevca user-71=getaldus user-72=simbiome user-73=workandt user-74=rasmorgm user-75=skyapart user-76=makoasmk user-77=bianasho user-78=kujnamon user-79=univerz1 user-80=velmk user-81=gogovan1 user-82=datalink user-83=mpbmk user-84=agrosind user-85=cetplatf user-86=dalmacom user-87=kouzonco user-88=premiuma user-89=inotekso user-90=jpparkin user-91=drleomk user-92=daris user-93=butelmk user-94=premiums user-95=karpospo user-96=nasaidni user-97=ideaplus user-98=screenme user-99=arturaco user-100=bovincom user-101=stojano1 user-102=vezilkac user-103=cabinetm user-104=janiboja user-105=itradeco
Sep 11 16:42:12 power sudo[1784738]: wp-toolkit : (command continued) user-106=custome1 user-107=palenzok user-108=busymard user-109=zampmk user-110=zvskopje user-111=klimimk user-112=stokovna user-113=sparkupm user-114=elektrot user-115=zapovim1 user-116=euromaki user-117=cosmatob user-118=nutrivim user-119=chemhemc user-120=samasped user-121=albuname user-122=glammace user-123=imdskopj user-124=pravekom user-125=vtranseu user-126=infopor1 user-127=nucktra1 user-128=lblawcom user-129=mediatag user-130=intelek1 user-131=hausmark user-132=nikolov1 user-133=nikimare user-134=aptekazd user-135=forzares user-136=kardiome user-137=carrent1 user-138=bogdanos user-139=mediasol user-140=apgrupmk user-141=matratze user-142=euronic2 user-143=solemor1 user-144=mapaspla user-145=onlinesh user-146=nationa2 user-147=tcieuroc user-148=starluxm user-149=radekrat user-150=fffhpcwr user-151=versusmk user-152=ambitiou user-153=fiziosmk user-154=taneccom user-155=tehnologija user-156=darkogor
Sep 11 16:42:12 power sudo[1784738]: wp-toolkit : (command continued) user-157=prizmapl user-158=fnjorgmk user-159=dslmk user-160=bozinovm user-161=vacuacti user-162=innofabl user-163=premiumi user-164=inkigaic user-165=modernar user-166=zdmgpsor user-167=v5srybi9dcdx user-168=supremel user-169=aquatech user-170=gorsajmk user-171=gradbai1 user-172=madzomk user-173=aptekafa user-174=evacommk user-175=fxxcom user-176=peshkai1 user-177=eaptekam user-178=dimpalne user-179=makdrone user-180=tehnodro user-181=izzomk user-182=jpkomuna user-183=conserva user-184=euronic3 user-185=cupidpro user-186=vegemk1 user-187=evberasm user-188=bonitavi user-189=bauerin2 user-190=folklore user-191=solarinv user-192=eurofarm user-193=naksorgm user-194=eliksirz user-195=trigemat user-196=electrol user-197=golakkom user-198=mbmehani user-199=workbenc user-200=ismassag user-201=wineberr user-202=viplastc user-203=pelagini user-204=kaoilmk user-205=biplmk user-206=bbbustou user-207=progress
Sep 11 16:42:12 power sudo[1784738]: wp-toolkit : (command continued) user-208=cleanerm user-209=animatem user-210=sssoluti user-211=atspedco user-212=jaramk user-213=solointe user-214=recorgmk user-215=taktcomm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 16:42:12 power sudo[1784738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:12 power sudo[1784738]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:12 power sudo[1784751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 16:42:12 power sudo[1784751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:12 power sudo[1784751]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:12 power sudo[1784755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-64fwVqwjCWDKo2QR.~
Sep 11 16:42:12 power sudo[1784755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:12 power sudo[1784755]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:12 power sudo[1784760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-64fwVqwjCWDKo2QR.~\''
Sep 11 16:42:12 power sudo[1784760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:12 power sudo[1784760]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:12 power sudo[1784765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-64fwVqwjCWDKo2QR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 16:42:12 power sudo[1784765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:12 power sudo[1784765]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:12 power sudo[1784769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 16:42:12 power sudo[1784769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:12 power sudo[1784769]: pam_unix(sudo:session): session closed for user root
Sep 11 16:42:16 power sudo[1784993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 16:42:16 power sudo[1784993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 16:42:16 power sudo[1784993]: pam_unix(sudo:session): session closed for user root
Sep 11 16:45:01 power systemd[1788212]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:45:01 power systemd[1788213]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:50:01 power systemd[1793659]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:50:01 power systemd[1793660]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 16:55:01 power systemd[1798378]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 16:55:01 power systemd[1798379]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:00:01 power systemd[1803164]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:00:01 power systemd[1803165]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:00:01 power systemd[1803166]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 17:00:01 power systemd[1803168]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 17:00:01 power systemd[1803170]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 17:04:01 power systemd[1807815]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:05:01 power systemd[1808720]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:05:01 power systemd[1808721]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:06:01 power systemd[1809865]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 17:07:01 power systemd[1810818]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 17:09:01 power systemd[1812761]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:10:01 power systemd[1813829]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:10:01 power systemd[1813830]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:12:01 power systemd[1815613]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 17:15:01 power systemd[1819054]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:15:01 power systemd[1819055]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:20:02 power systemd[1824429]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:20:02 power systemd[1824431]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:25:01 power systemd[1829992]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:25:01 power systemd[1829994]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:30:01 power systemd[1834873]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:30:01 power systemd[1834876]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:30:01 power systemd[1834877]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 17:30:01 power systemd[1834879]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 17:30:01 power systemd[1834880]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 17:35:01 power systemd[1840201]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:35:01 power systemd[1840202]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:36:01 power systemd[1841125]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 17:37:01 power systemd[1842112]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 17:39:01 power systemd[1843790]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:40:01 power systemd[1844972]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:40:01 power systemd[1844973]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:42:01 power systemd[1846907]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 17:42:09 power sudo[1847059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 17:42:09 power systemd[1847064]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:42:09 power sudo[1847059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:09 power sudo[1847059]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:09 power sudo[1847084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 17:42:09 power sudo[1847084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:09 power sudo[1847084]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 17:42:10 power sudo[1847088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847088]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=SDgOqoDnMa'
Sep 11 17:42:10 power sudo[1847092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847092]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 17:42:10 power sudo[1847099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847099]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 17:42:10 power sudo[1847104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847104]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 17:42:10 power sudo[1847108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847108]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 17:42:10 power sudo[1847112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847112]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 17:42:10 power sudo[1847125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847125]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 17:42:10 power sudo[1847130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847130]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 17:42:10 power sudo[1847134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847134]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 17:42:10 power sudo[1847140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847140]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 17:42:10 power sudo[1847145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847145]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:10 power sudo[1847149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 17:42:10 power sudo[1847149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:10 power sudo[1847149]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:12 power sudo[1847198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 17:42:12 power sudo[1847198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:12 power sudo[1847198]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:12 power sudo[1847203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 17:42:12 power sudo[1847203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:12 power sudo[1847203]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:12 power sudo[1847210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tealmk user-2=dadarmk user-3=proverim user-4=goodnews user-5=mstmmk user-6=gocruise user-7=gjorgeiv user-8=tradeyou user-9=dnevnoin user-10=pecakome user-11=wondersp user-12=robustco user-13=stravelm user-14=holiyayt user-15=rastiraz user-16=edomcomm user-17=berbermk user-18=dikimk12 user-19=sprintst user-20=herbalpl user-21=enochmk user-22=seloviro user-23=centarba user-24=nlpmkorg user-25=kolened1 user-26=nolimits user-27=avtogumi user-28=socioloz user-29=pelagoni user-30=evolvepl user-31=frizered user-32=hidrommk user-33=caramk user-34=nefrolog user-35=oncolog1 user-36=ekostoc1 user-37=levantmk user-38=cajsproc user-39=hotammk user-40=youthgua user-41=anitermc user-42=stojnevi user-43=raremk user-44=oouslave user-45=uhostmk5 user-46=bauerbg user-47=enaspotc user-48=vmro user-49=trudovop user-50=viewinn
Sep 11 17:42:12 power sudo[1847210]: wp-toolkit : (command continued) user-51=wikicamp user-52=urbanexp user-53=spdcompu user-54=detskagr user-55=infobadi user-56=mspmk user-57=bizporta user-58=datelcom user-59=maleshne user-60=sedcmk user-61=ivanjord user-62=groskome user-63=vfxnestc user-64=polyeste user-65=datalink user-66=gogovan1 user-67=velmk user-68=kujnamon user-69=univerz1 user-70=agrosind user-71=mpbmk user-72=getaldus user-73=simbiome user-74=delcevca user-75=barececo user-76=workandt user-77=goartsym user-78=volkanco user-79=dhamachi user-80=mfashion user-81=makoasmk user-82=bianasho user-83=skyapart user-84=rasmorgm user-85=jpparkin user-86=inotekso user-87=drleomk user-88=ideaplus user-89=nasaidni user-90=karpospo user-91=arturaco user-92=screenme user-93=premiums user-94=daris user-95=butelmk user-96=kouzonco user-97=premiuma user-98=cetplatf user-99=dalmacom user-100=palenzok user-101=zvskopje user-102=zampmk user-103=busymard user-104=custome1 user-105=sparkupm
Sep 11 17:42:12 power sudo[1847210]: wp-toolkit : (command continued) user-106=stokovna user-107=klimimk user-108=stojano1 user-109=bovincom user-110=janiboja user-111=itradeco user-112=vezilkac user-113=cabinetm user-114=imdskopj user-115=glammace user-116=albuname user-117=infopor1 user-118=pravekom user-119=vtranseu user-120=cosmatob user-121=euromaki user-122=elektrot user-123=zapovim1 user-124=chemhemc user-125=samasped user-126=nutrivim user-127=mediasol user-128=bogdanos user-129=carrent1 user-130=apgrupmk user-131=kardiome user-132=euronic2 user-133=matratze user-134=intelek1 user-135=mediatag user-136=nucktra1 user-137=lblawcom user-138=aptekazd user-139=nikimare user-140=forzares user-141=hausmark user-142=nikolov1 user-143=fffhpcwr user-144=radekrat user-145=starluxm user-146=ambitiou user-147=fiziosmk user-148=versusmk user-149=onlinesh user-150=nationa2 user-151=solemor1 user-152=mapaspla user-153=tcieuroc user-154=zdmgpsor user-155=gorsajmk user-156=aquatech
Sep 11 17:42:12 power sudo[1847210]: wp-toolkit : (command continued) user-157=v5srybi9dcdx user-158=supremel user-159=bozinovm user-160=prizmapl user-161=fnjorgmk user-162=darkogor user-163=dslmk user-164=innofabl user-165=premiumi user-166=vacuacti user-167=taneccom user-168=tehnologija user-169=modernar user-170=inkigaic user-171=tehnodro user-172=makdrone user-173=izzomk user-174=jpkomuna user-175=evacommk user-176=aptekafa user-177=madzomk user-178=gradbai1 user-179=eaptekam user-180=dimpalne user-181=peshkai1 user-182=fxxcom user-183=folklore user-184=bauerin2 user-185=euronic3 user-186=vegemk1 user-187=cupidpro user-188=conserva user-189=bonitavi user-190=evberasm user-191=workbenc user-192=ismassag user-193=mbmehani user-194=wineberr user-195=viplastc user-196=eurofarm user-197=solarinv user-198=golakkom user-199=trigemat user-200=naksorgm user-201=eliksirz user-202=electrol user-203=sssoluti user-204=atspedco user-205=progress user-206=animatem user-207=cleanerm
Sep 11 17:42:12 power sudo[1847210]: wp-toolkit : (command continued) user-208=recorgmk user-209=taktcomm user-210=jaramk user-211=solointe user-212=pelagini user-213=biplmk user-214=kaoilmk user-215=bbbustou feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 17:42:12 power sudo[1847210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:13 power sudo[1847210]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:13 power sudo[1847221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 17:42:13 power sudo[1847221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:13 power sudo[1847221]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:13 power sudo[1847225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lFYlikQs0UjC42D1.~
Sep 11 17:42:13 power sudo[1847225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:13 power sudo[1847225]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:13 power sudo[1847229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lFYlikQs0UjC42D1.~\''
Sep 11 17:42:13 power sudo[1847229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:13 power sudo[1847229]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:13 power sudo[1847234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lFYlikQs0UjC42D1.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 17:42:13 power sudo[1847234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:13 power sudo[1847234]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:13 power sudo[1847238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 17:42:13 power sudo[1847238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:13 power sudo[1847238]: pam_unix(sudo:session): session closed for user root
Sep 11 17:42:17 power sudo[1848214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 17:42:17 power sudo[1848214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 17:42:17 power sudo[1848214]: pam_unix(sudo:session): session closed for user root
Sep 11 17:45:01 power systemd[1850907]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:45:01 power systemd[1850908]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:50:01 power systemd[1856418]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:50:01 power systemd[1856420]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:55:01 power systemd[1861227]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 17:55:01 power systemd[1861228]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 17:58:01 power systemd[1863967]: pam_unix(systemd-user:session): session opened for user izzomk(uid=1115) by izzomk(uid=0)
Sep 11 18:00:01 power systemd[1865967]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:00:01 power systemd[1865964]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:00:01 power systemd[1865969]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 18:00:01 power systemd[1865973]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 18:00:01 power systemd[1865975]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 18:04:01 power systemd[1870814]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:05:01 power systemd[1872050]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:05:01 power systemd[1872051]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:06:01 power systemd[1873281]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 18:07:01 power systemd[1874200]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 18:09:01 power systemd[1876348]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:10:01 power systemd[1877452]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:10:01 power systemd[1877455]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:12:01 power systemd[1879329]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 18:15:01 power systemd[1882251]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:15:01 power systemd[1882252]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:20:01 power systemd[1887293]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:20:01 power systemd[1887295]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:25:01 power systemd[1892108]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:25:01 power systemd[1892109]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:30:01 power systemd[1896814]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:30:01 power systemd[1896815]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:30:01 power systemd[1896818]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 18:30:01 power systemd[1896816]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 18:30:01 power systemd[1896820]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 18:35:01 power systemd[1902381]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:35:01 power systemd[1902382]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:36:01 power systemd[1903325]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 18:37:01 power systemd[1904247]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 18:39:01 power systemd[1906378]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:40:02 power systemd[1907413]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:40:02 power systemd[1907414]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:42:01 power systemd[1908980]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 18:42:09 power sudo[1909133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 18:42:09 power systemd[1909140]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:42:10 power sudo[1909133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909133]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 18:42:10 power sudo[1909159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909159]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 18:42:10 power sudo[1909164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909164]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=xmCW7F2uFv'
Sep 11 18:42:10 power sudo[1909168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909168]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 18:42:10 power sudo[1909173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909173]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 18:42:10 power sudo[1909177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909177]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 18:42:10 power sudo[1909182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909182]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 18:42:10 power sudo[1909186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909186]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 18:42:10 power sudo[1909195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909195]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 18:42:10 power sudo[1909200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909200]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 18:42:10 power sudo[1909204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909204]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 18:42:10 power sudo[1909209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909209]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 18:42:10 power sudo[1909213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:10 power sudo[1909213]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:10 power sudo[1909217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 18:42:10 power sudo[1909217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:11 power sudo[1909217]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:12 power sudo[1909251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 18:42:12 power sudo[1909251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:12 power sudo[1909251]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:12 power sudo[1909256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 18:42:12 power sudo[1909256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:12 power sudo[1909256]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:12 power sudo[1909263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mpbmk user-2=agrosind user-3=kujnamon user-4=univerz1 user-5=velmk user-6=gogovan1 user-7=datalink user-8=rasmorgm user-9=skyapart user-10=bianasho user-11=makoasmk user-12=dhamachi user-13=goartsym user-14=volkanco user-15=mfashion user-16=barececo user-17=simbiome user-18=getaldus user-19=delcevca user-20=workandt user-21=mspmk user-22=infobadi user-23=spdcompu user-24=detskagr user-25=wikicamp user-26=urbanexp user-27=polyeste user-28=vfxnestc user-29=sedcmk user-30=ivanjord user-31=groskome user-32=maleshne user-33=datelcom user-34=bizporta user-35=klimimk user-36=stokovna user-37=sparkupm user-38=custome1 user-39=palenzok user-40=zampmk user-41=zvskopje user-42=busymard user-43=vezilkac user-44=cabinetm user-45=janiboja user-46=itradeco user-47=bovincom user-48=stojano1 user-49=butelmk user-50=daris
Sep 11 18:42:12 power sudo[1909263]: wp-toolkit : (command continued) user-51=premiums user-52=nasaidni user-53=karpospo user-54=ideaplus user-55=arturaco user-56=screenme user-57=inotekso user-58=jpparkin user-59=drleomk user-60=cetplatf user-61=dalmacom user-62=kouzonco user-63=premiuma user-64=dikimk12 user-65=enochmk user-66=herbalpl user-67=sprintst user-68=edomcomm user-69=berbermk user-70=nolimits user-71=kolened1 user-72=nlpmkorg user-73=centarba user-74=seloviro user-75=gocruise user-76=goodnews user-77=mstmmk user-78=dadarmk user-79=proverim user-80=tealmk user-81=holiyayt user-82=rastiraz user-83=pecakome user-84=robustco user-85=stravelm user-86=wondersp user-87=dnevnoin user-88=tradeyou user-89=gjorgeiv user-90=anitermc user-91=youthgua user-92=cajsproc user-93=hotammk user-94=enaspotc user-95=viewinn user-96=trudovop user-97=vmro user-98=oouslave user-99=raremk user-100=bauerbg user-101=uhostmk5 user-102=stojnevi user-103=evolvepl user-104=pelagoni user-105=socioloz
Sep 11 18:42:12 power sudo[1909263]: wp-toolkit : (command continued) user-106=avtogumi user-107=ekostoc1 user-108=levantmk user-109=oncolog1 user-110=nefrolog user-111=caramk user-112=hidrommk user-113=frizered user-114=bauerin2 user-115=folklore user-116=evberasm user-117=bonitavi user-118=conserva user-119=euronic3 user-120=cupidpro user-121=vegemk1 user-122=izzomk user-123=jpkomuna user-124=makdrone user-125=tehnodro user-126=fxxcom user-127=peshkai1 user-128=eaptekam user-129=dimpalne user-130=gradbai1 user-131=aptekafa user-132=madzomk user-133=evacommk user-134=jaramk user-135=solointe user-136=recorgmk user-137=taktcomm user-138=progress user-139=cleanerm user-140=animatem user-141=atspedco user-142=sssoluti user-143=biplmk user-144=kaoilmk user-145=bbbustou user-146=pelagini user-147=wineberr user-148=viplastc user-149=mbmehani user-150=workbenc user-151=ismassag user-152=eliksirz user-153=naksorgm user-154=trigemat user-155=electrol user-156=golakkom user-157=solarinv
Sep 11 18:42:12 power sudo[1909263]: wp-toolkit : (command continued) user-158=eurofarm user-159=matratze user-160=euronic2 user-161=kardiome user-162=bogdanos user-163=carrent1 user-164=mediasol user-165=apgrupmk user-166=hausmark user-167=nikolov1 user-168=nikimare user-169=aptekazd user-170=forzares user-171=nucktra1 user-172=lblawcom user-173=mediatag user-174=intelek1 user-175=pravekom user-176=vtranseu user-177=infopor1 user-178=albuname user-179=glammace user-180=imdskopj user-181=nutrivim user-182=chemhemc user-183=samasped user-184=elektrot user-185=zapovim1 user-186=cosmatob user-187=euromaki user-188=v5srybi9dcdx user-189=supremel user-190=aquatech user-191=gorsajmk user-192=zdmgpsor user-193=inkigaic user-194=modernar user-195=taneccom user-196=tehnologija user-197=darkogor user-198=fnjorgmk user-199=dslmk user-200=prizmapl user-201=bozinovm user-202=vacuacti user-203=premiumi user-204=innofabl user-205=versusmk user-206=ambitiou user-207=fiziosmk user-208=starluxm
Sep 11 18:42:12 power sudo[1909263]: wp-toolkit : (command continued) user-209=radekrat user-210=fffhpcwr user-211=tcieuroc user-212=solemor1 user-213=mapaspla user-214=onlinesh user-215=nationa2 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 18:42:12 power sudo[1909263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:13 power sudo[1909263]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:13 power sudo[1909275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 18:42:13 power sudo[1909275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:13 power sudo[1909275]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:13 power sudo[1909279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eM1Jwh3AcTes9RpZ.~
Sep 11 18:42:13 power sudo[1909279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:13 power sudo[1909279]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:13 power sudo[1909283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eM1Jwh3AcTes9RpZ.~\''
Sep 11 18:42:13 power sudo[1909283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:13 power sudo[1909283]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:13 power sudo[1909288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eM1Jwh3AcTes9RpZ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 18:42:13 power sudo[1909288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:13 power sudo[1909288]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:13 power sudo[1909292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 18:42:13 power sudo[1909292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:13 power sudo[1909292]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:13 power sudo[1909297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_licenses --output=json'
Sep 11 18:42:13 power sudo[1909297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:14 power sudo[1909297]: pam_unix(sudo:session): session closed for user root
Sep 11 18:42:18 power sudo[1910158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 18:42:18 power sudo[1910158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 18:42:18 power sudo[1910158]: pam_unix(sudo:session): session closed for user root
Sep 11 18:45:01 power systemd[1912966]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:45:01 power systemd[1912967]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:50:01 power systemd[1917992]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:50:01 power systemd[1917993]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 18:55:01 power systemd[1922739]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 18:55:01 power systemd[1922740]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:00:01 power systemd[1928029]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:00:01 power systemd[1928028]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:00:01 power systemd[1928030]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 19:00:01 power systemd[1928032]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 19:00:01 power systemd[1928034]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 19:04:01 power systemd[1933003]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:05:01 power systemd[1934213]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:05:01 power systemd[1934214]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:06:01 power systemd[1935297]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 19:07:01 power systemd[1936449]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 19:09:01 power systemd[1939069]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:10:01 power systemd[1940171]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:10:01 power systemd[1940172]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:12:01 power systemd[1942518]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 19:14:33 power sshd[1945346]: error: kex_exchange_identification: banner line contains invalid characters
Sep 11 19:14:33 power sshd[1945346]: banner exchange: Connection from 194.0.234.12 port 64819: invalid format
Sep 11 19:15:01 power systemd[1945911]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:15:01 power systemd[1945913]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:20:01 power systemd[1951395]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:20:01 power systemd[1951396]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:25:01 power systemd[1957013]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:25:01 power systemd[1957014]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:30:01 power systemd[1962653]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:30:01 power systemd[1962649]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:30:01 power systemd[1962654]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 19:30:01 power systemd[1962656]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 19:30:01 power systemd[1962658]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 19:35:01 power systemd[1969823]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:35:01 power systemd[1969824]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:36:01 power systemd[1970900]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 19:37:01 power systemd[1971854]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 19:39:01 power systemd[1974228]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:40:01 power systemd[1975159]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:40:01 power systemd[1975160]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:42:01 power systemd[1977122]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 19:42:09 power sudo[1977286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 19:42:09 power systemd[1977291]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:42:10 power sudo[1977286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977286]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 19:42:10 power sudo[1977306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977306]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 19:42:10 power sudo[1977310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977310]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=Saesbi4Nvg'
Sep 11 19:42:10 power sudo[1977315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977315]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 19:42:10 power sudo[1977321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977321]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 19:42:10 power sudo[1977326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977326]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 19:42:10 power sudo[1977333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977333]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 19:42:10 power sudo[1977337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977337]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 19:42:10 power sudo[1977346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977346]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 19:42:10 power sudo[1977350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977350]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 19:42:10 power sudo[1977354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977354]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 19:42:10 power sudo[1977359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977359]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 19:42:10 power sudo[1977366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:10 power sudo[1977366]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:10 power sudo[1977370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 19:42:10 power sudo[1977370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:11 power sudo[1977370]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:12 power sudo[1977408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 19:42:12 power sudo[1977408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:12 power sudo[1977408]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:12 power sudo[1977417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 19:42:12 power sudo[1977417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:12 power sudo[1977417]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:12 power sudo[1977424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mstmmk user-2=goodnews user-3=gocruise user-4=tealmk user-5=proverim user-6=dadarmk user-7=wondersp user-8=robustco user-9=stravelm user-10=pecakome user-11=rastiraz user-12=holiyayt user-13=gjorgeiv user-14=tradeyou user-15=dnevnoin user-16=sprintst user-17=herbalpl user-18=enochmk user-19=dikimk12 user-20=berbermk user-21=edomcomm user-22=nlpmkorg user-23=centarba user-24=kolened1 user-25=nolimits user-26=seloviro user-27=evolvepl user-28=socioloz user-29=avtogumi user-30=pelagoni user-31=nefrolog user-32=oncolog1 user-33=ekostoc1 user-34=levantmk user-35=frizered user-36=hidrommk user-37=caramk user-38=youthgua user-39=anitermc user-40=hotammk user-41=cajsproc user-42=vmro user-43=trudovop user-44=viewinn user-45=enaspotc user-46=stojnevi user-47=uhostmk5 user-48=bauerbg user-49=raremk user-50=oouslave
Sep 11 19:42:12 power sudo[1977424]: wp-toolkit : (command continued) user-51=detskagr user-52=spdcompu user-53=mspmk user-54=infobadi user-55=urbanexp user-56=wikicamp user-57=groskome user-58=ivanjord user-59=sedcmk user-60=vfxnestc user-61=polyeste user-62=bizporta user-63=datelcom user-64=maleshne user-65=agrosind user-66=mpbmk user-67=datalink user-68=gogovan1 user-69=velmk user-70=kujnamon user-71=univerz1 user-72=bianasho user-73=makoasmk user-74=skyapart user-75=rasmorgm user-76=workandt user-77=delcevca user-78=getaldus user-79=simbiome user-80=barececo user-81=mfashion user-82=goartsym user-83=volkanco user-84=dhamachi user-85=screenme user-86=arturaco user-87=ideaplus user-88=karpospo user-89=nasaidni user-90=premiums user-91=daris user-92=butelmk user-93=drleomk user-94=jpparkin user-95=inotekso user-96=premiuma user-97=kouzonco user-98=dalmacom user-99=cetplatf user-100=sparkupm user-101=stokovna user-102=klimimk user-103=zampmk user-104=busymard user-105=zvskopje
Sep 11 19:42:12 power sudo[1977424]: wp-toolkit : (command continued) user-106=palenzok user-107=custome1 user-108=itradeco user-109=janiboja user-110=cabinetm user-111=vezilkac user-112=stojano1 user-113=bovincom user-114=infopor1 user-115=vtranseu user-116=pravekom user-117=imdskopj user-118=glammace user-119=albuname user-120=samasped user-121=chemhemc user-122=nutrivim user-123=cosmatob user-124=euromaki user-125=zapovim1 user-126=elektrot user-127=euronic2 user-128=matratze user-129=apgrupmk user-130=mediasol user-131=bogdanos user-132=carrent1 user-133=kardiome user-134=forzares user-135=aptekazd user-136=nikimare user-137=nikolov1 user-138=hausmark user-139=intelek1 user-140=mediatag user-141=lblawcom user-142=nucktra1 user-143=fiziosmk user-144=ambitiou user-145=versusmk user-146=fffhpcwr user-147=radekrat user-148=starluxm user-149=tcieuroc user-150=nationa2 user-151=onlinesh user-152=mapaspla user-153=solemor1 user-154=gorsajmk user-155=aquatech user-156=supremel
Sep 11 19:42:12 power sudo[1977424]: wp-toolkit : (command continued) user-157=v5srybi9dcdx user-158=zdmgpsor user-159=modernar user-160=inkigaic user-161=innofabl user-162=premiumi user-163=vacuacti user-164=bozinovm user-165=fnjorgmk user-166=prizmapl user-167=darkogor user-168=dslmk user-169=tehnologija user-170=taneccom user-171=jpkomuna user-172=izzomk user-173=tehnodro user-174=makdrone user-175=dimpalne user-176=eaptekam user-177=peshkai1 user-178=fxxcom user-179=evacommk user-180=aptekafa user-181=madzomk user-182=gradbai1 user-183=folklore user-184=bauerin2 user-185=bonitavi user-186=evberasm user-187=vegemk1 user-188=cupidpro user-189=euronic3 user-190=conserva user-191=viplastc user-192=wineberr user-193=ismassag user-194=workbenc user-195=mbmehani user-196=golakkom user-197=electrol user-198=trigemat user-199=eliksirz user-200=naksorgm user-201=eurofarm user-202=solarinv user-203=taktcomm user-204=recorgmk user-205=solointe user-206=jaramk user-207=sssoluti
Sep 11 19:42:12 power sudo[1977424]: wp-toolkit : (command continued) user-208=atspedco user-209=animatem user-210=cleanerm user-211=progress user-212=bbbustou user-213=biplmk user-214=kaoilmk user-215=pelagini feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 19:42:12 power sudo[1977424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:13 power sudo[1977424]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:13 power sudo[1977441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 19:42:13 power sudo[1977441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:13 power sudo[1977441]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:13 power sudo[1977446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DPBT8NmHZ62n6cBZ.~
Sep 11 19:42:13 power sudo[1977446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:13 power sudo[1977446]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:13 power sudo[1977450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DPBT8NmHZ62n6cBZ.~\''
Sep 11 19:42:13 power sudo[1977450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:13 power sudo[1977450]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:13 power sudo[1977456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DPBT8NmHZ62n6cBZ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 19:42:13 power sudo[1977456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:13 power sudo[1977456]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:13 power sudo[1977460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 19:42:13 power sudo[1977460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:13 power sudo[1977460]: pam_unix(sudo:session): session closed for user root
Sep 11 19:42:17 power sudo[1978426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 19:42:17 power sudo[1978426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 19:42:17 power sudo[1978426]: pam_unix(sudo:session): session closed for user root
Sep 11 19:45:01 power systemd[1981094]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:45:01 power systemd[1981095]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:50:01 power systemd[1988118]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:50:01 power systemd[1988123]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 19:55:01 power systemd[1992971]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 19:55:01 power systemd[1992972]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:00:01 power systemd[1997784]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:00:01 power systemd[1997785]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:00:01 power systemd[1997786]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 20:00:01 power systemd[1997788]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 20:00:01 power systemd[1997790]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 20:04:01 power systemd[2003440]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:05:01 power systemd[2004544]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:05:01 power systemd[2004545]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:06:01 power systemd[2005415]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 20:07:01 power systemd[2006578]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 20:09:01 power systemd[2008591]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:10:01 power systemd[2009630]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:10:01 power systemd[2009631]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:12:01 power systemd[2011493]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 20:15:01 power systemd[2014525]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:15:01 power systemd[2014526]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:20:01 power systemd[2020161]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:20:01 power systemd[2020162]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:24:38 power sudo[2024709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 20:24:38 power systemd[2024715]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:24:38 power sudo[2024709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:24:38 power sudo[2024709]: pam_unix(sudo:session): session closed for user root
Sep 11 20:24:38 power sudo[2024738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 20:24:38 power sudo[2024738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:24:38 power sudo[2024738]: pam_unix(sudo:session): session closed for user root
Sep 11 20:24:38 power sudo[2024745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 20:24:38 power sudo[2024745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:24:38 power sudo[2024745]: pam_unix(sudo:session): session closed for user root
Sep 11 20:24:38 power sudo[2024754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=arturaco user-2=screenme user-3=ideaplus user-4=karpospo user-5=nasaidni user-6=premiums user-7=daris user-8=butelmk user-9=drleomk user-10=jpparkin user-11=inotekso user-12=premiuma user-13=kouzonco user-14=dalmacom user-15=cetplatf user-16=sparkupm user-17=stokovna user-18=klimimk user-19=zampmk user-20=zvskopje user-21=busymard user-22=palenzok user-23=custome1 user-24=itradeco user-25=janiboja user-26=cabinetm user-27=vezilkac user-28=stojano1 user-29=bovincom user-30=detskagr user-31=spdcompu user-32=mspmk user-33=infobadi user-34=urbanexp user-35=wikicamp user-36=ivanjord user-37=groskome user-38=sedcmk user-39=vfxnestc user-40=polyeste user-41=bizporta user-42=datelcom user-43=maleshne user-44=agrosind user-45=mpbmk user-46=datalink user-47=gogovan1 user-48=velmk user-49=univerz1 user-50=kujnamon
Sep 11 20:24:38 power sudo[2024754]: wp-toolkit : (command continued) user-51=makoasmk user-52=bianasho user-53=skyapart user-54=rasmorgm user-55=workandt user-56=getaldus user-57=simbiome user-58=delcevca user-59=barececo user-60=mfashion user-61=goartsym user-62=volkanco user-63=dhamachi user-64=evolvepl user-65=socioloz user-66=avtogumi user-67=pelagoni user-68=nefrolog user-69=oncolog1 user-70=levantmk user-71=ekostoc1 user-72=frizered user-73=hidrommk user-74=caramk user-75=youthgua user-76=anitermc user-77=hotammk user-78=cajsproc user-79=vmro user-80=viewinn user-81=trudovop user-82=enaspotc user-83=stojnevi user-84=uhostmk5 user-85=bauerbg user-86=raremk user-87=oouslave user-88=mstmmk user-89=goodnews user-90=gocruise user-91=tealmk user-92=proverim user-93=dadarmk user-94=wondersp user-95=stravelm user-96=robustco user-97=pecakome user-98=rastiraz user-99=holiyayt user-100=gjorgeiv user-101=tradeyou user-102=dnevnoin user-103=sprintst user-104=enochmk user-105=herbalpl
Sep 11 20:24:38 power sudo[2024754]: wp-toolkit : (command continued) user-106=dikimk12 user-107=berbermk user-108=edomcomm user-109=nlpmkorg user-110=centarba user-111=kolened1 user-112=nolimits user-113=seloviro user-114=viplastc user-115=wineberr user-116=ismassag user-117=workbenc user-118=mbmehani user-119=golakkom user-120=electrol user-121=trigemat user-122=eliksirz user-123=naksorgm user-124=eurofarm user-125=solarinv user-126=recorgmk user-127=taktcomm user-128=solointe user-129=jaramk user-130=atspedco user-131=sssoluti user-132=animatem user-133=cleanerm user-134=progress user-135=bbbustou user-136=biplmk user-137=kaoilmk user-138=pelagini user-139=jpkomuna user-140=izzomk user-141=tehnodro user-142=makdrone user-143=dimpalne user-144=eaptekam user-145=peshkai1 user-146=fxxcom user-147=evacommk user-148=aptekafa user-149=madzomk user-150=gradbai1 user-151=folklore user-152=bauerin2 user-153=bonitavi user-154=evberasm user-155=vegemk1 user-156=cupidpro user-157=euronic3
Sep 11 20:24:38 power sudo[2024754]: wp-toolkit : (command continued) user-158=conserva user-159=fiziosmk user-160=ambitiou user-161=versusmk user-162=fffhpcwr user-163=radekrat user-164=starluxm user-165=tcieuroc user-166=nationa2 user-167=onlinesh user-168=mapaspla user-169=solemor1 user-170=gorsajmk user-171=aquatech user-172=supremel user-173=v5srybi9dcdx user-174=zdmgpsor user-175=modernar user-176=inkigaic user-177=innofabl user-178=premiumi user-179=vacuacti user-180=bozinovm user-181=fnjorgmk user-182=prizmapl user-183=darkogor user-184=dslmk user-185=tehnologija user-186=taneccom user-187=infopor1 user-188=vtranseu user-189=pravekom user-190=imdskopj user-191=glammace user-192=albuname user-193=chemhemc user-194=samasped user-195=nutrivim user-196=cosmatob user-197=euromaki user-198=zapovim1 user-199=elektrot user-200=euronic2 user-201=matratze user-202=apgrupmk user-203=mediasol user-204=bogdanos user-205=carrent1 user-206=kardiome user-207=forzares user-208=aptekazd
Sep 11 20:24:38 power sudo[2024754]: wp-toolkit : (command continued) user-209=nikimare user-210=nikolov1 user-211=hausmark user-212=intelek1 user-213=mediatag user-214=lblawcom user-215=nucktra1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 20:24:38 power sudo[2024754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:24:39 power sudo[2024754]: pam_unix(sudo:session): session closed for user root
Sep 11 20:25:01 power systemd[2025205]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:25:01 power systemd[2025206]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:30:01 power systemd[2030305]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:30:01 power systemd[2030303]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:30:01 power systemd[2030306]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 20:30:01 power systemd[2030308]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 20:30:01 power systemd[2030309]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 20:35:01 power systemd[2035488]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:35:01 power systemd[2035489]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:36:01 power systemd[2036553]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 20:37:01 power systemd[2037349]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 20:39:01 power systemd[2039026]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:40:01 power systemd[2040129]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:40:01 power systemd[2040128]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:42:01 power systemd[2041678]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 20:42:09 power sudo[2041868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 20:42:09 power systemd[2041873]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:42:10 power sudo[2041868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041868]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 20:42:10 power sudo[2041887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041887]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 20:42:10 power sudo[2041891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041891]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=YlSRUWRhfZ'
Sep 11 20:42:10 power sudo[2041896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041896]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 20:42:10 power sudo[2041901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041901]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 20:42:10 power sudo[2041908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041908]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 20:42:10 power sudo[2041912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041912]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 20:42:10 power sudo[2041916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041916]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 20:42:10 power sudo[2041922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041922]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 20:42:10 power sudo[2041926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041926]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 20:42:10 power sudo[2041930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041930]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 20:42:10 power sudo[2041934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041934]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 20:42:10 power sudo[2041938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:10 power sudo[2041938]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:10 power sudo[2041942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 20:42:10 power sudo[2041942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:11 power sudo[2041942]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:12 power sudo[2041978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 20:42:12 power sudo[2041978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:12 power sudo[2041978]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:12 power sudo[2041983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 20:42:12 power sudo[2041983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:12 power sudo[2041983]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:12 power sudo[2041990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=evberasm user-2=bonitavi user-3=euronic3 user-4=cupidpro user-5=vegemk1 user-6=conserva user-7=folklore user-8=bauerin2 user-9=eaptekam user-10=dimpalne user-11=fxxcom user-12=peshkai1 user-13=aptekafa user-14=madzomk user-15=evacommk user-16=gradbai1 user-17=izzomk user-18=jpkomuna user-19=tehnodro user-20=makdrone user-21=kaoilmk user-22=biplmk user-23=bbbustou user-24=pelagini user-25=recorgmk user-26=taktcomm user-27=jaramk user-28=solointe user-29=atspedco user-30=sssoluti user-31=progress user-32=cleanerm user-33=animatem user-34=golakkom user-35=naksorgm user-36=eliksirz user-37=trigemat user-38=electrol user-39=eurofarm user-40=solarinv user-41=wineberr user-42=viplastc user-43=workbenc user-44=ismassag user-45=mbmehani user-46=nikimare user-47=aptekazd user-48=forzares user-49=hausmark
Sep 11 20:42:12 power sudo[2041990]: wp-toolkit : (command continued) user-50=nikolov1 user-51=mediatag user-52=intelek1 user-53=nucktra1 user-54=lblawcom user-55=matratze user-56=euronic2 user-57=carrent1 user-58=bogdanos user-59=mediasol user-60=apgrupmk user-61=kardiome user-62=samasped user-63=chemhemc user-64=nutrivim user-65=euromaki user-66=cosmatob user-67=elektrot user-68=zapovim1 user-69=infopor1 user-70=vtranseu user-71=pravekom user-72=imdskopj user-73=albuname user-74=glammace user-75=modernar user-76=inkigaic user-77=dslmk user-78=prizmapl user-79=fnjorgmk user-80=darkogor user-81=bozinovm user-82=vacuacti user-83=premiumi user-84=innofabl user-85=taneccom user-86=tehnologija user-87=aquatech user-88=gorsajmk user-89=v5srybi9dcdx user-90=supremel user-91=zdmgpsor user-92=tcieuroc user-93=onlinesh user-94=nationa2 user-95=solemor1 user-96=mapaspla user-97=ambitiou user-98=fiziosmk user-99=versusmk user-100=fffhpcwr user-101=starluxm user-102=radekrat user-103=skyapart
Sep 11 20:42:12 power sudo[2041990]: wp-toolkit : (command continued) user-104=bianasho user-105=makoasmk user-106=rasmorgm user-107=barececo user-108=getaldus user-109=simbiome user-110=delcevca user-111=workandt user-112=dhamachi user-113=goartsym user-114=volkanco user-115=mfashion user-116=mpbmk user-117=agrosind user-118=datalink user-119=univerz1 user-120=kujnamon user-121=velmk user-122=gogovan1 user-123=sedcmk user-124=groskome user-125=ivanjord user-126=polyeste user-127=vfxnestc user-128=bizporta user-129=maleshne user-130=datelcom user-131=spdcompu user-132=detskagr user-133=infobadi user-134=mspmk user-135=wikicamp user-136=urbanexp user-137=janiboja user-138=itradeco user-139=vezilkac user-140=cabinetm user-141=stojano1 user-142=bovincom user-143=stokovna user-144=sparkupm user-145=klimimk user-146=palenzok user-147=zampmk user-148=busymard user-149=zvskopje user-150=custome1 user-151=kouzonco user-152=premiuma user-153=cetplatf user-154=dalmacom user-155=nasaidni
Sep 11 20:42:12 power sudo[2041990]: wp-toolkit : (command continued) user-156=karpospo user-157=ideaplus user-158=screenme user-159=arturaco user-160=butelmk user-161=daris user-162=premiums user-163=inotekso user-164=jpparkin user-165=drleomk user-166=kolened1 user-167=centarba user-168=nlpmkorg user-169=nolimits user-170=seloviro user-171=dikimk12 user-172=herbalpl user-173=enochmk user-174=sprintst user-175=edomcomm user-176=berbermk user-177=pecakome user-178=robustco user-179=stravelm user-180=wondersp user-181=holiyayt user-182=rastiraz user-183=gjorgeiv user-184=tradeyou user-185=dnevnoin user-186=goodnews user-187=mstmmk user-188=gocruise user-189=tealmk user-190=dadarmk user-191=proverim user-192=enaspotc user-193=trudovop user-194=viewinn user-195=vmro user-196=stojnevi user-197=oouslave user-198=raremk user-199=bauerbg user-200=uhostmk5 user-201=anitermc user-202=youthgua user-203=cajsproc user-204=hotammk user-205=levantmk user-206=oncolog1 user-207=ekostoc1
Sep 11 20:42:12 power sudo[2041990]: wp-toolkit : (command continued) user-208=nefrolog user-209=hidrommk user-210=frizered user-211=caramk user-212=evolvepl user-213=socioloz user-214=avtogumi user-215=pelagoni feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 20:42:12 power sudo[2041990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:13 power sudo[2041990]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:13 power sudo[2041998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 20:42:13 power sudo[2041998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:13 power sudo[2041998]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:13 power sudo[2042003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GTNTjqb4ppiUP1Bb.~
Sep 11 20:42:13 power sudo[2042003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:13 power sudo[2042003]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:13 power sudo[2042010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GTNTjqb4ppiUP1Bb.~\''
Sep 11 20:42:13 power sudo[2042010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:13 power sudo[2042010]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:13 power sudo[2042015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GTNTjqb4ppiUP1Bb.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 20:42:13 power sudo[2042015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:13 power sudo[2042015]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:13 power sudo[2042019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 20:42:13 power sudo[2042019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:13 power sudo[2042019]: pam_unix(sudo:session): session closed for user root
Sep 11 20:42:14 power sudo[2042937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 20:42:14 power sudo[2042937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 20:42:14 power sudo[2042937]: pam_unix(sudo:session): session closed for user root
Sep 11 20:45:01 power systemd[2045647]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:45:01 power systemd[2045648]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:50:01 power systemd[2050839]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:50:01 power systemd[2050841]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 20:52:18 power sshd[2053065]: Connection closed by 172.236.228.220 port 5760 [preauth]
Sep 11 20:52:20 power sshd[2053115]: Connection closed by 172.236.228.220 port 5774 [preauth]
Sep 11 20:52:21 power sshd[2053157]: Connection closed by 172.236.228.220 port 5786 [preauth]
Sep 11 20:55:01 power systemd[2055802]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 20:55:01 power systemd[2055804]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:00:01 power systemd[2060833]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:00:01 power systemd[2060834]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:00:01 power systemd[2060835]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 21:00:01 power systemd[2060837]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 21:00:01 power systemd[2060838]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 21:04:02 power systemd[2065447]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:05:01 power systemd[2066588]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:05:01 power systemd[2066590]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:06:01 power systemd[2067596]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 21:07:01 power systemd[2068536]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 21:09:01 power systemd[2070501]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:10:02 power systemd[2071733]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:10:02 power systemd[2071734]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:12:01 power systemd[2073698]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 21:15:01 power systemd[2076321]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:15:02 power systemd[2076324]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:15:02 power systemd[2076325]: pam_unix(systemd-user:session): session opened for user polyeste(uid=1217) by polyeste(uid=0)
Sep 11 21:20:01 power systemd[2081306]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:20:01 power systemd[2081308]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:25:01 power systemd[2086787]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:25:01 power systemd[2086788]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:30:01 power systemd[2092538]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:30:01 power systemd[2092539]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:30:01 power systemd[2092540]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 21:30:01 power systemd[2092542]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 21:30:01 power systemd[2092544]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 21:30:34 power sshd[2093471]: error: kex_exchange_identification: banner line contains invalid characters
Sep 11 21:30:34 power sshd[2093471]: banner exchange: Connection from 47.251.92.101 port 20498: invalid format
Sep 11 21:30:35 power sshd[2093486]: Invalid user  from 47.251.92.101 port 20508
Sep 11 21:30:35 power sshd[2093486]: Connection closed by invalid user  47.251.92.101 port 20508 [preauth]
Sep 11 21:35:01 power systemd[2097625]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:35:01 power systemd[2097626]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:36:01 power systemd[2098562]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 21:37:01 power systemd[2099492]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 21:39:01 power systemd[2101675]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:40:01 power systemd[2102926]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:40:01 power systemd[2102927]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:41:13 power sshd[2104118]: Connection closed by 66.132.153.112 port 60288 [preauth]
Sep 11 21:42:01 power systemd[2106745]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 21:42:09 power sudo[2107133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 21:42:09 power systemd[2107142]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:42:10 power sudo[2107133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107133]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 21:42:10 power sudo[2107158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107158]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 21:42:10 power sudo[2107162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107162]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=1Xkqw9R8H3'
Sep 11 21:42:10 power sudo[2107166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107166]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 21:42:10 power sudo[2107177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107177]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 21:42:10 power sudo[2107181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107181]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 21:42:10 power sudo[2107185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107185]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 21:42:10 power sudo[2107189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107189]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 21:42:10 power sudo[2107196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107196]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 21:42:10 power sudo[2107200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107200]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 21:42:10 power sudo[2107204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107204]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 21:42:10 power sudo[2107208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107208]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 21:42:10 power sudo[2107212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:10 power sudo[2107212]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:10 power sudo[2107217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 21:42:10 power sudo[2107217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:11 power sudo[2107217]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:14 power sudo[2107312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 21:42:14 power sudo[2107312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:14 power sudo[2107312]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:14 power sudo[2107317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 21:42:14 power sudo[2107317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:14 power sudo[2107317]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:14 power sudo[2107324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=palenzok user-2=zampmk user-3=busymard user-4=zvskopje user-5=custome1 user-6=stokovna user-7=sparkupm user-8=klimimk user-9=stojano1 user-10=bovincom user-11=janiboja user-12=itradeco user-13=vezilkac user-14=cabinetm user-15=inotekso user-16=jpparkin user-17=drleomk user-18=karpospo user-19=nasaidni user-20=ideaplus user-21=arturaco user-22=screenme user-23=butelmk user-24=daris user-25=premiums user-26=kouzonco user-27=premiuma user-28=cetplatf user-29=dalmacom user-30=datalink user-31=kujnamon user-32=univerz1 user-33=gogovan1 user-34=velmk user-35=mpbmk user-36=agrosind user-37=barececo user-38=getaldus user-39=delcevca user-40=simbiome user-41=workandt user-42=dhamachi user-43=volkanco user-44=goartsym user-45=mfashion user-46=skyapart user-47=makoasmk user-48=bianasho user-49=rasmorgm user-50=wikicamp
Sep 11 21:42:14 power sudo[2107324]: wp-toolkit : (command continued) user-51=urbanexp user-52=spdcompu user-53=detskagr user-54=infobadi user-55=mspmk user-56=bizporta user-57=maleshne user-58=datelcom user-59=sedcmk user-60=ivanjord user-61=groskome user-62=polyeste user-63=vfxnestc user-64=cajsproc user-65=hotammk user-66=anitermc user-67=youthgua user-68=stojnevi user-69=oouslave user-70=raremk user-71=bauerbg user-72=uhostmk5 user-73=enaspotc user-74=trudovop user-75=viewinn user-76=vmro user-77=socioloz user-78=avtogumi user-79=pelagoni user-80=evolvepl user-81=hidrommk user-82=frizered user-83=caramk user-84=oncolog1 user-85=levantmk user-86=ekostoc1 user-87=nefrolog user-88=edomcomm user-89=berbermk user-90=dikimk12 user-91=enochmk user-92=herbalpl user-93=sprintst user-94=seloviro user-95=kolened1 user-96=nlpmkorg user-97=centarba user-98=nolimits user-99=tealmk user-100=dadarmk user-101=proverim user-102=goodnews user-103=mstmmk user-104=gocruise user-105=gjorgeiv
Sep 11 21:42:14 power sudo[2107324]: wp-toolkit : (command continued) user-106=tradeyou user-107=dnevnoin user-108=pecakome user-109=robustco user-110=stravelm user-111=wondersp user-112=holiyayt user-113=rastiraz user-114=sssoluti user-115=atspedco user-116=progress user-117=cleanerm user-118=animatem user-119=recorgmk user-120=taktcomm user-121=jaramk user-122=solointe user-123=pelagini user-124=biplmk user-125=kaoilmk user-126=bbbustou user-127=workbenc user-128=ismassag user-129=mbmehani user-130=wineberr user-131=viplastc user-132=eurofarm user-133=solarinv user-134=golakkom user-135=eliksirz user-136=naksorgm user-137=trigemat user-138=electrol user-139=folklore user-140=bauerin2 user-141=euronic3 user-142=cupidpro user-143=vegemk1 user-144=conserva user-145=evberasm user-146=bonitavi user-147=tehnodro user-148=makdrone user-149=izzomk user-150=jpkomuna user-151=madzomk user-152=aptekafa user-153=evacommk user-154=gradbai1 user-155=eaptekam user-156=dimpalne user-157=fxxcom
Sep 11 21:42:14 power sudo[2107324]: wp-toolkit : (command continued) user-158=peshkai1 user-159=zdmgpsor user-160=aquatech user-161=gorsajmk user-162=v5srybi9dcdx user-163=supremel user-164=darkogor user-165=prizmapl user-166=fnjorgmk user-167=dslmk user-168=bozinovm user-169=vacuacti user-170=premiumi user-171=innofabl user-172=taneccom user-173=tehnologija user-174=modernar user-175=inkigaic user-176=fffhpcwr user-177=starluxm user-178=radekrat user-179=ambitiou user-180=fiziosmk user-181=versusmk user-182=onlinesh user-183=nationa2 user-184=solemor1 user-185=mapaspla user-186=tcieuroc user-187=bogdanos user-188=carrent1 user-189=mediasol user-190=apgrupmk user-191=kardiome user-192=matratze user-193=euronic2 user-194=mediatag user-195=intelek1 user-196=nucktra1 user-197=lblawcom user-198=nikimare user-199=aptekazd user-200=forzares user-201=hausmark user-202=nikolov1 user-203=imdskopj user-204=albuname user-205=glammace user-206=infopor1 user-207=vtranseu user-208=pravekom
Sep 11 21:42:14 power sudo[2107324]: wp-toolkit : (command continued) user-209=cosmatob user-210=euromaki user-211=zapovim1 user-212=elektrot user-213=chemhemc user-214=samasped user-215=nutrivim feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 21:42:14 power sudo[2107324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:15 power sudo[2107324]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:15 power sudo[2107338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 21:42:15 power sudo[2107338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:15 power sudo[2107338]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:15 power sudo[2107342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WkXB5u362MHAW1TZ.~
Sep 11 21:42:15 power sudo[2107342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:15 power sudo[2107342]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:15 power sudo[2107346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WkXB5u362MHAW1TZ.~\''
Sep 11 21:42:15 power sudo[2107346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:15 power sudo[2107346]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:15 power sudo[2107352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WkXB5u362MHAW1TZ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 21:42:15 power sudo[2107352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:15 power sudo[2107352]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:15 power sudo[2107356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 21:42:15 power sudo[2107356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:15 power sudo[2107356]: pam_unix(sudo:session): session closed for user root
Sep 11 21:42:16 power sudo[2108300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 21:42:16 power sudo[2108300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 21:42:16 power sudo[2108300]: pam_unix(sudo:session): session closed for user root
Sep 11 21:45:01 power systemd[2115346]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:45:01 power systemd[2115347]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:50:01 power systemd[2122142]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 21:50:01 power systemd[2122141]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:55:01 power systemd[2126733]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 21:55:01 power systemd[2126738]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:00:02 power systemd[2131434]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:00:02 power systemd[2131435]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:00:02 power systemd[2131436]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 22:00:02 power systemd[2131438]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 22:00:02 power systemd[2131440]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 22:04:01 power systemd[2135872]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:05:01 power systemd[2136943]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:05:01 power systemd[2136944]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:06:01 power systemd[2137809]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 22:07:01 power systemd[2138563]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 22:09:01 power systemd[2140235]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:09:01 power systemd[2140236]: pam_unix(systemd-user:session): session opened for user chemhemc(uid=1006) by chemhemc(uid=0)
Sep 11 22:10:01 power systemd[2141457]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:10:01 power systemd[2141459]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:12:01 power systemd[2143396]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 22:15:01 power systemd[2145986]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:15:01 power systemd[2145985]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:20:01 power systemd[2151980]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:20:01 power systemd[2151981]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:25:01 power systemd[2156714]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:25:01 power systemd[2156715]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:30:01 power systemd[2161066]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:30:01 power systemd[2161068]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 22:30:01 power systemd[2161067]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:30:01 power systemd[2161070]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 22:30:01 power systemd[2161071]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 22:31:19 power sshd[2162509]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
Sep 11 22:31:19 power sshd[2162509]: banner exchange: Connection from 172.104.11.51 port 5742: invalid format
Sep 11 22:31:20 power sshd[2162514]: error: kex_exchange_identification: banner line contains invalid characters
Sep 11 22:31:20 power sshd[2162514]: banner exchange: Connection from 172.104.11.51 port 5752: invalid format
Sep 11 22:35:01 power systemd[2166296]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:35:01 power systemd[2166298]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep 11 22:35:01 power systemd[2166299]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:36:01 power systemd[2167278]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 22:37:01 power systemd[2168074]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 22:39:01 power systemd[2169809]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:40:01 power systemd[2170826]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:40:01 power systemd[2170827]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:42:01 power systemd[2172461]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 22:42:09 power sudo[2172574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 22:42:09 power systemd[2172579]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:42:10 power sudo[2172574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172574]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 22:42:10 power sudo[2172596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172596]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 22:42:10 power sudo[2172600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172600]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=t8M9i8o4iq'
Sep 11 22:42:10 power sudo[2172605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172605]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 22:42:10 power sudo[2172614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172614]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 22:42:10 power sudo[2172619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172619]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 22:42:10 power sudo[2172625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172625]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 22:42:10 power sudo[2172629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172629]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 22:42:10 power sudo[2172635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172635]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 22:42:10 power sudo[2172639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172639]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 22:42:10 power sudo[2172643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172643]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 22:42:10 power sudo[2172647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172647]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 22:42:10 power sudo[2172651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:10 power sudo[2172651]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:10 power sudo[2172655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 22:42:10 power sudo[2172655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:11 power sudo[2172655]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:12 power sudo[2172698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 22:42:12 power sudo[2172698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:12 power sudo[2172698]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:12 power sudo[2172703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 22:42:12 power sudo[2172703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:12 power sudo[2172703]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:12 power sudo[2172708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=klimimk user-2=stokovna user-3=sparkupm user-4=custome1 user-5=busymard user-6=zampmk user-7=zvskopje user-8=palenzok user-9=cabinetm user-10=vezilkac user-11=itradeco user-12=janiboja user-13=bovincom user-14=stojano1 user-15=daris user-16=butelmk user-17=premiums user-18=screenme user-19=arturaco user-20=nasaidni user-21=karpospo user-22=ideaplus user-23=drleomk user-24=inotekso user-25=jpparkin user-26=dalmacom user-27=cetplatf user-28=premiuma user-29=kouzonco user-30=mpbmk user-31=agrosind user-32=kujnamon user-33=univerz1 user-34=gogovan1 user-35=velmk user-36=datalink user-37=rasmorgm user-38=skyapart user-39=bianasho user-40=makoasmk user-41=mfashion user-42=dhamachi user-43=volkanco user-44=goartsym user-45=workandt user-46=barececo user-47=getaldus user-48=delcevca user-49=simbiome user-50=infobadi
Sep 11 22:42:12 power sudo[2172708]: wp-toolkit : (command continued) user-51=mspmk user-52=detskagr user-53=spdcompu user-54=urbanexp user-55=wikicamp user-56=polyeste user-57=vfxnestc user-58=ivanjord user-59=groskome user-60=sedcmk user-61=maleshne user-62=datelcom user-63=bizporta user-64=anitermc user-65=youthgua user-66=hotammk user-67=cajsproc user-68=trudovop user-69=viewinn user-70=vmro user-71=enaspotc user-72=bauerbg user-73=uhostmk5 user-74=oouslave user-75=raremk user-76=stojnevi user-77=evolvepl user-78=pelagoni user-79=avtogumi user-80=socioloz user-81=oncolog1 user-82=levantmk user-83=ekostoc1 user-84=nefrolog user-85=caramk user-86=hidrommk user-87=frizered user-88=enochmk user-89=herbalpl user-90=sprintst user-91=dikimk12 user-92=berbermk user-93=edomcomm user-94=nolimits user-95=kolened1 user-96=centarba user-97=nlpmkorg user-98=seloviro user-99=gocruise user-100=mstmmk user-101=goodnews user-102=proverim user-103=dadarmk user-104=tealmk user-105=rastiraz
Sep 11 22:42:12 power sudo[2172708]: wp-toolkit : (command continued) user-106=holiyayt user-107=robustco user-108=stravelm user-109=wondersp user-110=pecakome user-111=dnevnoin user-112=gjorgeiv user-113=tradeyou user-114=solointe user-115=jaramk user-116=recorgmk user-117=taktcomm user-118=cleanerm user-119=animatem user-120=progress user-121=sssoluti user-122=atspedco user-123=bbbustou user-124=kaoilmk user-125=biplmk user-126=pelagini user-127=viplastc user-128=wineberr user-129=mbmehani user-130=ismassag user-131=workbenc user-132=electrol user-133=eliksirz user-134=naksorgm user-135=trigemat user-136=golakkom user-137=solarinv user-138=eurofarm user-139=bauerin2 user-140=folklore user-141=evberasm user-142=bonitavi user-143=conserva user-144=cupidpro user-145=vegemk1 user-146=euronic3 user-147=jpkomuna user-148=izzomk user-149=makdrone user-150=tehnodro user-151=fxxcom user-152=peshkai1 user-153=dimpalne user-154=eaptekam user-155=gradbai1 user-156=aptekafa user-157=madzomk
Sep 11 22:42:12 power sudo[2172708]: wp-toolkit : (command continued) user-158=evacommk user-159=supremel user-160=v5srybi9dcdx user-161=aquatech user-162=gorsajmk user-163=zdmgpsor user-164=inkigaic user-165=modernar user-166=tehnologija user-167=taneccom user-168=vacuacti user-169=premiumi user-170=innofabl user-171=fnjorgmk user-172=darkogor user-173=dslmk user-174=prizmapl user-175=bozinovm user-176=versusmk user-177=fiziosmk user-178=ambitiou user-179=starluxm user-180=radekrat user-181=fffhpcwr user-182=tcieuroc user-183=mapaspla user-184=solemor1 user-185=nationa2 user-186=onlinesh user-187=matratze user-188=euronic2 user-189=kardiome user-190=apgrupmk user-191=bogdanos user-192=carrent1 user-193=mediasol user-194=hausmark user-195=nikolov1 user-196=forzares user-197=nikimare user-198=aptekazd user-199=lblawcom user-200=nucktra1 user-201=mediatag user-202=intelek1 user-203=vtranseu user-204=pravekom user-205=infopor1 user-206=albuname user-207=glammace user-208=imdskopj
Sep 11 22:42:12 power sudo[2172708]: wp-toolkit : (command continued) user-209=nutrivim user-210=chemhemc user-211=samasped user-212=zapovim1 user-213=elektrot user-214=euromaki user-215=cosmatob feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 22:42:12 power sudo[2172708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:13 power sudo[2172708]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:13 power sudo[2172719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 22:42:13 power sudo[2172719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:13 power sudo[2172719]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:13 power sudo[2172723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cx6DQZXa7CP4nCaS.~
Sep 11 22:42:13 power sudo[2172723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:13 power sudo[2172723]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:13 power sudo[2172727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cx6DQZXa7CP4nCaS.~\''
Sep 11 22:42:13 power sudo[2172727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:13 power sudo[2172727]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:13 power sudo[2172732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cx6DQZXa7CP4nCaS.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 22:42:13 power sudo[2172732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:13 power sudo[2172732]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:13 power sudo[2172736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 22:42:13 power sudo[2172736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:13 power sudo[2172736]: pam_unix(sudo:session): session closed for user root
Sep 11 22:42:13 power sudo[2173113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 22:42:13 power sudo[2173113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 22:42:13 power sudo[2173113]: pam_unix(sudo:session): session closed for user root
Sep 11 22:45:01 power systemd[2176333]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:45:01 power systemd[2176334]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:50:01 power systemd[2181740]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:50:01 power systemd[2181741]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 22:55:01 power systemd[2186110]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 22:55:01 power systemd[2186111]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:00:01 power systemd[2190840]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:00:01 power systemd[2190845]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 23:00:01 power systemd[2190843]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:00:01 power systemd[2190846]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 23:00:01 power systemd[2190847]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 23:04:01 power systemd[2195415]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:05:01 power systemd[2196487]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:05:01 power systemd[2196488]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:06:01 power systemd[2197557]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 23:07:01 power systemd[2198724]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 23:09:01 power systemd[2200699]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:10:01 power systemd[2201676]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:10:01 power systemd[2201677]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep 11 23:10:01 power systemd[2201678]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:12:01 power systemd[2203405]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 23:15:02 power systemd[2206219]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:15:02 power systemd[2206220]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:20:01 power systemd[2211017]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:20:01 power systemd[2211019]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:25:01 power systemd[2215595]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:25:01 power systemd[2215596]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep 11 23:25:01 power systemd[2215597]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:30:01 power systemd[2219934]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:30:01 power systemd[2219937]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 11 23:30:01 power systemd[2219936]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:30:01 power systemd[2219939]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 11 23:30:01 power systemd[2219940]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 11 23:35:01 power systemd[2224772]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:35:01 power systemd[2224773]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:36:01 power systemd[2226308]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 11 23:37:01 power systemd[2227094]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 23:39:01 power systemd[2228616]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:40:01 power systemd[2229429]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:40:01 power systemd[2229430]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:42:01 power systemd[2231199]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 11 23:42:09 power sudo[2231350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 11 23:42:09 power systemd[2231357]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:42:10 power sudo[2231350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231350]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 11 23:42:10 power sudo[2231376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231376]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 11 23:42:10 power sudo[2231380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231380]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=r15ahQiY8q'
Sep 11 23:42:10 power sudo[2231384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231384]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 11 23:42:10 power sudo[2231390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231390]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 11 23:42:10 power sudo[2231394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231394]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 11 23:42:10 power sudo[2231398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231398]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 11 23:42:10 power sudo[2231402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231402]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 11 23:42:10 power sudo[2231410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231410]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 11 23:42:10 power sudo[2231414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231414]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 11 23:42:10 power sudo[2231418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231418]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 23:42:10 power sudo[2231422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231422]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 11 23:42:10 power sudo[2231426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:10 power sudo[2231426]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:10 power sudo[2231431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 11 23:42:10 power sudo[2231431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:11 power sudo[2231431]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:12 power sudo[2231513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 11 23:42:12 power sudo[2231513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:12 power sudo[2231513]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:12 power sudo[2231518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 11 23:42:12 power sudo[2231518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:12 power sudo[2231518]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:12 power sudo[2231524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=fffhpcwr user-2=radekrat user-3=starluxm user-4=fiziosmk user-5=ambitiou user-6=versusmk user-7=nationa2 user-8=onlinesh user-9=mapaspla user-10=solemor1 user-11=tcieuroc user-12=zdmgpsor user-13=gorsajmk user-14=aquatech user-15=supremel user-16=v5srybi9dcdx user-17=premiumi user-18=innofabl user-19=vacuacti user-20=bozinovm user-21=fnjorgmk user-22=prizmapl user-23=dslmk user-24=darkogor user-25=tehnologija user-26=taneccom user-27=modernar user-28=inkigaic user-29=imdskopj user-30=glammace user-31=albuname user-32=infopor1 user-33=pravekom user-34=vtranseu user-35=euromaki user-36=cosmatob user-37=zapovim1 user-38=elektrot user-39=samasped user-40=chemhemc user-41=nutrivim user-42=apgrupmk user-43=mediasol user-44=bogdanos user-45=carrent1 user-46=kardiome user-47=euronic2 user-48=matratze
Sep 11 23:42:12 power sudo[2231524]: wp-toolkit : (command continued) user-49=intelek1 user-50=mediatag user-51=lblawcom user-52=nucktra1 user-53=forzares user-54=aptekazd user-55=nikimare user-56=hausmark user-57=nikolov1 user-58=ismassag user-59=workbenc user-60=mbmehani user-61=viplastc user-62=wineberr user-63=eurofarm user-64=solarinv user-65=golakkom user-66=electrol user-67=trigemat user-68=eliksirz user-69=naksorgm user-70=atspedco user-71=sssoluti user-72=animatem user-73=cleanerm user-74=progress user-75=taktcomm user-76=recorgmk user-77=solointe user-78=jaramk user-79=pelagini user-80=bbbustou user-81=biplmk user-82=kaoilmk user-83=tehnodro user-84=makdrone user-85=jpkomuna user-86=izzomk user-87=evacommk user-88=aptekafa user-89=madzomk user-90=gradbai1 user-91=dimpalne user-92=eaptekam user-93=peshkai1 user-94=fxxcom user-95=folklore user-96=bauerin2 user-97=vegemk1 user-98=cupidpro user-99=euronic3 user-100=conserva user-101=bonitavi user-102=evberasm
Sep 11 23:42:12 power sudo[2231524]: wp-toolkit : (command continued) user-103=socioloz user-104=avtogumi user-105=pelagoni user-106=evolvepl user-107=frizered user-108=hidrommk user-109=caramk user-110=nefrolog user-111=ekostoc1 user-112=oncolog1 user-113=levantmk user-114=hotammk user-115=cajsproc user-116=youthgua user-117=anitermc user-118=stojnevi user-119=uhostmk5 user-120=bauerbg user-121=raremk user-122=oouslave user-123=vmro user-124=viewinn user-125=trudovop user-126=enaspotc user-127=tealmk user-128=proverim user-129=dadarmk user-130=mstmmk user-131=goodnews user-132=gocruise user-133=tradeyou user-134=gjorgeiv user-135=dnevnoin user-136=wondersp user-137=stravelm user-138=robustco user-139=pecakome user-140=rastiraz user-141=holiyayt user-142=berbermk user-143=edomcomm user-144=sprintst user-145=herbalpl user-146=enochmk user-147=dikimk12 user-148=seloviro user-149=nlpmkorg user-150=centarba user-151=kolened1 user-152=nolimits user-153=drleomk user-154=jpparkin
Sep 11 23:42:12 power sudo[2231524]: wp-toolkit : (command continued) user-155=inotekso user-156=arturaco user-157=screenme user-158=ideaplus user-159=nasaidni user-160=karpospo user-161=premiums user-162=daris user-163=butelmk user-164=premiuma user-165=kouzonco user-166=dalmacom user-167=cetplatf user-168=zampmk user-169=zvskopje user-170=busymard user-171=palenzok user-172=custome1 user-173=sparkupm user-174=stokovna user-175=klimimk user-176=stojano1 user-177=bovincom user-178=itradeco user-179=janiboja user-180=cabinetm user-181=vezilkac user-182=urbanexp user-183=wikicamp user-184=detskagr user-185=spdcompu user-186=mspmk user-187=infobadi user-188=bizporta user-189=datelcom user-190=maleshne user-191=ivanjord user-192=groskome user-193=sedcmk user-194=vfxnestc user-195=polyeste user-196=datalink user-197=gogovan1 user-198=velmk user-199=kujnamon user-200=univerz1 user-201=agrosind user-202=mpbmk user-203=workandt user-204=simbiome user-205=getaldus user-206=delcevca
Sep 11 23:42:12 power sudo[2231524]: wp-toolkit : (command continued) user-207=barececo user-208=mfashion user-209=goartsym user-210=volkanco user-211=dhamachi user-212=bianasho user-213=makoasmk user-214=skyapart user-215=rasmorgm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 11 23:42:12 power sudo[2231524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:13 power sudo[2231524]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:13 power sudo[2231538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 23:42:13 power sudo[2231538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:13 power sudo[2231538]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:13 power sudo[2231542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EF90b2AMQOcZ6wSS.~
Sep 11 23:42:13 power sudo[2231542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:13 power sudo[2231542]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:13 power sudo[2231546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EF90b2AMQOcZ6wSS.~\''
Sep 11 23:42:13 power sudo[2231546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:13 power sudo[2231546]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:13 power sudo[2231551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EF90b2AMQOcZ6wSS.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 11 23:42:13 power sudo[2231551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:13 power sudo[2231551]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:13 power sudo[2231555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 11 23:42:13 power sudo[2231555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:13 power sudo[2231555]: pam_unix(sudo:session): session closed for user root
Sep 11 23:42:14 power sudo[2232421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 11 23:42:14 power sudo[2232421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 11 23:42:14 power sudo[2232421]: pam_unix(sudo:session): session closed for user root
Sep 11 23:45:01 power systemd[2234927]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:45:01 power systemd[2234929]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:50:02 power systemd[2239560]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:50:02 power systemd[2239561]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 11 23:55:01 power systemd[2243717]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 11 23:55:01 power systemd[2243718]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:00:01 power systemd[2248641]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:00:01 power systemd[2248650]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:00:01 power systemd[2248649]: pam_unix(systemd-user:session): session opened for user fffhpcwr(uid=1010) by fffhpcwr(uid=0)
Sep 12 00:00:01 power systemd[2248652]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 00:00:01 power systemd[2248657]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 00:00:01 power systemd[2248654]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 00:00:01 power systemd[2248660]: pam_unix(systemd-user:session): session opened for user tcieuroc(uid=1184) by tcieuroc(uid=0)
Sep 12 00:04:02 power systemd[2254714]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:05:01 power systemd[2255865]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:05:01 power systemd[2255866]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:06:01 power systemd[2257244]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 00:07:01 power systemd[2258410]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 00:09:01 power systemd[2260395]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:10:01 power systemd[2261717]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:10:01 power systemd[2261718]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:12:01 power systemd[2264181]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 00:15:01 power systemd[2267611]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:15:01 power systemd[2267612]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:19:30 power sshd[2273631]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
Sep 12 00:19:30 power sshd[2273631]: banner exchange: Connection from 147.185.132.230 port 61462: invalid format
Sep 12 00:20:01 power systemd[2274276]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:20:01 power systemd[2274277]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:25:01 power systemd[2279984]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:25:01 power systemd[2279985]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:26:01 power systemd[2281261]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:30:01 power systemd[2293720]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:30:01 power systemd[2293721]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 00:30:01 power systemd[2293722]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 00:30:01 power systemd[2293724]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 00:35:01 power systemd[2298705]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:35:01 power systemd[2298707]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:36:01 power systemd[2299653]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 00:37:01 power systemd[2300724]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 00:39:01 power systemd[2302463]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:40:01 power systemd[2303592]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:40:01 power systemd[2303593]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:42:01 power systemd[2305242]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 00:42:08 power sudo[2305364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 00:42:08 power systemd[2305370]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:42:09 power sudo[2305364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305364]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 00:42:09 power sudo[2305387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305387]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 00:42:09 power sudo[2305391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305391]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=3gXJcMNSc4'
Sep 12 00:42:09 power sudo[2305396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305396]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 00:42:09 power sudo[2305402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305402]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 00:42:09 power sudo[2305406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305406]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 00:42:09 power sudo[2305411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305411]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 00:42:09 power sudo[2305415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305415]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 00:42:09 power sudo[2305424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305424]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 00:42:09 power sudo[2305428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305428]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 00:42:09 power sudo[2305432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305432]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 00:42:09 power sudo[2305436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305436]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 00:42:09 power sudo[2305441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:09 power sudo[2305441]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:09 power sudo[2305445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 00:42:09 power sudo[2305445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:10 power sudo[2305445]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:11 power sudo[2305472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 00:42:11 power sudo[2305472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:11 power sudo[2305472]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:11 power sudo[2305477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 00:42:11 power sudo[2305477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:11 power sudo[2305477]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:11 power sudo[2305483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=infopor1 user-2=pravekom user-3=vtranseu user-4=imdskopj user-5=albuname user-6=glammace user-7=samasped user-8=chemhemc user-9=nutrivim user-10=cosmatob user-11=euromaki user-12=elektrot user-13=zapovim1 user-14=matratze user-15=euronic2 user-16=apgrupmk user-17=carrent1 user-18=bogdanos user-19=mediasol user-20=kardiome user-21=forzares user-22=nikimare user-23=aptekazd user-24=hausmark user-25=nikolov1 user-26=mediatag user-27=intelek1 user-28=lblawcom user-29=nucktra1 user-30=fiziosmk user-31=ambitiou user-32=versusmk user-33=fffhpcwr user-34=starluxm user-35=radekrat user-36=tcieuroc user-37=nationa2 user-38=onlinesh user-39=mapaspla user-40=solemor1 user-41=aquatech user-42=gorsajmk user-43=supremel user-44=v5srybi9dcdx user-45=zdmgpsor user-46=modernar user-47=inkigaic user-48=vacuacti
Sep 12 00:42:11 power sudo[2305483]: wp-toolkit : (command continued) user-49=innofabl user-50=premiumi user-51=darkogor user-52=prizmapl user-53=fnjorgmk user-54=dslmk user-55=bozinovm user-56=tehnologija user-57=taneccom user-58=jpkomuna user-59=izzomk user-60=tehnodro user-61=makdrone user-62=dimpalne user-63=eaptekam user-64=fxxcom user-65=peshkai1 user-66=aptekafa user-67=madzomk user-68=evacommk user-69=gradbai1 user-70=folklore user-71=bauerin2 user-72=evberasm user-73=bonitavi user-74=cupidpro user-75=vegemk1 user-76=euronic3 user-77=conserva user-78=viplastc user-79=wineberr user-80=ismassag user-81=workbenc user-82=mbmehani user-83=golakkom user-84=electrol user-85=eliksirz user-86=naksorgm user-87=trigemat user-88=eurofarm user-89=solarinv user-90=taktcomm user-91=recorgmk user-92=solointe user-93=jaramk user-94=atspedco user-95=sssoluti user-96=cleanerm user-97=animatem user-98=progress user-99=bbbustou user-100=kaoilmk user-101=biplmk user-102=pelagini user-103=mstmmk
Sep 12 00:42:11 power sudo[2305483]: wp-toolkit : (command continued) user-104=goodnews user-105=gocruise user-106=tealmk user-107=proverim user-108=dadarmk user-109=stravelm user-110=robustco user-111=wondersp user-112=pecakome user-113=rastiraz user-114=holiyayt user-115=tradeyou user-116=gjorgeiv user-117=dnevnoin user-118=herbalpl user-119=enochmk user-120=sprintst user-121=dikimk12 user-122=berbermk user-123=edomcomm user-124=kolened1 user-125=centarba user-126=nlpmkorg user-127=nolimits user-128=seloviro user-129=evolvepl user-130=avtogumi user-131=socioloz user-132=pelagoni user-133=levantmk user-134=ekostoc1 user-135=oncolog1 user-136=nefrolog user-137=hidrommk user-138=frizered user-139=caramk user-140=anitermc user-141=youthgua user-142=hotammk user-143=cajsproc user-144=trudovop user-145=viewinn user-146=vmro user-147=enaspotc user-148=stojnevi user-149=bauerbg user-150=uhostmk5 user-151=oouslave user-152=raremk user-153=detskagr user-154=spdcompu user-155=infobadi
Sep 12 00:42:11 power sudo[2305483]: wp-toolkit : (command continued) user-156=mspmk user-157=urbanexp user-158=wikicamp user-159=groskome user-160=ivanjord user-161=sedcmk user-162=polyeste user-163=vfxnestc user-164=bizporta user-165=maleshne user-166=datelcom user-167=mpbmk user-168=agrosind user-169=datalink user-170=kujnamon user-171=univerz1 user-172=gogovan1 user-173=velmk user-174=skyapart user-175=makoasmk user-176=bianasho user-177=rasmorgm user-178=workandt user-179=barececo user-180=delcevca user-181=getaldus user-182=simbiome user-183=mfashion user-184=dhamachi user-185=volkanco user-186=goartsym user-187=arturaco user-188=screenme user-189=karpospo user-190=nasaidni user-191=ideaplus user-192=butelmk user-193=daris user-194=premiums user-195=drleomk user-196=inotekso user-197=jpparkin user-198=premiuma user-199=kouzonco user-200=dalmacom user-201=cetplatf user-202=stokovna user-203=sparkupm user-204=klimimk user-205=busymard user-206=zampmk user-207=zvskopje
Sep 12 00:42:11 power sudo[2305483]: wp-toolkit : (command continued) user-208=palenzok user-209=custome1 user-210=itradeco user-211=janiboja user-212=cabinetm user-213=vezilkac user-214=stojano1 user-215=bovincom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 00:42:11 power sudo[2305483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:12 power sudo[2305483]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:12 power sudo[2305497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 00:42:12 power sudo[2305497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:12 power sudo[2305497]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:12 power sudo[2305504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kWL6NDvZjoxgWxBg.~
Sep 12 00:42:12 power sudo[2305504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:12 power sudo[2305504]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:12 power sudo[2305508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kWL6NDvZjoxgWxBg.~\''
Sep 12 00:42:12 power sudo[2305508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:12 power sudo[2305508]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:12 power sudo[2305513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kWL6NDvZjoxgWxBg.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 00:42:12 power sudo[2305513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:12 power sudo[2305513]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:12 power sudo[2305517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 00:42:12 power sudo[2305517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:12 power sudo[2305517]: pam_unix(sudo:session): session closed for user root
Sep 12 00:42:16 power sudo[2306495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 00:42:16 power sudo[2306495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 00:42:16 power sudo[2306495]: pam_unix(sudo:session): session closed for user root
Sep 12 00:45:01 power systemd[2308929]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:45:01 power systemd[2308931]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:50:01 power systemd[2313354]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:50:01 power systemd[2313355]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 00:55:02 power systemd[2317460]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 00:55:02 power systemd[2317463]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:00:01 power systemd[2321642]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:00:01 power systemd[2321645]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:00:01 power systemd[2321646]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 01:00:01 power systemd[2321648]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 01:00:01 power systemd[2321650]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 01:04:01 power systemd[2325950]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:05:01 power systemd[2326955]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:05:01 power systemd[2326956]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:06:01 power systemd[2327855]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 01:07:01 power systemd[2328611]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 01:09:01 power systemd[2330200]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:10:01 power systemd[2331229]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:10:01 power systemd[2331230]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:12:01 power systemd[2332813]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 01:15:01 power systemd[2335503]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:15:01 power systemd[2335502]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:20:01 power systemd[2340242]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:20:01 power systemd[2340243]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:21:52 power sudo[2341901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 01:21:52 power systemd[2341906]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:21:52 power sudo[2341901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:21:53 power sudo[2341901]: pam_unix(sudo:session): session closed for user root
Sep 12 01:21:53 power sudo[2341922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep 12 01:21:53 power sudo[2341922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:21:53 power sudo[2341922]: pam_unix(sudo:session): session closed for user root
Sep 12 01:21:53 power sudo[2341931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin Mime list_redirects --output=json'
Sep 12 01:21:53 power sudo[2341931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:21:53 power sudo[2341931]: pam_unix(sudo:session): session closed for user root
Sep 12 01:25:01 power systemd[2344905]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:25:01 power systemd[2344906]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:30:01 power systemd[2348986]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:30:01 power systemd[2348987]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:30:01 power systemd[2348988]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 01:30:01 power systemd[2348990]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 01:30:01 power systemd[2348992]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 01:35:01 power systemd[2353289]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:35:01 power systemd[2353290]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:36:01 power systemd[2354119]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 01:37:01 power systemd[2355256]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 01:39:02 power systemd[2356837]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:40:01 power systemd[2357803]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:40:01 power systemd[2357804]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:42:01 power systemd[2359284]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 01:42:09 power sudo[2359395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 01:42:09 power systemd[2359400]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:42:09 power sudo[2359395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359395]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 01:42:09 power sudo[2359416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359416]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 01:42:09 power sudo[2359420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359420]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=84r21oyWAd'
Sep 12 01:42:09 power sudo[2359425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359425]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 01:42:09 power sudo[2359432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359432]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 01:42:09 power sudo[2359437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359437]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 01:42:09 power sudo[2359442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359442]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 01:42:09 power sudo[2359446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359446]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 01:42:09 power sudo[2359456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359456]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 01:42:09 power sudo[2359461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359461]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 01:42:09 power sudo[2359465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359465]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 01:42:09 power sudo[2359470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359470]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 01:42:09 power sudo[2359474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:09 power sudo[2359474]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:09 power sudo[2359478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 01:42:09 power sudo[2359478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:10 power sudo[2359478]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:11 power sudo[2359501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 01:42:11 power sudo[2359501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:11 power sudo[2359501]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:11 power sudo[2359506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 01:42:11 power sudo[2359506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:11 power sudo[2359506]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:11 power sudo[2359519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=dnevnoin user-2=tradeyou user-3=gjorgeiv user-4=holiyayt user-5=rastiraz user-6=pecakome user-7=wondersp user-8=robustco user-9=stravelm user-10=dadarmk user-11=proverim user-12=tealmk user-13=gocruise user-14=goodnews user-15=mstmmk user-16=seloviro user-17=nolimits user-18=nlpmkorg user-19=centarba user-20=kolened1 user-21=edomcomm user-22=berbermk user-23=dikimk12 user-24=sprintst user-25=enochmk user-26=herbalpl user-27=caramk user-28=frizered user-29=hidrommk user-30=nefrolog user-31=levantmk user-32=oncolog1 user-33=ekostoc1 user-34=pelagoni user-35=socioloz user-36=avtogumi user-37=evolvepl user-38=raremk user-39=oouslave user-40=uhostmk5 user-41=bauerbg user-42=stojnevi user-43=enaspotc user-44=vmro user-45=trudovop user-46=viewinn user-47=cajsproc user-48=hotammk user-49=youthgua user-50=anitermc
Sep 12 01:42:11 power sudo[2359519]: wp-toolkit : (command continued) user-51=datelcom user-52=maleshne user-53=bizporta user-54=vfxnestc user-55=polyeste user-56=sedcmk user-57=ivanjord user-58=groskome user-59=wikicamp user-60=urbanexp user-61=mspmk user-62=infobadi user-63=spdcompu user-64=detskagr user-65=goartsym user-66=volkanco user-67=dhamachi user-68=mfashion user-69=getaldus user-70=simbiome user-71=delcevca user-72=barececo user-73=workandt user-74=rasmorgm user-75=bianasho user-76=makoasmk user-77=skyapart user-78=gogovan1 user-79=velmk user-80=univerz1 user-81=kujnamon user-82=datalink user-83=agrosind user-84=mpbmk user-85=cetplatf user-86=dalmacom user-87=kouzonco user-88=premiuma user-89=jpparkin user-90=inotekso user-91=drleomk user-92=premiums user-93=butelmk user-94=daris user-95=ideaplus user-96=nasaidni user-97=karpospo user-98=screenme user-99=arturaco user-100=bovincom user-101=stojano1 user-102=vezilkac user-103=cabinetm user-104=janiboja user-105=itradeco
Sep 12 01:42:11 power sudo[2359519]: wp-toolkit : (command continued) user-106=custome1 user-107=palenzok user-108=zampmk user-109=busymard user-110=zvskopje user-111=klimimk user-112=sparkupm user-113=stokovna user-114=zapovim1 user-115=elektrot user-116=euromaki user-117=cosmatob user-118=nutrivim user-119=samasped user-120=chemhemc user-121=glammace user-122=albuname user-123=imdskopj user-124=vtranseu user-125=pravekom user-126=infopor1 user-127=nucktra1 user-128=lblawcom user-129=intelek1 user-130=mediatag user-131=hausmark user-132=nikolov1 user-133=aptekazd user-134=nikimare user-135=forzares user-136=kardiome user-137=mediasol user-138=carrent1 user-139=bogdanos user-140=apgrupmk user-141=euronic2 user-142=matratze user-143=solemor1 user-144=mapaspla user-145=onlinesh user-146=nationa2 user-147=tcieuroc user-148=radekrat user-149=starluxm user-150=fffhpcwr user-151=versusmk user-152=ambitiou user-153=fiziosmk user-154=taneccom user-155=tehnologija user-156=bozinovm
Sep 12 01:42:11 power sudo[2359519]: wp-toolkit : (command continued) user-157=fnjorgmk user-158=dslmk user-159=prizmapl user-160=darkogor user-161=premiumi user-162=innofabl user-163=vacuacti user-164=inkigaic user-165=modernar user-166=zdmgpsor user-167=v5srybi9dcdx user-168=supremel user-169=gorsajmk user-170=aquatech user-171=gradbai1 user-172=evacommk user-173=madzomk user-174=aptekafa user-175=peshkai1 user-176=fxxcom user-177=eaptekam user-178=dimpalne user-179=makdrone user-180=tehnodro user-181=izzomk user-182=jpkomuna user-183=conserva user-184=euronic3 user-185=vegemk1 user-186=cupidpro user-187=bonitavi user-188=evberasm user-189=bauerin2 user-190=folklore user-191=solarinv user-192=eurofarm user-193=trigemat user-194=naksorgm user-195=eliksirz user-196=electrol user-197=golakkom user-198=mbmehani user-199=workbenc user-200=ismassag user-201=wineberr user-202=viplastc user-203=pelagini user-204=kaoilmk user-205=biplmk user-206=bbbustou user-207=progress
Sep 12 01:42:11 power sudo[2359519]: wp-toolkit : (command continued) user-208=animatem user-209=cleanerm user-210=atspedco user-211=sssoluti user-212=jaramk user-213=solointe user-214=recorgmk user-215=taktcomm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 01:42:11 power sudo[2359519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:12 power sudo[2359519]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:12 power sudo[2359525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 01:42:12 power sudo[2359525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:12 power sudo[2359525]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:12 power sudo[2359530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-q5A9BP4YkNnVMr9E.~
Sep 12 01:42:12 power sudo[2359530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:12 power sudo[2359530]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:12 power sudo[2359535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-q5A9BP4YkNnVMr9E.~\''
Sep 12 01:42:12 power sudo[2359535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:12 power sudo[2359535]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:12 power sudo[2359541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-q5A9BP4YkNnVMr9E.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 01:42:12 power sudo[2359541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:12 power sudo[2359541]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:12 power sudo[2359545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 01:42:12 power sudo[2359545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:12 power sudo[2359545]: pam_unix(sudo:session): session closed for user root
Sep 12 01:42:16 power sudo[2359854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 01:42:16 power sudo[2359854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 01:42:16 power sudo[2359854]: pam_unix(sudo:session): session closed for user root
Sep 12 01:45:01 power systemd[2362747]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:45:01 power systemd[2362748]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:50:01 power systemd[2367289]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:50:01 power systemd[2367290]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 01:55:01 power systemd[2371408]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 01:55:01 power systemd[2371409]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:00:01 power systemd[2375454]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 02:00:01 power systemd[2375455]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:00:01 power systemd[2375456]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 02:00:01 power systemd[2375457]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 02:00:01 power systemd[2375459]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 02:05:01 power systemd[2381136]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:06:01 power systemd[2381977]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 02:07:01 power systemd[2382676]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 02:08:04 power sshd[2383560]: error: kex_exchange_identification: banner line contains invalid characters
Sep 12 02:08:04 power sshd[2383560]: banner exchange: Connection from 194.0.234.12 port 64644: invalid format
Sep 12 02:10:01 power systemd[2385534]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:12:01 power systemd[2387181]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 02:15:01 power systemd[2389265]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:20:01 power systemd[2393808]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:25:01 power systemd[2397916]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:30:01 power systemd[2401918]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:30:01 power systemd[2401919]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 02:30:01 power systemd[2401920]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 02:30:01 power systemd[2401921]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 02:35:01 power systemd[2406212]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:36:01 power systemd[2407132]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 02:37:01 power systemd[2407926]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 02:40:01 power systemd[2410290]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:42:01 power systemd[2411991]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 02:42:09 power sudo[2412131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 02:42:09 power sudo[2412131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412131]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 02:42:09 power sudo[2412135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412135]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 02:42:09 power sudo[2412139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412139]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=xNpfRqdGDp'
Sep 12 02:42:09 power sudo[2412144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412144]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 02:42:09 power sudo[2412149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412149]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 02:42:09 power sudo[2412154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412154]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 02:42:09 power sudo[2412159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412159]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 02:42:09 power sudo[2412163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412163]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 02:42:09 power sudo[2412174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412174]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 02:42:09 power sudo[2412179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412179]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 02:42:09 power sudo[2412183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412183]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 02:42:09 power sudo[2412187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412187]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 02:42:09 power sudo[2412191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:09 power sudo[2412191]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:09 power sudo[2412197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 02:42:09 power sudo[2412197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:10 power sudo[2412197]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:11 power sudo[2412231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 02:42:11 power sudo[2412231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:11 power sudo[2412231]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:11 power sudo[2412236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 02:42:11 power sudo[2412236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:11 power sudo[2412236]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:11 power sudo[2412242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pelagini user-2=kaoilmk user-3=biplmk user-4=bbbustou user-5=progress user-6=cleanerm user-7=animatem user-8=atspedco user-9=sssoluti user-10=jaramk user-11=solointe user-12=taktcomm user-13=recorgmk user-14=solarinv user-15=eurofarm user-16=naksorgm user-17=eliksirz user-18=trigemat user-19=electrol user-20=golakkom user-21=mbmehani user-22=workbenc user-23=ismassag user-24=wineberr user-25=viplastc user-26=conserva user-27=euronic3 user-28=cupidpro user-29=vegemk1 user-30=evberasm user-31=bonitavi user-32=bauerin2 user-33=folklore user-34=gradbai1 user-35=aptekafa user-36=madzomk user-37=evacommk user-38=fxxcom user-39=peshkai1 user-40=eaptekam user-41=dimpalne user-42=makdrone user-43=tehnodro user-44=izzomk user-45=jpkomuna user-46=taneccom user-47=tehnologija user-48=darkogor user-49=prizmapl
Sep 12 02:42:11 power sudo[2412242]: wp-toolkit : (command continued) user-50=fnjorgmk user-51=dslmk user-52=bozinovm user-53=vacuacti user-54=innofabl user-55=premiumi user-56=inkigaic user-57=modernar user-58=zdmgpsor user-59=v5srybi9dcdx user-60=supremel user-61=aquatech user-62=gorsajmk user-63=solemor1 user-64=mapaspla user-65=onlinesh user-66=nationa2 user-67=tcieuroc user-68=starluxm user-69=radekrat user-70=fffhpcwr user-71=versusmk user-72=ambitiou user-73=fiziosmk user-74=nucktra1 user-75=lblawcom user-76=mediatag user-77=intelek1 user-78=nikolov1 user-79=hausmark user-80=nikimare user-81=aptekazd user-82=forzares user-83=kardiome user-84=carrent1 user-85=bogdanos user-86=mediasol user-87=apgrupmk user-88=matratze user-89=euronic2 user-90=elektrot user-91=zapovim1 user-92=cosmatob user-93=euromaki user-94=nutrivim user-95=samasped user-96=chemhemc user-97=albuname user-98=glammace user-99=imdskopj user-100=pravekom user-101=vtranseu user-102=infopor1 user-103=bovincom
Sep 12 02:42:11 power sudo[2412242]: wp-toolkit : (command continued) user-104=stojano1 user-105=vezilkac user-106=cabinetm user-107=janiboja user-108=itradeco user-109=custome1 user-110=palenzok user-111=busymard user-112=zvskopje user-113=zampmk user-114=klimimk user-115=stokovna user-116=sparkupm user-117=cetplatf user-118=dalmacom user-119=kouzonco user-120=premiuma user-121=inotekso user-122=jpparkin user-123=drleomk user-124=butelmk user-125=daris user-126=premiums user-127=karpospo user-128=nasaidni user-129=ideaplus user-130=arturaco user-131=screenme user-132=dhamachi user-133=volkanco user-134=goartsym user-135=mfashion user-136=barececo user-137=delcevca user-138=getaldus user-139=simbiome user-140=workandt user-141=rasmorgm user-142=skyapart user-143=bianasho user-144=makoasmk user-145=kujnamon user-146=univerz1 user-147=velmk user-148=gogovan1 user-149=datalink user-150=mpbmk user-151=agrosind user-152=maleshne user-153=datelcom user-154=bizporta user-155=polyeste
Sep 12 02:42:11 power sudo[2412242]: wp-toolkit : (command continued) user-156=vfxnestc user-157=sedcmk user-158=ivanjord user-159=groskome user-160=wikicamp user-161=urbanexp user-162=infobadi user-163=mspmk user-164=spdcompu user-165=detskagr user-166=oouslave user-167=raremk user-168=bauerbg user-169=uhostmk5 user-170=stojnevi user-171=enaspotc user-172=viewinn user-173=trudovop user-174=vmro user-175=cajsproc user-176=hotammk user-177=anitermc user-178=youthgua user-179=caramk user-180=hidrommk user-181=frizered user-182=ekostoc1 user-183=oncolog1 user-184=levantmk user-185=nefrolog user-186=pelagoni user-187=socioloz user-188=avtogumi user-189=evolvepl user-190=seloviro user-191=nolimits user-192=kolened1 user-193=nlpmkorg user-194=centarba user-195=edomcomm user-196=berbermk user-197=dikimk12 user-198=enochmk user-199=herbalpl user-200=sprintst user-201=dnevnoin user-202=tradeyou user-203=gjorgeiv user-204=holiyayt user-205=rastiraz user-206=pecakome user-207=robustco
Sep 12 02:42:11 power sudo[2412242]: wp-toolkit : (command continued) user-208=stravelm user-209=wondersp user-210=dadarmk user-211=proverim user-212=tealmk user-213=gocruise user-214=goodnews user-215=mstmmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 02:42:11 power sudo[2412242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:12 power sudo[2412242]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:12 power sudo[2412252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 02:42:12 power sudo[2412252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:12 power sudo[2412252]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:12 power sudo[2412256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R6dtoFaYYsb0tJsO.~
Sep 12 02:42:12 power sudo[2412256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:12 power sudo[2412256]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:12 power sudo[2412260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R6dtoFaYYsb0tJsO.~\''
Sep 12 02:42:12 power sudo[2412260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:12 power sudo[2412260]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:12 power sudo[2412265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R6dtoFaYYsb0tJsO.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 02:42:12 power sudo[2412265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:12 power sudo[2412265]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:12 power sudo[2412269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 02:42:12 power sudo[2412269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:12 power sudo[2412269]: pam_unix(sudo:session): session closed for user root
Sep 12 02:42:13 power sudo[2413190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 02:42:13 power sudo[2413190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 02:42:13 power sudo[2413190]: pam_unix(sudo:session): session closed for user root
Sep 12 02:45:01 power systemd[2415823]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:50:01 power systemd[2419991]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 02:55:01 power systemd[2424140]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:00:01 power systemd[2428410]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:00:01 power systemd[2428413]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 03:00:01 power systemd[2428414]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 03:00:01 power systemd[2428416]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 03:05:01 power systemd[2432950]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:06:01 power systemd[2433880]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 03:07:01 power systemd[2434697]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 03:10:01 power systemd[2437217]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:12:01 power systemd[2438870]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 03:15:01 power systemd[2441167]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:20:01 power systemd[2445654]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:25:01 power systemd[2449784]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:27:01 power systemd[2451637]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 12 03:30:02 power systemd[2453879]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 03:30:02 power systemd[2453878]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:30:02 power systemd[2453880]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 03:30:02 power systemd[2453882]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 03:35:01 power systemd[2460147]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:36:01 power systemd[2461267]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 03:37:01 power systemd[2461982]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 03:40:01 power systemd[2464726]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:42:01 power systemd[2466492]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 03:42:09 power sudo[2466641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 03:42:09 power sudo[2466641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466641]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 03:42:09 power sudo[2466645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466645]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 03:42:09 power sudo[2466650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466650]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=wCnEiUQQAE'
Sep 12 03:42:09 power sudo[2466654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466654]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 03:42:09 power sudo[2466662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466662]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 03:42:09 power sudo[2466666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466666]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 03:42:09 power sudo[2466670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466670]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 03:42:09 power sudo[2466674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466674]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 03:42:09 power sudo[2466679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466679]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 03:42:09 power sudo[2466686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466686]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 03:42:09 power sudo[2466691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466691]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 03:42:09 power sudo[2466695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466695]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 03:42:09 power sudo[2466700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:09 power sudo[2466700]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:09 power sudo[2466706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 03:42:09 power sudo[2466706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:10 power sudo[2466706]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:11 power sudo[2466743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 03:42:11 power sudo[2466743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:11 power sudo[2466743]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:11 power sudo[2466748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 03:42:11 power sudo[2466748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:11 power sudo[2466748]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:11 power sudo[2466754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tcieuroc user-2=onlinesh user-3=nationa2 user-4=solemor1 user-5=mapaspla user-6=ambitiou user-7=fiziosmk user-8=versusmk user-9=fffhpcwr user-10=radekrat user-11=starluxm user-12=modernar user-13=inkigaic user-14=bozinovm user-15=dslmk user-16=prizmapl user-17=fnjorgmk user-18=darkogor user-19=innofabl user-20=premiumi user-21=vacuacti user-22=taneccom user-23=tehnologija user-24=gorsajmk user-25=aquatech user-26=v5srybi9dcdx user-27=supremel user-28=zdmgpsor user-29=chemhemc user-30=samasped user-31=nutrivim user-32=euromaki user-33=cosmatob user-34=elektrot user-35=zapovim1 user-36=infopor1 user-37=vtranseu user-38=pravekom user-39=imdskopj user-40=glammace user-41=albuname user-42=aptekazd user-43=nikimare user-44=forzares user-45=hausmark user-46=nikolov1 user-47=intelek1 user-48=mediatag
Sep 12 03:42:11 power sudo[2466754]: wp-toolkit : (command continued) user-49=nucktra1 user-50=lblawcom user-51=euronic2 user-52=matratze user-53=mediasol user-54=carrent1 user-55=bogdanos user-56=apgrupmk user-57=kardiome user-58=golakkom user-59=trigemat user-60=eliksirz user-61=naksorgm user-62=electrol user-63=eurofarm user-64=solarinv user-65=wineberr user-66=viplastc user-67=workbenc user-68=ismassag user-69=mbmehani user-70=biplmk user-71=kaoilmk user-72=bbbustou user-73=pelagini user-74=recorgmk user-75=taktcomm user-76=jaramk user-77=solointe user-78=sssoluti user-79=atspedco user-80=progress user-81=animatem user-82=cleanerm user-83=eaptekam user-84=dimpalne user-85=peshkai1 user-86=fxxcom user-87=evacommk user-88=aptekafa user-89=madzomk user-90=gradbai1 user-91=izzomk user-92=jpkomuna user-93=tehnodro user-94=makdrone user-95=bonitavi user-96=evberasm user-97=euronic3 user-98=vegemk1 user-99=cupidpro user-100=conserva user-101=folklore user-102=bauerin2
Sep 12 03:42:11 power sudo[2466754]: wp-toolkit : (command continued) user-103=nefrolog user-104=oncolog1 user-105=ekostoc1 user-106=levantmk user-107=frizered user-108=hidrommk user-109=caramk user-110=evolvepl user-111=socioloz user-112=avtogumi user-113=pelagoni user-114=enaspotc user-115=vmro user-116=trudovop user-117=viewinn user-118=stojnevi user-119=raremk user-120=oouslave user-121=uhostmk5 user-122=bauerbg user-123=youthgua user-124=anitermc user-125=cajsproc user-126=hotammk user-127=pecakome user-128=wondersp user-129=stravelm user-130=robustco user-131=holiyayt user-132=rastiraz user-133=tradeyou user-134=gjorgeiv user-135=dnevnoin user-136=goodnews user-137=mstmmk user-138=gocruise user-139=tealmk user-140=dadarmk user-141=proverim user-142=nlpmkorg user-143=centarba user-144=kolened1 user-145=nolimits user-146=seloviro user-147=dikimk12 user-148=sprintst user-149=enochmk user-150=herbalpl user-151=edomcomm user-152=berbermk user-153=kouzonco user-154=premiuma
Sep 12 03:42:11 power sudo[2466754]: wp-toolkit : (command continued) user-155=cetplatf user-156=dalmacom user-157=ideaplus user-158=nasaidni user-159=karpospo user-160=screenme user-161=arturaco user-162=premiums user-163=butelmk user-164=daris user-165=jpparkin user-166=inotekso user-167=drleomk user-168=janiboja user-169=itradeco user-170=vezilkac user-171=cabinetm user-172=stojano1 user-173=bovincom user-174=sparkupm user-175=stokovna user-176=klimimk user-177=palenzok user-178=busymard user-179=zampmk user-180=zvskopje user-181=custome1 user-182=sedcmk user-183=groskome user-184=ivanjord user-185=vfxnestc user-186=polyeste user-187=bizporta user-188=datelcom user-189=maleshne user-190=spdcompu user-191=detskagr user-192=infobadi user-193=mspmk user-194=wikicamp user-195=urbanexp user-196=bianasho user-197=makoasmk user-198=skyapart user-199=rasmorgm user-200=delcevca user-201=getaldus user-202=simbiome user-203=barececo user-204=workandt user-205=goartsym user-206=volkanco
Sep 12 03:42:11 power sudo[2466754]: wp-toolkit : (command continued) user-207=dhamachi user-208=mfashion user-209=agrosind user-210=mpbmk user-211=datalink user-212=velmk user-213=gogovan1 user-214=kujnamon user-215=univerz1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 03:42:11 power sudo[2466754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:12 power sudo[2466754]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:12 power sudo[2466773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 03:42:12 power sudo[2466773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:12 power sudo[2466773]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:12 power sudo[2466779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iyunz9WXbFx6Gup8.~
Sep 12 03:42:12 power sudo[2466779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:12 power sudo[2466779]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:12 power sudo[2466783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iyunz9WXbFx6Gup8.~\''
Sep 12 03:42:12 power sudo[2466783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:12 power sudo[2466783]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:12 power sudo[2466788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iyunz9WXbFx6Gup8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 03:42:12 power sudo[2466788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:12 power sudo[2466788]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:12 power sudo[2466794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 03:42:12 power sudo[2466794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:12 power sudo[2466794]: pam_unix(sudo:session): session closed for user root
Sep 12 03:42:12 power sudo[2467161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 03:42:12 power sudo[2467161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 03:42:12 power sudo[2467161]: pam_unix(sudo:session): session closed for user root
Sep 12 03:45:02 power systemd[2470244]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:50:01 power systemd[2474624]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 03:55:01 power systemd[2479270]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:00:01 power systemd[2483482]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:00:01 power systemd[2483484]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 04:00:01 power systemd[2483487]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 04:00:01 power systemd[2483488]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 04:05:01 power systemd[2487983]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:06:02 power systemd[2488954]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 04:07:01 power systemd[2489957]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 04:10:01 power systemd[2492482]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:12:01 power systemd[2494134]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 04:15:01 power systemd[2496734]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:20:01 power systemd[2501362]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:25:02 power systemd[2505532]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:29:54 power sshd[2509392]: error: kex_exchange_identification: banner line contains invalid characters
Sep 12 04:29:54 power sshd[2509392]: banner exchange: Connection from 91.231.89.241 port 50741: invalid format
Sep 12 04:29:57 power sshd[2509393]: error: kex_exchange_identification: Connection closed by remote host
Sep 12 04:29:57 power sshd[2509393]: Connection closed by 91.231.89.246 port 59773
Sep 12 04:30:01 power systemd[2509618]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:30:01 power systemd[2509622]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 04:30:01 power systemd[2509621]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 04:30:01 power systemd[2509624]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 04:30:01 power systemd[2509626]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 12 04:35:02 power systemd[2514675]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:36:01 power systemd[2515530]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 04:36:06 power sshd[2515587]: Connection closed by 91.231.89.151 port 60519 [preauth]
Sep 12 04:37:01 power systemd[2516416]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 04:39:26 power sshd[2518374]: error: kex_exchange_identification: banner line contains invalid characters
Sep 12 04:39:26 power sshd[2518374]: banner exchange: Connection from 91.196.152.120 port 50891: invalid format
Sep 12 04:39:32 power sshd[2518429]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
Sep 12 04:39:32 power sshd[2518429]: banner exchange: Connection from 91.196.152.39 port 60407: invalid format
Sep 12 04:40:02 power systemd[2518987]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:42:01 power systemd[2520966]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 04:42:09 power sudo[2521093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 04:42:09 power sudo[2521093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521093]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 04:42:09 power sudo[2521097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521097]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 04:42:09 power sudo[2521101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521101]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=4ovZbePUMN'
Sep 12 04:42:09 power sudo[2521105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521105]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 04:42:09 power sudo[2521110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521110]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 04:42:09 power sudo[2521114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521114]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 04:42:09 power sudo[2521119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521119]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 04:42:09 power sudo[2521123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521123]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 04:42:09 power sudo[2521130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521130]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 04:42:09 power sudo[2521134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521134]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 04:42:09 power sudo[2521138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521138]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 04:42:09 power sudo[2521142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521142]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 04:42:09 power sudo[2521146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:09 power sudo[2521146]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:09 power sudo[2521150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 04:42:09 power sudo[2521150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:10 power sudo[2521150]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:11 power sudo[2521183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 04:42:11 power sudo[2521183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:11 power sudo[2521183]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:11 power sudo[2521188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 04:42:11 power sudo[2521188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:11 power sudo[2521188]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:11 power sudo[2521196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=imdskopj user-2=albuname user-3=glammace user-4=infopor1 user-5=vtranseu user-6=pravekom user-7=cosmatob user-8=euromaki user-9=elektrot user-10=zapovim1 user-11=chemhemc user-12=samasped user-13=nutrivim user-14=apgrupmk user-15=carrent1 user-16=bogdanos user-17=mediasol user-18=kardiome user-19=matratze user-20=euronic2 user-21=mediatag user-22=intelek1 user-23=lblawcom user-24=nucktra1 user-25=forzares user-26=nikimare user-27=aptekazd user-28=nikolov1 user-29=hausmark user-30=fffhpcwr user-31=starluxm user-32=radekrat user-33=fiziosmk user-34=ambitiou user-35=versusmk user-36=nationa2 user-37=onlinesh user-38=mapaspla user-39=solemor1 user-40=tcieuroc user-41=zdmgpsor user-42=aquatech user-43=gorsajmk user-44=supremel user-45=v5srybi9dcdx user-46=vacuacti user-47=innofabl user-48=premiumi
Sep 12 04:42:11 power sudo[2521196]: wp-toolkit : (command continued) user-49=prizmapl user-50=fnjorgmk user-51=darkogor user-52=dslmk user-53=bozinovm user-54=tehnologija user-55=taneccom user-56=modernar user-57=inkigaic user-58=tehnodro user-59=makdrone user-60=jpkomuna user-61=izzomk user-62=aptekafa user-63=madzomk user-64=evacommk user-65=gradbai1 user-66=dimpalne user-67=eaptekam user-68=fxxcom user-69=peshkai1 user-70=folklore user-71=bauerin2 user-72=cupidpro user-73=vegemk1 user-74=euronic3 user-75=conserva user-76=evberasm user-77=bonitavi user-78=ismassag user-79=workbenc user-80=mbmehani user-81=viplastc user-82=wineberr user-83=eurofarm user-84=solarinv user-85=golakkom user-86=electrol user-87=naksorgm user-88=eliksirz user-89=trigemat user-90=sssoluti user-91=atspedco user-92=cleanerm user-93=animatem user-94=progress user-95=recorgmk user-96=taktcomm user-97=solointe user-98=jaramk user-99=pelagini user-100=bbbustou user-101=biplmk user-102=kaoilmk user-103=tealmk
Sep 12 04:42:11 power sudo[2521196]: wp-toolkit : (command continued) user-104=proverim user-105=dadarmk user-106=mstmmk user-107=goodnews user-108=gocruise user-109=tradeyou user-110=gjorgeiv user-111=dnevnoin user-112=stravelm user-113=robustco user-114=wondersp user-115=pecakome user-116=rastiraz user-117=holiyayt user-118=berbermk user-119=edomcomm user-120=herbalpl user-121=enochmk user-122=sprintst user-123=dikimk12 user-124=seloviro user-125=kolened1 user-126=centarba user-127=nlpmkorg user-128=nolimits user-129=avtogumi user-130=socioloz user-131=pelagoni user-132=evolvepl user-133=hidrommk user-134=frizered user-135=caramk user-136=levantmk user-137=ekostoc1 user-138=oncolog1 user-139=nefrolog user-140=hotammk user-141=cajsproc user-142=anitermc user-143=youthgua user-144=stojnevi user-145=bauerbg user-146=uhostmk5 user-147=oouslave user-148=raremk user-149=viewinn user-150=trudovop user-151=vmro user-152=enaspotc user-153=urbanexp user-154=wikicamp user-155=detskagr
Sep 12 04:42:11 power sudo[2521196]: wp-toolkit : (command continued) user-156=spdcompu user-157=mspmk user-158=infobadi user-159=bizporta user-160=maleshne user-161=datelcom user-162=groskome user-163=ivanjord user-164=sedcmk user-165=polyeste user-166=vfxnestc user-167=datalink user-168=kujnamon user-169=univerz1 user-170=velmk user-171=gogovan1 user-172=mpbmk user-173=agrosind user-174=workandt user-175=barececo user-176=getaldus user-177=delcevca user-178=simbiome user-179=mfashion user-180=dhamachi user-181=goartsym user-182=volkanco user-183=skyapart user-184=makoasmk user-185=bianasho user-186=rasmorgm user-187=drleomk user-188=inotekso user-189=jpparkin user-190=arturaco user-191=screenme user-192=nasaidni user-193=karpospo user-194=ideaplus user-195=butelmk user-196=daris user-197=premiums user-198=premiuma user-199=kouzonco user-200=dalmacom user-201=cetplatf user-202=zvskopje user-203=busymard user-204=zampmk user-205=palenzok user-206=custome1 user-207=stokovna
Sep 12 04:42:11 power sudo[2521196]: wp-toolkit : (command continued) user-208=sparkupm user-209=klimimk user-210=stojano1 user-211=bovincom user-212=itradeco user-213=janiboja user-214=cabinetm user-215=vezilkac feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 04:42:11 power sudo[2521196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:12 power sudo[2521196]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:12 power sudo[2521214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 04:42:12 power sudo[2521214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:12 power sudo[2521214]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:12 power sudo[2521220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LecpkzF0u9fxAcWS.~
Sep 12 04:42:12 power sudo[2521220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:12 power sudo[2521220]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:12 power sudo[2521224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LecpkzF0u9fxAcWS.~\''
Sep 12 04:42:12 power sudo[2521224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:12 power sudo[2521224]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:12 power sudo[2521230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LecpkzF0u9fxAcWS.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 04:42:12 power sudo[2521230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:12 power sudo[2521230]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:12 power sudo[2521234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 04:42:12 power sudo[2521234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:12 power sudo[2521234]: pam_unix(sudo:session): session closed for user root
Sep 12 04:42:13 power sudo[2522162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 04:42:13 power sudo[2522162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:42:13 power sudo[2522162]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:08 power sudo[2523557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 04:44:08 power sudo[2523557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:09 power sudo[2523557]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:09 power sudo[2523562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 04:44:09 power sudo[2523562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:09 power sudo[2523562]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:09 power sudo[2523571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 04:44:09 power sudo[2523571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:09 power sudo[2523571]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:09 power sudo[2523576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=fffhpcwr user-2=starluxm user-3=radekrat user-4=fiziosmk user-5=ambitiou user-6=versusmk user-7=nationa2 user-8=onlinesh user-9=mapaspla user-10=solemor1 user-11=tcieuroc user-12=zdmgpsor user-13=aquatech user-14=gorsajmk user-15=supremel user-16=v5srybi9dcdx user-17=vacuacti user-18=premiumi user-19=innofabl user-20=fnjorgmk user-21=darkogor user-22=dslmk user-23=prizmapl user-24=bozinovm user-25=tehnologija user-26=taneccom user-27=modernar user-28=inkigaic user-29=imdskopj user-30=albuname user-31=glammace user-32=infopor1 user-33=vtranseu user-34=pravekom user-35=cosmatob user-36=euromaki user-37=elektrot user-38=zapovim1 user-39=samasped user-40=chemhemc user-41=nutrivim user-42=apgrupmk user-43=carrent1 user-44=bogdanos user-45=mediasol user-46=kardiome user-47=matratze user-48=euronic2
Sep 12 04:44:09 power sudo[2523576]: wp-toolkit : (command continued) user-49=mediatag user-50=intelek1 user-51=lblawcom user-52=nucktra1 user-53=forzares user-54=nikimare user-55=aptekazd user-56=hausmark user-57=nikolov1 user-58=ismassag user-59=workbenc user-60=mbmehani user-61=viplastc user-62=wineberr user-63=eurofarm user-64=solarinv user-65=golakkom user-66=electrol user-67=naksorgm user-68=eliksirz user-69=trigemat user-70=sssoluti user-71=atspedco user-72=cleanerm user-73=animatem user-74=progress user-75=recorgmk user-76=taktcomm user-77=solointe user-78=jaramk user-79=pelagini user-80=bbbustou user-81=biplmk user-82=kaoilmk user-83=tehnodro user-84=makdrone user-85=jpkomuna user-86=izzomk user-87=madzomk user-88=aptekafa user-89=evacommk user-90=gradbai1 user-91=dimpalne user-92=eaptekam user-93=fxxcom user-94=peshkai1 user-95=folklore user-96=bauerin2 user-97=cupidpro user-98=vegemk1 user-99=euronic3 user-100=conserva user-101=evberasm user-102=bonitavi
Sep 12 04:44:09 power sudo[2523576]: wp-toolkit : (command continued) user-103=avtogumi user-104=socioloz user-105=pelagoni user-106=evolvepl user-107=hidrommk user-108=frizered user-109=caramk user-110=oncolog1 user-111=ekostoc1 user-112=levantmk user-113=nefrolog user-114=hotammk user-115=cajsproc user-116=anitermc user-117=youthgua user-118=stojnevi user-119=bauerbg user-120=uhostmk5 user-121=oouslave user-122=raremk user-123=trudovop user-124=viewinn user-125=vmro user-126=enaspotc user-127=tealmk user-128=proverim user-129=dadarmk user-130=mstmmk user-131=goodnews user-132=gocruise user-133=gjorgeiv user-134=tradeyou user-135=dnevnoin user-136=stravelm user-137=robustco user-138=wondersp user-139=pecakome user-140=rastiraz user-141=holiyayt user-142=berbermk user-143=edomcomm user-144=herbalpl user-145=enochmk user-146=sprintst user-147=dikimk12 user-148=seloviro user-149=kolened1 user-150=centarba user-151=nlpmkorg user-152=nolimits user-153=drleomk user-154=inotekso
Sep 12 04:44:09 power sudo[2523576]: wp-toolkit : (command continued) user-155=jpparkin user-156=arturaco user-157=screenme user-158=karpospo user-159=nasaidni user-160=ideaplus user-161=daris user-162=butelmk user-163=premiums user-164=premiuma user-165=kouzonco user-166=dalmacom user-167=cetplatf user-168=busymard user-169=zampmk user-170=zvskopje user-171=palenzok user-172=custome1 user-173=stokovna user-174=sparkupm user-175=klimimk user-176=stojano1 user-177=bovincom user-178=itradeco user-179=janiboja user-180=cabinetm user-181=vezilkac user-182=urbanexp user-183=wikicamp user-184=detskagr user-185=spdcompu user-186=mspmk user-187=infobadi user-188=bizporta user-189=maleshne user-190=datelcom user-191=groskome user-192=ivanjord user-193=sedcmk user-194=polyeste user-195=vfxnestc user-196=datalink user-197=kujnamon user-198=univerz1 user-199=velmk user-200=gogovan1 user-201=mpbmk user-202=agrosind user-203=workandt user-204=barececo user-205=getaldus user-206=delcevca
Sep 12 04:44:09 power sudo[2523576]: wp-toolkit : (command continued) user-207=simbiome user-208=mfashion user-209=dhamachi user-210=volkanco user-211=goartsym user-212=skyapart user-213=makoasmk user-214=bianasho user-215=rasmorgm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 04:44:09 power sudo[2523576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:09 power sudo[2523576]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:09 power sudo[2523583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep 12 04:44:10 power sudo[2523583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:10 power sudo[2523583]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:10 power sudo[2523594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vmro --output=json'
Sep 12 04:44:10 power sudo[2523594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:10 power sudo[2523594]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:12 power sudo[2523676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro /bin/sh -c 'cd /home/vmro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:44:12 power sudo[2523676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:12 power sudo[2523676]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:12 power sudo[2523682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vmro --user-current --json'
Sep 12 04:44:12 power sudo[2523682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:13 power sudo[2523682]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:13 power sudo[2523692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro LangPHP php_get_vhost_versions --output=json'
Sep 12 04:44:13 power sudo[2523692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:13 power sudo[2523692]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:13 power sudo[2523697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php83 --output=json'
Sep 12 04:44:13 power sudo[2523697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:13 power sudo[2523697]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:13 power sudo[2523704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:44:14 power sudo[2523704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:14 power sudo[2523704]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:14 power sudo[2523720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DomainInfo single_domain_data domain=vmro-dpmne.org.mk return_https_redirect_status=1 --output=json'
Sep 12 04:44:14 power sudo[2523720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:14 power sudo[2523720]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:14 power sudo[2523727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_vhost_ssl_components --output=json'
Sep 12 04:44:14 power sudo[2523727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:14 power sudo[2523727]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:14 power sudo[2523732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_ssl_vhosts --output=json'
Sep 12 04:44:14 power sudo[2523732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:14 power sudo[2523732]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:14 power sudo[2523740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro Mime list_redirects --output=json'
Sep 12 04:44:14 power sudo[2523740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:15 power sudo[2523740]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:16 power sudo[2523828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DirectoryPrivacy is_directory_protected dir=/home/vmro/public_html --output=json'
Sep 12 04:44:16 power sudo[2523828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:16 power sudo[2523828]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:20 power sudo[2524043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep 12 04:44:20 power sudo[2524043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:20 power sudo[2524043]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:20 power sudo[2524050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dadarmk --output=json'
Sep 12 04:44:20 power sudo[2524050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:20 power sudo[2524050]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:25 power sudo[2524156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/academy.dadar.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:44:25 power sudo[2524156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:25 power sudo[2524156]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:25 power sudo[2524162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep 12 04:44:25 power sudo[2524162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:25 power sudo[2524162]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:25 power sudo[2524169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk LangPHP php_get_vhost_versions --output=json'
Sep 12 04:44:25 power sudo[2524169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:25 power sudo[2524169]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:25 power sudo[2524174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:44:25 power sudo[2524174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:25 power sudo[2524174]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:26 power sudo[2524192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=academy.dadar.mk return_https_redirect_status=1 --output=json'
Sep 12 04:44:26 power sudo[2524192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:26 power sudo[2524192]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:26 power sudo[2524198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk Mime list_redirects --output=json'
Sep 12 04:44:26 power sudo[2524198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:26 power sudo[2524198]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:28 power sudo[2524282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/academy.dadar.mk --output=json'
Sep 12 04:44:28 power sudo[2524282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:28 power sudo[2524282]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:32 power sudo[2524493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep 12 04:44:32 power sudo[2524493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:32 power sudo[2524493]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:32 power sudo[2524500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=agrosind --output=json'
Sep 12 04:44:32 power sudo[2524500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:32 power sudo[2524500]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:39 power sudo[2524636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:44:39 power sudo[2524636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:39 power sudo[2524636]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:39 power sudo[2524647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user agrosind --user-current --json'
Sep 12 04:44:39 power sudo[2524647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:39 power sudo[2524647]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:39 power sudo[2524653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind LangPHP php_get_vhost_versions --output=json'
Sep 12 04:44:39 power sudo[2524653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:40 power sudo[2524653]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:40 power sudo[2524659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php81 --output=json'
Sep 12 04:44:40 power sudo[2524659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:40 power sudo[2524659]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:40 power sudo[2524678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:44:40 power sudo[2524678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:40 power sudo[2524678]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:41 power sudo[2524697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DomainInfo single_domain_data domain=agrosindikat.mk return_https_redirect_status=1 --output=json'
Sep 12 04:44:41 power sudo[2524697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:41 power sudo[2524697]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:41 power sudo[2524707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind Mime list_redirects --output=json'
Sep 12 04:44:41 power sudo[2524707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:41 power sudo[2524707]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:45 power sudo[2524799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DirectoryPrivacy is_directory_protected dir=/home/agrosind/public_html --output=json'
Sep 12 04:44:45 power sudo[2524799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:45 power sudo[2524799]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:46 power sudo[2524865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:44:46 power sudo[2524865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:46 power sudo[2524865]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:46 power sudo[2524870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:44:46 power sudo[2524870]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:44:46 power sudo[2524870]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:44:46 power sudo[2524870]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:44:46 power sudo[2524870]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:44:46 power sudo[2524870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:46 power sudo[2524870]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:46 power sudo[2524875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:44:46 power sudo[2524875]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:44:46 power sudo[2524875]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:44:46 power sudo[2524875]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:44:46 power sudo[2524875]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:44:46 power sudo[2524875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:46 power sudo[2524875]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:48 power sudo[2524987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:44:48 power sudo[2524987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:48 power sudo[2524987]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:48 power sudo[2524992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:44:48 power sudo[2524992]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:44:48 power sudo[2524992]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:44:48 power sudo[2524992]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:44:48 power sudo[2524992]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:44:48 power sudo[2524992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:48 power sudo[2524992]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:48 power sudo[2524997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:44:48 power sudo[2524997]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:44:48 power sudo[2524997]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:44:48 power sudo[2524997]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:44:48 power sudo[2524997]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:44:48 power sudo[2524997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:48 power sudo[2524997]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:49 power sudo[2525036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep 12 04:44:49 power sudo[2525036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:49 power sudo[2525036]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:49 power sudo[2525041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=fffhpcwr --output=json'
Sep 12 04:44:49 power sudo[2525041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:49 power sudo[2525041]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:54 power sudo[2525169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/al.rsbsp.org.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:44:54 power sudo[2525169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:54 power sudo[2525169]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:54 power sudo[2525177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep 12 04:44:54 power sudo[2525177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:54 power sudo[2525177]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:54 power sudo[2525185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr LangPHP php_get_vhost_versions --output=json'
Sep 12 04:44:54 power sudo[2525185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:54 power sudo[2525185]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:54 power sudo[2525191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:44:54 power sudo[2525191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:54 power sudo[2525191]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:55 power sudo[2525209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=al.rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep 12 04:44:55 power sudo[2525209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:55 power sudo[2525209]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:55 power sudo[2525218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr Mime list_redirects --output=json'
Sep 12 04:44:55 power sudo[2525218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:55 power sudo[2525218]: pam_unix(sudo:session): session closed for user root
Sep 12 04:44:58 power sudo[2525313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/al.rsbsp.org.mk --output=json'
Sep 12 04:44:58 power sudo[2525313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:44:58 power sudo[2525313]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:01 power systemd[2525554]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:45:02 power sudo[2525773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep 12 04:45:02 power sudo[2525773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:03 power sudo[2525773]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:03 power sudo[2525783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ambitiou --output=json'
Sep 12 04:45:03 power sudo[2525783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:03 power sudo[2525783]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:07 power sudo[2525910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/public_html/site && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:45:07 power sudo[2525910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:07 power sudo[2525910]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:07 power sudo[2525916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep 12 04:45:08 power sudo[2525916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:08 power sudo[2525916]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:08 power sudo[2525925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou LangPHP php_get_vhost_versions --output=json'
Sep 12 04:45:08 power sudo[2525925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:08 power sudo[2525925]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:08 power sudo[2525933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep 12 04:45:08 power sudo[2525933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:09 power sudo[2525933]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:09 power sudo[2525977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:45:09 power sudo[2525977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:09 power sudo[2525977]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:09 power sudo[2526003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep 12 04:45:09 power sudo[2526003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:09 power sudo[2526003]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:09 power sudo[2526010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou Mime list_redirects --output=json'
Sep 12 04:45:09 power sudo[2526010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:09 power sudo[2526010]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:13 power sudo[2526100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/public_html/site --output=json'
Sep 12 04:45:13 power sudo[2526100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:13 power sudo[2526100]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:16 power sudo[2526337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep 12 04:45:16 power sudo[2526337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:17 power sudo[2526337]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:17 power sudo[2526343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=animatem --output=json'
Sep 12 04:45:17 power sudo[2526343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:17 power sudo[2526343]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:23 power sudo[2526522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem /bin/sh -c 'cd /home/animatem/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:45:23 power sudo[2526522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:23 power sudo[2526522]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:23 power sudo[2526528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user animatem --user-current --json'
Sep 12 04:45:23 power sudo[2526528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:23 power sudo[2526528]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:23 power sudo[2526537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem LangPHP php_get_vhost_versions --output=json'
Sep 12 04:45:23 power sudo[2526537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:23 power sudo[2526537]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:23 power sudo[2526543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php73 --output=json'
Sep 12 04:45:23 power sudo[2526543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:24 power sudo[2526543]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:24 power sudo[2526552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:45:24 power sudo[2526552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:24 power sudo[2526552]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:24 power sudo[2526568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DomainInfo single_domain_data domain=animate.mk return_https_redirect_status=1 --output=json'
Sep 12 04:45:24 power sudo[2526568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:24 power sudo[2526568]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:24 power sudo[2526574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem Mime list_redirects --output=json'
Sep 12 04:45:24 power sudo[2526574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:24 power sudo[2526574]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:29 power sudo[2526769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DirectoryPrivacy is_directory_protected dir=/home/animatem/public_html --output=json'
Sep 12 04:45:29 power sudo[2526769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:29 power sudo[2526769]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:32 power sudo[2526996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep 12 04:45:32 power sudo[2526996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:32 power sudo[2526996]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:32 power sudo[2527010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=anitermc --output=json'
Sep 12 04:45:32 power sudo[2527010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:32 power sudo[2527010]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:44 power sudo[2527225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc /bin/sh -c 'cd /home/anitermc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:45:44 power sudo[2527225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:44 power sudo[2527225]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:44 power sudo[2527235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user anitermc --user-current --json'
Sep 12 04:45:44 power sudo[2527235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:44 power sudo[2527235]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:44 power sudo[2527240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc LangPHP php_get_vhost_versions --output=json'
Sep 12 04:45:44 power sudo[2527240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:45 power sudo[2527240]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:45 power sudo[2527245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:45:45 power sudo[2527245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:45 power sudo[2527245]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:45 power sudo[2527264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DomainInfo single_domain_data domain=aniterm.com.mk return_https_redirect_status=1 --output=json'
Sep 12 04:45:45 power sudo[2527264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:45 power sudo[2527264]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:45 power sudo[2527270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc Mime list_redirects --output=json'
Sep 12 04:45:45 power sudo[2527270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:45 power sudo[2527270]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:51 power sudo[2527436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DirectoryPrivacy is_directory_protected dir=/home/anitermc/public_html --output=json'
Sep 12 04:45:51 power sudo[2527436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:51 power sudo[2527436]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:55 power sudo[2527642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep 12 04:45:55 power sudo[2527642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:55 power sudo[2527642]: pam_unix(sudo:session): session closed for user root
Sep 12 04:45:55 power sudo[2527649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wineberr --output=json'
Sep 12 04:45:55 power sudo[2527649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:45:55 power sudo[2527649]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:02 power sudo[2527794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/app.wineberry.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:46:02 power sudo[2527794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:02 power sudo[2527794]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:02 power sudo[2527800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep 12 04:46:02 power sudo[2527800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:02 power sudo[2527800]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:02 power sudo[2527810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr LangPHP php_get_vhost_versions --output=json'
Sep 12 04:46:02 power sudo[2527810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:02 power sudo[2527810]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:02 power sudo[2527815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:46:02 power sudo[2527815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:02 power sudo[2527815]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:03 power sudo[2527834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=app.wineberry.mk return_https_redirect_status=1 --output=json'
Sep 12 04:46:03 power sudo[2527834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:03 power sudo[2527834]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:03 power sudo[2527839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr Mime list_redirects --output=json'
Sep 12 04:46:03 power sudo[2527839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:03 power sudo[2527839]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:07 power sudo[2527951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/app.wineberry.mk/bck --output=json'
Sep 12 04:46:07 power sudo[2527951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:07 power sudo[2527951]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:11 power sudo[2528176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep 12 04:46:11 power sudo[2528176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:11 power sudo[2528176]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:11 power sudo[2528183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=aptekazd --output=json'
Sep 12 04:46:11 power sudo[2528183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:11 power sudo[2528183]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:16 power sudo[2528277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:46:16 power sudo[2528277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:16 power sudo[2528277]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:16 power sudo[2528283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user aptekazd --user-current --json'
Sep 12 04:46:16 power sudo[2528283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:17 power sudo[2528283]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:17 power sudo[2528290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd LangPHP php_get_vhost_versions --output=json'
Sep 12 04:46:17 power sudo[2528290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:17 power sudo[2528290]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:17 power sudo[2528305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:46:17 power sudo[2528305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:17 power sudo[2528305]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:17 power sudo[2528329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DomainInfo single_domain_data domain=aptekazdravje.mk return_https_redirect_status=1 --output=json'
Sep 12 04:46:17 power sudo[2528329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:18 power sudo[2528329]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:18 power sudo[2528336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd Mime list_redirects --output=json'
Sep 12 04:46:18 power sudo[2528336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:18 power sudo[2528336]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:21 power sudo[2528436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DirectoryPrivacy is_directory_protected dir=/home/aptekazd/public_html --output=json'
Sep 12 04:46:21 power sudo[2528436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:21 power sudo[2528436]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:22 power sudo[2528496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:46:22 power sudo[2528496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:22 power sudo[2528496]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:22 power sudo[2528501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:46:22 power sudo[2528501]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:46:22 power sudo[2528501]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:46:22 power sudo[2528501]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:46:22 power sudo[2528501]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:46:22 power sudo[2528501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:22 power sudo[2528501]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:22 power sudo[2528506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:46:22 power sudo[2528506]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:46:22 power sudo[2528506]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:46:22 power sudo[2528506]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:46:22 power sudo[2528506]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:46:22 power sudo[2528506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:22 power sudo[2528506]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:24 power sudo[2528610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:46:24 power sudo[2528610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:24 power sudo[2528610]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:24 power sudo[2528615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:46:24 power sudo[2528615]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:46:24 power sudo[2528615]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:46:24 power sudo[2528615]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:46:24 power sudo[2528615]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:46:24 power sudo[2528615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:24 power sudo[2528615]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:24 power sudo[2528620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:46:24 power sudo[2528620]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:46:24 power sudo[2528620]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:46:24 power sudo[2528620]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:46:24 power sudo[2528620]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:46:24 power sudo[2528620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:24 power sudo[2528620]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:25 power sudo[2528661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep 12 04:46:25 power sudo[2528661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:25 power sudo[2528661]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:25 power sudo[2528670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=progress --output=json'
Sep 12 04:46:25 power sudo[2528670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:25 power sudo[2528670]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:30 power sudo[2528831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress /bin/sh -c 'cd /home/progress/artivo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:46:30 power sudo[2528831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:30 power sudo[2528831]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:30 power sudo[2528837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user progress --user-current --json'
Sep 12 04:46:30 power sudo[2528837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:30 power sudo[2528837]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:30 power sudo[2528873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress LangPHP php_get_vhost_versions --output=json'
Sep 12 04:46:30 power sudo[2528873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:30 power sudo[2528873]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:30 power sudo[2528889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:46:30 power sudo[2528889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:30 power sudo[2528889]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:31 power sudo[2528919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DomainInfo single_domain_data domain=artivo.mk return_https_redirect_status=1 --output=json'
Sep 12 04:46:31 power sudo[2528919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:31 power sudo[2528919]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:31 power sudo[2528929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress Mime list_redirects --output=json'
Sep 12 04:46:31 power sudo[2528929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:31 power sudo[2528929]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:34 power sudo[2529020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DirectoryPrivacy is_directory_protected dir=/home/progress/artivo.mk --output=json'
Sep 12 04:46:34 power sudo[2529020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:34 power sudo[2529020]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:38 power sudo[2529229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep 12 04:46:38 power sudo[2529229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:38 power sudo[2529229]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:38 power sudo[2529243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bbbustou --output=json'
Sep 12 04:46:38 power sudo[2529243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:38 power sudo[2529243]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:45 power sudo[2529368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:46:45 power sudo[2529368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:45 power sudo[2529368]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:45 power sudo[2529375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep 12 04:46:45 power sudo[2529375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:45 power sudo[2529375]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:45 power sudo[2529392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou LangPHP php_get_vhost_versions --output=json'
Sep 12 04:46:45 power sudo[2529392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:45 power sudo[2529392]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:45 power sudo[2529397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php84 --output=json'
Sep 12 04:46:45 power sudo[2529397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:46 power sudo[2529397]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:46 power sudo[2529409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:46:46 power sudo[2529409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:46 power sudo[2529409]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:46 power sudo[2529427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=bbbustours.mk return_https_redirect_status=1 --output=json'
Sep 12 04:46:46 power sudo[2529427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:46 power sudo[2529427]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:46 power sudo[2529433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou Mime list_redirects --output=json'
Sep 12 04:46:46 power sudo[2529433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:46 power sudo[2529433]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:50 power sudo[2529536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/public_html --output=json'
Sep 12 04:46:50 power sudo[2529536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:50 power sudo[2529536]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:54 power sudo[2529785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep 12 04:46:54 power sudo[2529785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:54 power sudo[2529785]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:54 power sudo[2529799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nationa2 --output=json'
Sep 12 04:46:54 power sudo[2529799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:54 power sudo[2529799]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:58 power sudo[2529894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 /bin/sh -c 'cd /home/nationa2/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:46:58 power sudo[2529894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:58 power sudo[2529894]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:58 power sudo[2529902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nationa2 --user-current --json'
Sep 12 04:46:58 power sudo[2529902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:58 power sudo[2529902]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:58 power sudo[2529911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 LangPHP php_get_vhost_versions --output=json'
Sep 12 04:46:58 power sudo[2529911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:58 power sudo[2529911]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:58 power sudo[2529917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php74 --output=json'
Sep 12 04:46:58 power sudo[2529917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:59 power sudo[2529917]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:59 power sudo[2529937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:46:59 power sudo[2529937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:59 power sudo[2529937]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:59 power sudo[2529965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DomainInfo single_domain_data domain=beactiveday.mk return_https_redirect_status=1 --output=json'
Sep 12 04:46:59 power sudo[2529965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:59 power sudo[2529965]: pam_unix(sudo:session): session closed for user root
Sep 12 04:46:59 power sudo[2529971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 Mime list_redirects --output=json'
Sep 12 04:46:59 power sudo[2529971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:46:59 power sudo[2529971]: pam_unix(sudo:session): session closed for user root
Sep 12 04:47:01 power sudo[2530061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DirectoryPrivacy is_directory_protected dir=/home/nationa2/public_html --output=json'
Sep 12 04:47:01 power sudo[2530061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:47:02 power sudo[2530061]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:03 power sshd[2531106]: Connection closed by 91.196.152.218 port 58125 [preauth]
Sep 12 04:48:15 power sudo[2531435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep 12 04:48:15 power sudo[2531435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:15 power sudo[2531435]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:15 power sudo[2531444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cetplatf --output=json'
Sep 12 04:48:15 power sudo[2531444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:15 power sudo[2531444]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:19 power sudo[2531545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/beep.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:48:19 power sudo[2531545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:19 power sudo[2531545]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:19 power sudo[2531551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 12 04:48:20 power sudo[2531551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:20 power sudo[2531551]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:20 power sudo[2531558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf LangPHP php_get_vhost_versions --output=json'
Sep 12 04:48:20 power sudo[2531558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:20 power sudo[2531558]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:20 power sudo[2531563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:48:20 power sudo[2531563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:20 power sudo[2531563]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:20 power sudo[2531581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=beep.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 04:48:20 power sudo[2531581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:20 power sudo[2531581]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:20 power sudo[2531588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf Mime list_redirects --output=json'
Sep 12 04:48:20 power sudo[2531588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:21 power sudo[2531588]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:23 power sudo[2531682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/beep.cetplatform.mk --output=json'
Sep 12 04:48:23 power sudo[2531682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:23 power sudo[2531682]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:27 power sudo[2531909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep 12 04:48:27 power sudo[2531909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:27 power sudo[2531909]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:27 power sudo[2531916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bianasho --output=json'
Sep 12 04:48:27 power sudo[2531916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:27 power sudo[2531916]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:35 power sudo[2532064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho /bin/sh -c 'cd /home/bianasho/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:48:35 power sudo[2532064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:35 power sudo[2532064]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:35 power sudo[2532070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bianasho --user-current --json'
Sep 12 04:48:35 power sudo[2532070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:35 power sudo[2532070]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:35 power sudo[2532080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho LangPHP php_get_vhost_versions --output=json'
Sep 12 04:48:35 power sudo[2532080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:36 power sudo[2532080]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:36 power sudo[2532085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:48:36 power sudo[2532085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:36 power sudo[2532085]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:37 power sudo[2532122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DomainInfo single_domain_data domain=bianashoes.mk return_https_redirect_status=1 --output=json'
Sep 12 04:48:37 power sudo[2532122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:37 power sudo[2532122]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:37 power sudo[2532129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho Mime list_redirects --output=json'
Sep 12 04:48:37 power sudo[2532129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:37 power sudo[2532129]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:42 power sudo[2532247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DirectoryPrivacy is_directory_protected dir=/home/bianasho/public_html --output=json'
Sep 12 04:48:42 power sudo[2532247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:42 power sudo[2532247]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:59 power sudo[2532706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep 12 04:48:59 power sudo[2532706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:59 power sudo[2532706]: pam_unix(sudo:session): session closed for user root
Sep 12 04:48:59 power sudo[2532712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=velmk --output=json'
Sep 12 04:48:59 power sudo[2532712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:48:59 power sudo[2532712]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:05 power sudo[2532870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk /bin/sh -c 'cd /home/velmk/blog.vel.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:49:05 power sudo[2532870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:05 power sudo[2532870]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:05 power sudo[2532877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user velmk --user-current --json'
Sep 12 04:49:05 power sudo[2532877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:05 power sudo[2532877]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:05 power sudo[2532885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk LangPHP php_get_vhost_versions --output=json'
Sep 12 04:49:05 power sudo[2532885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:06 power sudo[2532885]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:06 power sudo[2532891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:49:06 power sudo[2532891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:06 power sudo[2532891]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:07 power sudo[2532923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DomainInfo single_domain_data domain=blog.vel.mk return_https_redirect_status=1 --output=json'
Sep 12 04:49:07 power sudo[2532923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:07 power sudo[2532923]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:07 power sudo[2532929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk Mime list_redirects --output=json'
Sep 12 04:49:07 power sudo[2532929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:07 power sudo[2532929]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:10 power sudo[2533061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DirectoryPrivacy is_directory_protected dir=/home/velmk/blog.vel.mk --output=json'
Sep 12 04:49:10 power sudo[2533061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:10 power sudo[2533061]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:14 power sudo[2533266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep 12 04:49:14 power sudo[2533266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:14 power sudo[2533266]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:14 power sudo[2533272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enaspotc --output=json'
Sep 12 04:49:14 power sudo[2533272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:14 power sudo[2533272]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:17 power sudo[2533338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/boiling.pt && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:49:17 power sudo[2533338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:17 power sudo[2533338]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:17 power sudo[2533345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep 12 04:49:17 power sudo[2533345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:17 power sudo[2533345]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:17 power sudo[2533351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc LangPHP php_get_vhost_versions --output=json'
Sep 12 04:49:17 power sudo[2533351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:18 power sudo[2533351]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:18 power sudo[2533360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:49:18 power sudo[2533360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:18 power sudo[2533360]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:18 power sudo[2533379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=boiling.pt return_https_redirect_status=1 --output=json'
Sep 12 04:49:18 power sudo[2533379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:18 power sudo[2533379]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:18 power sudo[2533387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc Mime list_redirects --output=json'
Sep 12 04:49:18 power sudo[2533387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:18 power sudo[2533387]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:20 power sudo[2533462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/boiling.pt --output=json'
Sep 12 04:49:20 power sudo[2533462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:20 power sudo[2533462]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:24 power sudo[2533671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep 12 04:49:24 power sudo[2533671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:24 power sudo[2533671]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:24 power sudo[2533677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bonitavi --output=json'
Sep 12 04:49:24 power sudo[2533677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:24 power sudo[2533677]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:28 power sudo[2533752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi /bin/sh -c 'cd /home/bonitavi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:49:28 power sudo[2533752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:28 power sudo[2533752]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:28 power sudo[2533758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bonitavi --user-current --json'
Sep 12 04:49:28 power sudo[2533758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:29 power sudo[2533758]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:29 power sudo[2533767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi LangPHP php_get_vhost_versions --output=json'
Sep 12 04:49:29 power sudo[2533767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:29 power sudo[2533767]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:29 power sudo[2533773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:49:29 power sudo[2533773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:29 power sudo[2533773]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:29 power sudo[2533789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DomainInfo single_domain_data domain=bonita-vita.com return_https_redirect_status=1 --output=json'
Sep 12 04:49:29 power sudo[2533789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:29 power sudo[2533789]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:29 power sudo[2533801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi Mime list_redirects --output=json'
Sep 12 04:49:29 power sudo[2533801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:29 power sudo[2533801]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:32 power sudo[2533900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DirectoryPrivacy is_directory_protected dir=/home/bonitavi/public_html --output=json'
Sep 12 04:49:32 power sudo[2533900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:32 power sudo[2533900]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:35 power sudo[2534102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep 12 04:49:35 power sudo[2534102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:35 power sudo[2534102]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:35 power sudo[2534107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bovincom --output=json'
Sep 12 04:49:35 power sudo[2534107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:35 power sudo[2534107]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:43 power sudo[2534249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom /bin/sh -c 'cd /home/bovincom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:49:43 power sudo[2534249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:43 power sudo[2534249]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:43 power sudo[2534255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bovincom --user-current --json'
Sep 12 04:49:43 power sudo[2534255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:43 power sudo[2534255]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:43 power sudo[2534265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom LangPHP php_get_vhost_versions --output=json'
Sep 12 04:49:43 power sudo[2534265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:44 power sudo[2534265]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:44 power sudo[2534273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:49:44 power sudo[2534273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:44 power sudo[2534273]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:45 power sudo[2534293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DomainInfo single_domain_data domain=bovin.com.mk return_https_redirect_status=1 --output=json'
Sep 12 04:49:45 power sudo[2534293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:45 power sudo[2534293]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:45 power sudo[2534302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom Mime list_redirects --output=json'
Sep 12 04:49:45 power sudo[2534302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:45 power sudo[2534302]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:49 power sudo[2534401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DirectoryPrivacy is_directory_protected dir=/home/bovincom/public_html --output=json'
Sep 12 04:49:49 power sudo[2534401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:49 power sudo[2534401]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:53 power sudo[2534606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep 12 04:49:53 power sudo[2534606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:54 power sudo[2534606]: pam_unix(sudo:session): session closed for user root
Sep 12 04:49:54 power sudo[2534617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=butelmk --output=json'
Sep 12 04:49:54 power sudo[2534617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:49:54 power sudo[2534617]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:01 power systemd[2534911]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:50:06 power sudo[2535050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk /bin/sh -c 'cd /home/butelmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:50:06 power sudo[2535050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:06 power sudo[2535050]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:06 power sudo[2535060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user butelmk --user-current --json'
Sep 12 04:50:06 power sudo[2535060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:07 power sudo[2535060]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:07 power sudo[2535069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk LangPHP php_get_vhost_versions --output=json'
Sep 12 04:50:07 power sudo[2535069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:07 power sudo[2535069]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:07 power sudo[2535074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 12 04:50:07 power sudo[2535074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:07 power sudo[2535074]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:07 power sudo[2535080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=alt-php73 --output=json'
Sep 12 04:50:07 power sudo[2535080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:07 power sudo[2535080]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:07 power sudo[2535087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:50:07 power sudo[2535087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:07 power sudo[2535087]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:08 power sudo[2535107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DomainInfo single_domain_data domain=butel.mk return_https_redirect_status=1 --output=json'
Sep 12 04:50:08 power sudo[2535107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:08 power sudo[2535107]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:08 power sudo[2535114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk Mime list_redirects --output=json'
Sep 12 04:50:08 power sudo[2535114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:08 power sudo[2535114]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:15 power sudo[2535317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DirectoryPrivacy is_directory_protected dir=/home/butelmk/public_html --output=json'
Sep 12 04:50:15 power sudo[2535317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:15 power sudo[2535317]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:20 power sudo[2535602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep 12 04:50:20 power sudo[2535602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:20 power sudo[2535602]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:20 power sudo[2535608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=izzomk --output=json'
Sep 12 04:50:20 power sudo[2535608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:20 power sudo[2535608]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:27 power sudo[2535736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/caffeizzo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:50:27 power sudo[2535736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:28 power sudo[2535736]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:28 power sudo[2535742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep 12 04:50:28 power sudo[2535742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:28 power sudo[2535742]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:28 power sudo[2535751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk LangPHP php_get_vhost_versions --output=json'
Sep 12 04:50:28 power sudo[2535751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:28 power sudo[2535751]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:28 power sudo[2535756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:50:28 power sudo[2535756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:28 power sudo[2535756]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:29 power sudo[2535776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=caffeizzo.mk return_https_redirect_status=1 --output=json'
Sep 12 04:50:29 power sudo[2535776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:29 power sudo[2535776]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:29 power sudo[2535781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk Mime list_redirects --output=json'
Sep 12 04:50:29 power sudo[2535781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:29 power sudo[2535781]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:34 power sudo[2535914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/caffeizzo.mk --output=json'
Sep 12 04:50:34 power sudo[2535914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:34 power sudo[2535914]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:42 power sudo[2536208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/cateye.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:50:42 power sudo[2536208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:42 power sudo[2536208]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:42 power sudo[2536214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 12 04:50:42 power sudo[2536214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:42 power sudo[2536214]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:42 power sudo[2536223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:50:42 power sudo[2536223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:42 power sudo[2536223]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:42 power sudo[2536236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cateye.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 04:50:42 power sudo[2536236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:42 power sudo[2536236]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:45 power sudo[2536328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/cateye.cetplatform.mk --output=json'
Sep 12 04:50:45 power sudo[2536328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:45 power sudo[2536328]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:54 power sudo[2536638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:50:54 power sudo[2536638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:54 power sudo[2536638]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:54 power sudo[2536644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 12 04:50:54 power sudo[2536644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:54 power sudo[2536644]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:54 power sudo[2536655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:50:54 power sudo[2536655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:54 power sudo[2536655]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:55 power sudo[2536715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 04:50:55 power sudo[2536715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:55 power sudo[2536715]: pam_unix(sudo:session): session closed for user root
Sep 12 04:50:59 power sudo[2536820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/public_html --output=json'
Sep 12 04:50:59 power sudo[2536820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:50:59 power sudo[2536820]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:03 power sudo[2537026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep 12 04:51:03 power sudo[2537026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:03 power sudo[2537026]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:03 power sudo[2537037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=chemhemc --output=json'
Sep 12 04:51:03 power sudo[2537037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:03 power sudo[2537037]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:07 power sudo[2537146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:51:07 power sudo[2537146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:07 power sudo[2537146]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:07 power sudo[2537156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep 12 04:51:07 power sudo[2537156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:07 power sudo[2537156]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:07 power sudo[2537162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc LangPHP php_get_vhost_versions --output=json'
Sep 12 04:51:07 power sudo[2537162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:07 power sudo[2537162]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:07 power sudo[2537168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:51:07 power sudo[2537168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:07 power sudo[2537168]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:08 power sudo[2537186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=chemhem.com return_https_redirect_status=1 --output=json'
Sep 12 04:51:08 power sudo[2537186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:08 power sudo[2537186]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:08 power sudo[2537196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc Mime list_redirects --output=json'
Sep 12 04:51:08 power sudo[2537196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:08 power sudo[2537196]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:10 power sudo[2537295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/public_html --output=json'
Sep 12 04:51:10 power sudo[2537295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:10 power sudo[2537295]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:12 power sudo[2537364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:12 power sudo[2537364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:12 power sudo[2537364]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:12 power sudo[2537369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:51:12 power sudo[2537369]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:51:12 power sudo[2537369]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:51:12 power sudo[2537369]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:51:12 power sudo[2537369]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:12 power sudo[2537369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:12 power sudo[2537369]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:12 power sudo[2537374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:51:12 power sudo[2537374]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:51:12 power sudo[2537374]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:51:12 power sudo[2537374]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:51:12 power sudo[2537374]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:12 power sudo[2537374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:12 power sudo[2537374]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:14 power sudo[2537491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:14 power sudo[2537491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:14 power sudo[2537491]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:14 power sudo[2537496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:51:14 power sudo[2537496]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:51:14 power sudo[2537496]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:51:14 power sudo[2537496]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:51:14 power sudo[2537496]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:14 power sudo[2537496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:14 power sudo[2537496]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:14 power sudo[2537502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:51:14 power sudo[2537502]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:51:14 power sudo[2537502]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:51:14 power sudo[2537502]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:51:14 power sudo[2537502]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:14 power sudo[2537502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:14 power sudo[2537502]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:14 power sudo[2537547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep 12 04:51:14 power sudo[2537547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:15 power sudo[2537547]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:15 power sudo[2537559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cosmatob --output=json'
Sep 12 04:51:15 power sudo[2537559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:15 power sudo[2537559]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:21 power sudo[2537673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob /bin/sh -c 'cd /home/cosmatob/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:51:21 power sudo[2537673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:21 power sudo[2537673]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:21 power sudo[2537680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cosmatob --user-current --json'
Sep 12 04:51:21 power sudo[2537680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:22 power sudo[2537680]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:22 power sudo[2537689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob LangPHP php_get_vhost_versions --output=json'
Sep 12 04:51:22 power sudo[2537689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:22 power sudo[2537689]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:22 power sudo[2537697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:51:22 power sudo[2537697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:22 power sudo[2537697]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:23 power sudo[2537721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DomainInfo single_domain_data domain=cosmatobacco.mk return_https_redirect_status=1 --output=json'
Sep 12 04:51:23 power sudo[2537721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:23 power sudo[2537721]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:23 power sudo[2537727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob Mime list_redirects --output=json'
Sep 12 04:51:23 power sudo[2537727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:23 power sudo[2537727]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:27 power sudo[2537821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DirectoryPrivacy is_directory_protected dir=/home/cosmatob/public_html --output=json'
Sep 12 04:51:27 power sudo[2537821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:27 power sudo[2537821]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:35 power sudo[2538250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:51:35 power sudo[2538250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:35 power sudo[2538250]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:35 power sudo[2538256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep 12 04:51:35 power sudo[2538256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:35 power sudo[2538256]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:35 power sudo[2538267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:51:35 power sudo[2538267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:35 power sudo[2538267]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:35 power sudo[2538281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=dadar.mk return_https_redirect_status=1 --output=json'
Sep 12 04:51:35 power sudo[2538281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:35 power sudo[2538281]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:37 power sudo[2538370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/public_html --output=json'
Sep 12 04:51:37 power sudo[2538370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:37 power sudo[2538370]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:41 power sudo[2538571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep 12 04:51:41 power sudo[2538571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:41 power sudo[2538571]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:41 power sudo[2538578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=delcevca --output=json'
Sep 12 04:51:41 power sudo[2538578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:41 power sudo[2538578]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:47 power sudo[2538668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:51:47 power sudo[2538668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:47 power sudo[2538668]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:47 power sudo[2538683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user delcevca --user-current --json'
Sep 12 04:51:47 power sudo[2538683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:47 power sudo[2538683]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:47 power sudo[2538693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca LangPHP php_get_vhost_versions --output=json'
Sep 12 04:51:47 power sudo[2538693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:47 power sudo[2538693]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:47 power sudo[2538700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:51:47 power sudo[2538700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:47 power sudo[2538700]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:48 power sudo[2538718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DomainInfo single_domain_data domain=delcevcani.mk return_https_redirect_status=1 --output=json'
Sep 12 04:51:48 power sudo[2538718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:48 power sudo[2538718]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:48 power sudo[2538724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca Mime list_redirects --output=json'
Sep 12 04:51:48 power sudo[2538724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:48 power sudo[2538724]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:51 power sudo[2538843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DirectoryPrivacy is_directory_protected dir=/home/delcevca/public_html --output=json'
Sep 12 04:51:51 power sudo[2538843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:51 power sudo[2538843]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:52 power sudo[2538903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:52 power sudo[2538903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:52 power sudo[2538903]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:52 power sudo[2538908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:51:52 power sudo[2538908]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:51:52 power sudo[2538908]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:51:52 power sudo[2538908]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:51:52 power sudo[2538908]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:52 power sudo[2538908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:52 power sudo[2538908]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:52 power sudo[2538913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:51:52 power sudo[2538913]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:51:52 power sudo[2538913]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:51:52 power sudo[2538913]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:51:52 power sudo[2538913]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:52 power sudo[2538913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:52 power sudo[2538913]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:52 power sudo[2538919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:51:52 power sudo[2538919]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:51:52 power sudo[2538919]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:51:52 power sudo[2538919]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:51:52 power sudo[2538919]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:52 power sudo[2538919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:52 power sudo[2538919]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:54 power sudo[2539028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:54 power sudo[2539028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:54 power sudo[2539028]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:54 power sudo[2539033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:51:54 power sudo[2539033]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:51:54 power sudo[2539033]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:51:54 power sudo[2539033]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:51:54 power sudo[2539033]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:54 power sudo[2539033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:54 power sudo[2539033]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:54 power sudo[2539038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:51:54 power sudo[2539038]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:51:54 power sudo[2539038]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:51:54 power sudo[2539038]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:51:54 power sudo[2539038]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:54 power sudo[2539038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:54 power sudo[2539038]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:54 power sudo[2539045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:51:54 power sudo[2539045]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:51:54 power sudo[2539045]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:51:54 power sudo[2539045]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:51:54 power sudo[2539045]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:51:54 power sudo[2539045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:54 power sudo[2539045]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:55 power sudo[2539088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep 12 04:51:55 power sudo[2539088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:55 power sudo[2539088]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:55 power sudo[2539121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=edomcomm --output=json'
Sep 12 04:51:55 power sudo[2539121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:55 power sudo[2539121]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:58 power sudo[2539234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:51:58 power sudo[2539234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:59 power sudo[2539234]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:59 power sudo[2539243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user edomcomm --user-current --json'
Sep 12 04:51:59 power sudo[2539243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:59 power sudo[2539243]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:59 power sudo[2539260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm LangPHP php_get_vhost_versions --output=json'
Sep 12 04:51:59 power sudo[2539260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:59 power sudo[2539260]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:59 power sudo[2539265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:51:59 power sudo[2539265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:59 power sudo[2539265]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:59 power sudo[2539283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=deosol.mk return_https_redirect_status=1 --output=json'
Sep 12 04:51:59 power sudo[2539283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:51:59 power sudo[2539283]: pam_unix(sudo:session): session closed for user root
Sep 12 04:51:59 power sudo[2539293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm Mime list_redirects --output=json'
Sep 12 04:51:59 power sudo[2539293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:00 power sudo[2539293]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:02 power sudo[2539399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/w --output=json'
Sep 12 04:52:02 power sudo[2539399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:02 power sudo[2539399]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:09 power sudo[2539753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/ekobalans.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:52:09 power sudo[2539753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:09 power sudo[2539753]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:09 power sudo[2539762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 12 04:52:09 power sudo[2539762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:09 power sudo[2539762]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:09 power sudo[2539772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:52:09 power sudo[2539772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:09 power sudo[2539772]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:09 power sudo[2539790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=ekobalans.mk return_https_redirect_status=1 --output=json'
Sep 12 04:52:09 power sudo[2539790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:10 power sudo[2539790]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:12 power sudo[2539927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/ekobalans.mk --output=json'
Sep 12 04:52:12 power sudo[2539927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:12 power sudo[2539927]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:19 power sudo[2540320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/moetodete.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:52:19 power sudo[2540320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:19 power sudo[2540320]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:19 power sudo[2540329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 12 04:52:19 power sudo[2540329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:19 power sudo[2540329]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:19 power sudo[2540338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:52:19 power sudo[2540338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:19 power sudo[2540338]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:20 power sudo[2540424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=moetodete.mk return_https_redirect_status=1 --output=json'
Sep 12 04:52:20 power sudo[2540424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:20 power sudo[2540424]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:23 power sudo[2540659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/moetodete.mk --output=json'
Sep 12 04:52:23 power sudo[2540659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:23 power sudo[2540659]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:26 power sudo[2540894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep 12 04:52:26 power sudo[2540894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:27 power sudo[2540894]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:27 power sudo[2540901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=detskagr --output=json'
Sep 12 04:52:27 power sudo[2540901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:27 power sudo[2540901]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:34 power sudo[2541045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:52:34 power sudo[2541045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:34 power sudo[2541045]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:34 power sudo[2541051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user detskagr --user-current --json'
Sep 12 04:52:34 power sudo[2541051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:34 power sudo[2541051]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:34 power sudo[2541059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr LangPHP php_get_vhost_versions --output=json'
Sep 12 04:52:34 power sudo[2541059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:34 power sudo[2541059]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:34 power sudo[2541065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:52:34 power sudo[2541065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:34 power sudo[2541065]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:34 power sudo[2541079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DomainInfo single_domain_data domain=detskagradinka-prolet.mk return_https_redirect_status=1 --output=json'
Sep 12 04:52:34 power sudo[2541079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:35 power sudo[2541079]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:35 power sudo[2541085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr Mime list_redirects --output=json'
Sep 12 04:52:35 power sudo[2541085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:35 power sudo[2541085]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:38 power sudo[2541181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DirectoryPrivacy is_directory_protected dir=/home/detskagr/public_html/wordpress --output=json'
Sep 12 04:52:38 power sudo[2541181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:38 power sudo[2541181]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:39 power sudo[2541241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:52:39 power sudo[2541241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:39 power sudo[2541241]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:39 power sudo[2541246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 12 04:52:39 power sudo[2541246]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 12 04:52:39 power sudo[2541246]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 12 04:52:39 power sudo[2541246]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 12 04:52:39 power sudo[2541246]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:52:39 power sudo[2541246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:39 power sudo[2541246]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:39 power sudo[2541251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 12 04:52:39 power sudo[2541251]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 12 04:52:39 power sudo[2541251]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 12 04:52:39 power sudo[2541251]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 12 04:52:39 power sudo[2541251]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:52:39 power sudo[2541251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:39 power sudo[2541251]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:39 power sudo[2541256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep 12 04:52:39 power sudo[2541256]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep 12 04:52:39 power sudo[2541256]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep 12 04:52:39 power sudo[2541256]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep 12 04:52:39 power sudo[2541256]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:52:39 power sudo[2541256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:39 power sudo[2541256]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:41 power sudo[2541368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:52:41 power sudo[2541368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:41 power sudo[2541368]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:41 power sudo[2541373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 12 04:52:41 power sudo[2541373]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 12 04:52:41 power sudo[2541373]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 12 04:52:41 power sudo[2541373]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 12 04:52:41 power sudo[2541373]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:52:41 power sudo[2541373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:41 power sudo[2541373]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:41 power sudo[2541378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 12 04:52:41 power sudo[2541378]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 12 04:52:41 power sudo[2541378]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 12 04:52:41 power sudo[2541378]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 12 04:52:41 power sudo[2541378]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:52:41 power sudo[2541378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:41 power sudo[2541378]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:41 power sudo[2541383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep 12 04:52:41 power sudo[2541383]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep 12 04:52:41 power sudo[2541383]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep 12 04:52:41 power sudo[2541383]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep 12 04:52:41 power sudo[2541383]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:52:41 power sudo[2541383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:41 power sudo[2541383]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:42 power sudo[2541423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep 12 04:52:42 power sudo[2541423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:42 power sudo[2541423]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:42 power sudo[2541428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eaptekam --output=json'
Sep 12 04:52:42 power sudo[2541428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:42 power sudo[2541428]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:48 power sudo[2541541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam /bin/sh -c 'cd /home/eaptekam/dev.eapteka.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:52:48 power sudo[2541541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:49 power sudo[2541541]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:49 power sudo[2541547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eaptekam --user-current --json'
Sep 12 04:52:49 power sudo[2541547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:49 power sudo[2541547]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:49 power sudo[2541558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam LangPHP php_get_vhost_versions --output=json'
Sep 12 04:52:49 power sudo[2541558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:49 power sudo[2541558]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:49 power sudo[2541565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:52:49 power sudo[2541565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:49 power sudo[2541565]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:50 power sudo[2541581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DomainInfo single_domain_data domain=dev.eapteka.mk return_https_redirect_status=1 --output=json'
Sep 12 04:52:50 power sudo[2541581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:50 power sudo[2541581]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:50 power sudo[2541588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam Mime list_redirects --output=json'
Sep 12 04:52:50 power sudo[2541588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:50 power sudo[2541588]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:53 power sudo[2541692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DirectoryPrivacy is_directory_protected dir=/home/eaptekam/dev.eapteka.mk --output=json'
Sep 12 04:52:53 power sudo[2541692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:53 power sudo[2541692]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:57 power sudo[2541939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep 12 04:52:57 power sudo[2541939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:57 power sudo[2541939]: pam_unix(sudo:session): session closed for user root
Sep 12 04:52:57 power sudo[2541949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dimpalne --output=json'
Sep 12 04:52:57 power sudo[2541949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:52:57 power sudo[2541949]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:01 power sudo[2542059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne /bin/sh -c 'cd /home/dimpalne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:53:01 power sudo[2542059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:02 power sudo[2542059]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:02 power sudo[2542065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dimpalne --user-current --json'
Sep 12 04:53:02 power sudo[2542065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:02 power sudo[2542065]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:02 power sudo[2542074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne LangPHP php_get_vhost_versions --output=json'
Sep 12 04:53:02 power sudo[2542074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:02 power sudo[2542074]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:02 power sudo[2542080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:53:02 power sudo[2542080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:02 power sudo[2542080]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:02 power sudo[2542095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DomainInfo single_domain_data domain=dimpal.net return_https_redirect_status=1 --output=json'
Sep 12 04:53:02 power sudo[2542095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:02 power sudo[2542095]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:02 power sudo[2542102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne Mime list_redirects --output=json'
Sep 12 04:53:02 power sudo[2542102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:03 power sudo[2542102]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:05 power sudo[2542212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DirectoryPrivacy is_directory_protected dir=/home/dimpalne/public_html --output=json'
Sep 12 04:53:05 power sudo[2542212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:05 power sudo[2542212]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:11 power sudo[2542467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=dreamholidays.bbbustours.mk return_https_redirect_status=1 --output=json'
Sep 12 04:53:11 power sudo[2542467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:11 power sudo[2542467]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:14 power sudo[2542521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/dreamholidays.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:53:14 power sudo[2542521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:14 power sudo[2542521]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:14 power sudo[2542530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep 12 04:53:14 power sudo[2542530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:14 power sudo[2542530]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:14 power sudo[2542536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:53:14 power sudo[2542536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:14 power sudo[2542536]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:17 power sudo[2542651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/dreamholidays.mk --output=json'
Sep 12 04:53:17 power sudo[2542651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:17 power sudo[2542651]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:39 power sudo[2543140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep 12 04:53:39 power sudo[2543140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:40 power sudo[2543140]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:40 power sudo[2543146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=drleomk --output=json'
Sep 12 04:53:40 power sudo[2543146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:40 power sudo[2543146]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:44 power sudo[2543236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk /bin/sh -c 'cd /home/drleomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:53:44 power sudo[2543236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:44 power sudo[2543236]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:44 power sudo[2543243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user drleomk --user-current --json'
Sep 12 04:53:44 power sudo[2543243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:44 power sudo[2543243]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:44 power sudo[2543251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk LangPHP php_get_vhost_versions --output=json'
Sep 12 04:53:44 power sudo[2543251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:45 power sudo[2543251]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:45 power sudo[2543257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:53:45 power sudo[2543257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:45 power sudo[2543257]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:45 power sudo[2543282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DomainInfo single_domain_data domain=drleo.mk return_https_redirect_status=1 --output=json'
Sep 12 04:53:45 power sudo[2543282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:45 power sudo[2543282]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:45 power sudo[2543289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk Mime list_redirects --output=json'
Sep 12 04:53:45 power sudo[2543289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:45 power sudo[2543289]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:48 power sudo[2543372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DirectoryPrivacy is_directory_protected dir=/home/drleomk/public_html --output=json'
Sep 12 04:53:48 power sudo[2543372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:48 power sudo[2543372]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:52 power sudo[2543565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep 12 04:53:52 power sudo[2543565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:52 power sudo[2543565]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:52 power sudo[2543574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=goodnews --output=json'
Sep 12 04:53:52 power sudo[2543574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:52 power sudo[2543574]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:56 power sudo[2543656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:53:56 power sudo[2543656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:56 power sudo[2543656]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:56 power sudo[2543663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 12 04:53:56 power sudo[2543663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:57 power sudo[2543663]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:57 power sudo[2543672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews LangPHP php_get_vhost_versions --output=json'
Sep 12 04:53:57 power sudo[2543672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:57 power sudo[2543672]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:57 power sudo[2543683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:53:57 power sudo[2543683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:57 power sudo[2543683]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:57 power sudo[2543738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=elan.mk return_https_redirect_status=1 --output=json'
Sep 12 04:53:57 power sudo[2543738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:57 power sudo[2543738]: pam_unix(sudo:session): session closed for user root
Sep 12 04:53:57 power sudo[2543744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews Mime list_redirects --output=json'
Sep 12 04:53:57 power sudo[2543744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:53:57 power sudo[2543744]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:00 power sudo[2543827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/elan.mk --output=json'
Sep 12 04:54:00 power sudo[2543827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:00 power sudo[2543827]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:01 power sudo[2543885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:01 power sudo[2543885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:01 power sudo[2543885]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:01 power sudo[2543890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 04:54:01 power sudo[2543890]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 04:54:01 power sudo[2543890]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 04:54:01 power sudo[2543890]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 04:54:01 power sudo[2543890]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:01 power sudo[2543890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:01 power sudo[2543890]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:01 power sudo[2543895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 04:54:01 power sudo[2543895]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 04:54:01 power sudo[2543895]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 04:54:01 power sudo[2543895]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 04:54:01 power sudo[2543895]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:01 power sudo[2543895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:01 power sudo[2543895]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:02 power sudo[2543988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:02 power sudo[2543988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:02 power sudo[2543988]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:02 power sudo[2543993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 04:54:02 power sudo[2543993]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 04:54:02 power sudo[2543993]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 04:54:02 power sudo[2543993]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 04:54:02 power sudo[2543993]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:02 power sudo[2543993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:02 power sudo[2543993]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:02 power sudo[2543998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 04:54:02 power sudo[2543998]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 04:54:02 power sudo[2543998]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 04:54:02 power sudo[2543998]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 04:54:02 power sudo[2543998]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:02 power sudo[2543998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:02 power sudo[2543998]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:03 power sudo[2544029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep 12 04:54:03 power sudo[2544029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:03 power sudo[2544029]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:03 power sudo[2544034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=electrol --output=json'
Sep 12 04:54:03 power sudo[2544034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:03 power sudo[2544034]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:09 power sudo[2544132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol /bin/sh -c 'cd /home/electrol/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:54:09 power sudo[2544132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:09 power sudo[2544132]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:09 power sudo[2544139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user electrol --user-current --json'
Sep 12 04:54:09 power sudo[2544139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:09 power sudo[2544139]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:09 power sudo[2544145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol LangPHP php_get_vhost_versions --output=json'
Sep 12 04:54:09 power sudo[2544145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:09 power sudo[2544145]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:09 power sudo[2544153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:54:09 power sudo[2544153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:09 power sudo[2544153]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:11 power sudo[2544187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DomainInfo single_domain_data domain=electrolight.mk return_https_redirect_status=1 --output=json'
Sep 12 04:54:11 power sudo[2544187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:11 power sudo[2544187]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:11 power sudo[2544198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol Mime list_redirects --output=json'
Sep 12 04:54:11 power sudo[2544198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:11 power sudo[2544198]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:15 power sudo[2544295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DirectoryPrivacy is_directory_protected dir=/home/electrol/public_html --output=json'
Sep 12 04:54:15 power sudo[2544295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:15 power sudo[2544295]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:22 power sudo[2544535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep 12 04:54:22 power sudo[2544535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:22 power sudo[2544535]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:22 power sudo[2544542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=elektrot --output=json'
Sep 12 04:54:22 power sudo[2544542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:22 power sudo[2544542]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:24 power sudo[2544595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot /bin/sh -c 'cd /home/elektrot/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:54:24 power sudo[2544595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:24 power sudo[2544595]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:24 power sudo[2544603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user elektrot --user-current --json'
Sep 12 04:54:24 power sudo[2544603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:25 power sudo[2544603]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:25 power sudo[2544611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot LangPHP php_get_vhost_versions --output=json'
Sep 12 04:54:25 power sudo[2544611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:25 power sudo[2544611]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:25 power sudo[2544616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:54:25 power sudo[2544616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:25 power sudo[2544616]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:25 power sudo[2544633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DomainInfo single_domain_data domain=elektrotehnika-inzinering.mk return_https_redirect_status=1 --output=json'
Sep 12 04:54:25 power sudo[2544633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:25 power sudo[2544633]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:25 power sudo[2544640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot Mime list_redirects --output=json'
Sep 12 04:54:25 power sudo[2544640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:25 power sudo[2544640]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:27 power sudo[2544708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy is_directory_protected dir=/home/elektrot/public_html/wp --output=json'
Sep 12 04:54:27 power sudo[2544708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:27 power sudo[2544708]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:27 power sudo[2544713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy list_users dir=/home/elektrot/public_html/wp --output=json'
Sep 12 04:54:27 power sudo[2544713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:27 power sudo[2544713]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:32 power sudo[2544903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:54:32 power sudo[2544903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:32 power sudo[2544903]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:32 power sudo[2544909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep 12 04:54:32 power sudo[2544909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:33 power sudo[2544909]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:33 power sudo[2544917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:54:33 power sudo[2544917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:33 power sudo[2544917]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:33 power sudo[2544936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=enaspot.com return_https_redirect_status=1 --output=json'
Sep 12 04:54:33 power sudo[2544936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:33 power sudo[2544936]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:36 power sudo[2545024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/public_html --output=json'
Sep 12 04:54:36 power sudo[2545024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:36 power sudo[2545024]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:40 power sudo[2545237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep 12 04:54:40 power sudo[2545237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:40 power sudo[2545237]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:40 power sudo[2545242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enochmk --output=json'
Sep 12 04:54:40 power sudo[2545242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:40 power sudo[2545242]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:46 power sudo[2545337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:54:46 power sudo[2545337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:46 power sudo[2545337]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:46 power sudo[2545344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enochmk --user-current --json'
Sep 12 04:54:46 power sudo[2545344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:46 power sudo[2545344]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:46 power sudo[2545351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk LangPHP php_get_vhost_versions --output=json'
Sep 12 04:54:46 power sudo[2545351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:46 power sudo[2545351]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:46 power sudo[2545357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:54:46 power sudo[2545357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:46 power sudo[2545357]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:47 power sudo[2545382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DomainInfo single_domain_data domain=enoch.mk return_https_redirect_status=1 --output=json'
Sep 12 04:54:47 power sudo[2545382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:47 power sudo[2545382]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:47 power sudo[2545389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk Mime list_redirects --output=json'
Sep 12 04:54:47 power sudo[2545389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:48 power sudo[2545389]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:51 power sudo[2545512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DirectoryPrivacy is_directory_protected dir=/home/enochmk/public_html --output=json'
Sep 12 04:54:51 power sudo[2545512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:51 power sudo[2545512]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:52 power sudo[2545579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:52 power sudo[2545579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:52 power sudo[2545579]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:52 power sudo[2545585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 04:54:52 power sudo[2545585]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 04:54:52 power sudo[2545585]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 04:54:52 power sudo[2545585]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 04:54:52 power sudo[2545585]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:52 power sudo[2545585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:52 power sudo[2545585]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:53 power sudo[2545590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 04:54:53 power sudo[2545590]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 04:54:53 power sudo[2545590]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 04:54:53 power sudo[2545590]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 04:54:53 power sudo[2545590]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:53 power sudo[2545590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:53 power sudo[2545590]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:55 power sudo[2545706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:55 power sudo[2545706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:55 power sudo[2545706]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:55 power sudo[2545712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 04:54:55 power sudo[2545712]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 04:54:55 power sudo[2545712]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 04:54:55 power sudo[2545712]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 04:54:55 power sudo[2545712]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:55 power sudo[2545712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:55 power sudo[2545712]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:55 power sudo[2545717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 04:54:55 power sudo[2545717]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 04:54:55 power sudo[2545717]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 04:54:55 power sudo[2545717]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 04:54:55 power sudo[2545717]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:54:55 power sudo[2545717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:55 power sudo[2545717]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:58 power sudo[2545877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/equip.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:54:58 power sudo[2545877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:58 power sudo[2545877]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:58 power sudo[2545883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 12 04:54:58 power sudo[2545883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:59 power sudo[2545883]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:59 power sudo[2545889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:54:59 power sudo[2545889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:59 power sudo[2545889]: pam_unix(sudo:session): session closed for user root
Sep 12 04:54:59 power sudo[2545917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=equip.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 04:54:59 power sudo[2545917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:54:59 power sudo[2545917]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:01 power sudo[2545991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/equip.cetplatform.mk --output=json'
Sep 12 04:55:01 power sudo[2545991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:01 power sudo[2545991]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:01 power systemd[2546074]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 04:55:05 power sudo[2546324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep 12 04:55:05 power sudo[2546324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:05 power sudo[2546324]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:05 power sudo[2546331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eurofarm --output=json'
Sep 12 04:55:05 power sudo[2546331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:05 power sudo[2546331]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:13 power sudo[2546493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm /bin/sh -c 'cd /home/eurofarm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:55:13 power sudo[2546493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:13 power sudo[2546493]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:13 power sudo[2546500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eurofarm --user-current --json'
Sep 12 04:55:13 power sudo[2546500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:13 power sudo[2546500]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:13 power sudo[2546516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm LangPHP php_get_vhost_versions --output=json'
Sep 12 04:55:13 power sudo[2546516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:13 power sudo[2546516]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:13 power sudo[2546526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:55:13 power sudo[2546526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:13 power sudo[2546526]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:14 power sudo[2546544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DomainInfo single_domain_data domain=eurofarm.com.mk return_https_redirect_status=1 --output=json'
Sep 12 04:55:14 power sudo[2546544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:14 power sudo[2546544]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:14 power sudo[2546551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm Mime list_redirects --output=json'
Sep 12 04:55:14 power sudo[2546551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:14 power sudo[2546551]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:19 power sudo[2546672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DirectoryPrivacy is_directory_protected dir=/home/eurofarm/public_html --output=json'
Sep 12 04:55:19 power sudo[2546672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:19 power sudo[2546672]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:22 power sudo[2546879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep 12 04:55:22 power sudo[2546879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:22 power sudo[2546879]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:22 power sudo[2546886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=euromaki --output=json'
Sep 12 04:55:23 power sudo[2546886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:23 power sudo[2546886]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:27 power sudo[2546964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki /bin/sh -c 'cd /home/euromaki/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:55:27 power sudo[2546964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:27 power sudo[2546964]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:27 power sudo[2546970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user euromaki --user-current --json'
Sep 12 04:55:27 power sudo[2546970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:27 power sudo[2546970]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:27 power sudo[2546977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki LangPHP php_get_vhost_versions --output=json'
Sep 12 04:55:27 power sudo[2546977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:27 power sudo[2546977]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:27 power sudo[2546989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:55:27 power sudo[2546989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:27 power sudo[2546989]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:27 power sudo[2547002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DomainInfo single_domain_data domain=euromakinsurance.mk return_https_redirect_status=1 --output=json'
Sep 12 04:55:27 power sudo[2547002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:28 power sudo[2547002]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:28 power sudo[2547008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki Mime list_redirects --output=json'
Sep 12 04:55:28 power sudo[2547008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:28 power sudo[2547008]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:32 power sudo[2547124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DirectoryPrivacy is_directory_protected dir=/home/euromaki/public_html --output=json'
Sep 12 04:55:32 power sudo[2547124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:32 power sudo[2547124]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:35 power sudo[2547318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep 12 04:55:35 power sudo[2547318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:35 power sudo[2547318]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:35 power sudo[2547325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evberasm --output=json'
Sep 12 04:55:35 power sudo[2547325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:35 power sudo[2547325]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:41 power sudo[2547461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm /bin/sh -c 'cd /home/evberasm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:55:42 power sudo[2547461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:42 power sudo[2547461]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:42 power sudo[2547468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evberasm --user-current --json'
Sep 12 04:55:42 power sudo[2547468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:42 power sudo[2547468]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:42 power sudo[2547473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm LangPHP php_get_vhost_versions --output=json'
Sep 12 04:55:42 power sudo[2547473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:42 power sudo[2547473]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:42 power sudo[2547481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:55:42 power sudo[2547481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:42 power sudo[2547481]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:42 power sudo[2547496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DomainInfo single_domain_data domain=evberasmusplus.com.mk return_https_redirect_status=1 --output=json'
Sep 12 04:55:42 power sudo[2547496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:42 power sudo[2547496]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:42 power sudo[2547502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm Mime list_redirects --output=json'
Sep 12 04:55:42 power sudo[2547502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:42 power sudo[2547502]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:46 power sudo[2547581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DirectoryPrivacy is_directory_protected dir=/home/evberasm/public_html/wp --output=json'
Sep 12 04:55:46 power sudo[2547581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:46 power sudo[2547581]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:49 power sudo[2547802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep 12 04:55:49 power sudo[2547802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:49 power sudo[2547802]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:49 power sudo[2547810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evolvepl --output=json'
Sep 12 04:55:49 power sudo[2547810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:49 power sudo[2547810]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:53 power sudo[2547881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:55:53 power sudo[2547881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:53 power sudo[2547881]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:53 power sudo[2547891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evolvepl --user-current --json'
Sep 12 04:55:53 power sudo[2547891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:54 power sudo[2547891]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:54 power sudo[2547899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl LangPHP php_get_vhost_versions --output=json'
Sep 12 04:55:54 power sudo[2547899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:54 power sudo[2547899]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:54 power sudo[2547905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:55:54 power sudo[2547905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:54 power sudo[2547905]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:54 power sudo[2547935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DomainInfo single_domain_data domain=evolveplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 04:55:54 power sudo[2547935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:55 power sudo[2547935]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:55 power sudo[2547941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl Mime list_redirects --output=json'
Sep 12 04:55:55 power sudo[2547941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:55 power sudo[2547941]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:57 power sudo[2548037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DirectoryPrivacy is_directory_protected dir=/home/evolvepl/public_html --output=json'
Sep 12 04:55:57 power sudo[2548037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:58 power sudo[2548037]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:59 power sudo[2548146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:55:59 power sudo[2548146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:59 power sudo[2548146]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:59 power sudo[2548152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:55:59 power sudo[2548152]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:55:59 power sudo[2548152]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:55:59 power sudo[2548152]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:55:59 power sudo[2548152]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:55:59 power sudo[2548152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:59 power sudo[2548152]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:59 power sudo[2548157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:55:59 power sudo[2548157]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:55:59 power sudo[2548157]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:55:59 power sudo[2548157]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:55:59 power sudo[2548157]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:55:59 power sudo[2548157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:59 power sudo[2548157]: pam_unix(sudo:session): session closed for user root
Sep 12 04:55:59 power sudo[2548166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:55:59 power sudo[2548166]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:55:59 power sudo[2548166]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:55:59 power sudo[2548166]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:55:59 power sudo[2548166]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:55:59 power sudo[2548166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:55:59 power sudo[2548166]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:01 power sudo[2548303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:01 power sudo[2548303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:01 power sudo[2548303]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:01 power sudo[2548308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:56:01 power sudo[2548308]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:56:01 power sudo[2548308]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:56:01 power sudo[2548308]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:56:01 power sudo[2548308]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:01 power sudo[2548308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:01 power sudo[2548308]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:01 power sudo[2548313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:56:01 power sudo[2548313]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:56:01 power sudo[2548313]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:56:01 power sudo[2548313]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:56:01 power sudo[2548313]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:01 power sudo[2548313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:01 power sudo[2548313]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:01 power sudo[2548322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:56:01 power sudo[2548322]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:56:01 power sudo[2548322]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:56:01 power sudo[2548322]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:56:01 power sudo[2548322]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:01 power sudo[2548322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:01 power sudo[2548322]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:06 power sudo[2548440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/ey.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:56:06 power sudo[2548440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:06 power sudo[2548440]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:06 power sudo[2548446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 12 04:56:06 power sudo[2548446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:06 power sudo[2548446]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:06 power sudo[2548454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:56:06 power sudo[2548454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:06 power sudo[2548454]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:06 power sudo[2548472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=ey.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 04:56:06 power sudo[2548472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:06 power sudo[2548472]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:09 power sudo[2548565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/ey.cetplatform.mk --output=json'
Sep 12 04:56:09 power sudo[2548565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:09 power sudo[2548565]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:12 power sudo[2548778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep 12 04:56:13 power sudo[2548778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:13 power sudo[2548778]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:13 power sudo[2548785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=holiyayt --output=json'
Sep 12 04:56:13 power sudo[2548785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:13 power sudo[2548785]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:15 power sudo[2548854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/fitkit.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:56:15 power sudo[2548854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:15 power sudo[2548854]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:15 power sudo[2548860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 12 04:56:15 power sudo[2548860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:16 power sudo[2548860]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:16 power sudo[2548871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt LangPHP php_get_vhost_versions --output=json'
Sep 12 04:56:16 power sudo[2548871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:16 power sudo[2548871]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:16 power sudo[2548876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:56:16 power sudo[2548876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:16 power sudo[2548876]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:16 power sudo[2548895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=fitkit.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 12 04:56:16 power sudo[2548895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:16 power sudo[2548895]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:16 power sudo[2548901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt Mime list_redirects --output=json'
Sep 12 04:56:16 power sudo[2548901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:16 power sudo[2548901]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:18 power sudo[2548964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/fitkit.holiyaytravel.com --output=json'
Sep 12 04:56:18 power sudo[2548964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:18 power sudo[2548964]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:21 power sudo[2549165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep 12 04:56:21 power sudo[2549165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:21 power sudo[2549165]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:21 power sudo[2549170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=v5srybi9dcdx --output=json'
Sep 12 04:56:21 power sudo[2549170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:22 power sudo[2549170]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:24 power sudo[2549246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/flowoptstudio.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:56:24 power sudo[2549246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:24 power sudo[2549246]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:24 power sudo[2549253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep 12 04:56:24 power sudo[2549253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:25 power sudo[2549253]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:25 power sudo[2549264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx LangPHP php_get_vhost_versions --output=json'
Sep 12 04:56:25 power sudo[2549264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:25 power sudo[2549264]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:25 power sudo[2549269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:56:25 power sudo[2549269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:25 power sudo[2549269]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:25 power sudo[2549290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=flowoptstudio.com return_https_redirect_status=1 --output=json'
Sep 12 04:56:25 power sudo[2549290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:25 power sudo[2549290]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:25 power sudo[2549296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx Mime list_redirects --output=json'
Sep 12 04:56:25 power sudo[2549296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:25 power sudo[2549296]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:27 power sudo[2549378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/flowoptstudio.com --output=json'
Sep 12 04:56:28 power sudo[2549378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:28 power sudo[2549378]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:31 power sudo[2549658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep 12 04:56:31 power sudo[2549658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:31 power sudo[2549658]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:31 power sudo[2549664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=folklore --output=json'
Sep 12 04:56:31 power sudo[2549664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:32 power sudo[2549664]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:34 power sudo[2549762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:56:34 power sudo[2549762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:34 power sudo[2549762]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:34 power sudo[2549769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user folklore --user-current --json'
Sep 12 04:56:34 power sudo[2549769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:34 power sudo[2549769]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:34 power sudo[2549778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore LangPHP php_get_vhost_versions --output=json'
Sep 12 04:56:34 power sudo[2549778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:34 power sudo[2549778]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:34 power sudo[2549783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:56:34 power sudo[2549783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:34 power sudo[2549783]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:35 power sudo[2549803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DomainInfo single_domain_data domain=folklorefestivals.com return_https_redirect_status=1 --output=json'
Sep 12 04:56:35 power sudo[2549803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:35 power sudo[2549803]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:35 power sudo[2549812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore Mime list_redirects --output=json'
Sep 12 04:56:35 power sudo[2549812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:35 power sudo[2549812]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:37 power sudo[2549892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DirectoryPrivacy is_directory_protected dir=/home/folklore/public_html --output=json'
Sep 12 04:56:37 power sudo[2549892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:37 power sudo[2549892]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:38 power sudo[2549941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:38 power sudo[2549941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:38 power sudo[2549941]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:38 power sudo[2549946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:56:38 power sudo[2549946]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:56:38 power sudo[2549946]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:56:38 power sudo[2549946]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:56:38 power sudo[2549946]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:38 power sudo[2549946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:38 power sudo[2549946]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:38 power sudo[2549956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:56:38 power sudo[2549956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:56:38 power sudo[2549956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:56:38 power sudo[2549956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:56:38 power sudo[2549956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:38 power sudo[2549956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:38 power sudo[2549956]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:38 power sudo[2549972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:56:38 power sudo[2549972]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:56:38 power sudo[2549972]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:56:38 power sudo[2549972]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:56:38 power sudo[2549972]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:38 power sudo[2549972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:38 power sudo[2549972]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:40 power sudo[2550059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:40 power sudo[2550059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:40 power sudo[2550059]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:40 power sudo[2550064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:56:40 power sudo[2550064]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:56:40 power sudo[2550064]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:56:40 power sudo[2550064]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:56:40 power sudo[2550064]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:40 power sudo[2550064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:40 power sudo[2550064]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:40 power sudo[2550069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:56:40 power sudo[2550069]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:56:40 power sudo[2550069]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:56:40 power sudo[2550069]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:56:40 power sudo[2550069]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:40 power sudo[2550069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:40 power sudo[2550069]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:40 power sudo[2550075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:56:40 power sudo[2550075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:56:40 power sudo[2550075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:56:40 power sudo[2550075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:56:40 power sudo[2550075]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:56:40 power sudo[2550075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:40 power sudo[2550075]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:40 power sudo[2550102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep 12 04:56:40 power sudo[2550102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:41 power sudo[2550102]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:41 power sudo[2550114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=forzares --output=json'
Sep 12 04:56:41 power sudo[2550114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:41 power sudo[2550114]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:47 power sudo[2550219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares /bin/sh -c 'cd /home/forzares/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:56:47 power sudo[2550219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:47 power sudo[2550219]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:47 power sudo[2550233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user forzares --user-current --json'
Sep 12 04:56:47 power sudo[2550233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:47 power sudo[2550233]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:47 power sudo[2550243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares LangPHP php_get_vhost_versions --output=json'
Sep 12 04:56:47 power sudo[2550243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:47 power sudo[2550243]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:47 power sudo[2550248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:56:47 power sudo[2550248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:47 power sudo[2550248]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:48 power sudo[2550266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DomainInfo single_domain_data domain=forzarestaurant.com.mk return_https_redirect_status=1 --output=json'
Sep 12 04:56:48 power sudo[2550266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:48 power sudo[2550266]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:48 power sudo[2550274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares Mime list_redirects --output=json'
Sep 12 04:56:48 power sudo[2550274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:48 power sudo[2550274]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:51 power sudo[2550370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DirectoryPrivacy is_directory_protected dir=/home/forzares/public_html --output=json'
Sep 12 04:56:51 power sudo[2550370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:51 power sudo[2550370]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:55 power sudo[2550546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep 12 04:56:55 power sudo[2550546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:55 power sudo[2550546]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:55 power sudo[2550553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=getaldus --output=json'
Sep 12 04:56:55 power sudo[2550553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:55 power sudo[2550553]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:57 power sudo[2550611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus /bin/sh -c 'cd /home/getaldus/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:56:57 power sudo[2550611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:57 power sudo[2550611]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:57 power sudo[2550617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user getaldus --user-current --json'
Sep 12 04:56:57 power sudo[2550617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:57 power sudo[2550617]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:57 power sudo[2550622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus LangPHP php_get_vhost_versions --output=json'
Sep 12 04:56:57 power sudo[2550622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:58 power sudo[2550622]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:58 power sudo[2550628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:56:58 power sudo[2550628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:58 power sudo[2550628]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:58 power sudo[2550642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DomainInfo single_domain_data domain=getaldus.mk return_https_redirect_status=1 --output=json'
Sep 12 04:56:58 power sudo[2550642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:58 power sudo[2550642]: pam_unix(sudo:session): session closed for user root
Sep 12 04:56:58 power sudo[2550648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus Mime list_redirects --output=json'
Sep 12 04:56:58 power sudo[2550648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:56:58 power sudo[2550648]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:00 power sudo[2550763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DirectoryPrivacy is_directory_protected dir=/home/getaldus/public_html --output=json'
Sep 12 04:57:00 power sudo[2550763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:00 power sudo[2550763]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:03 power sudo[2550965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep 12 04:57:03 power sudo[2550965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:04 power sudo[2550965]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:04 power sudo[2550973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gocruise --output=json'
Sep 12 04:57:04 power sudo[2550973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:04 power sudo[2550973]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:09 power sudo[2551083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise /bin/sh -c 'cd /home/gocruise/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:57:09 power sudo[2551083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:09 power sudo[2551083]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:09 power sudo[2551092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gocruise --user-current --json'
Sep 12 04:57:09 power sudo[2551092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:09 power sudo[2551092]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:09 power sudo[2551102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise LangPHP php_get_vhost_versions --output=json'
Sep 12 04:57:09 power sudo[2551102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:09 power sudo[2551102]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:09 power sudo[2551107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:57:09 power sudo[2551107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:09 power sudo[2551107]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:10 power sudo[2551141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DomainInfo single_domain_data domain=gocruise.mk return_https_redirect_status=1 --output=json'
Sep 12 04:57:10 power sudo[2551141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:10 power sudo[2551141]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:10 power sudo[2551150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise Mime list_redirects --output=json'
Sep 12 04:57:10 power sudo[2551150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:10 power sudo[2551150]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:13 power sudo[2551237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DirectoryPrivacy is_directory_protected dir=/home/gocruise/public_html --output=json'
Sep 12 04:57:13 power sudo[2551237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:13 power sudo[2551237]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:16 power sudo[2551439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep 12 04:57:16 power sudo[2551439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:16 power sudo[2551439]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:16 power sudo[2551447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gogovan1 --output=json'
Sep 12 04:57:17 power sudo[2551447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:17 power sudo[2551447]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:20 power sudo[2551529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 /bin/sh -c 'cd /home/gogovan1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:57:20 power sudo[2551529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:20 power sudo[2551529]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:20 power sudo[2551535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gogovan1 --user-current --json'
Sep 12 04:57:20 power sudo[2551535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:21 power sudo[2551535]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:21 power sudo[2551546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 LangPHP php_get_vhost_versions --output=json'
Sep 12 04:57:21 power sudo[2551546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:21 power sudo[2551546]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:21 power sudo[2551551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:57:21 power sudo[2551551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:21 power sudo[2551551]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:21 power sudo[2551568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DomainInfo single_domain_data domain=gogovan.mk return_https_redirect_status=1 --output=json'
Sep 12 04:57:21 power sudo[2551568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:21 power sudo[2551568]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:21 power sudo[2551575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 Mime list_redirects --output=json'
Sep 12 04:57:21 power sudo[2551575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:21 power sudo[2551575]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:24 power sudo[2551677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DirectoryPrivacy is_directory_protected dir=/home/gogovan1/public_html --output=json'
Sep 12 04:57:24 power sudo[2551677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:24 power sudo[2551677]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:28 power sudo[2551908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep 12 04:57:28 power sudo[2551908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:28 power sudo[2551908]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:28 power sudo[2551920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=golakkom --output=json'
Sep 12 04:57:28 power sudo[2551920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:28 power sudo[2551920]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:35 power sudo[2552048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:57:35 power sudo[2552048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:35 power sudo[2552048]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:35 power sudo[2552054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user golakkom --user-current --json'
Sep 12 04:57:35 power sudo[2552054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:35 power sudo[2552054]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:35 power sudo[2552060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom LangPHP php_get_vhost_versions --output=json'
Sep 12 04:57:36 power sudo[2552060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:36 power sudo[2552060]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:36 power sudo[2552068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:57:36 power sudo[2552068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:36 power sudo[2552068]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:36 power sudo[2552081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DomainInfo single_domain_data domain=golak-komerc.mk return_https_redirect_status=1 --output=json'
Sep 12 04:57:36 power sudo[2552081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:36 power sudo[2552081]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:36 power sudo[2552087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom Mime list_redirects --output=json'
Sep 12 04:57:36 power sudo[2552087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:36 power sudo[2552087]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:40 power sudo[2552196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DirectoryPrivacy is_directory_protected dir=/home/golakkom/public_html --output=json'
Sep 12 04:57:40 power sudo[2552196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:40 power sudo[2552196]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:41 power sudo[2552247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:57:41 power sudo[2552247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:41 power sudo[2552247]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:41 power sudo[2552252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:57:41 power sudo[2552252]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:57:41 power sudo[2552252]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:57:41 power sudo[2552252]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:57:41 power sudo[2552252]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:57:41 power sudo[2552252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:41 power sudo[2552252]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:41 power sudo[2552257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:57:41 power sudo[2552257]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:57:41 power sudo[2552257]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:57:41 power sudo[2552257]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:57:41 power sudo[2552257]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:57:41 power sudo[2552257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:41 power sudo[2552257]: pam_unix(sudo:session): session closed for user root
Sep 12 04:57:41 power sudo[2552263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:57:41 power sudo[2552263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:57:41 power sudo[2552263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:57:41 power sudo[2552263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:57:41 power sudo[2552263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:57:41 power sudo[2552263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:57:41 power sudo[2552263]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:38 power sudo[2553276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:58:38 power sudo[2553276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:38 power sudo[2553276]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:38 power sudo[2553282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 12 04:58:39 power sudo[2553282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:39 power sudo[2553282]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:39 power sudo[2553299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:58:39 power sudo[2553299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:39 power sudo[2553299]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:40 power sudo[2553323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=goodnews.mk return_https_redirect_status=1 --output=json'
Sep 12 04:58:40 power sudo[2553323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:40 power sudo[2553323]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:42 power sudo[2553408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/public_html --output=json'
Sep 12 04:58:43 power sudo[2553408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:43 power sudo[2553408]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:47 power sudo[2553644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep 12 04:58:47 power sudo[2553644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:47 power sudo[2553644]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:47 power sudo[2553651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=herbalpl --output=json'
Sep 12 04:58:47 power sudo[2553651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:47 power sudo[2553651]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:54 power sudo[2553748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl /bin/sh -c 'cd /home/herbalpl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:58:54 power sudo[2553748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:54 power sudo[2553748]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:54 power sudo[2553754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user herbalpl --user-current --json'
Sep 12 04:58:54 power sudo[2553754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:54 power sudo[2553754]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:54 power sudo[2553765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl LangPHP php_get_vhost_versions --output=json'
Sep 12 04:58:54 power sudo[2553765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:54 power sudo[2553765]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:54 power sudo[2553770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:58:54 power sudo[2553770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:54 power sudo[2553770]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:55 power sudo[2553788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DomainInfo single_domain_data domain=herbalplus.mk return_https_redirect_status=1 --output=json'
Sep 12 04:58:55 power sudo[2553788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:55 power sudo[2553788]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:55 power sudo[2553799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl Mime list_redirects --output=json'
Sep 12 04:58:55 power sudo[2553799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:55 power sudo[2553799]: pam_unix(sudo:session): session closed for user root
Sep 12 04:58:59 power sudo[2553912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DirectoryPrivacy is_directory_protected dir=/home/herbalpl/public_html --output=json'
Sep 12 04:58:59 power sudo[2553912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:58:59 power sudo[2553912]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:07 power sudo[2554276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/hero.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:59:07 power sudo[2554276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:07 power sudo[2554276]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:07 power sudo[2554283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 12 04:59:07 power sudo[2554283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:07 power sudo[2554283]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:07 power sudo[2554289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:59:07 power sudo[2554289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:07 power sudo[2554289]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:08 power sudo[2554305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=hero.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 04:59:08 power sudo[2554305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:08 power sudo[2554305]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:10 power sudo[2554398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/hero.cetplatform.mk --output=json'
Sep 12 04:59:10 power sudo[2554398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:10 power sudo[2554398]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:17 power sudo[2554676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:59:17 power sudo[2554676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:17 power sudo[2554676]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:17 power sudo[2554682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 12 04:59:17 power sudo[2554682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:18 power sudo[2554682]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:18 power sudo[2554690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:59:18 power sudo[2554690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:18 power sudo[2554690]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:19 power sudo[2554717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 12 04:59:19 power sudo[2554717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:19 power sudo[2554717]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:21 power sudo[2554794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/public_html --output=json'
Sep 12 04:59:21 power sudo[2554794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:21 power sudo[2554794]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:22 power sudo[2554843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:59:22 power sudo[2554843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:22 power sudo[2554843]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:22 power sudo[2554848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:59:22 power sudo[2554848]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:59:22 power sudo[2554848]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:59:22 power sudo[2554848]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:59:22 power sudo[2554848]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:59:22 power sudo[2554848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:22 power sudo[2554848]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:22 power sudo[2554853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:59:22 power sudo[2554853]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:59:22 power sudo[2554853]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:59:22 power sudo[2554853]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:59:22 power sudo[2554853]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:59:22 power sudo[2554853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:23 power sudo[2554853]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:23 power sudo[2554866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:59:23 power sudo[2554866]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:59:23 power sudo[2554866]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:59:23 power sudo[2554866]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:59:23 power sudo[2554866]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:59:23 power sudo[2554866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:23 power sudo[2554866]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:24 power sudo[2554946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:59:24 power sudo[2554946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:24 power sudo[2554946]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:24 power sudo[2554951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 04:59:24 power sudo[2554951]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 04:59:24 power sudo[2554951]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 04:59:24 power sudo[2554951]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 04:59:24 power sudo[2554951]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:59:24 power sudo[2554951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:24 power sudo[2554951]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:24 power sudo[2554956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:59:24 power sudo[2554956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:59:24 power sudo[2554956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:59:24 power sudo[2554956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:59:24 power sudo[2554956]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:59:24 power sudo[2554956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:25 power sudo[2554956]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:25 power sudo[2554969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 04:59:25 power sudo[2554969]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 04:59:25 power sudo[2554969]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 04:59:25 power sudo[2554969]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 04:59:25 power sudo[2554969]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 04:59:25 power sudo[2554969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:25 power sudo[2554969]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:25 power sudo[2554994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep 12 04:59:25 power sudo[2554994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:26 power sudo[2554994]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:26 power sudo[2555000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vezilkac --output=json'
Sep 12 04:59:26 power sudo[2555000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:26 power sudo[2555000]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:30 power sudo[2555102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/vezden.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:59:30 power sudo[2555102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:30 power sudo[2555102]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:30 power sudo[2555108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 12 04:59:30 power sudo[2555108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:31 power sudo[2555108]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:31 power sudo[2555117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac LangPHP php_get_vhost_versions --output=json'
Sep 12 04:59:31 power sudo[2555117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:31 power sudo[2555117]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:31 power sudo[2555123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:59:31 power sudo[2555123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:31 power sudo[2555123]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:31 power sudo[2555137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezden.mk return_https_redirect_status=1 --output=json'
Sep 12 04:59:31 power sudo[2555137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:31 power sudo[2555137]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:31 power sudo[2555144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Mime list_redirects --output=json'
Sep 12 04:59:31 power sudo[2555144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:31 power sudo[2555144]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:34 power sudo[2555245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/vezden.mk --output=json'
Sep 12 04:59:34 power sudo[2555245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:34 power sudo[2555245]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:49 power sudo[2555610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/metatet && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 04:59:49 power sudo[2555610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:49 power sudo[2555610]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:49 power sudo[2555616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 12 04:59:49 power sudo[2555616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:50 power sudo[2555616]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:50 power sudo[2555621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 04:59:50 power sudo[2555621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:50 power sudo[2555621]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:50 power sudo[2555640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=metatet.com return_https_redirect_status=1 --output=json'
Sep 12 04:59:50 power sudo[2555640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:50 power sudo[2555640]: pam_unix(sudo:session): session closed for user root
Sep 12 04:59:56 power sudo[2555785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/metatet --output=json'
Sep 12 04:59:56 power sudo[2555785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 04:59:56 power sudo[2555785]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:01 power systemd[2556198]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:00:01 power systemd[2556208]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 05:00:01 power systemd[2556209]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 05:00:01 power systemd[2556211]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 05:00:14 power sudo[2557052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:00:14 power sudo[2557052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:14 power sudo[2557052]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:14 power sudo[2557058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 12 05:00:14 power sudo[2557058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:15 power sudo[2557058]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:15 power sudo[2557067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:00:15 power sudo[2557067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:15 power sudo[2557067]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:15 power sudo[2557082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezilka.com return_https_redirect_status=1 --output=json'
Sep 12 05:00:15 power sudo[2557082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:15 power sudo[2557082]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:22 power sudo[2557220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html --output=json'
Sep 12 05:00:22 power sudo[2557220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:22 power sudo[2557220]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:30 power sudo[2557529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/sorabotnici && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:00:30 power sudo[2557529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:30 power sudo[2557529]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:30 power sudo[2557535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 12 05:00:30 power sudo[2557535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:30 power sudo[2557535]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:30 power sudo[2557547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:00:30 power sudo[2557547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:30 power sudo[2557547]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:31 power sudo[2557563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=sorabotnici.vezilka.com return_https_redirect_status=1 --output=json'
Sep 12 05:00:31 power sudo[2557563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:31 power sudo[2557563]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:33 power sudo[2557656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/sorabotnici --output=json'
Sep 12 05:00:33 power sudo[2557656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:33 power sudo[2557656]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:40 power sudo[2557966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/pp && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:00:40 power sudo[2557966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:40 power sudo[2557966]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:40 power sudo[2557977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 12 05:00:40 power sudo[2557977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:40 power sudo[2557977]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:40 power sudo[2557987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:00:40 power sudo[2557987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:40 power sudo[2557987]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:40 power sudo[2558007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=pp.denicija.mk return_https_redirect_status=1 --output=json'
Sep 12 05:00:40 power sudo[2558007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:40 power sudo[2558007]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:42 power sudo[2558083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/pp --output=json'
Sep 12 05:00:42 power sudo[2558083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:42 power sudo[2558083]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:45 power sudo[2558283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep 12 05:00:45 power sudo[2558283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:46 power sudo[2558283]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:46 power sudo[2558290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=madzomk --output=json'
Sep 12 05:00:46 power sudo[2558290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:46 power sudo[2558290]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:51 power sudo[2558392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk /bin/sh -c 'cd /home/madzomk/hotelcitypark.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:00:51 power sudo[2558392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:51 power sudo[2558392]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:51 power sudo[2558398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user madzomk --user-current --json'
Sep 12 05:00:51 power sudo[2558398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:52 power sudo[2558398]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:52 power sudo[2558404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:00:52 power sudo[2558404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:52 power sudo[2558404]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:52 power sudo[2558409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:00:52 power sudo[2558409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:52 power sudo[2558409]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:52 power sudo[2558425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DomainInfo single_domain_data domain=hotelcitypark.mk return_https_redirect_status=1 --output=json'
Sep 12 05:00:52 power sudo[2558425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:52 power sudo[2558425]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:52 power sudo[2558431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk Mime list_redirects --output=json'
Sep 12 05:00:52 power sudo[2558431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:52 power sudo[2558431]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:55 power sudo[2558529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DirectoryPrivacy is_directory_protected dir=/home/madzomk/hotelcitypark.mk --output=json'
Sep 12 05:00:55 power sudo[2558529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:56 power sudo[2558529]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:59 power sudo[2558752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep 12 05:00:59 power sudo[2558752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:00:59 power sudo[2558752]: pam_unix(sudo:session): session closed for user root
Sep 12 05:00:59 power sudo[2558765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=imdskopj --output=json'
Sep 12 05:00:59 power sudo[2558765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:00 power sudo[2558765]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:02 power sudo[2558915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj /bin/sh -c 'cd /home/imdskopj/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:01:02 power sudo[2558915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:02 power sudo[2558915]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:02 power sudo[2558937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user imdskopj --user-current --json'
Sep 12 05:01:02 power sudo[2558937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:03 power sudo[2558937]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:03 power sudo[2558954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj LangPHP php_get_vhost_versions --output=json'
Sep 12 05:01:03 power sudo[2558954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:03 power sudo[2558954]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:03 power sudo[2558959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:01:03 power sudo[2558959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:03 power sudo[2558959]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:03 power sudo[2558976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DomainInfo single_domain_data domain=imdskopje.mk return_https_redirect_status=1 --output=json'
Sep 12 05:01:03 power sudo[2558976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:03 power sudo[2558976]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:03 power sudo[2558983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj Mime list_redirects --output=json'
Sep 12 05:01:03 power sudo[2558983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:03 power sudo[2558983]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:06 power sudo[2559084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DirectoryPrivacy is_directory_protected dir=/home/imdskopj/public_html --output=json'
Sep 12 05:01:06 power sudo[2559084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:06 power sudo[2559084]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:09 power sudo[2559347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep 12 05:01:09 power sudo[2559347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:09 power sudo[2559347]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:09 power sudo[2559354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=infopor1 --output=json'
Sep 12 05:01:09 power sudo[2559354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:09 power sudo[2559354]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:15 power sudo[2559460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:01:15 power sudo[2559460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:15 power sudo[2559460]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:15 power sudo[2559467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user infopor1 --user-current --json'
Sep 12 05:01:15 power sudo[2559467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:15 power sudo[2559467]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:15 power sudo[2559476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 LangPHP php_get_vhost_versions --output=json'
Sep 12 05:01:15 power sudo[2559476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:15 power sudo[2559476]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:15 power sudo[2559482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:01:15 power sudo[2559482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:15 power sudo[2559482]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:16 power sudo[2559500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DomainInfo single_domain_data domain=infoportal.mk return_https_redirect_status=1 --output=json'
Sep 12 05:01:16 power sudo[2559500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:16 power sudo[2559500]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:16 power sudo[2559508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 Mime list_redirects --output=json'
Sep 12 05:01:16 power sudo[2559508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:16 power sudo[2559508]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:19 power sudo[2559596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DirectoryPrivacy is_directory_protected dir=/home/infopor1/public_html --output=json'
Sep 12 05:01:19 power sudo[2559596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:19 power sudo[2559596]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:20 power sudo[2559658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:20 power sudo[2559658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:20 power sudo[2559658]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:20 power sudo[2559663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:01:20 power sudo[2559663]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:01:20 power sudo[2559663]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:01:20 power sudo[2559663]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:01:20 power sudo[2559663]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:20 power sudo[2559663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:20 power sudo[2559663]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:20 power sudo[2559668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:01:20 power sudo[2559668]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:01:20 power sudo[2559668]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:01:20 power sudo[2559668]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:01:20 power sudo[2559668]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:20 power sudo[2559668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:20 power sudo[2559668]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:20 power sudo[2559677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:01:20 power sudo[2559677]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:01:20 power sudo[2559677]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:01:20 power sudo[2559677]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:01:20 power sudo[2559677]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:20 power sudo[2559677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:20 power sudo[2559677]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:22 power sudo[2559781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:22 power sudo[2559781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:22 power sudo[2559781]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:22 power sudo[2559786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:01:22 power sudo[2559786]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:01:22 power sudo[2559786]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:01:22 power sudo[2559786]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:01:22 power sudo[2559786]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:22 power sudo[2559786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:22 power sudo[2559786]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:22 power sudo[2559792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:01:22 power sudo[2559792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:01:22 power sudo[2559792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:01:22 power sudo[2559792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:01:22 power sudo[2559792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:22 power sudo[2559792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:22 power sudo[2559792]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:22 power sudo[2559800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:01:22 power sudo[2559800]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:01:22 power sudo[2559800]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:01:22 power sudo[2559800]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:01:22 power sudo[2559800]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:22 power sudo[2559800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:22 power sudo[2559800]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:23 power sudo[2559836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep 12 05:01:23 power sudo[2559836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:23 power sudo[2559836]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:23 power sudo[2559844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=intelek1 --output=json'
Sep 12 05:01:23 power sudo[2559844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:23 power sudo[2559844]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:27 power sudo[2559939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:01:27 power sudo[2559939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:27 power sudo[2559939]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:27 power sudo[2559945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user intelek1 --user-current --json'
Sep 12 05:01:27 power sudo[2559945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:28 power sudo[2559945]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:28 power sudo[2559952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 LangPHP php_get_vhost_versions --output=json'
Sep 12 05:01:28 power sudo[2559952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:28 power sudo[2559952]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:28 power sudo[2559960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:01:28 power sudo[2559960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:28 power sudo[2559960]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:28 power sudo[2559974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DomainInfo single_domain_data domain=intelekt-bb.com return_https_redirect_status=1 --output=json'
Sep 12 05:01:28 power sudo[2559974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:28 power sudo[2559974]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:28 power sudo[2559980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 Mime list_redirects --output=json'
Sep 12 05:01:28 power sudo[2559980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:28 power sudo[2559980]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:31 power sudo[2560071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DirectoryPrivacy is_directory_protected dir=/home/intelek1/public_html --output=json'
Sep 12 05:01:31 power sudo[2560071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:31 power sudo[2560071]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:32 power sudo[2560214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:32 power sudo[2560214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:32 power sudo[2560214]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:32 power sudo[2560219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:01:32 power sudo[2560219]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:01:32 power sudo[2560219]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:01:32 power sudo[2560219]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:01:32 power sudo[2560219]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:32 power sudo[2560219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:32 power sudo[2560219]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:32 power sudo[2560227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:01:32 power sudo[2560227]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:01:32 power sudo[2560227]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:01:32 power sudo[2560227]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:01:32 power sudo[2560227]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:32 power sudo[2560227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:32 power sudo[2560227]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:32 power sudo[2560242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:01:32 power sudo[2560242]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:01:32 power sudo[2560242]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:01:32 power sudo[2560242]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:01:32 power sudo[2560242]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:32 power sudo[2560242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:32 power sudo[2560242]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:34 power sudo[2560355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:34 power sudo[2560355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:34 power sudo[2560355]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:34 power sudo[2560362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:01:34 power sudo[2560362]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:01:34 power sudo[2560362]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:01:34 power sudo[2560362]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:01:34 power sudo[2560362]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:34 power sudo[2560362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:34 power sudo[2560362]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:34 power sudo[2560371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:01:34 power sudo[2560371]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:01:34 power sudo[2560371]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:01:34 power sudo[2560371]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:01:34 power sudo[2560371]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:34 power sudo[2560371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:34 power sudo[2560371]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:34 power sudo[2560378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:01:34 power sudo[2560378]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:01:34 power sudo[2560378]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:01:34 power sudo[2560378]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:01:34 power sudo[2560378]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:01:34 power sudo[2560378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:34 power sudo[2560378]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:37 power sudo[2560490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=invoices.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 12 05:01:37 power sudo[2560490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:37 power sudo[2560490]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:38 power sudo[2560542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/invoices.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:01:38 power sudo[2560542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:38 power sudo[2560542]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:38 power sudo[2560548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 12 05:01:38 power sudo[2560548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:39 power sudo[2560548]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:39 power sudo[2560555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:01:39 power sudo[2560555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:39 power sudo[2560555]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:40 power sudo[2560649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/invoices.holiyaytravel.com --output=json'
Sep 12 05:01:41 power sudo[2560649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:41 power sudo[2560649]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:44 power sudo[2560861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep 12 05:01:44 power sudo[2560861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:44 power sudo[2560861]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:44 power sudo[2560871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jpparkin --output=json'
Sep 12 05:01:44 power sudo[2560871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:45 power sudo[2560871]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:48 power sudo[2560941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin /bin/sh -c 'cd /home/jpparkin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:01:48 power sudo[2560941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:48 power sudo[2560941]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:48 power sudo[2560950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jpparkin --user-current --json'
Sep 12 05:01:48 power sudo[2560950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:48 power sudo[2560950]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:48 power sudo[2560955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin LangPHP php_get_vhost_versions --output=json'
Sep 12 05:01:48 power sudo[2560955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:48 power sudo[2560955]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:48 power sudo[2560960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:01:48 power sudo[2560960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:48 power sudo[2560960]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:49 power sudo[2560973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DomainInfo single_domain_data domain=jpparkinzinegotino.mk return_https_redirect_status=1 --output=json'
Sep 12 05:01:49 power sudo[2560973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:49 power sudo[2560973]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:49 power sudo[2560980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin Mime list_redirects --output=json'
Sep 12 05:01:49 power sudo[2560980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:49 power sudo[2560980]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:51 power sudo[2561049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DirectoryPrivacy is_directory_protected dir=/home/jpparkin/public_html --output=json'
Sep 12 05:01:51 power sudo[2561049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:51 power sudo[2561049]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:54 power sudo[2561247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep 12 05:01:54 power sudo[2561247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:54 power sudo[2561247]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:54 power sudo[2561255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=karpospo --output=json'
Sep 12 05:01:54 power sudo[2561255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:54 power sudo[2561255]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:58 power sudo[2561341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo /bin/sh -c 'cd /home/karpospo/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:01:58 power sudo[2561341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:58 power sudo[2561341]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:58 power sudo[2561347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user karpospo --user-current --json'
Sep 12 05:01:58 power sudo[2561347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:59 power sudo[2561347]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:59 power sudo[2561354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo LangPHP php_get_vhost_versions --output=json'
Sep 12 05:01:59 power sudo[2561354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:59 power sudo[2561354]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:59 power sudo[2561359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:01:59 power sudo[2561359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:59 power sudo[2561359]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:59 power sudo[2561377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DomainInfo single_domain_data domain=karpospoliklinika.com.mk return_https_redirect_status=1 --output=json'
Sep 12 05:01:59 power sudo[2561377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:59 power sudo[2561377]: pam_unix(sudo:session): session closed for user root
Sep 12 05:01:59 power sudo[2561385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo Mime list_redirects --output=json'
Sep 12 05:01:59 power sudo[2561385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:01:59 power sudo[2561385]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:02 power sudo[2561500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DirectoryPrivacy is_directory_protected dir=/home/karpospo/public_html --output=json'
Sep 12 05:02:02 power sudo[2561500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:02 power sudo[2561500]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:09 power sudo[2561868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:02:09 power sudo[2561868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:09 power sudo[2561868]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:09 power sudo[2561874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 12 05:02:09 power sudo[2561874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:09 power sudo[2561874]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:09 power sudo[2561886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:02:09 power sudo[2561886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:09 power sudo[2561886]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:10 power sudo[2561904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=kaysharov.com return_https_redirect_status=1 --output=json'
Sep 12 05:02:10 power sudo[2561904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:10 power sudo[2561904]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:12 power sudo[2562008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com --output=json'
Sep 12 05:02:12 power sudo[2562008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:12 power sudo[2562008]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:21 power sudo[2562396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:02:21 power sudo[2562396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:22 power sudo[2562396]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:22 power sudo[2562402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 12 05:02:22 power sudo[2562402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:22 power sudo[2562402]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:22 power sudo[2562409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:02:22 power sudo[2562409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:22 power sudo[2562409]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:25 power sudo[2562539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com/test --output=json'
Sep 12 05:02:25 power sudo[2562539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:25 power sudo[2562539]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:29 power sudo[2562757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep 12 05:02:29 power sudo[2562757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:29 power sudo[2562757]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:29 power sudo[2562764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kolened1 --output=json'
Sep 12 05:02:29 power sudo[2562764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:29 power sudo[2562764]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:41 power sudo[2563019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:02:41 power sudo[2563019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:41 power sudo[2563019]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:41 power sudo[2563025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kolened1 --user-current --json'
Sep 12 05:02:42 power sudo[2563025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:42 power sudo[2563025]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:42 power sudo[2563031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 LangPHP php_get_vhost_versions --output=json'
Sep 12 05:02:42 power sudo[2563031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:42 power sudo[2563031]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:42 power sudo[2563039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:02:42 power sudo[2563039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:42 power sudo[2563039]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:42 power sudo[2563056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DomainInfo single_domain_data domain=kolenedelkovski.edu.mk return_https_redirect_status=1 --output=json'
Sep 12 05:02:42 power sudo[2563056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:42 power sudo[2563056]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:42 power sudo[2563062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 Mime list_redirects --output=json'
Sep 12 05:02:42 power sudo[2563062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:42 power sudo[2563062]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:49 power sudo[2563182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DirectoryPrivacy is_directory_protected dir=/home/kolened1/public_html --output=json'
Sep 12 05:02:49 power sudo[2563182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:49 power sudo[2563182]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:50 power sudo[2563253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:02:50 power sudo[2563253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:50 power sudo[2563253]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:50 power sudo[2563259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:02:50 power sudo[2563259]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:02:50 power sudo[2563259]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:02:50 power sudo[2563259]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:02:50 power sudo[2563259]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:02:50 power sudo[2563259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:50 power sudo[2563259]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:50 power sudo[2563264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:02:50 power sudo[2563264]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:02:50 power sudo[2563264]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:02:50 power sudo[2563264]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:02:50 power sudo[2563264]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:02:50 power sudo[2563264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:51 power sudo[2563264]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:53 power sudo[2563384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:02:53 power sudo[2563384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:53 power sudo[2563384]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:53 power sudo[2563390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:02:53 power sudo[2563390]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:02:53 power sudo[2563390]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:02:53 power sudo[2563390]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:02:53 power sudo[2563390]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:02:53 power sudo[2563390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:53 power sudo[2563390]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:53 power sudo[2563395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:02:53 power sudo[2563395]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:02:53 power sudo[2563395]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:02:53 power sudo[2563395]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:02:53 power sudo[2563395]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:02:53 power sudo[2563395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:53 power sudo[2563395]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:54 power sudo[2563506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep 12 05:02:54 power sudo[2563506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:54 power sudo[2563506]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:54 power sudo[2563516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kouzonco --output=json'
Sep 12 05:02:54 power sudo[2563516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:54 power sudo[2563516]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:58 power sudo[2563604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco /bin/sh -c 'cd /home/kouzonco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:02:58 power sudo[2563604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:58 power sudo[2563604]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:58 power sudo[2563615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kouzonco --user-current --json'
Sep 12 05:02:58 power sudo[2563615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:58 power sudo[2563615]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:58 power sudo[2563624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco LangPHP php_get_vhost_versions --output=json'
Sep 12 05:02:58 power sudo[2563624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:58 power sudo[2563624]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:58 power sudo[2563631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:02:58 power sudo[2563631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:58 power sudo[2563631]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:58 power sudo[2563647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DomainInfo single_domain_data domain=kouzon.com.hn return_https_redirect_status=1 --output=json'
Sep 12 05:02:59 power sudo[2563647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:59 power sudo[2563647]: pam_unix(sudo:session): session closed for user root
Sep 12 05:02:59 power sudo[2563655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco Mime list_redirects --output=json'
Sep 12 05:02:59 power sudo[2563655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:02:59 power sudo[2563655]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:01 power sudo[2563731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DirectoryPrivacy is_directory_protected dir=/home/kouzonco/public_html --output=json'
Sep 12 05:03:01 power sudo[2563731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:01 power sudo[2563731]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:05 power sudo[2564020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep 12 05:03:05 power sudo[2564020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:05 power sudo[2564020]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:05 power sudo[2564027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sprintst --output=json'
Sep 12 05:03:05 power sudo[2564027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:05 power sudo[2564027]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:09 power sudo[2564136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst /bin/sh -c 'cd /home/sprintst/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:03:09 power sudo[2564136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:10 power sudo[2564136]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:10 power sudo[2564143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sprintst --user-current --json'
Sep 12 05:03:10 power sudo[2564143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:10 power sudo[2564143]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:10 power sudo[2564151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst LangPHP php_get_vhost_versions --output=json'
Sep 12 05:03:10 power sudo[2564151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:10 power sudo[2564151]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:10 power sudo[2564159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:03:10 power sudo[2564159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:10 power sudo[2564159]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:10 power sudo[2564177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DomainInfo single_domain_data domain=kritiki.mk return_https_redirect_status=1 --output=json'
Sep 12 05:03:10 power sudo[2564177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:10 power sudo[2564177]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:10 power sudo[2564183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst Mime list_redirects --output=json'
Sep 12 05:03:10 power sudo[2564183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:11 power sudo[2564183]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:13 power sudo[2564278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DirectoryPrivacy is_directory_protected dir=/home/sprintst/public_html --output=json'
Sep 12 05:03:13 power sudo[2564278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:13 power sudo[2564278]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:17 power sudo[2564484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep 12 05:03:17 power sudo[2564484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:17 power sudo[2564484]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:17 power sudo[2564492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kujnamon --output=json'
Sep 12 05:03:17 power sudo[2564492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:17 power sudo[2564492]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:22 power sudo[2564596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon /bin/sh -c 'cd /home/kujnamon/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:03:22 power sudo[2564596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:22 power sudo[2564596]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:22 power sudo[2564601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kujnamon --user-current --json'
Sep 12 05:03:22 power sudo[2564601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:22 power sudo[2564601]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:22 power sudo[2564613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon LangPHP php_get_vhost_versions --output=json'
Sep 12 05:03:22 power sudo[2564613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:22 power sudo[2564613]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:23 power sudo[2564618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:03:23 power sudo[2564618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:23 power sudo[2564618]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:23 power sudo[2564634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DomainInfo single_domain_data domain=kujnamoni.mk return_https_redirect_status=1 --output=json'
Sep 12 05:03:23 power sudo[2564634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:23 power sudo[2564634]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:23 power sudo[2564647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon Mime list_redirects --output=json'
Sep 12 05:03:23 power sudo[2564647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:23 power sudo[2564647]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:26 power sudo[2564721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DirectoryPrivacy is_directory_protected dir=/home/kujnamon/public_html --output=json'
Sep 12 05:03:26 power sudo[2564721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:26 power sudo[2564721]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:33 power sudo[2564978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/love.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:03:33 power sudo[2564978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:33 power sudo[2564978]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:33 power sudo[2564989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 12 05:03:33 power sudo[2564989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:34 power sudo[2564989]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:34 power sudo[2564999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:03:34 power sudo[2564999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:34 power sudo[2564999]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:34 power sudo[2565015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=love.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 05:03:34 power sudo[2565015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:34 power sudo[2565015]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:37 power sudo[2565096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/love.cetplatform.mk --output=json'
Sep 12 05:03:37 power sudo[2565096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:37 power sudo[2565096]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:41 power sudo[2565318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep 12 05:03:41 power sudo[2565318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:41 power sudo[2565318]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:41 power sudo[2565325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makdrone --output=json'
Sep 12 05:03:41 power sudo[2565325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:41 power sudo[2565325]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:45 power sudo[2565428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:03:45 power sudo[2565428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:45 power sudo[2565428]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:45 power sudo[2565434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makdrone --user-current --json'
Sep 12 05:03:45 power sudo[2565434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:46 power sudo[2565434]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:46 power sudo[2565440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone LangPHP php_get_vhost_versions --output=json'
Sep 12 05:03:46 power sudo[2565440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:46 power sudo[2565440]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:46 power sudo[2565446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:03:46 power sudo[2565446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:46 power sudo[2565446]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:46 power sudo[2565466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DomainInfo single_domain_data domain=makdrone.mk return_https_redirect_status=1 --output=json'
Sep 12 05:03:46 power sudo[2565466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:46 power sudo[2565466]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:46 power sudo[2565473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone Mime list_redirects --output=json'
Sep 12 05:03:46 power sudo[2565473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:46 power sudo[2565473]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:49 power sudo[2565558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DirectoryPrivacy is_directory_protected dir=/home/makdrone/public_html --output=json'
Sep 12 05:03:49 power sudo[2565558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:49 power sudo[2565558]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:50 power sudo[2565629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:03:50 power sudo[2565629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:50 power sudo[2565629]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:50 power sudo[2565634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:03:50 power sudo[2565634]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:03:50 power sudo[2565634]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:03:50 power sudo[2565634]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:03:50 power sudo[2565634]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:03:50 power sudo[2565634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:50 power sudo[2565634]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:50 power sudo[2565639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:03:50 power sudo[2565639]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:03:50 power sudo[2565639]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:03:50 power sudo[2565639]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:03:50 power sudo[2565639]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:03:50 power sudo[2565639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:50 power sudo[2565639]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:50 power sudo[2565644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:03:50 power sudo[2565644]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:03:50 power sudo[2565644]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:03:50 power sudo[2565644]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:03:50 power sudo[2565644]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:03:50 power sudo[2565644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:50 power sudo[2565644]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:52 power sudo[2565757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:03:52 power sudo[2565757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:52 power sudo[2565757]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:52 power sudo[2565762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:03:52 power sudo[2565762]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:03:52 power sudo[2565762]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:03:52 power sudo[2565762]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:03:52 power sudo[2565762]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:03:52 power sudo[2565762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:52 power sudo[2565762]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:52 power sudo[2565767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:03:52 power sudo[2565767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:03:52 power sudo[2565767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:03:52 power sudo[2565767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:03:52 power sudo[2565767]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:03:52 power sudo[2565767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:52 power sudo[2565767]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:52 power sudo[2565773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:03:52 power sudo[2565773]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:03:52 power sudo[2565773]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:03:52 power sudo[2565773]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:03:52 power sudo[2565773]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:03:52 power sudo[2565773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:52 power sudo[2565773]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:53 power sudo[2565809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep 12 05:03:53 power sudo[2565809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:53 power sudo[2565809]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:53 power sudo[2565819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makoasmk --output=json'
Sep 12 05:03:53 power sudo[2565819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:53 power sudo[2565819]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:58 power sudo[2565904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk /bin/sh -c 'cd /home/makoasmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:03:58 power sudo[2565904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:58 power sudo[2565904]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:58 power sudo[2565910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makoasmk --user-current --json'
Sep 12 05:03:58 power sudo[2565910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:58 power sudo[2565910]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:58 power sudo[2565918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:03:58 power sudo[2565918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:58 power sudo[2565918]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:58 power sudo[2565924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:03:58 power sudo[2565924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:58 power sudo[2565924]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:58 power sudo[2565942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DomainInfo single_domain_data domain=makoas.mk return_https_redirect_status=1 --output=json'
Sep 12 05:03:58 power sudo[2565942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:58 power sudo[2565942]: pam_unix(sudo:session): session closed for user root
Sep 12 05:03:58 power sudo[2565948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk Mime list_redirects --output=json'
Sep 12 05:03:58 power sudo[2565948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:03:59 power sudo[2565948]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:03 power sudo[2566073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DirectoryPrivacy is_directory_protected dir=/home/makoasmk/public_html --output=json'
Sep 12 05:04:03 power sudo[2566073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:03 power sudo[2566073]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:11 power sudo[2566453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/mango.ambitioussolutions.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:04:11 power sudo[2566453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:11 power sudo[2566453]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:11 power sudo[2566459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep 12 05:04:11 power sudo[2566459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:11 power sudo[2566459]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:11 power sudo[2566469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:04:11 power sudo[2566469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:11 power sudo[2566469]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:12 power sudo[2566491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=mango.ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep 12 05:04:12 power sudo[2566491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:12 power sudo[2566491]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:16 power sudo[2566616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/mango.ambitioussolutions.mk --output=json'
Sep 12 05:04:16 power sudo[2566616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:16 power sudo[2566616]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:26 power sudo[2566933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/mkvesti.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:04:26 power sudo[2566933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:26 power sudo[2566933]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:26 power sudo[2566944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 12 05:04:26 power sudo[2566944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:26 power sudo[2566944]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:26 power sudo[2566949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:04:26 power sudo[2566949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:26 power sudo[2566949]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:26 power sudo[2566975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=mkvesti.mk return_https_redirect_status=1 --output=json'
Sep 12 05:04:26 power sudo[2566975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:26 power sudo[2566975]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:30 power sudo[2567103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/mkvesti.mk --output=json'
Sep 12 05:04:30 power sudo[2567103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:30 power sudo[2567103]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:36 power sudo[2567404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep 12 05:04:36 power sudo[2567404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:36 power sudo[2567404]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:36 power sudo[2567409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=modernar --output=json'
Sep 12 05:04:36 power sudo[2567409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:36 power sudo[2567409]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:40 power sudo[2567516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:04:40 power sudo[2567516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:40 power sudo[2567516]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:40 power sudo[2567522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user modernar --user-current --json'
Sep 12 05:04:40 power sudo[2567522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:40 power sudo[2567522]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:40 power sudo[2567530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar LangPHP php_get_vhost_versions --output=json'
Sep 12 05:04:40 power sudo[2567530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:40 power sudo[2567530]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:40 power sudo[2567537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:04:40 power sudo[2567537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:40 power sudo[2567537]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:41 power sudo[2567562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DomainInfo single_domain_data domain=modernart.mk return_https_redirect_status=1 --output=json'
Sep 12 05:04:41 power sudo[2567562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:41 power sudo[2567562]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:41 power sudo[2567568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar Mime list_redirects --output=json'
Sep 12 05:04:41 power sudo[2567568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:41 power sudo[2567568]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:44 power sudo[2567649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DirectoryPrivacy is_directory_protected dir=/home/modernar/public_html --output=json'
Sep 12 05:04:44 power sudo[2567649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:44 power sudo[2567649]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:45 power sudo[2567712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:04:45 power sudo[2567712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:45 power sudo[2567712]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:45 power sudo[2567718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:04:45 power sudo[2567718]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:04:45 power sudo[2567718]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:04:45 power sudo[2567718]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:04:45 power sudo[2567718]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:04:45 power sudo[2567718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:45 power sudo[2567718]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:45 power sudo[2567723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:04:45 power sudo[2567723]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:04:45 power sudo[2567723]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:04:45 power sudo[2567723]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:04:45 power sudo[2567723]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:04:45 power sudo[2567723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:45 power sudo[2567723]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:45 power sudo[2567727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:04:45 power sudo[2567727]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:04:45 power sudo[2567727]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:04:45 power sudo[2567727]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:04:45 power sudo[2567727]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:04:45 power sudo[2567727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:45 power sudo[2567727]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:47 power sudo[2567854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:04:47 power sudo[2567854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:47 power sudo[2567854]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:47 power sudo[2567859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:04:47 power sudo[2567859]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:04:47 power sudo[2567859]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:04:47 power sudo[2567859]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:04:47 power sudo[2567859]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:04:47 power sudo[2567859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:47 power sudo[2567859]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:47 power sudo[2567864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:04:47 power sudo[2567864]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:04:47 power sudo[2567864]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:04:47 power sudo[2567864]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:04:47 power sudo[2567864]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:04:47 power sudo[2567864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:47 power sudo[2567864]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:47 power sudo[2567884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:04:47 power sudo[2567884]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:04:47 power sudo[2567884]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:04:47 power sudo[2567884]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:04:47 power sudo[2567884]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:04:47 power sudo[2567884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:47 power sudo[2567884]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:52 power sudo[2568014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:04:52 power sudo[2568014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:52 power sudo[2568014]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:52 power sudo[2568021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep 12 05:04:52 power sudo[2568021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:52 power sudo[2568021]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:52 power sudo[2568028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:04:52 power sudo[2568028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:52 power sudo[2568028]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:52 power sudo[2568046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=momcurls.com return_https_redirect_status=1 --output=json'
Sep 12 05:04:52 power sudo[2568046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:52 power sudo[2568046]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:54 power sudo[2568131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/public_html --output=json'
Sep 12 05:04:54 power sudo[2568131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:55 power sudo[2568131]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:59 power sudo[2568381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep 12 05:04:59 power sudo[2568381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:59 power sudo[2568381]: pam_unix(sudo:session): session closed for user root
Sep 12 05:04:59 power sudo[2568388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mpbmk --output=json'
Sep 12 05:04:59 power sudo[2568388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:04:59 power sudo[2568388]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:01 power systemd[2568506]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:05:01 power sudo[2568546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk /bin/sh -c 'cd /home/mpbmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:05:01 power sudo[2568546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:01 power sudo[2568546]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:01 power sudo[2568552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mpbmk --user-current --json'
Sep 12 05:05:01 power sudo[2568552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:01 power sudo[2568552]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:01 power sudo[2568558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:05:01 power sudo[2568558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:01 power sudo[2568558]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:01 power sudo[2568566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:05:01 power sudo[2568566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:01 power sudo[2568566]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:02 power sudo[2568584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DomainInfo single_domain_data domain=mpb.mk return_https_redirect_status=1 --output=json'
Sep 12 05:05:02 power sudo[2568584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:02 power sudo[2568584]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:02 power sudo[2568593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk Mime list_redirects --output=json'
Sep 12 05:05:02 power sudo[2568593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:02 power sudo[2568593]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:03 power sudo[2568686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DirectoryPrivacy is_directory_protected dir=/home/mpbmk/public_html --output=json'
Sep 12 05:05:03 power sudo[2568686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:04 power sudo[2568686]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:06 power sudo[2568933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep 12 05:05:06 power sudo[2568933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:07 power sudo[2568933]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:07 power sudo[2568944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mspmk --output=json'
Sep 12 05:05:07 power sudo[2568944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:07 power sudo[2568944]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:13 power sudo[2569088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk /bin/sh -c 'cd /home/mspmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:05:13 power sudo[2569088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:13 power sudo[2569088]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:13 power sudo[2569094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mspmk --user-current --json'
Sep 12 05:05:13 power sudo[2569094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:13 power sudo[2569094]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:13 power sudo[2569103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:05:13 power sudo[2569103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:13 power sudo[2569103]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:13 power sudo[2569108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:05:13 power sudo[2569108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:13 power sudo[2569108]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:14 power sudo[2569130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DomainInfo single_domain_data domain=msp.mk return_https_redirect_status=1 --output=json'
Sep 12 05:05:14 power sudo[2569130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:14 power sudo[2569130]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:14 power sudo[2569136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk Mime list_redirects --output=json'
Sep 12 05:05:14 power sudo[2569136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:14 power sudo[2569136]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:17 power sudo[2569233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DirectoryPrivacy is_directory_protected dir=/home/mspmk/public_html --output=json'
Sep 12 05:05:17 power sudo[2569233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:17 power sudo[2569233]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:21 power sudo[2569457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep 12 05:05:21 power sudo[2569457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:21 power sudo[2569457]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:21 power sudo[2569462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mstmmk --output=json'
Sep 12 05:05:21 power sudo[2569462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:21 power sudo[2569462]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:25 power sudo[2569564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk /bin/sh -c 'cd /home/mstmmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:05:25 power sudo[2569564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:25 power sudo[2569564]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:25 power sudo[2569572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mstmmk --user-current --json'
Sep 12 05:05:25 power sudo[2569572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:25 power sudo[2569572]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:25 power sudo[2569579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:05:25 power sudo[2569579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:25 power sudo[2569579]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:25 power sudo[2569585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:05:25 power sudo[2569585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:25 power sudo[2569585]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:26 power sudo[2569603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DomainInfo single_domain_data domain=mstm.mk return_https_redirect_status=1 --output=json'
Sep 12 05:05:26 power sudo[2569603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:26 power sudo[2569603]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:26 power sudo[2569612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk Mime list_redirects --output=json'
Sep 12 05:05:26 power sudo[2569612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:26 power sudo[2569612]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:29 power sudo[2569710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DirectoryPrivacy is_directory_protected dir=/home/mstmmk/public_html --output=json'
Sep 12 05:05:29 power sudo[2569710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:29 power sudo[2569710]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:32 power sudo[2569899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep 12 05:05:32 power sudo[2569899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:32 power sudo[2569899]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:32 power sudo[2569907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=naksorgm --output=json'
Sep 12 05:05:32 power sudo[2569907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:33 power sudo[2569907]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:40 power sudo[2570048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm /bin/sh -c 'cd /home/naksorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:05:40 power sudo[2570048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:40 power sudo[2570048]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:40 power sudo[2570054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user naksorgm --user-current --json'
Sep 12 05:05:40 power sudo[2570054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:40 power sudo[2570054]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:40 power sudo[2570063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm LangPHP php_get_vhost_versions --output=json'
Sep 12 05:05:40 power sudo[2570063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:40 power sudo[2570063]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:40 power sudo[2570070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:05:40 power sudo[2570070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:40 power sudo[2570070]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:40 power sudo[2570084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DomainInfo single_domain_data domain=naks.org.mk return_https_redirect_status=1 --output=json'
Sep 12 05:05:40 power sudo[2570084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:41 power sudo[2570084]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:41 power sudo[2570090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm Mime list_redirects --output=json'
Sep 12 05:05:41 power sudo[2570090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:41 power sudo[2570090]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:45 power sudo[2570182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DirectoryPrivacy is_directory_protected dir=/home/naksorgm/public_html --output=json'
Sep 12 05:05:45 power sudo[2570182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:45 power sudo[2570182]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:48 power sudo[2570411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep 12 05:05:48 power sudo[2570411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:49 power sudo[2570411]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:49 power sudo[2570420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nasaidni --output=json'
Sep 12 05:05:49 power sudo[2570420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:49 power sudo[2570420]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:52 power sudo[2570496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html/test.nasaidnina.com.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:05:52 power sudo[2570496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:52 power sudo[2570496]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:52 power sudo[2570505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep 12 05:05:53 power sudo[2570505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:53 power sudo[2570505]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:53 power sudo[2570517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni LangPHP php_get_vhost_versions --output=json'
Sep 12 05:05:53 power sudo[2570517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:53 power sudo[2570517]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:53 power sudo[2570526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:05:53 power sudo[2570526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:53 power sudo[2570526]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:53 power sudo[2570540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=test.nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep 12 05:05:53 power sudo[2570540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:53 power sudo[2570540]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:53 power sudo[2570548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni Mime list_redirects --output=json'
Sep 12 05:05:53 power sudo[2570548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:53 power sudo[2570548]: pam_unix(sudo:session): session closed for user root
Sep 12 05:05:57 power sudo[2570655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html/test.nasaidnina.com.mk/wp --output=json'
Sep 12 05:05:57 power sudo[2570655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:05:57 power sudo[2570655]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:01 power systemd[2570910]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 05:06:03 power sudo[2570965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:06:03 power sudo[2570965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:03 power sudo[2570965]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:03 power sudo[2570971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep 12 05:06:03 power sudo[2570971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:03 power sudo[2570971]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:03 power sudo[2570978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:06:03 power sudo[2570978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:03 power sudo[2570978]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:03 power sudo[2570992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep 12 05:06:03 power sudo[2570992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:03 power sudo[2570992]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:07 power sudo[2571147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html --output=json'
Sep 12 05:06:07 power sudo[2571147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:07 power sudo[2571147]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:09 power sudo[2571358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep 12 05:06:09 power sudo[2571358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:10 power sudo[2571358]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:10 power sudo[2571368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ismassag --output=json'
Sep 12 05:06:10 power sudo[2571368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:10 power sudo[2571368]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:18 power sudo[2571526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag /bin/sh -c 'cd /home/ismassag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:06:18 power sudo[2571526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:18 power sudo[2571526]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:18 power sudo[2571536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ismassag --user-current --json'
Sep 12 05:06:18 power sudo[2571536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:18 power sudo[2571536]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:18 power sudo[2571543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag LangPHP php_get_vhost_versions --output=json'
Sep 12 05:06:18 power sudo[2571543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:18 power sudo[2571543]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:18 power sudo[2571553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:06:18 power sudo[2571553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:18 power sudo[2571553]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:18 power sudo[2571568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DomainInfo single_domain_data domain=needmassagetherapy.co.uk return_https_redirect_status=1 --output=json'
Sep 12 05:06:18 power sudo[2571568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:18 power sudo[2571568]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:18 power sudo[2571574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag Mime list_redirects --output=json'
Sep 12 05:06:18 power sudo[2571574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:19 power sudo[2571574]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:23 power sudo[2571667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DirectoryPrivacy is_directory_protected dir=/home/ismassag/public_html --output=json'
Sep 12 05:06:23 power sudo[2571667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:23 power sudo[2571667]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:30 power sudo[2571937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:06:30 power sudo[2571937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:30 power sudo[2571937]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:30 power sudo[2571947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep 12 05:06:30 power sudo[2571947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:30 power sudo[2571947]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:30 power sudo[2571956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:06:30 power sudo[2571956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:30 power sudo[2571956]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:30 power sudo[2571971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=new.chemhem.com return_https_redirect_status=1 --output=json'
Sep 12 05:06:30 power sudo[2571971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:31 power sudo[2571971]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:33 power sudo[2572146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/new.chemhem.com --output=json'
Sep 12 05:06:33 power sudo[2572146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:33 power sudo[2572146]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:34 power sudo[2572214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:34 power sudo[2572214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:34 power sudo[2572214]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:34 power sudo[2572219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 12 05:06:34 power sudo[2572219]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 12 05:06:34 power sudo[2572219]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 12 05:06:34 power sudo[2572219]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 12 05:06:34 power sudo[2572219]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:34 power sudo[2572219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:34 power sudo[2572219]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:34 power sudo[2572224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 12 05:06:34 power sudo[2572224]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 12 05:06:34 power sudo[2572224]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 12 05:06:34 power sudo[2572224]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 12 05:06:34 power sudo[2572224]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:34 power sudo[2572224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:34 power sudo[2572224]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:34 power sudo[2572229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep 12 05:06:34 power sudo[2572229]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep 12 05:06:34 power sudo[2572229]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep 12 05:06:34 power sudo[2572229]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep 12 05:06:34 power sudo[2572229]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:34 power sudo[2572229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:34 power sudo[2572229]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:36 power sudo[2572404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:36 power sudo[2572404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:36 power sudo[2572404]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:36 power sudo[2572409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 12 05:06:36 power sudo[2572409]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 12 05:06:36 power sudo[2572409]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 12 05:06:36 power sudo[2572409]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 12 05:06:36 power sudo[2572409]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:36 power sudo[2572409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:36 power sudo[2572409]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:36 power sudo[2572414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 12 05:06:36 power sudo[2572414]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 12 05:06:36 power sudo[2572414]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 12 05:06:36 power sudo[2572414]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 12 05:06:36 power sudo[2572414]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:36 power sudo[2572414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:36 power sudo[2572414]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:36 power sudo[2572419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep 12 05:06:36 power sudo[2572419]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep 12 05:06:36 power sudo[2572419]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep 12 05:06:36 power sudo[2572419]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep 12 05:06:36 power sudo[2572419]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:36 power sudo[2572419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:36 power sudo[2572419]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:37 power sudo[2572458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep 12 05:06:37 power sudo[2572458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:37 power sudo[2572458]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:37 power sudo[2572466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikolov1 --output=json'
Sep 12 05:06:37 power sudo[2572466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:37 power sudo[2572466]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:42 power sudo[2572590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:06:42 power sudo[2572590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:42 power sudo[2572590]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:42 power sudo[2572601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikolov1 --user-current --json'
Sep 12 05:06:42 power sudo[2572601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:42 power sudo[2572601]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:42 power sudo[2572606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 LangPHP php_get_vhost_versions --output=json'
Sep 12 05:06:42 power sudo[2572606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:42 power sudo[2572606]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:42 power sudo[2572611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:06:42 power sudo[2572611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:42 power sudo[2572611]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:42 power sudo[2572629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DomainInfo single_domain_data domain=nikolovproduction.com return_https_redirect_status=1 --output=json'
Sep 12 05:06:42 power sudo[2572629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:42 power sudo[2572629]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:43 power sudo[2572635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 Mime list_redirects --output=json'
Sep 12 05:06:43 power sudo[2572635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:43 power sudo[2572635]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:45 power sudo[2572717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DirectoryPrivacy is_directory_protected dir=/home/nikolov1/public_html --output=json'
Sep 12 05:06:45 power sudo[2572717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:45 power sudo[2572717]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:46 power sudo[2572777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:46 power sudo[2572777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:46 power sudo[2572777]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:46 power sudo[2572782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:06:46 power sudo[2572782]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:06:46 power sudo[2572782]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:06:46 power sudo[2572782]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:06:46 power sudo[2572782]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:46 power sudo[2572782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:46 power sudo[2572782]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:46 power sudo[2572787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:06:46 power sudo[2572787]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:06:46 power sudo[2572787]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:06:46 power sudo[2572787]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:06:46 power sudo[2572787]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:46 power sudo[2572787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:46 power sudo[2572787]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:46 power sudo[2572792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:06:46 power sudo[2572792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:06:46 power sudo[2572792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:06:46 power sudo[2572792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:06:46 power sudo[2572792]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:46 power sudo[2572792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:46 power sudo[2572792]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:48 power sudo[2572918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:48 power sudo[2572918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:48 power sudo[2572918]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:48 power sudo[2572923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:06:48 power sudo[2572923]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:06:48 power sudo[2572923]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:06:48 power sudo[2572923]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:06:48 power sudo[2572923]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:48 power sudo[2572923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:48 power sudo[2572923]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:48 power sudo[2572928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:06:48 power sudo[2572928]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:06:48 power sudo[2572928]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:06:48 power sudo[2572928]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:06:48 power sudo[2572928]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:48 power sudo[2572928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:48 power sudo[2572928]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:48 power sudo[2572933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:06:48 power sudo[2572933]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:06:48 power sudo[2572933]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:06:48 power sudo[2572933]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:06:48 power sudo[2572933]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:06:48 power sudo[2572933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:48 power sudo[2572933]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:49 power sudo[2572973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep 12 05:06:49 power sudo[2572973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:49 power sudo[2572973]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:49 power sudo[2572978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nolimits --output=json'
Sep 12 05:06:49 power sudo[2572978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:49 power sudo[2572978]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:54 power sudo[2573059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits /bin/sh -c 'cd /home/nolimits/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:06:54 power sudo[2573059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:54 power sudo[2573059]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:54 power sudo[2573070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nolimits --user-current --json'
Sep 12 05:06:54 power sudo[2573070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:54 power sudo[2573070]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:54 power sudo[2573076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits LangPHP php_get_vhost_versions --output=json'
Sep 12 05:06:54 power sudo[2573076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:54 power sudo[2573076]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:54 power sudo[2573082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:06:54 power sudo[2573082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:54 power sudo[2573082]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:54 power sudo[2573095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DomainInfo single_domain_data domain=nolimits.mk return_https_redirect_status=1 --output=json'
Sep 12 05:06:54 power sudo[2573095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:55 power sudo[2573095]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:55 power sudo[2573101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits Mime list_redirects --output=json'
Sep 12 05:06:55 power sudo[2573101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:55 power sudo[2573101]: pam_unix(sudo:session): session closed for user root
Sep 12 05:06:57 power sudo[2573172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DirectoryPrivacy is_directory_protected dir=/home/nolimits/public_html/tru-find --output=json'
Sep 12 05:06:57 power sudo[2573172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:06:57 power sudo[2573172]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:00 power sudo[2573388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep 12 05:07:00 power sudo[2573388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:00 power sudo[2573388]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:00 power sudo[2573395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=onlinesh --output=json'
Sep 12 05:07:00 power sudo[2573395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:00 power sudo[2573395]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:01 power systemd[2573432]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 05:07:04 power sudo[2573502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh /bin/sh -c 'cd /home/onlinesh/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:07:04 power sudo[2573502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:04 power sudo[2573502]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:04 power sudo[2573508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user onlinesh --user-current --json'
Sep 12 05:07:04 power sudo[2573508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:04 power sudo[2573508]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:04 power sudo[2573517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh LangPHP php_get_vhost_versions --output=json'
Sep 12 05:07:04 power sudo[2573517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:04 power sudo[2573517]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:04 power sudo[2573523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:07:04 power sudo[2573523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:04 power sudo[2573523]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:04 power sudo[2573541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DomainInfo single_domain_data domain=onlineshop.com.mk return_https_redirect_status=1 --output=json'
Sep 12 05:07:04 power sudo[2573541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:04 power sudo[2573541]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:04 power sudo[2573548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh Mime list_redirects --output=json'
Sep 12 05:07:04 power sudo[2573548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:05 power sudo[2573548]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:07 power sudo[2573649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DirectoryPrivacy is_directory_protected dir=/home/onlinesh/public_html --output=json'
Sep 12 05:07:07 power sudo[2573649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:07 power sudo[2573649]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:10 power sudo[2573915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep 12 05:07:10 power sudo[2573915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:11 power sudo[2573915]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:11 power sudo[2573922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=palenzok --output=json'
Sep 12 05:07:11 power sudo[2573922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:11 power sudo[2573922]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:14 power sudo[2574008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok /bin/sh -c 'cd /home/palenzok/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:07:14 power sudo[2574008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:14 power sudo[2574008]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:14 power sudo[2574014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user palenzok --user-current --json'
Sep 12 05:07:14 power sudo[2574014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:15 power sudo[2574014]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:15 power sudo[2574021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok LangPHP php_get_vhost_versions --output=json'
Sep 12 05:07:15 power sudo[2574021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:15 power sudo[2574021]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:15 power sudo[2574029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:07:15 power sudo[2574029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:15 power sudo[2574029]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:15 power sudo[2574049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DomainInfo single_domain_data domain=palenzokompani.mk return_https_redirect_status=1 --output=json'
Sep 12 05:07:15 power sudo[2574049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:16 power sudo[2574049]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:16 power sudo[2574058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok Mime list_redirects --output=json'
Sep 12 05:07:16 power sudo[2574058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:16 power sudo[2574058]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:18 power sudo[2574144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DirectoryPrivacy is_directory_protected dir=/home/palenzok/public_html --output=json'
Sep 12 05:07:18 power sudo[2574144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:18 power sudo[2574144]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:22 power sudo[2574353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep 12 05:07:22 power sudo[2574353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:22 power sudo[2574353]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:22 power sudo[2574358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pelagoni --output=json'
Sep 12 05:07:22 power sudo[2574358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:22 power sudo[2574358]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:27 power sudo[2574448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni /bin/sh -c 'cd /home/pelagoni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:07:27 power sudo[2574448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:27 power sudo[2574448]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:27 power sudo[2574454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pelagoni --user-current --json'
Sep 12 05:07:27 power sudo[2574454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:27 power sudo[2574454]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:27 power sudo[2574467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni LangPHP php_get_vhost_versions --output=json'
Sep 12 05:07:27 power sudo[2574467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:27 power sudo[2574467]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:27 power sudo[2574472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:07:27 power sudo[2574472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:27 power sudo[2574472]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:28 power sudo[2574496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DomainInfo single_domain_data domain=pelagonijaregion.mk return_https_redirect_status=1 --output=json'
Sep 12 05:07:28 power sudo[2574496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:28 power sudo[2574496]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:28 power sudo[2574503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni Mime list_redirects --output=json'
Sep 12 05:07:28 power sudo[2574503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:28 power sudo[2574503]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:31 power sudo[2574580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DirectoryPrivacy is_directory_protected dir=/home/pelagoni/public_html/p --output=json'
Sep 12 05:07:31 power sudo[2574580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:31 power sudo[2574580]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:35 power sudo[2574792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep 12 05:07:35 power sudo[2574792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:36 power sudo[2574792]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:36 power sudo[2574799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=biplmk --output=json'
Sep 12 05:07:36 power sudo[2574799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:36 power sudo[2574799]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:39 power sudo[2574915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk /bin/sh -c 'cd /home/biplmk/petstop.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:07:39 power sudo[2574915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:39 power sudo[2574915]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:39 power sudo[2574929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user biplmk --user-current --json'
Sep 12 05:07:39 power sudo[2574929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:39 power sudo[2574929]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:39 power sudo[2574935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:07:39 power sudo[2574935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:39 power sudo[2574935]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:39 power sudo[2574944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:07:39 power sudo[2574944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:39 power sudo[2574944]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:39 power sudo[2574958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DomainInfo single_domain_data domain=petstop.mk return_https_redirect_status=1 --output=json'
Sep 12 05:07:39 power sudo[2574958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:39 power sudo[2574958]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:39 power sudo[2574964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk Mime list_redirects --output=json'
Sep 12 05:07:40 power sudo[2574964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:40 power sudo[2574964]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:42 power sudo[2575058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DirectoryPrivacy is_directory_protected dir=/home/biplmk/petstop.mk/wp --output=json'
Sep 12 05:07:42 power sudo[2575058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:42 power sudo[2575058]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:45 power sudo[2575265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep 12 05:07:45 power sudo[2575265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:46 power sudo[2575265]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:46 power sudo[2575271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=premiumi --output=json'
Sep 12 05:07:46 power sudo[2575271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:46 power sudo[2575271]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:49 power sudo[2575354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:07:49 power sudo[2575354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:49 power sudo[2575354]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:49 power sudo[2575360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user premiumi --user-current --json'
Sep 12 05:07:49 power sudo[2575360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:50 power sudo[2575360]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:50 power sudo[2575370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi LangPHP php_get_vhost_versions --output=json'
Sep 12 05:07:50 power sudo[2575370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:50 power sudo[2575370]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:50 power sudo[2575379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:07:50 power sudo[2575379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:50 power sudo[2575379]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:50 power sudo[2575393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DomainInfo single_domain_data domain=premiuminsurance.mk return_https_redirect_status=1 --output=json'
Sep 12 05:07:50 power sudo[2575393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:50 power sudo[2575393]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:50 power sudo[2575400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi Mime list_redirects --output=json'
Sep 12 05:07:50 power sudo[2575400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:50 power sudo[2575400]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:53 power sudo[2575474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DirectoryPrivacy is_directory_protected dir=/home/premiumi/public_html --output=json'
Sep 12 05:07:53 power sudo[2575474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:53 power sudo[2575474]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:53 power sudo[2575515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:07:53 power sudo[2575515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:53 power sudo[2575515]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:53 power sudo[2575520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:07:53 power sudo[2575520]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:07:53 power sudo[2575520]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:07:53 power sudo[2575520]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:07:53 power sudo[2575520]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:07:53 power sudo[2575520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:53 power sudo[2575520]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:53 power sudo[2575525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:07:53 power sudo[2575525]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:07:53 power sudo[2575525]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:07:53 power sudo[2575525]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:07:53 power sudo[2575525]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:07:53 power sudo[2575525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:53 power sudo[2575525]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:53 power sudo[2575530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:07:53 power sudo[2575530]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:07:53 power sudo[2575530]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:07:53 power sudo[2575530]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:07:53 power sudo[2575530]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:07:53 power sudo[2575530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:53 power sudo[2575530]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:56 power sudo[2575667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:07:56 power sudo[2575667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:56 power sudo[2575667]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:56 power sudo[2575672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:07:56 power sudo[2575672]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:07:56 power sudo[2575672]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:07:56 power sudo[2575672]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:07:56 power sudo[2575672]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:07:56 power sudo[2575672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:56 power sudo[2575672]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:56 power sudo[2575677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:07:56 power sudo[2575677]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:07:56 power sudo[2575677]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:07:56 power sudo[2575677]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:07:56 power sudo[2575677]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:07:56 power sudo[2575677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:56 power sudo[2575677]: pam_unix(sudo:session): session closed for user root
Sep 12 05:07:56 power sudo[2575682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:07:56 power sudo[2575682]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:07:56 power sudo[2575682]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:07:56 power sudo[2575682]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:07:56 power sudo[2575682]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:07:56 power sudo[2575682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:07:56 power sudo[2575682]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:01 power sudo[2575841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:08:01 power sudo[2575841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:01 power sudo[2575841]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:01 power sudo[2575847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep 12 05:08:01 power sudo[2575847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:02 power sudo[2575847]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:02 power sudo[2575856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:08:02 power sudo[2575856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:02 power sudo[2575856]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:02 power sudo[2575871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep 12 05:08:02 power sudo[2575871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:02 power sudo[2575871]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:05 power sudo[2575957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/public_html --output=json'
Sep 12 05:08:05 power sudo[2575957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:05 power sudo[2575957]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:10 power sudo[2576250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep 12 05:08:10 power sudo[2576250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:10 power sudo[2576250]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:10 power sudo[2576259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=radekrat --output=json'
Sep 12 05:08:10 power sudo[2576259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:10 power sudo[2576259]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:16 power sudo[2576370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:08:16 power sudo[2576370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:16 power sudo[2576370]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:16 power sudo[2576379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user radekrat --user-current --json'
Sep 12 05:08:16 power sudo[2576379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:16 power sudo[2576379]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:16 power sudo[2576385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat LangPHP php_get_vhost_versions --output=json'
Sep 12 05:08:16 power sudo[2576385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:16 power sudo[2576385]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:16 power sudo[2576390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:08:16 power sudo[2576390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:16 power sudo[2576390]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:17 power sudo[2576406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DomainInfo single_domain_data domain=radekratovce.edu.mk return_https_redirect_status=1 --output=json'
Sep 12 05:08:17 power sudo[2576406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:17 power sudo[2576406]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:17 power sudo[2576413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat Mime list_redirects --output=json'
Sep 12 05:08:17 power sudo[2576413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:17 power sudo[2576413]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:20 power sudo[2576506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DirectoryPrivacy is_directory_protected dir=/home/radekrat/public_html/wp --output=json'
Sep 12 05:08:20 power sudo[2576506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:20 power sudo[2576506]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:21 power sudo[2576552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:08:21 power sudo[2576552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:21 power sudo[2576552]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:21 power sudo[2576557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:08:21 power sudo[2576557]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:08:21 power sudo[2576557]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:08:21 power sudo[2576557]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:08:21 power sudo[2576557]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:08:21 power sudo[2576557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:21 power sudo[2576557]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:21 power sudo[2576563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 12 05:08:21 power sudo[2576563]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 12 05:08:21 power sudo[2576563]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 12 05:08:21 power sudo[2576563]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 12 05:08:21 power sudo[2576563]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:08:21 power sudo[2576563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:21 power sudo[2576563]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:21 power sudo[2576570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 12 05:08:21 power sudo[2576570]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 12 05:08:21 power sudo[2576570]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 12 05:08:21 power sudo[2576570]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 12 05:08:21 power sudo[2576570]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:08:21 power sudo[2576570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:21 power sudo[2576570]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:26 power sudo[2576791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep 12 05:08:26 power sudo[2576791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:27 power sudo[2576791]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:27 power sudo[2576800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rasmorgm --output=json'
Sep 12 05:08:27 power sudo[2576800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:27 power sudo[2576800]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:34 power sudo[2576932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm /bin/sh -c 'cd /home/rasmorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:08:34 power sudo[2576932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:34 power sudo[2576932]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:34 power sudo[2576938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rasmorgm --user-current --json'
Sep 12 05:08:34 power sudo[2576938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:34 power sudo[2576938]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:34 power sudo[2576946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm LangPHP php_get_vhost_versions --output=json'
Sep 12 05:08:34 power sudo[2576946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:34 power sudo[2576946]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:34 power sudo[2576951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:08:34 power sudo[2576951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:34 power sudo[2576951]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:34 power sudo[2576964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DomainInfo single_domain_data domain=rasm.org.mk return_https_redirect_status=1 --output=json'
Sep 12 05:08:35 power sudo[2576964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:35 power sudo[2576964]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:35 power sudo[2576970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm Mime list_redirects --output=json'
Sep 12 05:08:35 power sudo[2576970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:35 power sudo[2576970]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:38 power sudo[2577088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DirectoryPrivacy is_directory_protected dir=/home/rasmorgm/public_html --output=json'
Sep 12 05:08:38 power sudo[2577088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:38 power sudo[2577088]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:42 power sudo[2577305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep 12 05:08:42 power sudo[2577305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:42 power sudo[2577305]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:42 power sudo[2577313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=recorgmk --output=json'
Sep 12 05:08:42 power sudo[2577313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:42 power sudo[2577313]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:48 power sudo[2577409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk /bin/sh -c 'cd /home/recorgmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:08:48 power sudo[2577409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:48 power sudo[2577409]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:48 power sudo[2577415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user recorgmk --user-current --json'
Sep 12 05:08:48 power sudo[2577415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:49 power sudo[2577415]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:49 power sudo[2577428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:08:49 power sudo[2577428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:49 power sudo[2577428]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:49 power sudo[2577437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:08:49 power sudo[2577437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:49 power sudo[2577437]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:49 power sudo[2577455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DomainInfo single_domain_data domain=rec.org.mk return_https_redirect_status=1 --output=json'
Sep 12 05:08:49 power sudo[2577455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:49 power sudo[2577455]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:49 power sudo[2577462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk Mime list_redirects --output=json'
Sep 12 05:08:49 power sudo[2577462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:49 power sudo[2577462]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:53 power sudo[2577564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DirectoryPrivacy is_directory_protected dir=/home/recorgmk/public_html --output=json'
Sep 12 05:08:53 power sudo[2577564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:53 power sudo[2577564]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:57 power sudo[2577776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep 12 05:08:57 power sudo[2577776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:57 power sudo[2577776]: pam_unix(sudo:session): session closed for user root
Sep 12 05:08:57 power sudo[2577784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stravelm --output=json'
Sep 12 05:08:57 power sudo[2577784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:08:57 power sudo[2577784]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:01 power sudo[2577853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm /bin/sh -c 'cd /home/stravelm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:09:01 power sudo[2577853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:01 power sudo[2577853]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:01 power sudo[2577860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stravelm --user-current --json'
Sep 12 05:09:01 power sudo[2577860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:01 power sudo[2577860]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:01 power sudo[2577875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm LangPHP php_get_vhost_versions --output=json'
Sep 12 05:09:01 power sudo[2577875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:01 power sudo[2577875]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:01 power sudo[2577880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:09:01 power sudo[2577880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:01 power sudo[2577880]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:02 power sudo[2577922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DomainInfo single_domain_data domain=s-travel.mk return_https_redirect_status=1 --output=json'
Sep 12 05:09:02 power sudo[2577922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:02 power sudo[2577922]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:02 power sudo[2577930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm Mime list_redirects --output=json'
Sep 12 05:09:02 power sudo[2577930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:02 power sudo[2577930]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:05 power sudo[2578013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DirectoryPrivacy is_directory_protected dir=/home/stravelm/public_html --output=json'
Sep 12 05:09:05 power sudo[2578013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:05 power sudo[2578013]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:08 power sudo[2578244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep 12 05:09:09 power sudo[2578244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:09 power sudo[2578244]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:09 power sudo[2578250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=simbiome --output=json'
Sep 12 05:09:09 power sudo[2578250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:09 power sudo[2578250]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:15 power sudo[2578355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome /bin/sh -c 'cd /home/simbiome/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:09:15 power sudo[2578355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:15 power sudo[2578355]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:15 power sudo[2578362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user simbiome --user-current --json'
Sep 12 05:09:15 power sudo[2578362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:15 power sudo[2578362]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:15 power sudo[2578375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome LangPHP php_get_vhost_versions --output=json'
Sep 12 05:09:15 power sudo[2578375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:15 power sudo[2578375]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:15 power sudo[2578380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:09:15 power sudo[2578380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:15 power sudo[2578380]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:16 power sudo[2578398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DomainInfo single_domain_data domain=simbiomedic.mk return_https_redirect_status=1 --output=json'
Sep 12 05:09:16 power sudo[2578398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:16 power sudo[2578398]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:16 power sudo[2578404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome Mime list_redirects --output=json'
Sep 12 05:09:16 power sudo[2578404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:16 power sudo[2578404]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:20 power sudo[2578510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DirectoryPrivacy is_directory_protected dir=/home/simbiome/public_html --output=json'
Sep 12 05:09:20 power sudo[2578510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:20 power sudo[2578510]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:29 power sudo[2578812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/sk.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:09:29 power sudo[2578812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:29 power sudo[2578812]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:29 power sudo[2578820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 12 05:09:29 power sudo[2578820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:29 power sudo[2578820]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:29 power sudo[2578828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:09:29 power sudo[2578828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:29 power sudo[2578828]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:30 power sudo[2578844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=sk.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 05:09:30 power sudo[2578844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:30 power sudo[2578844]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:33 power sudo[2578940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/sk.cetplatform.mk --output=json'
Sep 12 05:09:33 power sudo[2578940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:33 power sudo[2578940]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:37 power sudo[2579128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 12 05:09:37 power sudo[2579128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:37 power sudo[2579128]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:37 power sudo[2579139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=solemor1 --output=json'
Sep 12 05:09:37 power sudo[2579139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:37 power sudo[2579139]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:40 power sudo[2579219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:09:40 power sudo[2579219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:40 power sudo[2579219]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:40 power sudo[2579225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep 12 05:09:40 power sudo[2579225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:40 power sudo[2579225]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:40 power sudo[2579231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 LangPHP php_get_vhost_versions --output=json'
Sep 12 05:09:40 power sudo[2579231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:41 power sudo[2579231]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:41 power sudo[2579236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:09:41 power sudo[2579236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:41 power sudo[2579236]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:41 power sudo[2579253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=solem.org.mk return_https_redirect_status=1 --output=json'
Sep 12 05:09:41 power sudo[2579253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:41 power sudo[2579253]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:41 power sudo[2579259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 Mime list_redirects --output=json'
Sep 12 05:09:41 power sudo[2579259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:41 power sudo[2579259]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:43 power sudo[2579327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html --output=json'
Sep 12 05:09:43 power sudo[2579327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:43 power sudo[2579327]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:44 power sudo[2579392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:09:44 power sudo[2579392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:44 power sudo[2579392]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:44 power sudo[2579397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:09:44 power sudo[2579397]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:09:44 power sudo[2579397]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:09:44 power sudo[2579397]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:09:44 power sudo[2579397]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:09:44 power sudo[2579397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:44 power sudo[2579397]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:44 power sudo[2579402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:09:44 power sudo[2579402]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:09:44 power sudo[2579402]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:09:44 power sudo[2579402]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:09:44 power sudo[2579402]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:09:44 power sudo[2579402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:44 power sudo[2579402]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:44 power sudo[2579408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:09:44 power sudo[2579408]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:09:44 power sudo[2579408]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:09:44 power sudo[2579408]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:09:44 power sudo[2579408]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:09:44 power sudo[2579408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:44 power sudo[2579408]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:46 power sudo[2579517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:09:46 power sudo[2579517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:46 power sudo[2579517]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:46 power sudo[2579522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:09:46 power sudo[2579522]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:09:46 power sudo[2579522]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:09:46 power sudo[2579522]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:09:46 power sudo[2579522]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:09:46 power sudo[2579522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:46 power sudo[2579522]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:46 power sudo[2579527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:09:46 power sudo[2579527]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:09:46 power sudo[2579527]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:09:46 power sudo[2579527]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:09:46 power sudo[2579527]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:09:46 power sudo[2579527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:46 power sudo[2579527]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:46 power sudo[2579532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:09:46 power sudo[2579532]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:09:46 power sudo[2579532]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:09:46 power sudo[2579532]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:09:46 power sudo[2579532]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:09:46 power sudo[2579532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:46 power sudo[2579532]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:52 power sudo[2579654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html/vedi && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:09:52 power sudo[2579654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:52 power sudo[2579654]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:52 power sudo[2579660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep 12 05:09:52 power sudo[2579660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:52 power sudo[2579660]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:52 power sudo[2579666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:09:52 power sudo[2579666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:52 power sudo[2579666]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:53 power sudo[2579679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=vedi.mk return_https_redirect_status=1 --output=json'
Sep 12 05:09:53 power sudo[2579679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:53 power sudo[2579679]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:55 power sudo[2579758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html/vedi --output=json'
Sep 12 05:09:55 power sudo[2579758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:55 power sudo[2579758]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:58 power sudo[2579960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep 12 05:09:58 power sudo[2579960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:59 power sudo[2579960]: pam_unix(sudo:session): session closed for user root
Sep 12 05:09:59 power sudo[2579966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sssoluti --output=json'
Sep 12 05:09:59 power sudo[2579966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:09:59 power sudo[2579966]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:01 power systemd[2580108]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:10:04 power sudo[2580208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti /bin/sh -c 'cd /home/sssoluti/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:10:04 power sudo[2580208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:04 power sudo[2580208]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:04 power sudo[2580215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sssoluti --user-current --json'
Sep 12 05:10:04 power sudo[2580215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:04 power sudo[2580215]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:04 power sudo[2580225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti LangPHP php_get_vhost_versions --output=json'
Sep 12 05:10:04 power sudo[2580225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:04 power sudo[2580225]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:04 power sudo[2580230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:10:04 power sudo[2580230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:04 power sudo[2580230]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:05 power sudo[2580244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DomainInfo single_domain_data domain=sssolutions.mk return_https_redirect_status=1 --output=json'
Sep 12 05:10:05 power sudo[2580244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:05 power sudo[2580244]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:05 power sudo[2580249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti Mime list_redirects --output=json'
Sep 12 05:10:05 power sudo[2580249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:05 power sudo[2580249]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:08 power sudo[2580335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DirectoryPrivacy is_directory_protected dir=/home/sssoluti/public_html --output=json'
Sep 12 05:10:08 power sudo[2580335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:08 power sudo[2580335]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:11 power sudo[2580603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep 12 05:10:11 power sudo[2580603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:11 power sudo[2580603]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:11 power sudo[2580613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=supremel --output=json'
Sep 12 05:10:12 power sudo[2580613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:12 power sudo[2580613]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:20 power sudo[2580777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:10:20 power sudo[2580777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:20 power sudo[2580777]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:20 power sudo[2580783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep 12 05:10:20 power sudo[2580783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:20 power sudo[2580783]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:20 power sudo[2580792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel LangPHP php_get_vhost_versions --output=json'
Sep 12 05:10:20 power sudo[2580792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:20 power sudo[2580792]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:20 power sudo[2580796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:10:20 power sudo[2580796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:20 power sudo[2580796]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:21 power sudo[2580812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=supremeleader.eu return_https_redirect_status=1 --output=json'
Sep 12 05:10:21 power sudo[2580812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:21 power sudo[2580812]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:21 power sudo[2580822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel Mime list_redirects --output=json'
Sep 12 05:10:21 power sudo[2580822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:21 power sudo[2580822]: pam_unix(sudo:session): session closed for user root
Sep 12 05:10:25 power sudo[2580916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/public_html --output=json'
Sep 12 05:10:25 power sudo[2580916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:10:25 power sudo[2580916]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:15 power sudo[2581918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep 12 05:11:15 power sudo[2581918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:16 power sudo[2581918]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:16 power sudo[2581923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=tehnodro --output=json'
Sep 12 05:11:16 power sudo[2581923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:16 power sudo[2581923]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:21 power sudo[2582029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:11:21 power sudo[2582029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:21 power sudo[2582029]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:21 power sudo[2582035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user tehnodro --user-current --json'
Sep 12 05:11:21 power sudo[2582035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:21 power sudo[2582035]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:21 power sudo[2582046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro LangPHP php_get_vhost_versions --output=json'
Sep 12 05:11:21 power sudo[2582046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:21 power sudo[2582046]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:21 power sudo[2582052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:11:21 power sudo[2582052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:21 power sudo[2582052]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:22 power sudo[2582073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DomainInfo single_domain_data domain=tehnodrom.mk return_https_redirect_status=1 --output=json'
Sep 12 05:11:22 power sudo[2582073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:22 power sudo[2582073]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:22 power sudo[2582079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro Mime list_redirects --output=json'
Sep 12 05:11:22 power sudo[2582079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:22 power sudo[2582079]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:26 power sudo[2582156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DirectoryPrivacy is_directory_protected dir=/home/tehnodro/public_html --output=json'
Sep 12 05:11:26 power sudo[2582156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:26 power sudo[2582156]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:27 power sudo[2582227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:11:27 power sudo[2582227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:27 power sudo[2582227]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:27 power sudo[2582233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:11:27 power sudo[2582233]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:11:27 power sudo[2582233]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:11:27 power sudo[2582233]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:11:27 power sudo[2582233]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:11:27 power sudo[2582233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:27 power sudo[2582233]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:27 power sudo[2582239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:11:27 power sudo[2582239]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:11:27 power sudo[2582239]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:11:27 power sudo[2582239]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:11:27 power sudo[2582239]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:11:27 power sudo[2582239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:27 power sudo[2582239]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:27 power sudo[2582247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:11:27 power sudo[2582247]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:11:27 power sudo[2582247]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:11:27 power sudo[2582247]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:11:27 power sudo[2582247]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:11:27 power sudo[2582247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:27 power sudo[2582247]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:29 power sudo[2582363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:11:29 power sudo[2582363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:29 power sudo[2582363]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:29 power sudo[2582370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:11:29 power sudo[2582370]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:11:29 power sudo[2582370]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:11:29 power sudo[2582370]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:11:29 power sudo[2582370]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:11:29 power sudo[2582370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:29 power sudo[2582370]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:29 power sudo[2582375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:11:29 power sudo[2582375]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:11:29 power sudo[2582375]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:11:29 power sudo[2582375]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:11:29 power sudo[2582375]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:11:29 power sudo[2582375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:29 power sudo[2582375]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:29 power sudo[2582386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:11:29 power sudo[2582386]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:11:29 power sudo[2582386]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:11:29 power sudo[2582386]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:11:29 power sudo[2582386]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:11:29 power sudo[2582386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:29 power sudo[2582386]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:35 power sudo[2582594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/theuniversalgroup.net && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:11:35 power sudo[2582594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:35 power sudo[2582594]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:35 power sudo[2582601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep 12 05:11:35 power sudo[2582601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:36 power sudo[2582601]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:36 power sudo[2582610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:11:36 power sudo[2582610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:36 power sudo[2582610]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:36 power sudo[2582642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=theuniversalgroup.net return_https_redirect_status=1 --output=json'
Sep 12 05:11:36 power sudo[2582642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:36 power sudo[2582642]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:38 power sudo[2582771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/theuniversalgroup.net --output=json'
Sep 12 05:11:38 power sudo[2582771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:39 power sudo[2582771]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:42 power sudo[2582975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep 12 05:11:42 power sudo[2582975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:42 power sudo[2582975]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:42 power sudo[2582982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=viewinn --output=json'
Sep 12 05:11:42 power sudo[2582982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:42 power sudo[2582982]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:45 power sudo[2583048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn /bin/sh -c 'cd /home/viewinn/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:11:45 power sudo[2583048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:45 power sudo[2583048]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:45 power sudo[2583055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user viewinn --user-current --json'
Sep 12 05:11:45 power sudo[2583055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:45 power sudo[2583055]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:45 power sudo[2583062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn LangPHP php_get_vhost_versions --output=json'
Sep 12 05:11:45 power sudo[2583062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:45 power sudo[2583062]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:45 power sudo[2583067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:11:45 power sudo[2583067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:45 power sudo[2583067]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:46 power sudo[2583081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DomainInfo single_domain_data domain=viewinn.mk return_https_redirect_status=1 --output=json'
Sep 12 05:11:46 power sudo[2583081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:46 power sudo[2583081]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:46 power sudo[2583089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn Mime list_redirects --output=json'
Sep 12 05:11:46 power sudo[2583089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:46 power sudo[2583089]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:48 power sudo[2583163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DirectoryPrivacy is_directory_protected dir=/home/viewinn/public_html --output=json'
Sep 12 05:11:48 power sudo[2583163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:48 power sudo[2583163]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:51 power sudo[2583362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep 12 05:11:51 power sudo[2583362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:51 power sudo[2583362]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:51 power sudo[2583367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wikicamp --output=json'
Sep 12 05:11:51 power sudo[2583367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:51 power sudo[2583367]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:59 power sudo[2583505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp /bin/sh -c 'cd /home/wikicamp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:11:59 power sudo[2583505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:59 power sudo[2583505]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:59 power sudo[2583512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wikicamp --user-current --json'
Sep 12 05:11:59 power sudo[2583512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:59 power sudo[2583512]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:59 power sudo[2583525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp LangPHP php_get_vhost_versions --output=json'
Sep 12 05:11:59 power sudo[2583525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:59 power sudo[2583525]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:59 power sudo[2583530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:11:59 power sudo[2583530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:11:59 power sudo[2583530]: pam_unix(sudo:session): session closed for user root
Sep 12 05:11:59 power sudo[2583544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DomainInfo single_domain_data domain=wikicamp.mk return_https_redirect_status=1 --output=json'
Sep 12 05:11:59 power sudo[2583544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:00 power sudo[2583544]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:00 power sudo[2583557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp Mime list_redirects --output=json'
Sep 12 05:12:00 power sudo[2583557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:00 power sudo[2583557]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:01 power systemd[2583615]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 05:12:04 power sudo[2583689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DirectoryPrivacy is_directory_protected dir=/home/wikicamp/public_html --output=json'
Sep 12 05:12:04 power sudo[2583689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:04 power sudo[2583689]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:07 power sudo[2583901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep 12 05:12:07 power sudo[2583901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:08 power sudo[2583901]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:08 power sudo[2583906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workandt --output=json'
Sep 12 05:12:08 power sudo[2583906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:08 power sudo[2583906]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:13 power sudo[2584071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt /bin/sh -c 'cd /home/workandt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:12:13 power sudo[2584071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:13 power sudo[2584071]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:13 power sudo[2584077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workandt --user-current --json'
Sep 12 05:12:13 power sudo[2584077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:13 power sudo[2584077]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:13 power sudo[2584085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt LangPHP php_get_vhost_versions --output=json'
Sep 12 05:12:13 power sudo[2584085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:13 power sudo[2584085]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:13 power sudo[2584094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:12:13 power sudo[2584094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:13 power sudo[2584094]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:14 power sudo[2584117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DomainInfo single_domain_data domain=workandtravel.mk return_https_redirect_status=1 --output=json'
Sep 12 05:12:14 power sudo[2584117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:14 power sudo[2584117]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:14 power sudo[2584126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt Mime list_redirects --output=json'
Sep 12 05:12:14 power sudo[2584126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:14 power sudo[2584126]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:17 power sudo[2584231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DirectoryPrivacy is_directory_protected dir=/home/workandt/public_html --output=json'
Sep 12 05:12:17 power sudo[2584231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:17 power sudo[2584231]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:25 power sudo[2584537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/yoe.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:12:25 power sudo[2584537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:25 power sudo[2584537]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:25 power sudo[2584543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 12 05:12:25 power sudo[2584543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:26 power sudo[2584543]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:26 power sudo[2584552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:12:26 power sudo[2584552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:26 power sudo[2584552]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:26 power sudo[2584566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=yoe.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 12 05:12:26 power sudo[2584566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:26 power sudo[2584566]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:29 power sudo[2584670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/yoe.cetplatform.mk --output=json'
Sep 12 05:12:29 power sudo[2584670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:29 power sudo[2584670]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:33 power sudo[2584885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep 12 05:12:33 power sudo[2584885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:33 power sudo[2584885]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:33 power sudo[2584894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=youthgua --output=json'
Sep 12 05:12:33 power sudo[2584894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:33 power sudo[2584894]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:38 power sudo[2585020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua /bin/sh -c 'cd /home/youthgua/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:12:38 power sudo[2585020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:38 power sudo[2585020]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:38 power sudo[2585026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user youthgua --user-current --json'
Sep 12 05:12:38 power sudo[2585026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:38 power sudo[2585026]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:38 power sudo[2585037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua LangPHP php_get_vhost_versions --output=json'
Sep 12 05:12:38 power sudo[2585037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:38 power sudo[2585037]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:38 power sudo[2585050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:12:38 power sudo[2585050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:38 power sudo[2585050]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:39 power sudo[2585069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DomainInfo single_domain_data domain=youthguarantee-wb.eu return_https_redirect_status=1 --output=json'
Sep 12 05:12:39 power sudo[2585069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:39 power sudo[2585069]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:39 power sudo[2585076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua Mime list_redirects --output=json'
Sep 12 05:12:39 power sudo[2585076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:39 power sudo[2585076]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:41 power sudo[2585160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DirectoryPrivacy is_directory_protected dir=/home/youthgua/public_html --output=json'
Sep 12 05:12:42 power sudo[2585160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:42 power sudo[2585160]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:45 power sudo[2585362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep 12 05:12:45 power sudo[2585362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:45 power sudo[2585362]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:45 power sudo[2585371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=zampmk --output=json'
Sep 12 05:12:45 power sudo[2585371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:45 power sudo[2585371]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:49 power sudo[2585457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk /bin/sh -c 'cd /home/zampmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:12:49 power sudo[2585457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:49 power sudo[2585457]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:49 power sudo[2585463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user zampmk --user-current --json'
Sep 12 05:12:49 power sudo[2585463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:49 power sudo[2585463]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:49 power sudo[2585469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:12:49 power sudo[2585469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:49 power sudo[2585469]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:49 power sudo[2585475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:12:49 power sudo[2585475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:49 power sudo[2585475]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:50 power sudo[2585494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DomainInfo single_domain_data domain=zamp.mk return_https_redirect_status=1 --output=json'
Sep 12 05:12:50 power sudo[2585494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:50 power sudo[2585494]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:50 power sudo[2585502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk Mime list_redirects --output=json'
Sep 12 05:12:50 power sudo[2585502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:50 power sudo[2585502]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:53 power sudo[2585575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DirectoryPrivacy is_directory_protected dir=/home/zampmk/public_html --output=json'
Sep 12 05:12:53 power sudo[2585575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:53 power sudo[2585575]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:56 power sudo[2585762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep 12 05:12:56 power sudo[2585762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:57 power sudo[2585762]: pam_unix(sudo:session): session closed for user root
Sep 12 05:12:57 power sudo[2585778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ivanjord --output=json'
Sep 12 05:12:57 power sudo[2585778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:12:57 power sudo[2585778]: pam_unix(sudo:session): session closed for user root
Sep 12 05:13:07 power sudo[2585954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord /bin/sh -c 'cd /home/ivanjord/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:13:07 power sudo[2585954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:13:07 power sudo[2585954]: pam_unix(sudo:session): session closed for user root
Sep 12 05:13:07 power sudo[2585961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ivanjord --user-current --json'
Sep 12 05:13:07 power sudo[2585961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:13:07 power sudo[2585961]: pam_unix(sudo:session): session closed for user root
Sep 12 05:13:07 power sudo[2585969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord LangPHP php_get_vhost_versions --output=json'
Sep 12 05:13:07 power sudo[2585969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:13:07 power sudo[2585969]: pam_unix(sudo:session): session closed for user root
Sep 12 05:13:07 power sudo[2585974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:13:07 power sudo[2585974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:13:07 power sudo[2585974]: pam_unix(sudo:session): session closed for user root
Sep 12 05:13:08 power sudo[2585996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DomainInfo single_domain_data domain=novaidninazastip.mk return_https_redirect_status=1 --output=json'
Sep 12 05:13:08 power sudo[2585996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:13:08 power sudo[2585996]: pam_unix(sudo:session): session closed for user root
Sep 12 05:13:08 power sudo[2586009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord Mime list_redirects --output=json'
Sep 12 05:13:08 power sudo[2586009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:13:08 power sudo[2586009]: pam_unix(sudo:session): session closed for user root
Sep 12 05:13:14 power sudo[2586249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DirectoryPrivacy is_directory_protected dir=/home/ivanjord/public_html --output=json'
Sep 12 05:13:14 power sudo[2586249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:13:14 power sudo[2586249]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:25 power sudo[2587685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:14:25 power sudo[2587685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:25 power sudo[2587685]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:25 power sudo[2587692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep 12 05:14:25 power sudo[2587692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:26 power sudo[2587692]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:26 power sudo[2587705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:14:26 power sudo[2587705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:26 power sudo[2587705]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:26 power sudo[2587722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=izzo.mk return_https_redirect_status=1 --output=json'
Sep 12 05:14:26 power sudo[2587722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:26 power sudo[2587722]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:29 power sudo[2587800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/public_html/wp --output=json'
Sep 12 05:14:29 power sudo[2587800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:29 power sudo[2587800]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:32 power sudo[2588000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep 12 05:14:32 power sudo[2588000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:32 power sudo[2588000]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:32 power sudo[2588007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=janiboja --output=json'
Sep 12 05:14:32 power sudo[2588007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:32 power sudo[2588007]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:35 power sudo[2588074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:14:35 power sudo[2588074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:35 power sudo[2588074]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:35 power sudo[2588080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user janiboja --user-current --json'
Sep 12 05:14:35 power sudo[2588080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:36 power sudo[2588080]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:36 power sudo[2588088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja LangPHP php_get_vhost_versions --output=json'
Sep 12 05:14:36 power sudo[2588088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:36 power sudo[2588088]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:36 power sudo[2588093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:14:36 power sudo[2588093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:36 power sudo[2588093]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:36 power sudo[2588109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DomainInfo single_domain_data domain=janibojadzi.com return_https_redirect_status=1 --output=json'
Sep 12 05:14:36 power sudo[2588109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:36 power sudo[2588109]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:36 power sudo[2588115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja Mime list_redirects --output=json'
Sep 12 05:14:36 power sudo[2588115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:36 power sudo[2588115]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:38 power sudo[2588207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DirectoryPrivacy is_directory_protected dir=/home/janiboja/public_html --output=json'
Sep 12 05:14:38 power sudo[2588207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:38 power sudo[2588207]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:39 power sudo[2588270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:39 power sudo[2588270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:39 power sudo[2588270]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:39 power sudo[2588275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:14:39 power sudo[2588275]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:14:39 power sudo[2588275]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:14:39 power sudo[2588275]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:14:39 power sudo[2588275]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:39 power sudo[2588275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:39 power sudo[2588275]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:39 power sudo[2588280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:14:39 power sudo[2588280]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:14:39 power sudo[2588280]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:14:39 power sudo[2588280]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:14:39 power sudo[2588280]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:39 power sudo[2588280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:39 power sudo[2588280]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:39 power sudo[2588285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:14:39 power sudo[2588285]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:14:39 power sudo[2588285]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:14:39 power sudo[2588285]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:14:39 power sudo[2588285]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:39 power sudo[2588285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:39 power sudo[2588285]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:41 power sudo[2588392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:41 power sudo[2588392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:41 power sudo[2588392]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:41 power sudo[2588397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:14:41 power sudo[2588397]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:14:41 power sudo[2588397]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:14:41 power sudo[2588397]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:14:41 power sudo[2588397]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:41 power sudo[2588397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:41 power sudo[2588397]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:41 power sudo[2588402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:14:41 power sudo[2588402]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:14:41 power sudo[2588402]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:14:41 power sudo[2588402]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:14:41 power sudo[2588402]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:41 power sudo[2588402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:41 power sudo[2588402]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:41 power sudo[2588408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:14:41 power sudo[2588408]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:14:41 power sudo[2588408]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:14:41 power sudo[2588408]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:14:41 power sudo[2588408]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:41 power sudo[2588408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:41 power sudo[2588408]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:42 power sudo[2588447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep 12 05:14:42 power sudo[2588447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:42 power sudo[2588447]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:42 power sudo[2588452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jaramk --output=json'
Sep 12 05:14:42 power sudo[2588452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:42 power sudo[2588452]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:47 power sudo[2588560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:14:47 power sudo[2588560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:47 power sudo[2588560]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:47 power sudo[2588567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jaramk --user-current --json'
Sep 12 05:14:47 power sudo[2588567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:48 power sudo[2588567]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:48 power sudo[2588574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:14:48 power sudo[2588574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:48 power sudo[2588574]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:48 power sudo[2588579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:14:48 power sudo[2588579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:48 power sudo[2588579]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:48 power sudo[2588599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DomainInfo single_domain_data domain=jara.mk return_https_redirect_status=1 --output=json'
Sep 12 05:14:48 power sudo[2588599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:48 power sudo[2588599]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:48 power sudo[2588610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk Mime list_redirects --output=json'
Sep 12 05:14:48 power sudo[2588610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:48 power sudo[2588610]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:51 power sudo[2588711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DirectoryPrivacy is_directory_protected dir=/home/jaramk/public_html --output=json'
Sep 12 05:14:51 power sudo[2588711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:51 power sudo[2588711]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:52 power sudo[2588794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:52 power sudo[2588794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:52 power sudo[2588794]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:52 power sudo[2588800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep 12 05:14:52 power sudo[2588800]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep 12 05:14:52 power sudo[2588800]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep 12 05:14:52 power sudo[2588800]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep 12 05:14:52 power sudo[2588800]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:52 power sudo[2588800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:52 power sudo[2588800]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:52 power sudo[2588805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 05:14:52 power sudo[2588805]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 05:14:52 power sudo[2588805]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 05:14:52 power sudo[2588805]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 05:14:52 power sudo[2588805]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:52 power sudo[2588805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:52 power sudo[2588805]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:52 power sudo[2588810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 05:14:52 power sudo[2588810]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 05:14:52 power sudo[2588810]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 05:14:52 power sudo[2588810]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 05:14:52 power sudo[2588810]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:52 power sudo[2588810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:52 power sudo[2588810]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:54 power sudo[2588929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:54 power sudo[2588929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:54 power sudo[2588929]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:54 power sudo[2588935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep 12 05:14:54 power sudo[2588935]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep 12 05:14:54 power sudo[2588935]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep 12 05:14:54 power sudo[2588935]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep 12 05:14:54 power sudo[2588935]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:54 power sudo[2588935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:54 power sudo[2588935]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:54 power sudo[2588940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 05:14:54 power sudo[2588940]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 05:14:54 power sudo[2588940]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 05:14:54 power sudo[2588940]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 05:14:54 power sudo[2588940]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:54 power sudo[2588940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:54 power sudo[2588940]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:54 power sudo[2588945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 12 05:14:54 power sudo[2588945]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 12 05:14:54 power sudo[2588945]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 12 05:14:54 power sudo[2588945]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 12 05:14:54 power sudo[2588945]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:14:54 power sudo[2588945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:54 power sudo[2588945]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:55 power sudo[2588988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep 12 05:14:55 power sudo[2588988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:55 power sudo[2588988]: pam_unix(sudo:session): session closed for user root
Sep 12 05:14:55 power sudo[2588997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=innofabl --output=json'
Sep 12 05:14:55 power sudo[2588997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:14:55 power sudo[2588997]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:01 power systemd[2589165]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:15:09 power sudo[2589597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/kupireciklirano.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:15:09 power sudo[2589597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:09 power sudo[2589597]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:09 power sudo[2589607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep 12 05:15:09 power sudo[2589607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:09 power sudo[2589607]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:09 power sudo[2589612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl LangPHP php_get_vhost_versions --output=json'
Sep 12 05:15:09 power sudo[2589612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:10 power sudo[2589612]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:10 power sudo[2589619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:15:10 power sudo[2589619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:10 power sudo[2589619]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:12 power sudo[2589668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=kupireciklirano.mk return_https_redirect_status=1 --output=json'
Sep 12 05:15:12 power sudo[2589668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:12 power sudo[2589668]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:12 power sudo[2589675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl Mime list_redirects --output=json'
Sep 12 05:15:12 power sudo[2589675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:12 power sudo[2589675]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:21 power sudo[2589862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/kupireciklirano.mk --output=json'
Sep 12 05:15:21 power sudo[2589862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:21 power sudo[2589862]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:24 power sudo[2590079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep 12 05:15:24 power sudo[2590079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:25 power sudo[2590079]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:25 power sudo[2590084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mapaspla --output=json'
Sep 12 05:15:25 power sudo[2590084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:25 power sudo[2590084]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:28 power sudo[2590200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:15:28 power sudo[2590200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:28 power sudo[2590200]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:28 power sudo[2590206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep 12 05:15:28 power sudo[2590206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:28 power sudo[2590206]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:28 power sudo[2590211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla LangPHP php_get_vhost_versions --output=json'
Sep 12 05:15:28 power sudo[2590211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:29 power sudo[2590211]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:29 power sudo[2590217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:15:29 power sudo[2590217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:29 power sudo[2590217]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:29 power sudo[2590241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DomainInfo single_domain_data domain=mapasplastik.com return_https_redirect_status=1 --output=json'
Sep 12 05:15:29 power sudo[2590241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:29 power sudo[2590241]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:29 power sudo[2590247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla Mime list_redirects --output=json'
Sep 12 05:15:29 power sudo[2590247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:29 power sudo[2590247]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:32 power sudo[2590330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html/eng --output=json'
Sep 12 05:15:32 power sudo[2590330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:32 power sudo[2590330]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:48 power sudo[2590831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:15:48 power sudo[2590831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:48 power sudo[2590831]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:48 power sudo[2590837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep 12 05:15:48 power sudo[2590837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:49 power sudo[2590837]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:49 power sudo[2590842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:15:49 power sudo[2590842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:49 power sudo[2590842]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:52 power sudo[2590968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html --output=json'
Sep 12 05:15:52 power sudo[2590968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:52 power sudo[2590968]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:57 power sudo[2591180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep 12 05:15:57 power sudo[2591180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:58 power sudo[2591180]: pam_unix(sudo:session): session closed for user root
Sep 12 05:15:58 power sudo[2591186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mediatag --output=json'
Sep 12 05:15:58 power sudo[2591186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:15:58 power sudo[2591186]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:03 power sudo[2591304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag /bin/sh -c 'cd /home/mediatag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:16:03 power sudo[2591304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:03 power sudo[2591304]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:03 power sudo[2591311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mediatag --user-current --json'
Sep 12 05:16:03 power sudo[2591311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:03 power sudo[2591311]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:03 power sudo[2591322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag LangPHP php_get_vhost_versions --output=json'
Sep 12 05:16:03 power sudo[2591322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:03 power sudo[2591322]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:03 power sudo[2591327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:16:03 power sudo[2591327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:03 power sudo[2591327]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:04 power sudo[2591341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DomainInfo single_domain_data domain=mediatag.mk return_https_redirect_status=1 --output=json'
Sep 12 05:16:04 power sudo[2591341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:04 power sudo[2591341]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:04 power sudo[2591350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag Mime list_redirects --output=json'
Sep 12 05:16:04 power sudo[2591350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:04 power sudo[2591350]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:09 power sudo[2591526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DirectoryPrivacy is_directory_protected dir=/home/mediatag/public_html --output=json'
Sep 12 05:16:09 power sudo[2591526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:09 power sudo[2591526]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:19 power sudo[2591887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/mulprotex.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:16:19 power sudo[2591887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:19 power sudo[2591887]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:19 power sudo[2591893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep 12 05:16:19 power sudo[2591893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:20 power sudo[2591893]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:20 power sudo[2591902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:16:20 power sudo[2591902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:20 power sudo[2591902]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:20 power sudo[2591920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=mulprotex.com return_https_redirect_status=1 --output=json'
Sep 12 05:16:20 power sudo[2591920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:20 power sudo[2591920]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:24 power sudo[2592007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/mulprotex.com --output=json'
Sep 12 05:16:24 power sudo[2592007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:24 power sudo[2592007]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:28 power sudo[2592218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep 12 05:16:28 power sudo[2592218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:28 power sudo[2592218]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:28 power sudo[2592224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nefrolog --output=json'
Sep 12 05:16:28 power sudo[2592224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:28 power sudo[2592224]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:32 power sudo[2592307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog /bin/sh -c 'cd /home/nefrolog/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:16:32 power sudo[2592307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:32 power sudo[2592307]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:32 power sudo[2592313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nefrolog --user-current --json'
Sep 12 05:16:32 power sudo[2592313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:32 power sudo[2592313]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:32 power sudo[2592324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog LangPHP php_get_vhost_versions --output=json'
Sep 12 05:16:32 power sudo[2592324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:32 power sudo[2592324]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:32 power sudo[2592331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:16:32 power sudo[2592331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:32 power sudo[2592331]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:33 power sudo[2592351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DomainInfo single_domain_data domain=nefrologija.mk return_https_redirect_status=1 --output=json'
Sep 12 05:16:33 power sudo[2592351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:33 power sudo[2592351]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:33 power sudo[2592361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog Mime list_redirects --output=json'
Sep 12 05:16:33 power sudo[2592361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:33 power sudo[2592361]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:36 power sudo[2592521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DirectoryPrivacy is_directory_protected dir=/home/nefrolog/public_html --output=json'
Sep 12 05:16:36 power sudo[2592521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:36 power sudo[2592521]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:39 power sudo[2592765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep 12 05:16:39 power sudo[2592765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:39 power sudo[2592765]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:39 power sudo[2592776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikimare --output=json'
Sep 12 05:16:39 power sudo[2592776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:39 power sudo[2592776]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:46 power sudo[2592892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:16:46 power sudo[2592892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:46 power sudo[2592892]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:46 power sudo[2592898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep 12 05:16:46 power sudo[2592898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:46 power sudo[2592898]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:46 power sudo[2592904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare LangPHP php_get_vhost_versions --output=json'
Sep 12 05:16:47 power sudo[2592904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:47 power sudo[2592904]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:47 power sudo[2592909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:16:47 power sudo[2592909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:47 power sudo[2592909]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:47 power sudo[2592930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DomainInfo single_domain_data domain=niki-mare.com return_https_redirect_status=1 --output=json'
Sep 12 05:16:47 power sudo[2592930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:47 power sudo[2592930]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:47 power sudo[2592936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare Mime list_redirects --output=json'
Sep 12 05:16:47 power sudo[2592936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:47 power sudo[2592936]: pam_unix(sudo:session): session closed for user root
Sep 12 05:16:51 power sudo[2593040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html/wp --output=json'
Sep 12 05:16:51 power sudo[2593040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:16:51 power sudo[2593040]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:01 power sudo[2593353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:17:01 power sudo[2593353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:01 power sudo[2593353]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:01 power sudo[2593363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep 12 05:17:01 power sudo[2593363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:01 power sudo[2593363]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:01 power sudo[2593382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:17:01 power sudo[2593382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:01 power sudo[2593382]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:05 power sudo[2593476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html --output=json'
Sep 12 05:17:05 power sudo[2593476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:06 power sudo[2593476]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:09 power sudo[2593680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep 12 05:17:09 power sudo[2593680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:09 power sudo[2593680]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:09 power sudo[2593693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nucktra1 --output=json'
Sep 12 05:17:09 power sudo[2593693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:09 power sudo[2593693]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:14 power sudo[2593784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:17:14 power sudo[2593784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:14 power sudo[2593784]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:14 power sudo[2593792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep 12 05:17:14 power sudo[2593792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:14 power sudo[2593792]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:14 power sudo[2593831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 LangPHP php_get_vhost_versions --output=json'
Sep 12 05:17:14 power sudo[2593831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:14 power sudo[2593831]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:14 power sudo[2593856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php56 --output=json'
Sep 12 05:17:14 power sudo[2593856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:15 power sudo[2593856]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:15 power sudo[2593882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:17:15 power sudo[2593882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:15 power sudo[2593882]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:15 power sudo[2593912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep 12 05:17:15 power sudo[2593912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:15 power sudo[2593912]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:15 power sudo[2593920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 Mime list_redirects --output=json'
Sep 12 05:17:15 power sudo[2593920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:16 power sudo[2593920]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:19 power sudo[2594038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/public_html --output=json'
Sep 12 05:17:19 power sudo[2594038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:20 power sudo[2594038]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:25 power sudo[2594294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep 12 05:17:25 power sudo[2594294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:25 power sudo[2594294]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:25 power sudo[2594303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pravekom --output=json'
Sep 12 05:17:25 power sudo[2594303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:25 power sudo[2594303]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:36 power sudo[2594469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom /bin/sh -c 'cd /home/pravekom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:17:36 power sudo[2594469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:36 power sudo[2594469]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:36 power sudo[2594475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pravekom --user-current --json'
Sep 12 05:17:36 power sudo[2594475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:37 power sudo[2594475]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:37 power sudo[2594484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom LangPHP php_get_vhost_versions --output=json'
Sep 12 05:17:37 power sudo[2594484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:37 power sudo[2594484]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:37 power sudo[2594489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:17:37 power sudo[2594489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:37 power sudo[2594489]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:37 power sudo[2594505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DomainInfo single_domain_data domain=praveko.mk return_https_redirect_status=1 --output=json'
Sep 12 05:17:37 power sudo[2594505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:37 power sudo[2594505]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:37 power sudo[2594511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom Mime list_redirects --output=json'
Sep 12 05:17:37 power sudo[2594511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:37 power sudo[2594511]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:42 power sudo[2594640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DirectoryPrivacy is_directory_protected dir=/home/pravekom/public_html --output=json'
Sep 12 05:17:42 power sudo[2594640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:43 power sudo[2594640]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:46 power sudo[2594829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep 12 05:17:46 power sudo[2594829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:46 power sudo[2594829]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:46 power sudo[2594836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=proverim --output=json'
Sep 12 05:17:46 power sudo[2594836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:46 power sudo[2594836]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:52 power sudo[2594935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:17:52 power sudo[2594935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:52 power sudo[2594935]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:52 power sudo[2594941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user proverim --user-current --json'
Sep 12 05:17:52 power sudo[2594941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:53 power sudo[2594941]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:53 power sudo[2594955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim LangPHP php_get_vhost_versions --output=json'
Sep 12 05:17:53 power sudo[2594955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:53 power sudo[2594955]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:53 power sudo[2594966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:17:53 power sudo[2594966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:53 power sudo[2594966]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:53 power sudo[2594986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DomainInfo single_domain_data domain=proveri.mk return_https_redirect_status=1 --output=json'
Sep 12 05:17:53 power sudo[2594986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:53 power sudo[2594986]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:53 power sudo[2594992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim Mime list_redirects --output=json'
Sep 12 05:17:53 power sudo[2594992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:53 power sudo[2594992]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:56 power sudo[2595070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DirectoryPrivacy is_directory_protected dir=/home/proverim/public_html --output=json'
Sep 12 05:17:56 power sudo[2595070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:56 power sudo[2595070]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:57 power sudo[2595131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:17:57 power sudo[2595131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:57 power sudo[2595131]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:57 power sudo[2595136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:17:57 power sudo[2595136]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:17:57 power sudo[2595136]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:17:57 power sudo[2595136]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:17:57 power sudo[2595136]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:17:57 power sudo[2595136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:57 power sudo[2595136]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:57 power sudo[2595144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:17:57 power sudo[2595144]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:17:57 power sudo[2595144]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:17:57 power sudo[2595144]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:17:57 power sudo[2595144]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:17:57 power sudo[2595144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:57 power sudo[2595144]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:57 power sudo[2595149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:17:57 power sudo[2595149]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:17:57 power sudo[2595149]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:17:57 power sudo[2595149]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:17:57 power sudo[2595149]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:17:57 power sudo[2595149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:57 power sudo[2595149]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:59 power sudo[2595251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:17:59 power sudo[2595251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:59 power sudo[2595251]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:59 power sudo[2595258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:17:59 power sudo[2595258]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:17:59 power sudo[2595258]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:17:59 power sudo[2595258]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:17:59 power sudo[2595258]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:17:59 power sudo[2595258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:59 power sudo[2595258]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:59 power sudo[2595263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:17:59 power sudo[2595263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:17:59 power sudo[2595263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:17:59 power sudo[2595263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:17:59 power sudo[2595263]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:17:59 power sudo[2595263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:59 power sudo[2595263]: pam_unix(sudo:session): session closed for user root
Sep 12 05:17:59 power sudo[2595275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:17:59 power sudo[2595275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:17:59 power sudo[2595275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:17:59 power sudo[2595275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:17:59 power sudo[2595275]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:17:59 power sudo[2595275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:17:59 power sudo[2595275]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:00 power sudo[2595311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep 12 05:18:00 power sudo[2595311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:00 power sudo[2595311]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:00 power sudo[2595317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rastiraz --output=json'
Sep 12 05:18:00 power sudo[2595317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:00 power sudo[2595317]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:03 power sudo[2595390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:18:03 power sudo[2595390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:03 power sudo[2595390]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:03 power sudo[2595399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rastiraz --user-current --json'
Sep 12 05:18:03 power sudo[2595399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:03 power sudo[2595399]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:03 power sudo[2595404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz LangPHP php_get_vhost_versions --output=json'
Sep 12 05:18:03 power sudo[2595404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:03 power sudo[2595404]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:03 power sudo[2595409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:18:03 power sudo[2595409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:03 power sudo[2595409]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:04 power sudo[2595423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DomainInfo single_domain_data domain=rastirazvoj.mk return_https_redirect_status=1 --output=json'
Sep 12 05:18:04 power sudo[2595423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:04 power sudo[2595423]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:04 power sudo[2595430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz Mime list_redirects --output=json'
Sep 12 05:18:04 power sudo[2595430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:04 power sudo[2595430]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:06 power sudo[2595512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DirectoryPrivacy is_directory_protected dir=/home/rastiraz/public_html --output=json'
Sep 12 05:18:06 power sudo[2595512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:06 power sudo[2595512]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:07 power sudo[2595577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:07 power sudo[2595577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:07 power sudo[2595577]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:07 power sudo[2595582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:18:07 power sudo[2595582]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:18:07 power sudo[2595582]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:18:07 power sudo[2595582]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:18:07 power sudo[2595582]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:07 power sudo[2595582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:07 power sudo[2595582]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:07 power sudo[2595587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:18:07 power sudo[2595587]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:18:07 power sudo[2595587]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:18:07 power sudo[2595587]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:18:07 power sudo[2595587]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:07 power sudo[2595587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:07 power sudo[2595587]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:07 power sudo[2595592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:18:07 power sudo[2595592]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:18:07 power sudo[2595592]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:18:07 power sudo[2595592]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:18:07 power sudo[2595592]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:07 power sudo[2595592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:07 power sudo[2595592]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:09 power sudo[2595710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:09 power sudo[2595710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:09 power sudo[2595710]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:09 power sudo[2595716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:18:09 power sudo[2595716]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:18:09 power sudo[2595716]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:18:09 power sudo[2595716]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:18:09 power sudo[2595716]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:09 power sudo[2595716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:09 power sudo[2595716]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:09 power sudo[2595722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:18:09 power sudo[2595722]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:18:09 power sudo[2595722]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:18:09 power sudo[2595722]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:18:09 power sudo[2595722]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:09 power sudo[2595722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:09 power sudo[2595722]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:09 power sudo[2595727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:18:09 power sudo[2595727]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:18:09 power sudo[2595727]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:18:09 power sudo[2595727]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:18:09 power sudo[2595727]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:09 power sudo[2595727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:09 power sudo[2595727]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:09 power sudo[2595773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep 12 05:18:09 power sudo[2595773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:10 power sudo[2595773]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:10 power sudo[2595781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=conserva --output=json'
Sep 12 05:18:10 power sudo[2595781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:10 power sudo[2595781]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:13 power sudo[2595893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva /bin/sh -c 'cd /home/conserva/RebornMacedonia.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:18:13 power sudo[2595893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:13 power sudo[2595893]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:13 power sudo[2595899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user conserva --user-current --json'
Sep 12 05:18:13 power sudo[2595899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:14 power sudo[2595899]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:14 power sudo[2595904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva LangPHP php_get_vhost_versions --output=json'
Sep 12 05:18:14 power sudo[2595904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:14 power sudo[2595904]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:14 power sudo[2595909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:18:14 power sudo[2595909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:14 power sudo[2595909]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:14 power sudo[2595927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DomainInfo single_domain_data domain=rebornmacedonia.com return_https_redirect_status=1 --output=json'
Sep 12 05:18:14 power sudo[2595927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:14 power sudo[2595927]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:14 power sudo[2595933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva Mime list_redirects --output=json'
Sep 12 05:18:14 power sudo[2595933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:14 power sudo[2595933]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:17 power sudo[2596077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DirectoryPrivacy is_directory_protected dir=/home/conserva/RebornMacedonia.com --output=json'
Sep 12 05:18:17 power sudo[2596077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:17 power sudo[2596077]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:20 power sudo[2596280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep 12 05:18:20 power sudo[2596280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:21 power sudo[2596280]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:21 power sudo[2596289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=maleshne --output=json'
Sep 12 05:18:21 power sudo[2596289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:21 power sudo[2596289]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:25 power sudo[2596371]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:18:25 power sudo[2596371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:25 power sudo[2596371]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:25 power sudo[2596380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user maleshne --user-current --json'
Sep 12 05:18:25 power sudo[2596380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:25 power sudo[2596380]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:25 power sudo[2596386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne LangPHP php_get_vhost_versions --output=json'
Sep 12 05:18:25 power sudo[2596386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:25 power sudo[2596386]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:25 power sudo[2596392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:18:25 power sudo[2596392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:25 power sudo[2596392]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:26 power sudo[2596408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DomainInfo single_domain_data domain=restoranmrs.mk return_https_redirect_status=1 --output=json'
Sep 12 05:18:26 power sudo[2596408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:26 power sudo[2596408]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:26 power sudo[2596414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne Mime list_redirects --output=json'
Sep 12 05:18:26 power sudo[2596414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:26 power sudo[2596414]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:28 power sudo[2596499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DirectoryPrivacy is_directory_protected dir=/home/maleshne/public_html --output=json'
Sep 12 05:18:28 power sudo[2596499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:28 power sudo[2596499]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:29 power sudo[2596565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:29 power sudo[2596565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:29 power sudo[2596565]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:29 power sudo[2596570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:18:29 power sudo[2596570]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:18:29 power sudo[2596570]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:18:29 power sudo[2596570]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:18:29 power sudo[2596570]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:29 power sudo[2596570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:29 power sudo[2596570]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:29 power sudo[2596576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:18:29 power sudo[2596576]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:18:29 power sudo[2596576]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:18:29 power sudo[2596576]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:18:29 power sudo[2596576]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:29 power sudo[2596576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:29 power sudo[2596576]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:32 power sudo[2596732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:32 power sudo[2596732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:32 power sudo[2596732]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:32 power sudo[2596737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:18:32 power sudo[2596737]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:18:32 power sudo[2596737]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:18:32 power sudo[2596737]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:18:32 power sudo[2596737]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:32 power sudo[2596737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:32 power sudo[2596737]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:32 power sudo[2596742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:18:32 power sudo[2596742]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:18:32 power sudo[2596742]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:18:32 power sudo[2596742]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:18:32 power sudo[2596742]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:32 power sudo[2596742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:32 power sudo[2596742]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:32 power sudo[2596783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep 12 05:18:32 power sudo[2596783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:32 power sudo[2596783]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:32 power sudo[2596791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=samasped --output=json'
Sep 12 05:18:32 power sudo[2596791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:33 power sudo[2596791]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:39 power sudo[2596906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped /bin/sh -c 'cd /home/samasped/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:18:39 power sudo[2596906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:39 power sudo[2596906]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:39 power sudo[2596912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user samasped --user-current --json'
Sep 12 05:18:39 power sudo[2596912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:40 power sudo[2596912]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:40 power sudo[2596918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped LangPHP php_get_vhost_versions --output=json'
Sep 12 05:18:40 power sudo[2596918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:40 power sudo[2596918]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:40 power sudo[2596925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:18:40 power sudo[2596925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:40 power sudo[2596925]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:40 power sudo[2596941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DomainInfo single_domain_data domain=samasped.mk return_https_redirect_status=1 --output=json'
Sep 12 05:18:40 power sudo[2596941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:40 power sudo[2596941]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:40 power sudo[2596947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped Mime list_redirects --output=json'
Sep 12 05:18:40 power sudo[2596947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:40 power sudo[2596947]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:44 power sudo[2597037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DirectoryPrivacy is_directory_protected dir=/home/samasped/public_html --output=json'
Sep 12 05:18:44 power sudo[2597037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:44 power sudo[2597037]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:47 power sudo[2597236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep 12 05:18:47 power sudo[2597236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:47 power sudo[2597236]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:47 power sudo[2597254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=seloviro --output=json'
Sep 12 05:18:47 power sudo[2597254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:47 power sudo[2597254]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:53 power sudo[2597358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:18:54 power sudo[2597358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:54 power sudo[2597358]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:54 power sudo[2597365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user seloviro --user-current --json'
Sep 12 05:18:54 power sudo[2597365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:54 power sudo[2597365]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:54 power sudo[2597372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro LangPHP php_get_vhost_versions --output=json'
Sep 12 05:18:54 power sudo[2597372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:54 power sudo[2597372]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:54 power sudo[2597377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:18:54 power sudo[2597377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:54 power sudo[2597377]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:54 power sudo[2597396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DomainInfo single_domain_data domain=selovirovo.mk return_https_redirect_status=1 --output=json'
Sep 12 05:18:54 power sudo[2597396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:54 power sudo[2597396]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:54 power sudo[2597403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro Mime list_redirects --output=json'
Sep 12 05:18:55 power sudo[2597403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:55 power sudo[2597403]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:58 power sudo[2597507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DirectoryPrivacy is_directory_protected dir=/home/seloviro/public_html --output=json'
Sep 12 05:18:58 power sudo[2597507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:58 power sudo[2597507]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:59 power sudo[2597587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:59 power sudo[2597587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:59 power sudo[2597587]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:59 power sudo[2597592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:18:59 power sudo[2597592]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:18:59 power sudo[2597592]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:18:59 power sudo[2597592]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:18:59 power sudo[2597592]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:59 power sudo[2597592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:59 power sudo[2597592]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:59 power sudo[2597597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:18:59 power sudo[2597597]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:18:59 power sudo[2597597]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:18:59 power sudo[2597597]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:18:59 power sudo[2597597]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:59 power sudo[2597597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:59 power sudo[2597597]: pam_unix(sudo:session): session closed for user root
Sep 12 05:18:59 power sudo[2597603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:18:59 power sudo[2597603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:18:59 power sudo[2597603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:18:59 power sudo[2597603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:18:59 power sudo[2597603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:18:59 power sudo[2597603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:18:59 power sudo[2597603]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:01 power sudo[2597721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:19:01 power sudo[2597721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:01 power sudo[2597721]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:01 power sudo[2597726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:19:01 power sudo[2597726]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:19:01 power sudo[2597726]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:19:01 power sudo[2597726]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:19:01 power sudo[2597726]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:19:01 power sudo[2597726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:01 power sudo[2597726]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:01 power sudo[2597731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:19:01 power sudo[2597731]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:19:01 power sudo[2597731]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:19:01 power sudo[2597731]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:19:01 power sudo[2597731]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:19:01 power sudo[2597731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:01 power sudo[2597731]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:01 power sudo[2597736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:19:01 power sudo[2597736]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:19:01 power sudo[2597736]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:19:01 power sudo[2597736]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:19:01 power sudo[2597736]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:19:01 power sudo[2597736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:01 power sudo[2597736]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:02 power sudo[2597769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep 12 05:19:02 power sudo[2597769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:02 power sudo[2597769]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:02 power sudo[2597782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=skyapart --output=json'
Sep 12 05:19:02 power sudo[2597782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:02 power sudo[2597782]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:04 power sudo[2597837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart /bin/sh -c 'cd /home/skyapart/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:19:04 power sudo[2597837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:04 power sudo[2597837]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:04 power sudo[2597843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user skyapart --user-current --json'
Sep 12 05:19:04 power sudo[2597843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:05 power sudo[2597843]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:05 power sudo[2597850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart LangPHP php_get_vhost_versions --output=json'
Sep 12 05:19:05 power sudo[2597850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:05 power sudo[2597850]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:05 power sudo[2597855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:19:05 power sudo[2597855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:05 power sudo[2597855]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:05 power sudo[2597880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DomainInfo single_domain_data domain=skyapartments.mk return_https_redirect_status=1 --output=json'
Sep 12 05:19:05 power sudo[2597880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:05 power sudo[2597880]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:05 power sudo[2597891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart Mime list_redirects --output=json'
Sep 12 05:19:05 power sudo[2597891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:05 power sudo[2597891]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:07 power sudo[2597965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DirectoryPrivacy is_directory_protected dir=/home/skyapart/public_html --output=json'
Sep 12 05:19:07 power sudo[2597965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:07 power sudo[2597965]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:11 power sudo[2598168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep 12 05:19:11 power sudo[2598168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:11 power sudo[2598168]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:11 power sudo[2598173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=socioloz --output=json'
Sep 12 05:19:11 power sudo[2598173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:11 power sudo[2598173]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:22 power sudo[2598396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz /bin/sh -c 'cd /home/socioloz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:19:22 power sudo[2598396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:22 power sudo[2598396]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:22 power sudo[2598402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user socioloz --user-current --json'
Sep 12 05:19:22 power sudo[2598402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:23 power sudo[2598402]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:23 power sudo[2598410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz LangPHP php_get_vhost_versions --output=json'
Sep 12 05:19:23 power sudo[2598410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:23 power sudo[2598410]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:23 power sudo[2598415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:19:23 power sudo[2598415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:23 power sudo[2598415]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:23 power sudo[2598434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DomainInfo single_domain_data domain=sociolozi.org.mk return_https_redirect_status=1 --output=json'
Sep 12 05:19:23 power sudo[2598434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:23 power sudo[2598434]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:23 power sudo[2598440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz Mime list_redirects --output=json'
Sep 12 05:19:23 power sudo[2598440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:23 power sudo[2598440]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:29 power sudo[2598573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DirectoryPrivacy is_directory_protected dir=/home/socioloz/public_html --output=json'
Sep 12 05:19:29 power sudo[2598573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:29 power sudo[2598573]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:33 power sudo[2598781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep 12 05:19:33 power sudo[2598781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:34 power sudo[2598781]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:34 power sudo[2598788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stojnevi --output=json'
Sep 12 05:19:34 power sudo[2598788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:34 power sudo[2598788]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:37 power sudo[2598856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi /bin/sh -c 'cd /home/stojnevi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:19:37 power sudo[2598856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:37 power sudo[2598856]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:37 power sudo[2598862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stojnevi --user-current --json'
Sep 12 05:19:37 power sudo[2598862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:37 power sudo[2598862]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:37 power sudo[2598870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi LangPHP php_get_vhost_versions --output=json'
Sep 12 05:19:37 power sudo[2598870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:37 power sudo[2598870]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:37 power sudo[2598876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:19:37 power sudo[2598876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:37 power sudo[2598876]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:38 power sudo[2598895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DomainInfo single_domain_data domain=stojnevi.mk return_https_redirect_status=1 --output=json'
Sep 12 05:19:38 power sudo[2598895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:38 power sudo[2598895]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:38 power sudo[2598902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi Mime list_redirects --output=json'
Sep 12 05:19:38 power sudo[2598902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:38 power sudo[2598902]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:41 power sudo[2599017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DirectoryPrivacy is_directory_protected dir=/home/stojnevi/public_html --output=json'
Sep 12 05:19:41 power sudo[2599017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:41 power sudo[2599017]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:51 power sudo[2599344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/teatar.nucktrajkoprokopiev.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:19:51 power sudo[2599344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:51 power sudo[2599344]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:51 power sudo[2599350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep 12 05:19:51 power sudo[2599350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:51 power sudo[2599350]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:51 power sudo[2599355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:19:51 power sudo[2599355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:51 power sudo[2599355]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:51 power sudo[2599373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=teatar.nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep 12 05:19:51 power sudo[2599373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:51 power sudo[2599373]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:55 power sudo[2599468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/teatar.nucktrajkoprokopiev.mk/mk --output=json'
Sep 12 05:19:55 power sudo[2599468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:55 power sudo[2599468]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:58 power sudo[2599654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep 12 05:19:58 power sudo[2599654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:59 power sudo[2599654]: pam_unix(sudo:session): session closed for user root
Sep 12 05:19:59 power sudo[2599669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=trudovop --output=json'
Sep 12 05:19:59 power sudo[2599669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:19:59 power sudo[2599669]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:01 power systemd[2599795]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:20:06 power sudo[2599935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop /bin/sh -c 'cd /home/trudovop/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:20:06 power sudo[2599935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:06 power sudo[2599935]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:06 power sudo[2599941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user trudovop --user-current --json'
Sep 12 05:20:06 power sudo[2599941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:07 power sudo[2599941]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:07 power sudo[2599951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop LangPHP php_get_vhost_versions --output=json'
Sep 12 05:20:07 power sudo[2599951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:07 power sudo[2599951]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:07 power sudo[2599956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:20:07 power sudo[2599956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:07 power sudo[2599956]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:08 power sudo[2599974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DomainInfo single_domain_data domain=trudovopravo.mk return_https_redirect_status=1 --output=json'
Sep 12 05:20:08 power sudo[2599974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:08 power sudo[2599974]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:08 power sudo[2599983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop Mime list_redirects --output=json'
Sep 12 05:20:08 power sudo[2599983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:08 power sudo[2599983]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:12 power sudo[2600102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DirectoryPrivacy is_directory_protected dir=/home/trudovop/public_html --output=json'
Sep 12 05:20:12 power sudo[2600102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:12 power sudo[2600102]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:16 power sudo[2600306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep 12 05:20:16 power sudo[2600306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:16 power sudo[2600306]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:16 power sudo[2600326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=urbanexp --output=json'
Sep 12 05:20:16 power sudo[2600326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:16 power sudo[2600326]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:23 power sudo[2600467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp /bin/sh -c 'cd /home/urbanexp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:20:23 power sudo[2600467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:23 power sudo[2600467]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:23 power sudo[2600473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user urbanexp --user-current --json'
Sep 12 05:20:23 power sudo[2600473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:23 power sudo[2600473]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:23 power sudo[2600481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp LangPHP php_get_vhost_versions --output=json'
Sep 12 05:20:23 power sudo[2600481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:23 power sudo[2600481]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:23 power sudo[2600487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:20:23 power sudo[2600487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:23 power sudo[2600487]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:23 power sudo[2600506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DomainInfo single_domain_data domain=urbanexpert.mk return_https_redirect_status=1 --output=json'
Sep 12 05:20:23 power sudo[2600506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:23 power sudo[2600506]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:23 power sudo[2600512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp Mime list_redirects --output=json'
Sep 12 05:20:23 power sudo[2600512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:24 power sudo[2600512]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:26 power sudo[2600600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DirectoryPrivacy is_directory_protected dir=/home/urbanexp/public_html --output=json'
Sep 12 05:20:26 power sudo[2600600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:26 power sudo[2600600]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:30 power sudo[2600799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep 12 05:20:30 power sudo[2600799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:30 power sudo[2600799]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:30 power sudo[2600806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vfxnestc --output=json'
Sep 12 05:20:30 power sudo[2600806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:30 power sudo[2600806]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:36 power sudo[2600932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc /bin/sh -c 'cd /home/vfxnestc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:20:36 power sudo[2600932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:36 power sudo[2600932]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:36 power sudo[2600938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vfxnestc --user-current --json'
Sep 12 05:20:36 power sudo[2600938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:37 power sudo[2600938]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:37 power sudo[2600947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc LangPHP php_get_vhost_versions --output=json'
Sep 12 05:20:37 power sudo[2600947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:37 power sudo[2600947]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:37 power sudo[2600951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:20:37 power sudo[2600951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:37 power sudo[2600951]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:37 power sudo[2600966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DomainInfo single_domain_data domain=vfxnest.com return_https_redirect_status=1 --output=json'
Sep 12 05:20:37 power sudo[2600966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:37 power sudo[2600966]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:37 power sudo[2600973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc Mime list_redirects --output=json'
Sep 12 05:20:37 power sudo[2600973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:37 power sudo[2600973]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:41 power sudo[2601083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DirectoryPrivacy is_directory_protected dir=/home/vfxnestc/public_html --output=json'
Sep 12 05:20:41 power sudo[2601083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:41 power sudo[2601083]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:46 power sudo[2601296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep 12 05:20:46 power sudo[2601296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:46 power sudo[2601296]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:46 power sudo[2601303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=volkanco --output=json'
Sep 12 05:20:46 power sudo[2601303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:46 power sudo[2601303]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:50 power sudo[2601385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:20:50 power sudo[2601385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:50 power sudo[2601385]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:50 power sudo[2601391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep 12 05:20:51 power sudo[2601391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:51 power sudo[2601391]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:51 power sudo[2601403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco LangPHP php_get_vhost_versions --output=json'
Sep 12 05:20:51 power sudo[2601403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:51 power sudo[2601403]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:51 power sudo[2601410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:20:51 power sudo[2601410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:51 power sudo[2601410]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:51 power sudo[2601424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DomainInfo single_domain_data domain=volkan.com.mk return_https_redirect_status=1 --output=json'
Sep 12 05:20:51 power sudo[2601424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:51 power sudo[2601424]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:51 power sudo[2601430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mime list_redirects --output=json'
Sep 12 05:20:51 power sudo[2601430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:51 power sudo[2601430]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:54 power sudo[2601524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DirectoryPrivacy is_directory_protected dir=/home/volkanco/public_html --output=json'
Sep 12 05:20:54 power sudo[2601524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:54 power sudo[2601524]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:55 power sudo[2601586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:20:55 power sudo[2601586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:55 power sudo[2601586]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:55 power sudo[2601591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:20:55 power sudo[2601591]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:20:55 power sudo[2601591]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:20:55 power sudo[2601591]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:20:55 power sudo[2601591]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:20:55 power sudo[2601591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:55 power sudo[2601591]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:55 power sudo[2601596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:20:55 power sudo[2601596]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:20:55 power sudo[2601596]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:20:55 power sudo[2601596]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:20:55 power sudo[2601596]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:20:55 power sudo[2601596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:55 power sudo[2601596]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:55 power sudo[2601601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:20:55 power sudo[2601601]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:20:55 power sudo[2601601]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:20:55 power sudo[2601601]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:20:55 power sudo[2601601]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:20:55 power sudo[2601601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:55 power sudo[2601601]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:57 power sudo[2601705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:20:57 power sudo[2601705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:57 power sudo[2601705]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:57 power sudo[2601710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 12 05:20:57 power sudo[2601710]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 12 05:20:57 power sudo[2601710]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 12 05:20:57 power sudo[2601710]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 12 05:20:57 power sudo[2601710]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:20:57 power sudo[2601710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:57 power sudo[2601710]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:57 power sudo[2601715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:20:57 power sudo[2601715]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:20:57 power sudo[2601715]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:20:57 power sudo[2601715]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:20:57 power sudo[2601715]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:20:57 power sudo[2601715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:57 power sudo[2601715]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:57 power sudo[2601720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 12 05:20:57 power sudo[2601720]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 12 05:20:57 power sudo[2601720]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 12 05:20:57 power sudo[2601720]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 12 05:20:57 power sudo[2601720]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 12 05:20:57 power sudo[2601720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:57 power sudo[2601720]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:58 power sudo[2601759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep 12 05:20:58 power sudo[2601759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:58 power sudo[2601759]: pam_unix(sudo:session): session closed for user root
Sep 12 05:20:58 power sudo[2601766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=glammace --output=json'
Sep 12 05:20:58 power sudo[2601766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:20:58 power sudo[2601766]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:08 power sudo[2601986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace /bin/sh -c 'cd /home/glammace/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:21:08 power sudo[2601986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:08 power sudo[2601986]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:08 power sudo[2601992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user glammace --user-current --json'
Sep 12 05:21:08 power sudo[2601992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:09 power sudo[2601992]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:09 power sudo[2601998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace LangPHP php_get_vhost_versions --output=json'
Sep 12 05:21:09 power sudo[2601998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:09 power sudo[2601998]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:09 power sudo[2602006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:21:09 power sudo[2602006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:09 power sudo[2602006]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:09 power sudo[2602023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DomainInfo single_domain_data domain=wikimedia.mk return_https_redirect_status=1 --output=json'
Sep 12 05:21:09 power sudo[2602023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:09 power sudo[2602023]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:09 power sudo[2602029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace Mime list_redirects --output=json'
Sep 12 05:21:09 power sudo[2602029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:09 power sudo[2602029]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:14 power sudo[2602178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DirectoryPrivacy is_directory_protected dir=/home/glammace/public_html --output=json'
Sep 12 05:21:14 power sudo[2602178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:14 power sudo[2602178]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:25 power sudo[2602590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:21:25 power sudo[2602590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:25 power sudo[2602590]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:25 power sudo[2602597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep 12 05:21:25 power sudo[2602597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:25 power sudo[2602597]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:25 power sudo[2602605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:21:25 power sudo[2602605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:25 power sudo[2602605]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:26 power sudo[2602630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=wineberry.mk return_https_redirect_status=1 --output=json'
Sep 12 05:21:26 power sudo[2602630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:26 power sudo[2602630]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:30 power sudo[2602746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/public_html --output=json'
Sep 12 05:21:30 power sudo[2602746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:30 power sudo[2602746]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:34 power sudo[2602949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep 12 05:21:34 power sudo[2602949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:34 power sudo[2602949]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:34 power sudo[2602954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workbenc --output=json'
Sep 12 05:21:34 power sudo[2602954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:34 power sudo[2602954]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:37 power sudo[2603102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc /bin/sh -c 'cd /home/workbenc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:21:37 power sudo[2603102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:37 power sudo[2603102]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:37 power sudo[2603108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workbenc --user-current --json'
Sep 12 05:21:37 power sudo[2603108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:38 power sudo[2603108]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:38 power sudo[2603122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc LangPHP php_get_vhost_versions --output=json'
Sep 12 05:21:38 power sudo[2603122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:38 power sudo[2603122]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:38 power sudo[2603130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:21:38 power sudo[2603130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:38 power sudo[2603130]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:38 power sudo[2603200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DomainInfo single_domain_data domain=workbench-ent.com return_https_redirect_status=1 --output=json'
Sep 12 05:21:38 power sudo[2603200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:38 power sudo[2603200]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:38 power sudo[2603206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc Mime list_redirects --output=json'
Sep 12 05:21:38 power sudo[2603206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:38 power sudo[2603206]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:40 power sudo[2603282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DirectoryPrivacy is_directory_protected dir=/home/workbenc/public_html --output=json'
Sep 12 05:21:40 power sudo[2603282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:40 power sudo[2603282]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:44 power sudo[2603505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 12 05:21:44 power sudo[2603505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:44 power sudo[2603505]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:44 power sudo[2603510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=berbermk --output=json'
Sep 12 05:21:44 power sudo[2603510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:44 power sudo[2603510]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:51 power sudo[2603661]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 12 05:21:51 power sudo[2603661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:51 power sudo[2603661]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:51 power sudo[2603668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user berbermk --user-current --json'
Sep 12 05:21:51 power sudo[2603668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:51 power sudo[2603668]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:51 power sudo[2603677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk LangPHP php_get_vhost_versions --output=json'
Sep 12 05:21:51 power sudo[2603677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:51 power sudo[2603677]: pam_unix(sudo:session): session closed for user root
Sep 12 05:21:51 power sudo[2603683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 12 05:21:51 power sudo[2603683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:21:51 power sudo[2603683]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/hooks
Sep 12 05:22:55 power sudo[2607503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607503]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep 12 05:22:55 power sudo[2607507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607507]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607511]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607515]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607519]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607523]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607527]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607532]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607536]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607540]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607544]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607548]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607552]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607556]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607560]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607564]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607568]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607572]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607576]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607580]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607584]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607588]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/animatem/animate.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607592]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/animatem/animate.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607596]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607600]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607604]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607608]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607612]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607618]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607622]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607626]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607630]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607634]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:55 power sudo[2607638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 12 05:22:55 power sudo[2607638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:55 power sudo[2607638]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607643]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607647]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607651]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607655]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607659]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607663]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607667]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607671]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607675]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607679]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607683]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607688]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607692]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607696]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607700]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607708]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607712]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607716]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607720]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607724]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607728]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607732]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607738]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607744]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607748]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607752]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607756]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607760]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607764]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607768]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607772]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607776]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607780]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607784]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607788]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607792]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607796]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607800]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607804]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607808]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607812]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607816]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607820]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607824]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607828]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607832]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607836]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607840]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607844]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607848]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607852]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607856]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607860]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607864]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607868]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607872]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607876]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607880]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607884]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607888]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607892]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607897]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607901]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607906]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607911]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607915]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607919]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607923]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607927]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:56 power sudo[2607931]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:56 power sudo[2607935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 12 05:22:56 power sudo[2607935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607935]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607939]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607943]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607948]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607952]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607956]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607960]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607964]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607968]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607972]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607976]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607980]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607984]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607988]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607992]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2607997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2607997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2607997]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608004]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608009]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608013]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608017]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608021]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608025]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608029]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608033]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608037]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608041]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608045]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608049]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608053]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608057]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608061]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608065]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608069]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608074]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608085]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608089]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608094]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608098]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608102]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608107]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608111]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608115]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608119]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608124]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608128]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608132]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608136]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608140]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608144]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608148]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608153]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608157]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608161]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608165]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608169]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608173]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608177]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608181]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608185]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608189]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608193]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608197]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608201]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608205]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608209]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep 12 05:22:57 power sudo[2608213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:57 power sudo[2608213]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:57 power sudo[2608217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep 12 05:22:57 power sudo[2608217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608217]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608222]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608226]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608231]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608236]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608243]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608247]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608251]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608255]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608259]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608263]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608267]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608271]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608275]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608279]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608283]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608287]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608291]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608295]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608299]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608303]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608307]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608311]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608315]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608319]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608323]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608327]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608331]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608336]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608340]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608344]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608348]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608353]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608357]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608361]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608366]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608370]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608374]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608378]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608382]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608386]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608390]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608394]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608398]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608402]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608406]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608410]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608414]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608418]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608422]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608426]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608430]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608434]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608438]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608442]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608446]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608450]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608458]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608462]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608466]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:58 power sudo[2608470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 12 05:22:58 power sudo[2608470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:58 power sudo[2608470]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608474]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608479]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608483]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608487]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608491]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608495]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608500]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608504]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608508]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608512]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608516]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608520]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608525]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608529]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608533]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608537]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608541]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608551]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608555]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608560]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608566]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608570]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608574]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608578]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608582]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608586]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608590]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608594]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608598]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608602]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608606]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608611]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608615]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608619]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608623]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608627]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608631]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608635]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608639]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608643]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608647]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608651]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608655]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608659]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608663]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608667]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608671]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608675]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608679]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608684]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608688]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608692]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608696]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608700]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608704]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608708]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608712]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608716]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608720]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608724]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608728]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608733]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608737]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608741]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608745]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608749]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep 12 05:22:59 power sudo[2608753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:22:59 power sudo[2608753]: pam_unix(sudo:session): session closed for user root
Sep 12 05:22:59 power sudo[2608757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608757]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608761]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608765]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608769]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608773]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608777]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608781]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608785]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608789]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608794]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608798]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608802]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608807]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608811]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608815]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608819]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608823]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608830]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608834]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608838]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608842]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608846]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608850]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608854]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608858]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608862]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608866]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608870]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608874]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608878]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608882]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608886]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608890]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608894]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608898]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608902]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608906]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608910]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608914]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608918]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608922]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608926]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608930]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608934]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608938]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608942]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608946]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608950]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608954]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608958]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608962]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608966]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608970]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608974]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608978]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608982]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608986]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608990]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608994]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2608998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2608998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2608998]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609002]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609006]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609010]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609014]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609018]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609022]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609027]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609031]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609035]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609039]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609043]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:00 power sudo[2609048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:00 power sudo[2609048]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:00 power sudo[2609052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609052]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609056]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609060]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609064]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609068]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609072]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609076]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609080]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609084]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609088]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609092]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609096]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609100]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609106]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609110]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609114]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609118]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609125]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609129]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609133]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609137]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609141]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609146]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609150]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609154]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609158]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609162]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609166]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609170]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609175]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609179]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609183]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609187]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609191]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609196]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609200]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609204]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609208]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609212]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609216]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609220]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep 12 05:23:01 power sudo[2609224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609224]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609240]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609244]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609248]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609252]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609256]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609260]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609264]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609268]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609272]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609278]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609282]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:01 power sudo[2609286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 12 05:23:01 power sudo[2609286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:01 power sudo[2609286]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609290]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609295]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609299]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609303]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609307]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609311]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609315]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609319]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609325]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609329]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609333]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609337]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609341]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609345]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609352]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609356]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609361]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609365]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609369]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609373]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609377]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609381]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609385]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609389]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609393]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609397]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609401]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609405]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609409]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609413]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609417]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609421]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609425]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609429]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609433]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609437]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609442]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609446]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609450]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609454]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609458]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609462]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609466]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609470]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609474]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609478]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609482]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609487]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609491]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609495]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609499]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609503]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609507]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609511]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609515]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609520]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609524]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609529]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609533]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609537]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609541]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609545]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609549]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609553]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609557]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609561]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609565]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep 12 05:23:02 power sudo[2609569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:02 power sudo[2609569]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:02 power sudo[2609573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609573]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609577]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609581]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609585]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609589]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609593]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609597]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609601]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609605]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609609]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609613]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609617]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609621]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609625]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609629]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609633]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609640]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609644]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609648]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609652]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609656]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609660]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609664]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609668]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609672]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609676]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609680]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609684]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609688]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609692]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609696]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609700]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609704]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609708]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609712]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609716]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609720]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609724]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609728]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609732]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609736]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609740]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609744]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609748]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609752]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609756]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609760]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609764]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609768]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609772]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609777]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609781]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609785]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609789]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609793]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609797]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609801]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609805]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609809]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609813]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609818]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609822]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609826]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609830]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609834]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609838]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609842]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609846]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609850]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609854]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 12 05:23:03 power sudo[2609858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:03 power sudo[2609858]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:03 power sudo[2609866]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609866]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609870]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609874]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609878]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609882]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609886]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609890]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609894]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609898]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609902]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609906]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609910]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609914]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609918]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609922]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609926]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609930]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609937]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609941]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609946]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609950]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609954]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609958]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609962]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609966]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609970]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609974]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609978]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609982]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609986]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609990]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2609998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2609998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2609998]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610002]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610006]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610012]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610016]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610020]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610024]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610028]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610032]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610036]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610040]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610044]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610049]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610054]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610058]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610062]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610066]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610070]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610074]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610078]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610082]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610086]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610090]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610090]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610094]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610098]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610102]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610106]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610110]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610114]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610118]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610122]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610126]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610130]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610134]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610138]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610143]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610147]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610151]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610155]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610159]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:04 power sudo[2610163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 12 05:23:04 power sudo[2610163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:04 power sudo[2610163]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610167]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610171]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610175]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610179]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610183]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610187]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610191]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610195]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610199]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610203]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610207]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610211]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610216]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610221]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610225]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610229]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610233]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610240]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610244]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610248]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610254]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610258]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610262]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610267]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610271]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610275]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610279]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610283]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610287]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610291]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610295]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610299]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610303]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610307]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610311]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610315]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610319]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610325]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610329]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610333]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610337]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610343]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610347]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610351]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610355]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610360]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610364]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610368]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610372]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610376]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610380]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610384]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610389]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610393]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610398]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610402]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610406]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610410]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610414]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610418]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610422]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610426]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610430]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610434]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610439]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610443]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610447]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610451]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610455]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610459]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:05 power sudo[2610463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep 12 05:23:05 power sudo[2610463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:05 power sudo[2610463]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610467]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610471]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610475]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610479]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610484]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610488]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610492]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610496]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610500]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610504]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610508]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610512]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610516]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610520]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610524]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610528]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610532]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610539]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610543]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610547]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610551]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610555]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610559]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610563]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610567]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610571]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610575]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610579]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610583]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610587]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610591]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610595]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610599]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610603]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610607]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610611]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610615]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610619]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610623]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610628]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610632]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610636]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610640]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610644]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610648]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610652]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610656]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610660]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610664]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610668]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610672]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610676]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610680]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610684]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610688]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610692]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610696]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610700]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610704]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610708]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610712]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610716]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610720]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610724]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610728]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610732]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610736]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610736]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610741]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:06 power sudo[2610745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 12 05:23:06 power sudo[2610745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:06 power sudo[2610745]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610749]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610753]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610757]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610761]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610765]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610769]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610773]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610777]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610781]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610785]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610789]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610793]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610797]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610801]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610805]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610809]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610813]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610820]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610825]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610829]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610833]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610837]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610841]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610845]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610849]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610853]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610857]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610861]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610865]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610869]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610873]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610877]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610881]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610885]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610889]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610893]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610897]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610901]: pam_unix(sudo:session): session closed for user root
Sep 12 05:23:07 power sudo[2610905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit.conf
Sep 12 05:23:07 power sudo[2610905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:23:07 power sudo[2610905]: pam_unix(sudo:session): session closed for user root
Sep 12 05:25:01 power systemd[2612926]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:30:01 power systemd[2617428]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:30:01 power systemd[2617430]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 05:30:01 power systemd[2617433]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 05:30:01 power systemd[2617432]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 05:35:01 power systemd[2622048]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:35:06 power systemd[2622206]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep 12 05:35:06 power su[2622202]: pam_unix(su:session): session opened for user spdcompu(uid=1023) by (uid=0)
Sep 12 05:35:06 power su[2622202]: pam_unix(su:session): session closed for user spdcompu
Sep 12 05:36:01 power systemd[2622894]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 05:37:01 power systemd[2623929]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 05:40:01 power systemd[2626535]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:42:01 power systemd[2628335]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 05:42:10 power sudo[2628469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 05:42:10 power sudo[2628469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:10 power sudo[2628469]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:10 power sudo[2628476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 05:42:10 power sudo[2628476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:10 power sudo[2628476]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:10 power sudo[2628480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 05:42:10 power sudo[2628480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:10 power sudo[2628480]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:10 power sudo[2628484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=I754XsXfe3'
Sep 12 05:42:10 power sudo[2628484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:10 power sudo[2628484]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:10 power sudo[2628489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 05:42:10 power sudo[2628489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:10 power sudo[2628489]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:10 power sudo[2628493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 05:42:10 power sudo[2628493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:10 power sudo[2628493]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:10 power sudo[2628497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 05:42:10 power sudo[2628497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:10 power sudo[2628497]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:10 power sudo[2628502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 05:42:10 power sudo[2628502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:11 power sudo[2628502]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:11 power sudo[2628507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 05:42:11 power sudo[2628507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:11 power sudo[2628507]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:11 power sudo[2628511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 05:42:11 power sudo[2628511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:11 power sudo[2628511]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:11 power sudo[2628515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 05:42:11 power sudo[2628515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:11 power sudo[2628515]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:11 power sudo[2628519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 05:42:11 power sudo[2628519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:11 power sudo[2628519]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:11 power sudo[2628523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 05:42:11 power sudo[2628523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:11 power sudo[2628523]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:11 power sudo[2628527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 05:42:11 power sudo[2628527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:11 power sudo[2628527]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:13 power sudo[2628573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 05:42:13 power sudo[2628573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:13 power sudo[2628573]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:13 power sudo[2628582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 05:42:13 power sudo[2628582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:13 power sudo[2628582]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:13 power sudo[2628592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=berbermk user-2=edomcomm user-3=herbalpl user-4=enochmk user-5=sprintst user-6=dikimk12 user-7=seloviro user-8=nolimits user-9=kolened1 user-10=centarba user-11=nlpmkorg user-12=proverim user-13=dadarmk user-14=tealmk user-15=gocruise user-16=mstmmk user-17=goodnews user-18=dnevnoin user-19=tradeyou user-20=gjorgeiv user-21=rastiraz user-22=holiyayt user-23=robustco user-24=stravelm user-25=wondersp user-26=pecakome user-27=hotammk user-28=cajsproc user-29=anitermc user-30=youthgua user-31=bauerbg user-32=uhostmk5 user-33=oouslave user-34=raremk user-35=stojnevi user-36=trudovop user-37=viewinn user-38=vmro user-39=enaspotc user-40=pelagoni user-41=avtogumi user-42=socioloz user-43=evolvepl user-44=caramk user-45=hidrommk user-46=frizered user-47=ekostoc1 user-48=levantmk user-49=oncolog1 user-50=nefrolog
Sep 12 05:42:13 power sudo[2628592]: wp-toolkit : (command continued) user-51=univerz1 user-52=kujnamon user-53=velmk user-54=gogovan1 user-55=datalink user-56=mpbmk user-57=agrosind user-58=mfashion user-59=dhamachi user-60=volkanco user-61=goartsym user-62=workandt user-63=barececo user-64=getaldus user-65=delcevca user-66=simbiome user-67=rasmorgm user-68=skyapart user-69=bianasho user-70=makoasmk user-71=urbanexp user-72=wikicamp user-73=mspmk user-74=infobadi user-75=detskagr user-76=spdcompu user-77=maleshne user-78=datelcom user-79=bizporta user-80=polyeste user-81=vfxnestc user-82=groskome user-83=ivanjord user-84=sedcmk user-85=custome1 user-86=busymard user-87=zvskopje user-88=zampmk user-89=palenzok user-90=klimimk user-91=stokovna user-92=sparkupm user-93=bovincom user-94=stojano1 user-95=cabinetm user-96=vezilkac user-97=itradeco user-98=janiboja user-99=drleomk user-100=inotekso user-101=jpparkin user-102=daris user-103=butelmk user-104=premiums user-105=screenme
Sep 12 05:42:13 power sudo[2628592]: wp-toolkit : (command continued) user-106=arturaco user-107=nasaidni user-108=karpospo user-109=ideaplus user-110=dalmacom user-111=cetplatf user-112=premiuma user-113=kouzonco user-114=kardiome user-115=apgrupmk user-116=bogdanos user-117=carrent1 user-118=mediasol user-119=matratze user-120=euronic2 user-121=lblawcom user-122=nucktra1 user-123=mediatag user-124=intelek1 user-125=nikolov1 user-126=hausmark user-127=forzares user-128=nikimare user-129=aptekazd user-130=albuname user-131=glammace user-132=imdskopj user-133=vtranseu user-134=pravekom user-135=infopor1 user-136=elektrot user-137=zapovim1 user-138=cosmatob user-139=euromaki user-140=nutrivim user-141=samasped user-142=chemhemc user-143=zdmgpsor user-144=supremel user-145=v5srybi9dcdx user-146=aquatech user-147=gorsajmk user-148=tehnologija user-149=taneccom user-150=vacuacti user-151=premiumi user-152=innofabl user-153=prizmapl user-154=darkogor user-155=fnjorgmk user-156=dslmk
Sep 12 05:42:13 power sudo[2628592]: wp-toolkit : (command continued) user-157=bozinovm user-158=inkigaic user-159=modernar user-160=starluxm user-161=radekrat user-162=fffhpcwr user-163=versusmk user-164=fiziosmk user-165=ambitiou user-166=mapaspla user-167=solemor1 user-168=nationa2 user-169=onlinesh user-170=tcieuroc user-171=bauerin2 user-172=folklore user-173=conserva user-174=cupidpro user-175=vegemk1 user-176=euronic3 user-177=evberasm user-178=bonitavi user-179=makdrone user-180=tehnodro user-181=jpkomuna user-182=izzomk user-183=gradbai1 user-184=aptekafa user-185=madzomk user-186=evacommk user-187=fxxcom user-188=peshkai1 user-189=dimpalne user-190=eaptekam user-191=cleanerm user-192=animatem user-193=progress user-194=atspedco user-195=sssoluti user-196=solointe user-197=jaramk user-198=taktcomm user-199=recorgmk user-200=pelagini user-201=bbbustou user-202=biplmk user-203=kaoilmk user-204=mbmehani user-205=ismassag user-206=workbenc user-207=viplastc user-208=wineberr
Sep 12 05:42:13 power sudo[2628592]: wp-toolkit : (command continued) user-209=solarinv user-210=eurofarm user-211=electrol user-212=eliksirz user-213=naksorgm user-214=trigemat user-215=golakkom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 05:42:13 power sudo[2628592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:14 power sudo[2628592]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:14 power sudo[2628599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 05:42:14 power sudo[2628599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:14 power sudo[2628599]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:14 power sudo[2628603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ns0jsHNMEkeu90Fh.~
Sep 12 05:42:14 power sudo[2628603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:14 power sudo[2628603]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:14 power sudo[2628607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ns0jsHNMEkeu90Fh.~\''
Sep 12 05:42:14 power sudo[2628607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:14 power sudo[2628607]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:14 power sudo[2628612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ns0jsHNMEkeu90Fh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 05:42:14 power sudo[2628612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:14 power sudo[2628612]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:14 power sudo[2628616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 05:42:14 power sudo[2628616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:14 power sudo[2628616]: pam_unix(sudo:session): session closed for user root
Sep 12 05:42:14 power sudo[2629177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 05:42:14 power sudo[2629177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 05:42:14 power sudo[2629177]: pam_unix(sudo:session): session closed for user root
Sep 12 05:45:01 power systemd[2631774]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:50:01 power systemd[2636469]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 05:55:01 power systemd[2640673]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:00:01 power systemd[2644879]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:00:01 power systemd[2644881]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 06:00:01 power systemd[2644885]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 06:00:01 power systemd[2644883]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 06:04:45 power pam_imunify[2249480]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 98.98.171.115 has been locked due to Imunify RBL
Sep 12 06:05:01 power systemd[2650014]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:06:01 power systemd[2650769]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 06:07:01 power systemd[2651661]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 06:10:01 power systemd[2654045]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:12:01 power systemd[2655790]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 06:15:02 power systemd[2658142]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:20:01 power systemd[2663075]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:25:01 power systemd[2667768]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:30:01 power systemd[2671958]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:30:01 power systemd[2671959]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 06:30:01 power systemd[2671960]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 06:30:01 power systemd[2671962]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 06:31:07 power sshd[2673072]: error: kex_exchange_identification: Connection closed by remote host
Sep 12 06:31:07 power sshd[2673072]: Connection closed by 87.236.176.160 port 39087
Sep 12 06:31:07 power sshd[2673097]: Connection closed by 87.236.176.160 port 38033 [preauth]
Sep 12 06:35:01 power systemd[2676414]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:36:01 power systemd[2677218]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 06:37:01 power systemd[2678276]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 06:40:01 power systemd[2681023]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:40:32 power sshd[2681533]: error: kex_exchange_identification: client sent invalid protocol identifier "PROXY TCP4 45.135.194.25 5.9.96.198 24272 2200"
Sep 12 06:40:32 power sshd[2681533]: banner exchange: Connection from 45.135.194.25 port 24272: invalid format
Sep 12 06:40:32 power sshd[2681534]: error: kex_exchange_identification: client sent invalid protocol identifier "PROXY TCP4 45.135.194.25 5.9.96.201 48742 2200"
Sep 12 06:40:32 power sshd[2681534]: banner exchange: Connection from 45.135.194.25 port 48742: invalid format
Sep 12 06:42:01 power systemd[2682811]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 06:42:10 power sudo[2683111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 06:42:10 power sudo[2683111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:10 power sudo[2683111]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:10 power sudo[2683116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 06:42:10 power sudo[2683116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:10 power sudo[2683116]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:10 power sudo[2683121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 06:42:10 power sudo[2683121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:10 power sudo[2683121]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:10 power sudo[2683125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=9r4T6YtQPP'
Sep 12 06:42:10 power sudo[2683125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:10 power sudo[2683125]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:10 power sudo[2683131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 06:42:10 power sudo[2683131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:10 power sudo[2683131]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:10 power sudo[2683135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 06:42:10 power sudo[2683135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:10 power sudo[2683135]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:10 power sudo[2683139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 06:42:10 power sudo[2683139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:10 power sudo[2683139]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:10 power sudo[2683144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 06:42:10 power sudo[2683144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:11 power sudo[2683144]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:11 power sudo[2683155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 06:42:11 power sudo[2683155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:11 power sudo[2683155]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:11 power sudo[2683159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 06:42:11 power sudo[2683159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:11 power sudo[2683159]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:11 power sudo[2683163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 06:42:11 power sudo[2683163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:11 power sudo[2683163]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:11 power sudo[2683171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 06:42:11 power sudo[2683171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:11 power sudo[2683171]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:11 power sudo[2683176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 06:42:11 power sudo[2683176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:11 power sudo[2683176]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:11 power sudo[2683180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 06:42:11 power sudo[2683180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:11 power sudo[2683180]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:13 power sudo[2683229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 06:42:13 power sudo[2683229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:13 power sudo[2683229]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:13 power sudo[2683234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 06:42:13 power sudo[2683234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:13 power sudo[2683234]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:13 power sudo[2683241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=palenzok user-2=zampmk user-3=busymard user-4=zvskopje user-5=custome1 user-6=sparkupm user-7=stokovna user-8=klimimk user-9=stojano1 user-10=bovincom user-11=janiboja user-12=itradeco user-13=vezilkac user-14=cabinetm user-15=jpparkin user-16=inotekso user-17=drleomk user-18=ideaplus user-19=nasaidni user-20=karpospo user-21=screenme user-22=arturaco user-23=premiums user-24=butelmk user-25=daris user-26=kouzonco user-27=premiuma user-28=cetplatf user-29=dalmacom user-30=datalink user-31=velmk user-32=gogovan1 user-33=univerz1 user-34=kujnamon user-35=agrosind user-36=mpbmk user-37=delcevca user-38=getaldus user-39=simbiome user-40=barececo user-41=workandt user-42=goartsym user-43=volkanco user-44=dhamachi user-45=mfashion user-46=bianasho user-47=makoasmk user-48=skyapart user-49=rasmorgm user-50=wikicamp
Sep 12 06:42:13 power sudo[2683241]: wp-toolkit : (command continued) user-51=urbanexp user-52=spdcompu user-53=detskagr user-54=mspmk user-55=infobadi user-56=bizporta user-57=datelcom user-58=maleshne user-59=sedcmk user-60=groskome user-61=ivanjord user-62=vfxnestc user-63=polyeste user-64=cajsproc user-65=hotammk user-66=youthgua user-67=anitermc user-68=stojnevi user-69=raremk user-70=oouslave user-71=uhostmk5 user-72=bauerbg user-73=enaspotc user-74=vmro user-75=viewinn user-76=trudovop user-77=socioloz user-78=avtogumi user-79=pelagoni user-80=evolvepl user-81=frizered user-82=hidrommk user-83=caramk user-84=nefrolog user-85=oncolog1 user-86=levantmk user-87=ekostoc1 user-88=edomcomm user-89=berbermk user-90=dikimk12 user-91=sprintst user-92=enochmk user-93=herbalpl user-94=seloviro user-95=centarba user-96=nlpmkorg user-97=kolened1 user-98=nolimits user-99=tealmk user-100=dadarmk user-101=proverim user-102=goodnews user-103=mstmmk user-104=gocruise user-105=gjorgeiv
Sep 12 06:42:13 power sudo[2683241]: wp-toolkit : (command continued) user-106=tradeyou user-107=dnevnoin user-108=pecakome user-109=wondersp user-110=robustco user-111=stravelm user-112=holiyayt user-113=rastiraz user-114=atspedco user-115=sssoluti user-116=progress user-117=animatem user-118=cleanerm user-119=recorgmk user-120=taktcomm user-121=jaramk user-122=solointe user-123=pelagini user-124=kaoilmk user-125=biplmk user-126=bbbustou user-127=workbenc user-128=ismassag user-129=mbmehani user-130=wineberr user-131=viplastc user-132=eurofarm user-133=solarinv user-134=golakkom user-135=trigemat user-136=eliksirz user-137=naksorgm user-138=electrol user-139=folklore user-140=bauerin2 user-141=euronic3 user-142=vegemk1 user-143=cupidpro user-144=conserva user-145=bonitavi user-146=evberasm user-147=tehnodro user-148=makdrone user-149=izzomk user-150=jpkomuna user-151=evacommk user-152=madzomk user-153=aptekafa user-154=gradbai1 user-155=eaptekam user-156=dimpalne user-157=peshkai1
Sep 12 06:42:13 power sudo[2683241]: wp-toolkit : (command continued) user-158=fxxcom user-159=zdmgpsor user-160=gorsajmk user-161=aquatech user-162=v5srybi9dcdx user-163=supremel user-164=bozinovm user-165=dslmk user-166=fnjorgmk user-167=darkogor user-168=prizmapl user-169=innofabl user-170=premiumi user-171=vacuacti user-172=taneccom user-173=tehnologija user-174=modernar user-175=inkigaic user-176=fffhpcwr user-177=radekrat user-178=starluxm user-179=ambitiou user-180=fiziosmk user-181=versusmk user-182=onlinesh user-183=nationa2 user-184=solemor1 user-185=mapaspla user-186=tcieuroc user-187=mediasol user-188=bogdanos user-189=carrent1 user-190=apgrupmk user-191=kardiome user-192=euronic2 user-193=matratze user-194=intelek1 user-195=mediatag user-196=nucktra1 user-197=lblawcom user-198=aptekazd user-199=nikimare user-200=forzares user-201=hausmark user-202=nikolov1 user-203=imdskopj user-204=glammace user-205=albuname user-206=infopor1 user-207=pravekom user-208=vtranseu
Sep 12 06:42:13 power sudo[2683241]: wp-toolkit : (command continued) user-209=euromaki user-210=cosmatob user-211=zapovim1 user-212=elektrot user-213=samasped user-214=chemhemc user-215=nutrivim feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 06:42:13 power sudo[2683241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:13 power sudo[2683241]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:13 power sudo[2683247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 06:42:13 power sudo[2683247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:13 power sudo[2683247]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:13 power sudo[2683252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4ymV8oNxI77ksgob.~
Sep 12 06:42:13 power sudo[2683252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:13 power sudo[2683252]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:14 power sudo[2683256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4ymV8oNxI77ksgob.~\''
Sep 12 06:42:14 power sudo[2683256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:14 power sudo[2683256]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:14 power sudo[2683264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4ymV8oNxI77ksgob.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 06:42:14 power sudo[2683264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:14 power sudo[2683264]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:14 power sudo[2683268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 06:42:14 power sudo[2683268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:14 power sudo[2683268]: pam_unix(sudo:session): session closed for user root
Sep 12 06:42:15 power sudo[2684191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 06:42:15 power sudo[2684191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 06:42:15 power sudo[2684191]: pam_unix(sudo:session): session closed for user root
Sep 12 06:44:03 power sshd[2685632]: error: kex_exchange_identification: client sent invalid protocol identifier "PROXY TCP4 45.135.194.25 5.9.96.213 22042 2200"
Sep 12 06:44:03 power sshd[2685632]: banner exchange: Connection from 45.135.194.25 port 22042: invalid format
Sep 12 06:45:01 power systemd[2686374]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:50:01 power systemd[2690921]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 06:55:01 power systemd[2695314]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:00:01 power systemd[2699618]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:00:01 power systemd[2699621]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 07:00:01 power systemd[2699622]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 07:00:01 power systemd[2699624]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 07:05:01 power systemd[2704647]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:06:01 power systemd[2705455]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 07:07:01 power systemd[2706260]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 07:10:01 power systemd[2708754]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:12:01 power systemd[2710325]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 07:15:01 power systemd[2713029]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:20:01 power systemd[2717539]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:25:01 power systemd[2721806]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:30:01 power systemd[2727140]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 07:30:01 power systemd[2727141]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 07:30:01 power systemd[2727139]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:30:01 power systemd[2727142]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 07:35:01 power systemd[2732657]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:36:01 power systemd[2733733]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 07:37:01 power systemd[2734556]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 07:40:01 power systemd[2737723]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:42:01 power systemd[2739848]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 07:42:10 power sudo[2740036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 07:42:10 power sudo[2740036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:10 power sudo[2740036]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:10 power sudo[2740040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 07:42:10 power sudo[2740040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:10 power sudo[2740040]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:10 power sudo[2740044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 07:42:10 power sudo[2740044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:10 power sudo[2740044]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:10 power sudo[2740048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=qiLhWY6wLU'
Sep 12 07:42:10 power sudo[2740048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:10 power sudo[2740048]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:10 power sudo[2740053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 07:42:10 power sudo[2740053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:10 power sudo[2740053]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:10 power sudo[2740057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 07:42:10 power sudo[2740057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:10 power sudo[2740057]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:10 power sudo[2740061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 07:42:10 power sudo[2740061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:10 power sudo[2740061]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:10 power sudo[2740065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 07:42:10 power sudo[2740065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:11 power sudo[2740065]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:11 power sudo[2740075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 07:42:11 power sudo[2740075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:11 power sudo[2740075]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:11 power sudo[2740079]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 07:42:11 power sudo[2740079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:11 power sudo[2740079]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:11 power sudo[2740083]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 07:42:11 power sudo[2740083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:11 power sudo[2740083]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:11 power sudo[2740087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 07:42:11 power sudo[2740087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:11 power sudo[2740087]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:11 power sudo[2740092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 07:42:11 power sudo[2740092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:11 power sudo[2740092]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:11 power sudo[2740096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 07:42:11 power sudo[2740096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:11 power sudo[2740096]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:13 power sudo[2740146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 07:42:13 power sudo[2740146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:13 power sudo[2740146]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:13 power sudo[2740153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 07:42:13 power sudo[2740153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:13 power sudo[2740153]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:13 power sudo[2740161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=sparkupm user-2=stokovna user-3=klimimk user-4=zvskopje user-5=busymard user-6=zampmk user-7=palenzok user-8=custome1 user-9=itradeco user-10=janiboja user-11=cabinetm user-12=vezilkac user-13=stojano1 user-14=bovincom user-15=screenme user-16=arturaco user-17=ideaplus user-18=nasaidni user-19=karpospo user-20=premiums user-21=butelmk user-22=daris user-23=drleomk user-24=jpparkin user-25=inotekso user-26=premiuma user-27=kouzonco user-28=dalmacom user-29=cetplatf user-30=agrosind user-31=mpbmk user-32=datalink user-33=gogovan1 user-34=velmk user-35=univerz1 user-36=kujnamon user-37=makoasmk user-38=bianasho user-39=skyapart user-40=rasmorgm user-41=workandt user-42=getaldus user-43=simbiome user-44=delcevca user-45=barececo user-46=mfashion user-47=goartsym user-48=volkanco user-49=dhamachi user-50=detskagr
Sep 12 07:42:13 power sudo[2740161]: wp-toolkit : (command continued) user-51=spdcompu user-52=infobadi user-53=mspmk user-54=urbanexp user-55=wikicamp user-56=groskome user-57=ivanjord user-58=sedcmk user-59=vfxnestc user-60=polyeste user-61=bizporta user-62=datelcom user-63=maleshne user-64=youthgua user-65=anitermc user-66=hotammk user-67=cajsproc user-68=vmro user-69=trudovop user-70=viewinn user-71=enaspotc user-72=stojnevi user-73=uhostmk5 user-74=bauerbg user-75=raremk user-76=oouslave user-77=evolvepl user-78=socioloz user-79=avtogumi user-80=pelagoni user-81=nefrolog user-82=oncolog1 user-83=levantmk user-84=ekostoc1 user-85=frizered user-86=hidrommk user-87=caramk user-88=sprintst user-89=herbalpl user-90=enochmk user-91=dikimk12 user-92=berbermk user-93=edomcomm user-94=nlpmkorg user-95=centarba user-96=kolened1 user-97=nolimits user-98=seloviro user-99=mstmmk user-100=goodnews user-101=gocruise user-102=tealmk user-103=proverim user-104=dadarmk user-105=wondersp
Sep 12 07:42:13 power sudo[2740161]: wp-toolkit : (command continued) user-106=stravelm user-107=robustco user-108=pecakome user-109=rastiraz user-110=holiyayt user-111=tradeyou user-112=gjorgeiv user-113=dnevnoin user-114=recorgmk user-115=taktcomm user-116=solointe user-117=jaramk user-118=atspedco user-119=sssoluti user-120=animatem user-121=cleanerm user-122=progress user-123=bbbustou user-124=kaoilmk user-125=biplmk user-126=pelagini user-127=viplastc user-128=wineberr user-129=ismassag user-130=workbenc user-131=mbmehani user-132=golakkom user-133=electrol user-134=trigemat user-135=naksorgm user-136=eliksirz user-137=eurofarm user-138=solarinv user-139=folklore user-140=bauerin2 user-141=bonitavi user-142=evberasm user-143=vegemk1 user-144=cupidpro user-145=euronic3 user-146=conserva user-147=jpkomuna user-148=izzomk user-149=tehnodro user-150=makdrone user-151=dimpalne user-152=eaptekam user-153=peshkai1 user-154=fxxcom user-155=evacommk user-156=madzomk user-157=aptekafa
Sep 12 07:42:13 power sudo[2740161]: wp-toolkit : (command continued) user-158=gradbai1 user-159=gorsajmk user-160=aquatech user-161=supremel user-162=v5srybi9dcdx user-163=zdmgpsor user-164=modernar user-165=inkigaic user-166=premiumi user-167=innofabl user-168=vacuacti user-169=bozinovm user-170=fnjorgmk user-171=darkogor user-172=prizmapl user-173=dslmk user-174=tehnologija user-175=taneccom user-176=fiziosmk user-177=ambitiou user-178=versusmk user-179=fffhpcwr user-180=radekrat user-181=starluxm user-182=tcieuroc user-183=nationa2 user-184=onlinesh user-185=mapaspla user-186=solemor1 user-187=euronic2 user-188=matratze user-189=apgrupmk user-190=mediasol user-191=carrent1 user-192=bogdanos user-193=kardiome user-194=forzares user-195=aptekazd user-196=nikimare user-197=nikolov1 user-198=hausmark user-199=intelek1 user-200=mediatag user-201=lblawcom user-202=nucktra1 user-203=infopor1 user-204=vtranseu user-205=pravekom user-206=imdskopj user-207=glammace user-208=albuname
Sep 12 07:42:13 power sudo[2740161]: wp-toolkit : (command continued) user-209=samasped user-210=chemhemc user-211=nutrivim user-212=cosmatob user-213=euromaki user-214=zapovim1 user-215=elektrot feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 07:42:13 power sudo[2740161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:14 power sudo[2740161]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:14 power sudo[2740172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 07:42:14 power sudo[2740172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:14 power sudo[2740172]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:14 power sudo[2740176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pOV6JmcHY0zh2QfQ.~
Sep 12 07:42:14 power sudo[2740176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:14 power sudo[2740176]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:14 power sudo[2740180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pOV6JmcHY0zh2QfQ.~\''
Sep 12 07:42:14 power sudo[2740180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:14 power sudo[2740180]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:14 power sudo[2740186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pOV6JmcHY0zh2QfQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 07:42:14 power sudo[2740186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:14 power sudo[2740186]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:14 power sudo[2740190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 07:42:14 power sudo[2740190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:14 power sudo[2740190]: pam_unix(sudo:session): session closed for user root
Sep 12 07:42:14 power sudo[2740458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 07:42:14 power sudo[2740458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 07:42:14 power sudo[2740458]: pam_unix(sudo:session): session closed for user root
Sep 12 07:45:01 power systemd[2743921]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:50:01 power systemd[2748854]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 07:55:01 power systemd[2753333]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:00:01 power systemd[2757869]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:00:01 power systemd[2757875]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 08:00:01 power systemd[2757874]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 08:00:01 power systemd[2757878]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 08:00:01 power systemd[2757879]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 12 08:05:01 power systemd[2763694]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:06:01 power systemd[2764547]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 08:07:01 power systemd[2765568]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 08:10:01 power systemd[2768356]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:12:01 power systemd[2770287]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 08:15:01 power systemd[2773444]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:20:01 power systemd[2778613]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:25:01 power systemd[2783275]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:30:01 power systemd[2788318]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:30:01 power systemd[2788322]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 08:30:01 power systemd[2788324]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 08:30:01 power systemd[2788326]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 08:35:01 power systemd[2794278]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:36:01 power systemd[2795547]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 08:36:48 power pam_imunify[2249480]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 8.219.185.154 has been locked due to Imunify RBL
Sep 12 08:37:01 power systemd[2796570]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 08:40:01 power systemd[2799831]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:42:01 power systemd[2801789]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 08:42:10 power sudo[2801997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 08:42:10 power sudo[2801997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:10 power sudo[2801997]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:10 power sudo[2802002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 08:42:10 power sudo[2802002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:10 power sudo[2802002]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:10 power sudo[2802006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 08:42:10 power sudo[2802006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:10 power sudo[2802006]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:10 power sudo[2802010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=w4C5VZYiuc'
Sep 12 08:42:10 power sudo[2802010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:10 power sudo[2802010]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:10 power sudo[2802015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 08:42:10 power sudo[2802015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:10 power sudo[2802015]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:10 power sudo[2802019]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 08:42:10 power sudo[2802019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:10 power sudo[2802019]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:10 power sudo[2802023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 08:42:10 power sudo[2802023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:10 power sudo[2802023]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:10 power sudo[2802027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 08:42:10 power sudo[2802027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:11 power sudo[2802027]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:11 power sudo[2802036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 08:42:11 power sudo[2802036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:11 power sudo[2802036]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:11 power sudo[2802040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 08:42:11 power sudo[2802040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:11 power sudo[2802040]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:11 power sudo[2802044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 08:42:11 power sudo[2802044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:11 power sudo[2802044]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:11 power sudo[2802048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 08:42:11 power sudo[2802048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:11 power sudo[2802048]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:11 power sudo[2802053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 08:42:11 power sudo[2802053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:11 power sudo[2802053]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:11 power sudo[2802057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 08:42:11 power sudo[2802057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:11 power sudo[2802057]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:27 power sudo[2802271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 08:42:28 power sudo[2802271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:28 power sudo[2802271]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:28 power sudo[2802280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 08:42:28 power sudo[2802280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:28 power sudo[2802280]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:28 power sudo[2802286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=supremel user-2=v5srybi9dcdx user-3=gorsajmk user-4=aquatech user-5=zdmgpsor user-6=inkigaic user-7=modernar user-8=tehnologija user-9=taneccom user-10=innofabl user-11=premiumi user-12=vacuacti user-13=bozinovm user-14=prizmapl user-15=fnjorgmk user-16=dslmk user-17=darkogor user-18=versusmk user-19=fiziosmk user-20=ambitiou user-21=radekrat user-22=starluxm user-23=fffhpcwr user-24=tcieuroc user-25=mapaspla user-26=solemor1 user-27=nationa2 user-28=onlinesh user-29=euronic2 user-30=matratze user-31=kardiome user-32=apgrupmk user-33=mediasol user-34=bogdanos user-35=carrent1 user-36=nikolov1 user-37=hausmark user-38=forzares user-39=aptekazd user-40=nikimare user-41=lblawcom user-42=nucktra1 user-43=intelek1 user-44=mediatag user-45=pravekom user-46=vtranseu user-47=infopor1 user-48=glammace
Sep 12 08:42:28 power sudo[2802286]: wp-toolkit : (command continued) user-49=albuname user-50=imdskopj user-51=nutrivim user-52=chemhemc user-53=samasped user-54=zapovim1 user-55=elektrot user-56=cosmatob user-57=euromaki user-58=solointe user-59=jaramk user-60=recorgmk user-61=taktcomm user-62=animatem user-63=cleanerm user-64=progress user-65=sssoluti user-66=atspedco user-67=bbbustou user-68=biplmk user-69=kaoilmk user-70=pelagini user-71=viplastc user-72=wineberr user-73=mbmehani user-74=ismassag user-75=workbenc user-76=electrol user-77=trigemat user-78=naksorgm user-79=eliksirz user-80=golakkom user-81=solarinv user-82=eurofarm user-83=bauerin2 user-84=folklore user-85=bonitavi user-86=evberasm user-87=conserva user-88=vegemk1 user-89=cupidpro user-90=euronic3 user-91=jpkomuna user-92=izzomk user-93=makdrone user-94=tehnodro user-95=peshkai1 user-96=fxxcom user-97=dimpalne user-98=eaptekam user-99=gradbai1 user-100=evacommk user-101=madzomk user-102=aptekafa
Sep 12 08:42:28 power sudo[2802286]: wp-toolkit : (command continued) user-103=youthgua user-104=anitermc user-105=hotammk user-106=cajsproc user-107=vmro user-108=trudovop user-109=viewinn user-110=enaspotc user-111=uhostmk5 user-112=bauerbg user-113=raremk user-114=oouslave user-115=stojnevi user-116=evolvepl user-117=pelagoni user-118=socioloz user-119=avtogumi user-120=nefrolog user-121=oncolog1 user-122=levantmk user-123=ekostoc1 user-124=caramk user-125=frizered user-126=hidrommk user-127=sprintst user-128=enochmk user-129=herbalpl user-130=dikimk12 user-131=berbermk user-132=edomcomm user-133=nolimits user-134=nlpmkorg user-135=centarba user-136=kolened1 user-137=seloviro user-138=gocruise user-139=mstmmk user-140=goodnews user-141=proverim user-142=dadarmk user-143=tealmk user-144=rastiraz user-145=holiyayt user-146=wondersp user-147=stravelm user-148=robustco user-149=pecakome user-150=dnevnoin user-151=tradeyou user-152=gjorgeiv user-153=klimimk user-154=sparkupm
Sep 12 08:42:28 power sudo[2802286]: wp-toolkit : (command continued) user-155=stokovna user-156=custome1 user-157=zampmk user-158=busymard user-159=zvskopje user-160=palenzok user-161=cabinetm user-162=vezilkac user-163=itradeco user-164=janiboja user-165=bovincom user-166=stojano1 user-167=premiums user-168=butelmk user-169=daris user-170=screenme user-171=arturaco user-172=ideaplus user-173=karpospo user-174=nasaidni user-175=drleomk user-176=jpparkin user-177=inotekso user-178=dalmacom user-179=cetplatf user-180=premiuma user-181=kouzonco user-182=agrosind user-183=mpbmk user-184=velmk user-185=gogovan1 user-186=univerz1 user-187=kujnamon user-188=datalink user-189=rasmorgm user-190=bianasho user-191=makoasmk user-192=skyapart user-193=mfashion user-194=goartsym user-195=volkanco user-196=dhamachi user-197=workandt user-198=delcevca user-199=getaldus user-200=simbiome user-201=barececo user-202=mspmk user-203=infobadi user-204=detskagr user-205=spdcompu user-206=urbanexp
Sep 12 08:42:28 power sudo[2802286]: wp-toolkit : (command continued) user-207=wikicamp user-208=vfxnestc user-209=polyeste user-210=ivanjord user-211=groskome user-212=sedcmk user-213=datelcom user-214=maleshne user-215=bizporta feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 08:42:28 power sudo[2802286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:28 power sudo[2802286]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:28 power sudo[2802295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 08:42:28 power sudo[2802295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:28 power sudo[2802295]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:28 power sudo[2802299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LIycFd74lGoJWDEp.~
Sep 12 08:42:28 power sudo[2802299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:28 power sudo[2802299]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:28 power sudo[2802303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LIycFd74lGoJWDEp.~\''
Sep 12 08:42:28 power sudo[2802303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:28 power sudo[2802303]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:28 power sudo[2802308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LIycFd74lGoJWDEp.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 08:42:28 power sudo[2802308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:28 power sudo[2802308]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:28 power sudo[2802313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 08:42:28 power sudo[2802313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:28 power sudo[2802313]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:32 power sudo[2802981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 08:42:32 power sudo[2802981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:32 power sudo[2802981]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:33 power sudo[2803303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 gethostname --output=json'
Sep 12 08:42:33 power sudo[2803303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:33 power sudo[2803303]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:33 power sudo[2803308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Themes get_theme_base --output=json'
Sep 12 08:42:33 power sudo[2803308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:33 power sudo[2803308]: pam_unix(sudo:session): session closed for user root
Sep 12 08:42:33 power sudo[2803313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel WpToolkitNotification send_admin_vulnerability_found_notification \'message=WP Toolkit has detected new vulnerabilities on WordPress sites under your care. It is strongly recommended to update or disable vulnerable assets on these sites. You can also configure WP Toolkit to perform automatic actions when vulnerabilities are detected. <br/><br/>The following vulnerabilities need your attention because they have to be addressed manually:<br/><br/>    <table border=\'"\'"\'0\'"\'"\' cellpadding=\'"\'"\'5\'"\'"\' cellspacing=\'"\'"\'0\'"\'"\' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012
Sep 12 08:42:33 power sudo[2803313]: wp-toolkit : (command continued) <td colspan="2">Site: <span style="color: black">berber.mk</span></td>#012            <td align="right"><a href="https://power.uhostmk5.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/305/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(208, 45, 75); background-color: rgb(255, 240, 241);">#012    High#012</span></td>#012            <td colspan="2">#012                <span style="color: black">WordPress DesignThemes Core Features plugin &lt;= 4.7 - Missing Authorization to
Sep 12 08:42:33 power sudo[2803313]: wp-toolkit : (command continued) Unauthenticated Arbitrary File Read via dt_process_imported_file vulnerability</span><br/>#012                <div style="line-height: 1.5em; font-size: 0.9em">Missing Authorization to Unauthenticated Arbitrary File Read via dt_process_imported_file vulnerability discovered by Tonn in WordPress Plugin DesignThemes Core Features (versions &lt;= 4.7)</div>#012                #012                <b style="font-size: 0.8em">Source: <a target=\'"\'"\'_blank\'"\'"\' href=\'"\'"\'https://patchstack.com/database/vulnerability/designthemes-core-features/wordpress-designthemes-core-features-plugin-4-7-missing-authorization-to-unauthenticated-arbitrary-file-read-via-dt-process-imported-file-vulnerability?_a_id=110\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Patchstack</a>, <a target=\'"\'"\'_blank\'"\'"\'
Sep 12 08:42:33 power sudo[2803313]: wp-toolkit : (command continued) href=\'"\'"\'https://www.wordfence.com/threat-intel/vulnerabilities/id/1729d0de-1f5f-4349-b592-5841d01ed33a?source=api-prod\'"\'"\' style=\'"\'"\'color: inherit; text-decoration: none;\'"\'"\'>Wordfence</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table><br/>More vulnerabilities were found, please go to WP Toolkit for the full list. <br/><br/>Automatic actions can be defined on the site autoupdate policy screen.\' --output=json'
Sep 12 08:42:33 power sudo[2803313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 08:42:33 power sudo[2803313]: pam_unix(sudo:session): session closed for user root
Sep 12 08:45:01 power systemd[2805742]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:50:01 power systemd[2811751]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 08:55:01 power systemd[2817436]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:00:01 power systemd[2822570]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:00:01 power systemd[2822575]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 09:00:01 power systemd[2822576]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 09:00:01 power systemd[2822579]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 12 09:00:01 power systemd[2822578]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 09:05:01 power systemd[2829177]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:06:01 power systemd[2830455]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 09:07:01 power systemd[2831615]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 09:10:01 power systemd[2835065]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:12:01 power systemd[2837279]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 09:15:01 power systemd[2841165]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:20:01 power systemd[2847267]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:25:01 power systemd[2853948]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:28:38 power sshd[2859414]: error: kex_exchange_identification: banner line contains invalid characters
Sep 12 09:28:38 power sshd[2859414]: banner exchange: Connection from 47.251.40.25 port 56014: invalid format
Sep 12 09:28:39 power sshd[2859432]: Invalid user  from 47.251.40.25 port 56022
Sep 12 09:28:40 power sshd[2859432]: Connection closed by invalid user  47.251.40.25 port 56022 [preauth]
Sep 12 09:30:01 power systemd[2861644]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:30:01 power systemd[2861648]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 09:30:01 power systemd[2861652]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 09:30:01 power systemd[2861651]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 09:35:01 power systemd[2868994]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:36:01 power systemd[2870630]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 09:37:01 power systemd[2872000]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 09:40:01 power systemd[2875782]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:42:01 power systemd[2878051]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 09:42:10 power sudo[2878377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 09:42:10 power sudo[2878377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:10 power sudo[2878377]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:10 power sudo[2878381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 09:42:10 power sudo[2878381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:10 power sudo[2878381]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:10 power sudo[2878385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 09:42:10 power sudo[2878385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:10 power sudo[2878385]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:10 power sudo[2878389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=4Mgot1kk73'
Sep 12 09:42:10 power sudo[2878389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:10 power sudo[2878389]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:10 power sudo[2878394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 09:42:10 power sudo[2878394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:10 power sudo[2878394]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:10 power sudo[2878398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 09:42:10 power sudo[2878398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:10 power sudo[2878398]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:10 power sudo[2878402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 09:42:10 power sudo[2878402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:10 power sudo[2878402]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:11 power sudo[2878406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 09:42:11 power sudo[2878406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:11 power sudo[2878406]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:11 power sudo[2878414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 09:42:11 power sudo[2878414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:11 power sudo[2878414]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:11 power sudo[2878418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 09:42:11 power sudo[2878418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:11 power sudo[2878418]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:11 power sudo[2878422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 09:42:11 power sudo[2878422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:11 power sudo[2878422]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:11 power sudo[2878426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 09:42:11 power sudo[2878426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:11 power sudo[2878426]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:11 power sudo[2878430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 09:42:11 power sudo[2878430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:11 power sudo[2878430]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:11 power sudo[2878434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 09:42:11 power sudo[2878434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:11 power sudo[2878434]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:13 power sudo[2878484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 09:42:13 power sudo[2878484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:13 power sudo[2878484]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:13 power sudo[2878489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 09:42:13 power sudo[2878489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:13 power sudo[2878489]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:13 power sudo[2878498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=avtogumi user-2=socioloz user-3=pelagoni user-4=evolvepl user-5=frizered user-6=hidrommk user-7=caramk user-8=nefrolog user-9=levantmk user-10=ekostoc1 user-11=oncolog1 user-12=cajsproc user-13=hotammk user-14=youthgua user-15=anitermc user-16=stojnevi user-17=raremk user-18=oouslave user-19=uhostmk5 user-20=bauerbg user-21=enaspotc user-22=vmro user-23=viewinn user-24=trudovop user-25=tealmk user-26=dadarmk user-27=proverim user-28=goodnews user-29=mstmmk user-30=gocruise user-31=gjorgeiv user-32=tradeyou user-33=dnevnoin user-34=pecakome user-35=wondersp user-36=stravelm user-37=robustco user-38=holiyayt user-39=rastiraz user-40=edomcomm user-41=berbermk user-42=dikimk12 user-43=sprintst user-44=enochmk user-45=herbalpl user-46=seloviro user-47=nlpmkorg user-48=centarba user-49=kolened1 user-50=nolimits
Sep 12 09:42:13 power sudo[2878498]: wp-toolkit : (command continued) user-51=jpparkin user-52=inotekso user-53=drleomk user-54=ideaplus user-55=nasaidni user-56=karpospo user-57=screenme user-58=arturaco user-59=premiums user-60=daris user-61=butelmk user-62=kouzonco user-63=premiuma user-64=cetplatf user-65=dalmacom user-66=palenzok user-67=busymard user-68=zvskopje user-69=zampmk user-70=custome1 user-71=sparkupm user-72=stokovna user-73=klimimk user-74=stojano1 user-75=bovincom user-76=janiboja user-77=itradeco user-78=vezilkac user-79=cabinetm user-80=wikicamp user-81=urbanexp user-82=spdcompu user-83=detskagr user-84=mspmk user-85=infobadi user-86=bizporta user-87=datelcom user-88=maleshne user-89=sedcmk user-90=groskome user-91=ivanjord user-92=vfxnestc user-93=polyeste user-94=datalink user-95=gogovan1 user-96=velmk user-97=univerz1 user-98=kujnamon user-99=agrosind user-100=mpbmk user-101=getaldus user-102=delcevca user-103=simbiome user-104=barececo user-105=workandt
Sep 12 09:42:13 power sudo[2878498]: wp-toolkit : (command continued) user-106=volkanco user-107=goartsym user-108=dhamachi user-109=mfashion user-110=bianasho user-111=makoasmk user-112=skyapart user-113=rasmorgm user-114=fffhpcwr user-115=radekrat user-116=starluxm user-117=ambitiou user-118=fiziosmk user-119=versusmk user-120=onlinesh user-121=nationa2 user-122=solemor1 user-123=mapaspla user-124=tcieuroc user-125=zdmgpsor user-126=gorsajmk user-127=aquatech user-128=v5srybi9dcdx user-129=supremel user-130=bozinovm user-131=fnjorgmk user-132=dslmk user-133=prizmapl user-134=darkogor user-135=premiumi user-136=innofabl user-137=vacuacti user-138=taneccom user-139=tehnologija user-140=modernar user-141=inkigaic user-142=imdskopj user-143=glammace user-144=albuname user-145=infopor1 user-146=pravekom user-147=vtranseu user-148=euromaki user-149=cosmatob user-150=elektrot user-151=zapovim1 user-152=samasped user-153=chemhemc user-154=nutrivim user-155=mediasol user-156=bogdanos
Sep 12 09:42:13 power sudo[2878498]: wp-toolkit : (command continued) user-157=carrent1 user-158=apgrupmk user-159=kardiome user-160=euronic2 user-161=matratze user-162=intelek1 user-163=mediatag user-164=nucktra1 user-165=lblawcom user-166=aptekazd user-167=nikimare user-168=forzares user-169=nikolov1 user-170=hausmark user-171=workbenc user-172=ismassag user-173=mbmehani user-174=wineberr user-175=viplastc user-176=eurofarm user-177=solarinv user-178=golakkom user-179=trigemat user-180=naksorgm user-181=eliksirz user-182=electrol user-183=sssoluti user-184=atspedco user-185=progress user-186=animatem user-187=cleanerm user-188=taktcomm user-189=recorgmk user-190=jaramk user-191=solointe user-192=pelagini user-193=kaoilmk user-194=biplmk user-195=bbbustou user-196=tehnodro user-197=makdrone user-198=izzomk user-199=jpkomuna user-200=evacommk user-201=madzomk user-202=aptekafa user-203=gradbai1 user-204=eaptekam user-205=dimpalne user-206=peshkai1 user-207=fxxcom user-208=folklore
Sep 12 09:42:13 power sudo[2878498]: wp-toolkit : (command continued) user-209=bauerin2 user-210=euronic3 user-211=vegemk1 user-212=cupidpro user-213=conserva user-214=bonitavi user-215=evberasm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 09:42:13 power sudo[2878498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:14 power sudo[2878498]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:14 power sudo[2878506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 09:42:14 power sudo[2878506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:14 power sudo[2878506]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:14 power sudo[2878510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2uHPdOV0c9rqK1y9.~
Sep 12 09:42:14 power sudo[2878510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:14 power sudo[2878510]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:14 power sudo[2878515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2uHPdOV0c9rqK1y9.~\''
Sep 12 09:42:14 power sudo[2878515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:14 power sudo[2878515]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:14 power sudo[2878520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2uHPdOV0c9rqK1y9.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 09:42:14 power sudo[2878520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:14 power sudo[2878520]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:14 power sudo[2878524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 09:42:14 power sudo[2878524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:14 power sudo[2878524]: pam_unix(sudo:session): session closed for user root
Sep 12 09:42:18 power sudo[2878962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 09:42:18 power sudo[2878962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 09:42:18 power sudo[2878962]: pam_unix(sudo:session): session closed for user root
Sep 12 09:45:01 power systemd[2883301]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:50:01 power systemd[2889597]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 09:55:02 power systemd[2895362]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:00:01 power systemd[2902012]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:00:01 power systemd[2902018]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 10:00:01 power systemd[2902020]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 10:00:01 power systemd[2902022]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 10:05:01 power systemd[2909175]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:06:01 power systemd[2910444]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 10:07:01 power systemd[2911675]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 10:10:01 power systemd[2915461]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:12:01 power systemd[2917960]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 10:15:01 power systemd[2921818]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:20:01 power systemd[2928619]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:25:01 power systemd[2935383]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:30:01 power systemd[2941447]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:30:01 power systemd[2941448]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 10:30:01 power systemd[2941450]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 10:30:01 power systemd[2941451]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 10:35:01 power systemd[2948054]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:36:01 power systemd[2949667]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 10:37:01 power systemd[2950944]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 10:40:02 power systemd[2954740]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:42:01 power systemd[2956939]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 10:42:10 power sudo[2957147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 10:42:10 power sudo[2957147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:10 power sudo[2957147]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:10 power sudo[2957151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 10:42:10 power sudo[2957151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:10 power sudo[2957151]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:10 power sudo[2957155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 10:42:10 power sudo[2957155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:10 power sudo[2957155]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:10 power sudo[2957159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=m8vswZXZR9'
Sep 12 10:42:10 power sudo[2957159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:10 power sudo[2957159]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:10 power sudo[2957165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 10:42:10 power sudo[2957165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:10 power sudo[2957165]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:10 power sudo[2957170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 10:42:11 power sudo[2957170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:11 power sudo[2957170]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:11 power sudo[2957174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 10:42:11 power sudo[2957174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:11 power sudo[2957174]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:11 power sudo[2957180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 10:42:11 power sudo[2957180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:11 power sudo[2957180]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:11 power sudo[2957203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 10:42:11 power sudo[2957203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:11 power sudo[2957203]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:11 power sudo[2957208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 10:42:11 power sudo[2957208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:11 power sudo[2957208]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:11 power sudo[2957215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 10:42:11 power sudo[2957215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:11 power sudo[2957215]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:11 power sudo[2957224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 10:42:11 power sudo[2957224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:11 power sudo[2957224]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:11 power sudo[2957230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 10:42:11 power sudo[2957230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:11 power sudo[2957230]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:11 power sudo[2957240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 10:42:11 power sudo[2957240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:11 power sudo[2957240]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:13 power sudo[2957313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 10:42:13 power sudo[2957313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:13 power sudo[2957313]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:13 power sudo[2957319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 10:42:13 power sudo[2957319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:13 power sudo[2957319]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:13 power sudo[2957326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=folklore user-2=bauerin2 user-3=euronic3 user-4=vegemk1 user-5=cupidpro user-6=conserva user-7=bonitavi user-8=evberasm user-9=tehnodro user-10=makdrone user-11=izzomk user-12=jpkomuna user-13=evacommk user-14=aptekafa user-15=madzomk user-16=gradbai1 user-17=eaptekam user-18=dimpalne user-19=peshkai1 user-20=fxxcom user-21=atspedco user-22=sssoluti user-23=progress user-24=animatem user-25=cleanerm user-26=taktcomm user-27=recorgmk user-28=jaramk user-29=solointe user-30=pelagini user-31=biplmk user-32=kaoilmk user-33=bbbustou user-34=workbenc user-35=ismassag user-36=mbmehani user-37=wineberr user-38=viplastc user-39=eurofarm user-40=solarinv user-41=golakkom user-42=trigemat user-43=eliksirz user-44=naksorgm user-45=electrol user-46=mediasol user-47=carrent1 user-48=bogdanos user-49=apgrupmk
Sep 12 10:42:13 power sudo[2957326]: wp-toolkit : (command continued) user-50=kardiome user-51=euronic2 user-52=matratze user-53=intelek1 user-54=mediatag user-55=nucktra1 user-56=lblawcom user-57=aptekazd user-58=nikimare user-59=forzares user-60=hausmark user-61=nikolov1 user-62=imdskopj user-63=glammace user-64=albuname user-65=infopor1 user-66=pravekom user-67=vtranseu user-68=cosmatob user-69=euromaki user-70=zapovim1 user-71=elektrot user-72=chemhemc user-73=samasped user-74=nutrivim user-75=zdmgpsor user-76=gorsajmk user-77=aquatech user-78=v5srybi9dcdx user-79=supremel user-80=bozinovm user-81=fnjorgmk user-82=dslmk user-83=darkogor user-84=prizmapl user-85=innofabl user-86=premiumi user-87=vacuacti user-88=taneccom user-89=tehnologija user-90=modernar user-91=inkigaic user-92=fffhpcwr user-93=radekrat user-94=starluxm user-95=ambitiou user-96=fiziosmk user-97=versusmk user-98=onlinesh user-99=nationa2 user-100=solemor1 user-101=mapaspla user-102=tcieuroc user-103=datalink
Sep 12 10:42:13 power sudo[2957326]: wp-toolkit : (command continued) user-104=velmk user-105=gogovan1 user-106=kujnamon user-107=univerz1 user-108=agrosind user-109=mpbmk user-110=simbiome user-111=getaldus user-112=delcevca user-113=barececo user-114=workandt user-115=goartsym user-116=volkanco user-117=dhamachi user-118=mfashion user-119=bianasho user-120=makoasmk user-121=skyapart user-122=rasmorgm user-123=wikicamp user-124=urbanexp user-125=spdcompu user-126=detskagr user-127=mspmk user-128=infobadi user-129=bizporta user-130=datelcom user-131=maleshne user-132=sedcmk user-133=groskome user-134=ivanjord user-135=vfxnestc user-136=polyeste user-137=palenzok user-138=busymard user-139=zampmk user-140=zvskopje user-141=custome1 user-142=sparkupm user-143=stokovna user-144=klimimk user-145=stojano1 user-146=bovincom user-147=janiboja user-148=itradeco user-149=vezilkac user-150=cabinetm user-151=jpparkin user-152=inotekso user-153=drleomk user-154=ideaplus user-155=nasaidni
Sep 12 10:42:13 power sudo[2957326]: wp-toolkit : (command continued) user-156=karpospo user-157=arturaco user-158=screenme user-159=premiums user-160=butelmk user-161=daris user-162=kouzonco user-163=premiuma user-164=cetplatf user-165=dalmacom user-166=edomcomm user-167=berbermk user-168=dikimk12 user-169=sprintst user-170=herbalpl user-171=enochmk user-172=seloviro user-173=centarba user-174=nlpmkorg user-175=kolened1 user-176=nolimits user-177=tealmk user-178=dadarmk user-179=proverim user-180=goodnews user-181=mstmmk user-182=gocruise user-183=gjorgeiv user-184=tradeyou user-185=dnevnoin user-186=pecakome user-187=wondersp user-188=robustco user-189=stravelm user-190=holiyayt user-191=rastiraz user-192=cajsproc user-193=hotammk user-194=youthgua user-195=anitermc user-196=stojnevi user-197=raremk user-198=oouslave user-199=uhostmk5 user-200=bauerbg user-201=enaspotc user-202=vmro user-203=trudovop user-204=viewinn user-205=avtogumi user-206=socioloz user-207=pelagoni
Sep 12 10:42:13 power sudo[2957326]: wp-toolkit : (command continued) user-208=evolvepl user-209=frizered user-210=hidrommk user-211=caramk user-212=nefrolog user-213=ekostoc1 user-214=levantmk user-215=oncolog1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 10:42:13 power sudo[2957326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:14 power sudo[2957326]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:14 power sudo[2957342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 10:42:14 power sudo[2957342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:14 power sudo[2957342]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:14 power sudo[2957347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ExxDTPbT1lTMmoq5.~
Sep 12 10:42:14 power sudo[2957347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:14 power sudo[2957347]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:14 power sudo[2957351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ExxDTPbT1lTMmoq5.~\''
Sep 12 10:42:14 power sudo[2957351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:14 power sudo[2957351]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:14 power sudo[2957356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ExxDTPbT1lTMmoq5.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 10:42:14 power sudo[2957356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:14 power sudo[2957356]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:14 power sudo[2957360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 10:42:14 power sudo[2957360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:14 power sudo[2957360]: pam_unix(sudo:session): session closed for user root
Sep 12 10:42:18 power sudo[2958316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 10:42:18 power sudo[2958316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 10:42:18 power sudo[2958316]: pam_unix(sudo:session): session closed for user root
Sep 12 10:45:01 power systemd[2961488]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:50:01 power systemd[2968294]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 10:55:01 power systemd[2974597]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 10:55:01 power systemd[2974598]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:00:02 power systemd[2980928]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:00:02 power systemd[2980930]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:00:02 power systemd[2980931]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 11:00:02 power systemd[2980933]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 11:00:02 power systemd[2980934]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 11:04:01 power systemd[2986111]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:05:01 power systemd[2987280]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:05:01 power systemd[2987281]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:06:01 power systemd[2988549]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 11:07:01 power systemd[2989673]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 11:09:01 power systemd[2992425]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:10:01 power systemd[2993572]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:10:01 power systemd[2993573]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:12:01 power systemd[2995815]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 11:15:01 power systemd[2999292]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:15:01 power systemd[2999293]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:17:23 power sshd[3002275]: error: kex_exchange_identification: read: Connection reset by peer
Sep 12 11:17:23 power sshd[3002275]: Connection reset by 199.45.154.115 port 58980
Sep 12 11:17:43 power sshd[3002428]: Connection closed by 199.45.154.115 port 46384 [preauth]
Sep 12 11:20:01 power systemd[3005784]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:20:01 power systemd[3005785]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:25:02 power systemd[3012083]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:25:02 power systemd[3012084]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:30:01 power systemd[3017655]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:30:01 power systemd[3017656]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:30:01 power systemd[3017657]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 11:30:01 power systemd[3017659]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 11:30:01 power systemd[3017661]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 11:30:41 power sshd[3018910]: Connection closed by 89.248.168.227 port 41374 [preauth]
Sep 12 11:35:01 power systemd[3025187]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:35:01 power systemd[3025188]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:36:01 power systemd[3026469]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 11:37:01 power systemd[3027555]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 11:39:01 power systemd[3030127]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:40:01 power systemd[3031541]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:40:01 power systemd[3031543]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:42:01 power systemd[3033848]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 11:42:10 power sudo[3034027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 11:42:10 power systemd[3034032]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:42:11 power sudo[3034027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034027]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 11:42:11 power sudo[3034048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034048]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 11:42:11 power sudo[3034055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034055]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=zjrlLbtcs8'
Sep 12 11:42:11 power sudo[3034060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034060]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 11:42:11 power sudo[3034066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034066]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034070]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 11:42:11 power sudo[3034070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034070]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 11:42:11 power sudo[3034075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034075]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 11:42:11 power sudo[3034080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034080]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 11:42:11 power sudo[3034089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034089]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034094]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 11:42:11 power sudo[3034094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034094]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 11:42:11 power sudo[3034098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034098]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 11:42:11 power sudo[3034102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034102]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034107]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 11:42:11 power sudo[3034107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:11 power sudo[3034107]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:11 power sudo[3034111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 11:42:11 power sudo[3034111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:12 power sudo[3034111]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:13 power sudo[3034169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 11:42:13 power sudo[3034169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:13 power sudo[3034169]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:13 power sudo[3034174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 11:42:13 power sudo[3034174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:13 power sudo[3034174]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:13 power sudo[3034180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pravekom user-2=vtranseu user-3=infopor1 user-4=glammace user-5=albuname user-6=imdskopj user-7=nutrivim user-8=samasped user-9=chemhemc user-10=zapovim1 user-11=elektrot user-12=cosmatob user-13=euromaki user-14=euronic2 user-15=matratze user-16=kardiome user-17=mediasol user-18=carrent1 user-19=bogdanos user-20=apgrupmk user-21=hausmark user-22=nikolov1 user-23=aptekazd user-24=nikimare user-25=forzares user-26=nucktra1 user-27=lblawcom user-28=intelek1 user-29=mediatag user-30=versusmk user-31=ambitiou user-32=fiziosmk user-33=radekrat user-34=starluxm user-35=fffhpcwr user-36=tcieuroc user-37=solemor1 user-38=mapaspla user-39=onlinesh user-40=nationa2 user-41=v5srybi9dcdx user-42=supremel user-43=gorsajmk user-44=aquatech user-45=zdmgpsor user-46=inkigaic user-47=modernar user-48=taneccom
Sep 12 11:42:13 power sudo[3034180]: wp-toolkit : (command continued) user-49=tehnologija user-50=bozinovm user-51=prizmapl user-52=dslmk user-53=fnjorgmk user-54=darkogor user-55=innofabl user-56=premiumi user-57=vacuacti user-58=izzomk user-59=jpkomuna user-60=makdrone user-61=tehnodro user-62=peshkai1 user-63=fxxcom user-64=eaptekam user-65=dimpalne user-66=gradbai1 user-67=evacommk user-68=madzomk user-69=aptekafa user-70=bauerin2 user-71=folklore user-72=bonitavi user-73=evberasm user-74=conserva user-75=euronic3 user-76=vegemk1 user-77=cupidpro user-78=wineberr user-79=viplastc user-80=mbmehani user-81=workbenc user-82=ismassag user-83=trigemat user-84=eliksirz user-85=naksorgm user-86=electrol user-87=golakkom user-88=solarinv user-89=eurofarm user-90=jaramk user-91=solointe user-92=recorgmk user-93=taktcomm user-94=progress user-95=animatem user-96=cleanerm user-97=atspedco user-98=sssoluti user-99=kaoilmk user-100=biplmk user-101=bbbustou user-102=pelagini
Sep 12 11:42:13 power sudo[3034180]: wp-toolkit : (command continued) user-103=gocruise user-104=goodnews user-105=mstmmk user-106=dadarmk user-107=proverim user-108=tealmk user-109=holiyayt user-110=rastiraz user-111=pecakome user-112=wondersp user-113=robustco user-114=stravelm user-115=dnevnoin user-116=gjorgeiv user-117=tradeyou user-118=dikimk12 user-119=sprintst user-120=enochmk user-121=herbalpl user-122=edomcomm user-123=berbermk user-124=nolimits user-125=nlpmkorg user-126=centarba user-127=kolened1 user-128=seloviro user-129=evolvepl user-130=pelagoni user-131=socioloz user-132=avtogumi user-133=nefrolog user-134=levantmk user-135=ekostoc1 user-136=oncolog1 user-137=caramk user-138=frizered user-139=hidrommk user-140=youthgua user-141=anitermc user-142=cajsproc user-143=hotammk user-144=enaspotc user-145=vmro user-146=viewinn user-147=trudovop user-148=raremk user-149=oouslave user-150=uhostmk5 user-151=bauerbg user-152=stojnevi user-153=mspmk user-154=infobadi
Sep 12 11:42:13 power sudo[3034180]: wp-toolkit : (command continued) user-155=spdcompu user-156=detskagr user-157=wikicamp user-158=urbanexp user-159=vfxnestc user-160=polyeste user-161=sedcmk user-162=groskome user-163=ivanjord user-164=datelcom user-165=maleshne user-166=bizporta user-167=agrosind user-168=mpbmk user-169=velmk user-170=gogovan1 user-171=univerz1 user-172=kujnamon user-173=datalink user-174=rasmorgm user-175=makoasmk user-176=bianasho user-177=skyapart user-178=goartsym user-179=volkanco user-180=dhamachi user-181=mfashion user-182=getaldus user-183=delcevca user-184=simbiome user-185=barececo user-186=workandt user-187=premiums user-188=daris user-189=butelmk user-190=ideaplus user-191=nasaidni user-192=karpospo user-193=screenme user-194=arturaco user-195=jpparkin user-196=inotekso user-197=drleomk user-198=cetplatf user-199=dalmacom user-200=kouzonco user-201=premiuma user-202=klimimk user-203=sparkupm user-204=stokovna user-205=custome1 user-206=palenzok
Sep 12 11:42:13 power sudo[3034180]: wp-toolkit : (command continued) user-207=zvskopje user-208=busymard user-209=zampmk user-210=vezilkac user-211=cabinetm user-212=janiboja user-213=itradeco user-214=bovincom user-215=stojano1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 11:42:13 power sudo[3034180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:14 power sudo[3034180]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:14 power sudo[3034201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 11:42:14 power sudo[3034201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:14 power sudo[3034201]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:14 power sudo[3034206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5wJU3VL4Dd4MjxJ4.~
Sep 12 11:42:14 power sudo[3034206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:14 power sudo[3034206]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:14 power sudo[3034210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5wJU3VL4Dd4MjxJ4.~\''
Sep 12 11:42:14 power sudo[3034210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:14 power sudo[3034210]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:14 power sudo[3034217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5wJU3VL4Dd4MjxJ4.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 11:42:14 power sudo[3034217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:14 power sudo[3034217]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:14 power sudo[3034225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 11:42:14 power sudo[3034225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:14 power sudo[3034225]: pam_unix(sudo:session): session closed for user root
Sep 12 11:42:18 power sudo[3034452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 11:42:18 power sudo[3034452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 11:42:18 power sudo[3034452]: pam_unix(sudo:session): session closed for user root
Sep 12 11:45:01 power systemd[3038529]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:45:01 power systemd[3038530]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:50:02 power systemd[3045808]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:50:02 power systemd[3045811]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 11:51:39 power sshd[3048049]: Connection closed by 172.105.128.11 port 45126 [preauth]
Sep 12 11:51:39 power sshd[3048059]: Connection closed by 172.105.128.11 port 45134 [preauth]
Sep 12 11:51:40 power sshd[3048063]: Connection closed by 172.105.128.11 port 45138 [preauth]
Sep 12 11:55:01 power systemd[3053316]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 11:55:01 power systemd[3053317]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:00:01 power systemd[3061089]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:00:01 power systemd[3061090]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:00:01 power systemd[3061091]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 12:00:01 power systemd[3061097]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 12 12:00:01 power systemd[3061093]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 12:00:01 power systemd[3061095]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 12:04:01 power systemd[3068124]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:05:01 power systemd[3069558]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:05:01 power systemd[3069559]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:06:01 power systemd[3070898]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 12:07:01 power systemd[3072147]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 12:09:01 power systemd[3075074]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:10:01 power systemd[3076505]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:10:01 power systemd[3076506]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:12:01 power systemd[3078688]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 12:15:01 power systemd[3082911]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:15:01 power systemd[3082912]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:20:01 power systemd[3089994]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:20:01 power systemd[3089995]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:25:01 power systemd[3096408]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:25:01 power systemd[3096409]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:30:02 power systemd[3102848]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:30:02 power systemd[3102849]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:30:02 power systemd[3102850]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 12:30:02 power systemd[3102852]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 12:30:02 power systemd[3102854]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 12:35:01 power systemd[3109970]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:35:01 power systemd[3109971]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:36:01 power systemd[3111488]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 12:37:01 power systemd[3112892]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 12:39:01 power systemd[3115694]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:40:02 power systemd[3117028]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:40:02 power systemd[3117029]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:42:01 power systemd[3119326]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 12:42:10 power sudo[3119548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 12:42:10 power systemd[3119554]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:42:11 power sudo[3119548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119548]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 12:42:11 power sudo[3119576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119576]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 12:42:11 power sudo[3119580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119580]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=mVtn82HV7n'
Sep 12 12:42:11 power sudo[3119584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119584]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 12:42:11 power sudo[3119592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119592]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 12:42:11 power sudo[3119597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119597]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 12:42:11 power sudo[3119601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119601]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 12:42:11 power sudo[3119605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119605]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 12:42:11 power sudo[3119612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119612]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 12:42:11 power sudo[3119616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119616]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 12:42:11 power sudo[3119620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119620]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 12:42:11 power sudo[3119624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119624]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 12:42:11 power sudo[3119628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:11 power sudo[3119628]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:11 power sudo[3119633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 12:42:11 power sudo[3119633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:12 power sudo[3119633]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:13 power sudo[3119688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 12:42:13 power sudo[3119688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:13 power sudo[3119688]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:13 power sudo[3119694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 12:42:13 power sudo[3119694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:13 power sudo[3119694]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:13 power sudo[3119701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=wineberr user-2=viplastc user-3=workbenc user-4=ismassag user-5=mbmehani user-6=golakkom user-7=trigemat user-8=eliksirz user-9=naksorgm user-10=electrol user-11=eurofarm user-12=solarinv user-13=recorgmk user-14=taktcomm user-15=jaramk user-16=solointe user-17=atspedco user-18=sssoluti user-19=progress user-20=animatem user-21=cleanerm user-22=biplmk user-23=kaoilmk user-24=bbbustou user-25=pelagini user-26=izzomk user-27=jpkomuna user-28=tehnodro user-29=makdrone user-30=eaptekam user-31=dimpalne user-32=peshkai1 user-33=fxxcom user-34=evacommk user-35=madzomk user-36=aptekafa user-37=gradbai1 user-38=folklore user-39=bauerin2 user-40=bonitavi user-41=evberasm user-42=euronic3 user-43=vegemk1 user-44=cupidpro user-45=conserva user-46=ambitiou user-47=fiziosmk user-48=versusmk user-49=fffhpcwr
Sep 12 12:42:13 power sudo[3119701]: wp-toolkit : (command continued) user-50=radekrat user-51=starluxm user-52=tcieuroc user-53=onlinesh user-54=nationa2 user-55=solemor1 user-56=mapaspla user-57=gorsajmk user-58=aquatech user-59=v5srybi9dcdx user-60=supremel user-61=zdmgpsor user-62=modernar user-63=inkigaic user-64=bozinovm user-65=prizmapl user-66=dslmk user-67=fnjorgmk user-68=darkogor user-69=innofabl user-70=premiumi user-71=vacuacti user-72=taneccom user-73=tehnologija user-74=infopor1 user-75=vtranseu user-76=pravekom user-77=imdskopj user-78=glammace user-79=albuname user-80=chemhemc user-81=samasped user-82=nutrivim user-83=euromaki user-84=cosmatob user-85=elektrot user-86=zapovim1 user-87=euronic2 user-88=matratze user-89=mediasol user-90=carrent1 user-91=bogdanos user-92=apgrupmk user-93=kardiome user-94=aptekazd user-95=nikimare user-96=forzares user-97=hausmark user-98=nikolov1 user-99=intelek1 user-100=mediatag user-101=nucktra1 user-102=lblawcom user-103=ideaplus
Sep 12 12:42:13 power sudo[3119701]: wp-toolkit : (command continued) user-104=nasaidni user-105=karpospo user-106=screenme user-107=arturaco user-108=premiums user-109=daris user-110=butelmk user-111=jpparkin user-112=inotekso user-113=drleomk user-114=kouzonco user-115=premiuma user-116=cetplatf user-117=dalmacom user-118=sparkupm user-119=stokovna user-120=klimimk user-121=palenzok user-122=busymard user-123=zvskopje user-124=zampmk user-125=custome1 user-126=janiboja user-127=itradeco user-128=vezilkac user-129=cabinetm user-130=stojano1 user-131=bovincom user-132=spdcompu user-133=detskagr user-134=infobadi user-135=mspmk user-136=wikicamp user-137=urbanexp user-138=sedcmk user-139=groskome user-140=ivanjord user-141=vfxnestc user-142=polyeste user-143=bizporta user-144=datelcom user-145=maleshne user-146=agrosind user-147=mpbmk user-148=datalink user-149=gogovan1 user-150=velmk user-151=kujnamon user-152=univerz1 user-153=bianasho user-154=makoasmk user-155=skyapart
Sep 12 12:42:13 power sudo[3119701]: wp-toolkit : (command continued) user-156=rasmorgm user-157=getaldus user-158=delcevca user-159=simbiome user-160=barececo user-161=workandt user-162=goartsym user-163=volkanco user-164=dhamachi user-165=mfashion user-166=evolvepl user-167=socioloz user-168=avtogumi user-169=pelagoni user-170=nefrolog user-171=levantmk user-172=oncolog1 user-173=ekostoc1 user-174=frizered user-175=hidrommk user-176=caramk user-177=youthgua user-178=anitermc user-179=cajsproc user-180=hotammk user-181=enaspotc user-182=vmro user-183=viewinn user-184=trudovop user-185=stojnevi user-186=raremk user-187=oouslave user-188=uhostmk5 user-189=bauerbg user-190=goodnews user-191=mstmmk user-192=gocruise user-193=tealmk user-194=dadarmk user-195=proverim user-196=pecakome user-197=wondersp user-198=stravelm user-199=robustco user-200=holiyayt user-201=rastiraz user-202=gjorgeiv user-203=tradeyou user-204=dnevnoin user-205=dikimk12 user-206=sprintst user-207=enochmk
Sep 12 12:42:13 power sudo[3119701]: wp-toolkit : (command continued) user-208=herbalpl user-209=edomcomm user-210=berbermk user-211=nlpmkorg user-212=centarba user-213=kolened1 user-214=nolimits user-215=seloviro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 12:42:13 power sudo[3119701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:14 power sudo[3119701]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:14 power sudo[3119715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 12:42:14 power sudo[3119715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:14 power sudo[3119715]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:14 power sudo[3119719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s0nnnd16pgzglGo1.~
Sep 12 12:42:14 power sudo[3119719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:14 power sudo[3119719]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:14 power sudo[3119723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s0nnnd16pgzglGo1.~\''
Sep 12 12:42:14 power sudo[3119723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:14 power sudo[3119723]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:14 power sudo[3119728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s0nnnd16pgzglGo1.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 12:42:14 power sudo[3119728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:14 power sudo[3119728]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:14 power sudo[3119732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 12:42:14 power sudo[3119732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:14 power sudo[3119732]: pam_unix(sudo:session): session closed for user root
Sep 12 12:42:15 power sudo[3120660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 12:42:15 power sudo[3120660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 12:42:15 power sudo[3120660]: pam_unix(sudo:session): session closed for user root
Sep 12 12:45:01 power systemd[3124039]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:45:01 power systemd[3124040]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:50:01 power systemd[3130914]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:50:01 power systemd[3130917]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 12:55:01 power systemd[3136353]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 12:55:01 power systemd[3136355]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:00:02 power systemd[3142169]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:00:02 power systemd[3142170]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:00:02 power systemd[3142171]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 13:00:02 power systemd[3142173]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 13:00:02 power systemd[3142174]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 13:04:02 power systemd[3148526]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:05:01 power systemd[3149872]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:05:01 power systemd[3149873]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:06:01 power systemd[3151160]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 13:07:01 power systemd[3152255]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 13:09:01 power systemd[3154641]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:10:01 power systemd[3156033]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:10:01 power systemd[3156034]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:12:01 power systemd[3158627]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 13:15:01 power systemd[3162622]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:15:01 power systemd[3162624]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:20:01 power systemd[3169222]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:20:01 power systemd[3169224]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:25:01 power systemd[3175154]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:25:01 power systemd[3175155]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:30:01 power systemd[3181821]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:30:01 power systemd[3181823]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:30:01 power systemd[3181824]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 13:30:01 power systemd[3181826]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 13:30:01 power systemd[3181828]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 13:35:01 power systemd[3188227]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:35:01 power systemd[3188229]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:36:01 power systemd[3190430]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 13:37:01 power systemd[3191946]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 13:39:01 power systemd[3194254]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:40:01 power systemd[3195490]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:40:01 power systemd[3195491]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:42:01 power systemd[3197725]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 13:42:10 power sudo[3197897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 13:42:11 power systemd[3197902]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:42:11 power sudo[3197897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197897]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 13:42:11 power sudo[3197920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197920]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 13:42:11 power sudo[3197924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197924]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=aFtmKNkT9a'
Sep 12 13:42:11 power sudo[3197929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197929]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 13:42:11 power sudo[3197934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197934]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197938]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 13:42:11 power sudo[3197938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197938]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 13:42:11 power sudo[3197942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197942]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 13:42:11 power sudo[3197947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197947]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 13:42:11 power sudo[3197959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197959]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 13:42:11 power sudo[3197964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197964]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 13:42:11 power sudo[3197968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197968]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 13:42:11 power sudo[3197972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197972]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 13:42:11 power sudo[3197976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:11 power sudo[3197976]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:11 power sudo[3197982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 13:42:11 power sudo[3197982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:12 power sudo[3197982]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:13 power sudo[3198024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 13:42:13 power sudo[3198024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:13 power sudo[3198024]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:13 power sudo[3198029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 13:42:13 power sudo[3198029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:14 power sudo[3198029]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:14 power sudo[3198036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=enaspotc user-2=vmro user-3=trudovop user-4=viewinn user-5=raremk user-6=oouslave user-7=uhostmk5 user-8=bauerbg user-9=stojnevi user-10=youthgua user-11=anitermc user-12=cajsproc user-13=hotammk user-14=nefrolog user-15=levantmk user-16=oncolog1 user-17=ekostoc1 user-18=caramk user-19=frizered user-20=hidrommk user-21=evolvepl user-22=pelagoni user-23=avtogumi user-24=socioloz user-25=nolimits user-26=nlpmkorg user-27=centarba user-28=kolened1 user-29=seloviro user-30=dikimk12 user-31=sprintst user-32=herbalpl user-33=enochmk user-34=edomcomm user-35=berbermk user-36=holiyayt user-37=rastiraz user-38=pecakome user-39=wondersp user-40=robustco user-41=stravelm user-42=dnevnoin user-43=gjorgeiv user-44=tradeyou user-45=gocruise user-46=goodnews user-47=mstmmk user-48=dadarmk user-49=proverim user-50=tealmk
Sep 12 13:42:14 power sudo[3198036]: wp-toolkit : (command continued) user-51=vezilkac user-52=cabinetm user-53=janiboja user-54=itradeco user-55=bovincom user-56=stojano1 user-57=klimimk user-58=sparkupm user-59=stokovna user-60=custome1 user-61=palenzok user-62=zampmk user-63=busymard user-64=zvskopje user-65=cetplatf user-66=dalmacom user-67=kouzonco user-68=premiuma user-69=premiums user-70=daris user-71=butelmk user-72=ideaplus user-73=karpospo user-74=nasaidni user-75=screenme user-76=arturaco user-77=jpparkin user-78=inotekso user-79=drleomk user-80=rasmorgm user-81=makoasmk user-82=bianasho user-83=skyapart user-84=goartsym user-85=volkanco user-86=dhamachi user-87=mfashion user-88=getaldus user-89=delcevca user-90=simbiome user-91=barececo user-92=workandt user-93=agrosind user-94=mpbmk user-95=velmk user-96=gogovan1 user-97=kujnamon user-98=univerz1 user-99=datalink user-100=vfxnestc user-101=polyeste user-102=sedcmk user-103=groskome user-104=ivanjord user-105=datelcom
Sep 12 13:42:14 power sudo[3198036]: wp-toolkit : (command continued) user-106=maleshne user-107=bizporta user-108=infobadi user-109=mspmk user-110=spdcompu user-111=detskagr user-112=wikicamp user-113=urbanexp user-114=inkigaic user-115=modernar user-116=taneccom user-117=tehnologija user-118=bozinovm user-119=prizmapl user-120=fnjorgmk user-121=dslmk user-122=darkogor user-123=innofabl user-124=premiumi user-125=vacuacti user-126=v5srybi9dcdx user-127=supremel user-128=gorsajmk user-129=aquatech user-130=zdmgpsor user-131=tcieuroc user-132=solemor1 user-133=mapaspla user-134=onlinesh user-135=nationa2 user-136=versusmk user-137=ambitiou user-138=fiziosmk user-139=radekrat user-140=starluxm user-141=fffhpcwr user-142=hausmark user-143=nikolov1 user-144=aptekazd user-145=nikimare user-146=forzares user-147=nucktra1 user-148=lblawcom user-149=intelek1 user-150=mediatag user-151=euronic2 user-152=matratze user-153=kardiome user-154=mediasol user-155=bogdanos user-156=carrent1
Sep 12 13:42:14 power sudo[3198036]: wp-toolkit : (command continued) user-157=apgrupmk user-158=nutrivim user-159=samasped user-160=chemhemc user-161=zapovim1 user-162=elektrot user-163=cosmatob user-164=euromaki user-165=pravekom user-166=vtranseu user-167=infopor1 user-168=glammace user-169=albuname user-170=imdskopj user-171=biplmk user-172=kaoilmk user-173=bbbustou user-174=pelagini user-175=jaramk user-176=solointe user-177=recorgmk user-178=taktcomm user-179=progress user-180=animatem user-181=cleanerm user-182=atspedco user-183=sssoluti user-184=trigemat user-185=eliksirz user-186=naksorgm user-187=electrol user-188=golakkom user-189=solarinv user-190=eurofarm user-191=wineberr user-192=viplastc user-193=mbmehani user-194=workbenc user-195=ismassag user-196=bonitavi user-197=evberasm user-198=conserva user-199=euronic3 user-200=vegemk1 user-201=cupidpro user-202=bauerin2 user-203=folklore user-204=peshkai1 user-205=fxxcom user-206=eaptekam user-207=dimpalne
Sep 12 13:42:14 power sudo[3198036]: wp-toolkit : (command continued) user-208=gradbai1 user-209=evacommk user-210=aptekafa user-211=madzomk user-212=izzomk user-213=jpkomuna user-214=makdrone user-215=tehnodro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 13:42:14 power sudo[3198036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:14 power sudo[3198036]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:14 power sudo[3198049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 13:42:14 power sudo[3198049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:14 power sudo[3198049]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:14 power sudo[3198053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sVHZWdLCpMtiVAzs.~
Sep 12 13:42:14 power sudo[3198053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:14 power sudo[3198053]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:14 power sudo[3198057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sVHZWdLCpMtiVAzs.~\''
Sep 12 13:42:14 power sudo[3198057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:14 power sudo[3198057]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:14 power sudo[3198062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sVHZWdLCpMtiVAzs.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 13:42:14 power sudo[3198062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:14 power sudo[3198062]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:14 power sudo[3198066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 13:42:14 power sudo[3198066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:14 power sudo[3198066]: pam_unix(sudo:session): session closed for user root
Sep 12 13:42:14 power sudo[3198259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 13:42:14 power sudo[3198259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 13:42:14 power sudo[3198259]: pam_unix(sudo:session): session closed for user root
Sep 12 13:45:01 power systemd[3201984]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:45:01 power systemd[3201985]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:50:01 power systemd[3208163]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:50:01 power systemd[3208164]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 13:55:01 power systemd[3213737]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 13:55:01 power systemd[3213738]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:00:01 power systemd[3219223]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:00:01 power systemd[3219225]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:00:01 power systemd[3219226]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 14:00:01 power systemd[3219228]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 14:00:01 power systemd[3219229]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 14:04:01 power systemd[3224409]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:05:01 power systemd[3225621]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:05:01 power systemd[3225623]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:06:01 power systemd[3226853]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 14:07:01 power systemd[3227926]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 14:09:01 power systemd[3230543]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:10:01 power systemd[3232381]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:10:01 power systemd[3232382]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:12:01 power systemd[3235187]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 14:15:01 power systemd[3239001]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:15:01 power systemd[3239003]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:18:36 power sshd[3243136]: Connection closed by 167.94.138.32 port 43408 [preauth]
Sep 12 14:20:01 power systemd[3245149]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:20:01 power systemd[3245150]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:25:01 power systemd[3250448]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:25:01 power systemd[3250450]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:30:01 power systemd[3256478]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:30:01 power systemd[3256481]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 14:30:01 power systemd[3256479]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:30:01 power systemd[3256484]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 14:30:01 power systemd[3256483]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 14:35:01 power systemd[3262680]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:35:01 power systemd[3262681]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:36:01 power systemd[3263943]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 14:37:01 power systemd[3265026]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 14:39:01 power systemd[3267473]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:40:01 power systemd[3268755]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:40:01 power systemd[3268758]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:42:01 power systemd[3270963]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 14:42:10 power sudo[3271233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 14:42:11 power systemd[3271238]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:42:11 power sudo[3271233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271233]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 14:42:11 power sudo[3271256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271256]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 14:42:11 power sudo[3271260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271260]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=XWEEWbyH73'
Sep 12 14:42:11 power sudo[3271264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271264]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 14:42:11 power sudo[3271271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271271]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 14:42:11 power sudo[3271275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271275]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 14:42:11 power sudo[3271279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271279]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 14:42:11 power sudo[3271283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271283]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 14:42:11 power sudo[3271289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271289]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 14:42:11 power sudo[3271297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271297]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 14:42:11 power sudo[3271301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271301]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 14:42:11 power sudo[3271305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271305]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 14:42:11 power sudo[3271309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:11 power sudo[3271309]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:11 power sudo[3271313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 14:42:11 power sudo[3271313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:12 power sudo[3271313]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:13 power sudo[3271351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 14:42:13 power sudo[3271351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:13 power sudo[3271351]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:13 power sudo[3271358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 14:42:13 power sudo[3271358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:13 power sudo[3271358]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:13 power sudo[3271364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=detskagr user-2=spdcompu user-3=infobadi user-4=mspmk user-5=urbanexp user-6=wikicamp user-7=groskome user-8=ivanjord user-9=sedcmk user-10=vfxnestc user-11=polyeste user-12=bizporta user-13=datelcom user-14=maleshne user-15=agrosind user-16=mpbmk user-17=datalink user-18=velmk user-19=gogovan1 user-20=kujnamon user-21=univerz1 user-22=makoasmk user-23=bianasho user-24=skyapart user-25=rasmorgm user-26=workandt user-27=simbiome user-28=getaldus user-29=delcevca user-30=barececo user-31=mfashion user-32=volkanco user-33=goartsym user-34=dhamachi user-35=arturaco user-36=screenme user-37=ideaplus user-38=karpospo user-39=nasaidni user-40=premiums user-41=butelmk user-42=daris user-43=drleomk user-44=jpparkin user-45=inotekso user-46=premiuma user-47=kouzonco user-48=dalmacom user-49=cetplatf user-50=sparkupm
Sep 12 14:42:13 power sudo[3271364]: wp-toolkit : (command continued) user-51=stokovna user-52=klimimk user-53=zampmk user-54=busymard user-55=zvskopje user-56=palenzok user-57=custome1 user-58=itradeco user-59=janiboja user-60=cabinetm user-61=vezilkac user-62=stojano1 user-63=bovincom user-64=mstmmk user-65=goodnews user-66=gocruise user-67=tealmk user-68=proverim user-69=dadarmk user-70=wondersp user-71=stravelm user-72=robustco user-73=pecakome user-74=rastiraz user-75=holiyayt user-76=gjorgeiv user-77=tradeyou user-78=dnevnoin user-79=sprintst user-80=herbalpl user-81=enochmk user-82=dikimk12 user-83=berbermk user-84=edomcomm user-85=centarba user-86=nlpmkorg user-87=kolened1 user-88=nolimits user-89=seloviro user-90=evolvepl user-91=avtogumi user-92=socioloz user-93=pelagoni user-94=nefrolog user-95=ekostoc1 user-96=levantmk user-97=oncolog1 user-98=frizered user-99=hidrommk user-100=caramk user-101=youthgua user-102=anitermc user-103=hotammk user-104=cajsproc user-105=vmro
Sep 12 14:42:13 power sudo[3271364]: wp-toolkit : (command continued) user-106=viewinn user-107=trudovop user-108=enaspotc user-109=stojnevi user-110=uhostmk5 user-111=bauerbg user-112=raremk user-113=oouslave user-114=jpkomuna user-115=izzomk user-116=tehnodro user-117=makdrone user-118=dimpalne user-119=eaptekam user-120=peshkai1 user-121=fxxcom user-122=evacommk user-123=madzomk user-124=aptekafa user-125=gradbai1 user-126=folklore user-127=bauerin2 user-128=bonitavi user-129=evberasm user-130=vegemk1 user-131=cupidpro user-132=euronic3 user-133=conserva user-134=viplastc user-135=wineberr user-136=ismassag user-137=workbenc user-138=mbmehani user-139=golakkom user-140=electrol user-141=trigemat user-142=eliksirz user-143=naksorgm user-144=eurofarm user-145=solarinv user-146=recorgmk user-147=taktcomm user-148=solointe user-149=jaramk user-150=sssoluti user-151=atspedco user-152=animatem user-153=cleanerm user-154=progress user-155=bbbustou user-156=kaoilmk user-157=biplmk
Sep 12 14:42:13 power sudo[3271364]: wp-toolkit : (command continued) user-158=pelagini user-159=infopor1 user-160=vtranseu user-161=pravekom user-162=imdskopj user-163=glammace user-164=albuname user-165=chemhemc user-166=samasped user-167=nutrivim user-168=euromaki user-169=cosmatob user-170=elektrot user-171=zapovim1 user-172=euronic2 user-173=matratze user-174=apgrupmk user-175=mediasol user-176=bogdanos user-177=carrent1 user-178=kardiome user-179=forzares user-180=aptekazd user-181=nikimare user-182=hausmark user-183=nikolov1 user-184=intelek1 user-185=mediatag user-186=lblawcom user-187=nucktra1 user-188=fiziosmk user-189=ambitiou user-190=versusmk user-191=fffhpcwr user-192=radekrat user-193=starluxm user-194=tcieuroc user-195=nationa2 user-196=onlinesh user-197=mapaspla user-198=solemor1 user-199=gorsajmk user-200=aquatech user-201=supremel user-202=v5srybi9dcdx user-203=zdmgpsor user-204=modernar user-205=inkigaic user-206=premiumi user-207=innofabl user-208=vacuacti
Sep 12 14:42:13 power sudo[3271364]: wp-toolkit : (command continued) user-209=bozinovm user-210=darkogor user-211=prizmapl user-212=fnjorgmk user-213=dslmk user-214=tehnologija user-215=taneccom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 14:42:13 power sudo[3271364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:14 power sudo[3271364]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:14 power sudo[3271372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep 12 14:42:14 power sudo[3271372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:14 power sudo[3271372]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:14 power sudo[3271382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro test -e /home/vmro/wordpress-backups
Sep 12 14:42:14 power sudo[3271382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:14 power sudo[3271382]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:14 power sudo[3271393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep 12 14:42:14 power sudo[3271393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:14 power sudo[3271393]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:14 power sudo[3271401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep 12 14:42:14 power sudo[3271401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:14 power sudo[3271401]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:14 power sudo[3271412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep 12 14:42:14 power sudo[3271412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:15 power sudo[3271412]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:15 power sudo[3271420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind test -e /home/agrosind/wordpress-backups
Sep 12 14:42:15 power sudo[3271420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:15 power sudo[3271420]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:15 power sudo[3271432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep 12 14:42:15 power sudo[3271432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:15 power sudo[3271432]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:15 power sudo[3271437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep 12 14:42:15 power sudo[3271437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:15 power sudo[3271437]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:15 power sudo[3271448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep 12 14:42:15 power sudo[3271448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:15 power sudo[3271448]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:15 power sudo[3271460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep 12 14:42:15 power sudo[3271460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:15 power sudo[3271460]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:15 power sudo[3271473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep 12 14:42:15 power sudo[3271473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:15 power sudo[3271473]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:15 power sudo[3271483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem test -e /home/animatem/wordpress-backups
Sep 12 14:42:15 power sudo[3271483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:15 power sudo[3271483]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:15 power sudo[3271494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep 12 14:42:15 power sudo[3271494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:16 power sudo[3271494]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:16 power sudo[3271501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc test -e /home/anitermc/wordpress-backups
Sep 12 14:42:16 power sudo[3271501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:16 power sudo[3271501]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:16 power sudo[3271512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep 12 14:42:16 power sudo[3271512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:16 power sudo[3271512]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:16 power sudo[3271523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep 12 14:42:16 power sudo[3271523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:16 power sudo[3271523]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:16 power sudo[3271536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep 12 14:42:16 power sudo[3271536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:16 power sudo[3271536]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:16 power sudo[3271547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd test -e /home/aptekazd/wordpress-backups
Sep 12 14:42:16 power sudo[3271547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:16 power sudo[3271547]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:16 power sudo[3271564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep 12 14:42:16 power sudo[3271564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:16 power sudo[3271564]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:16 power sudo[3271572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress test -e /home/progress/wordpress-backups
Sep 12 14:42:16 power sudo[3271572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:16 power sudo[3271572]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:16 power sudo[3271583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep 12 14:42:16 power sudo[3271583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:17 power sudo[3271583]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:17 power sudo[3271587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep 12 14:42:17 power sudo[3271587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:17 power sudo[3271587]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:17 power sudo[3271601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep 12 14:42:17 power sudo[3271601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:17 power sudo[3271601]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:17 power sudo[3271610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 test -e /home/nationa2/wordpress-backups
Sep 12 14:42:17 power sudo[3271610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:17 power sudo[3271610]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:17 power sudo[3271621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep 12 14:42:17 power sudo[3271621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:17 power sudo[3271621]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:17 power sudo[3271631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 12 14:42:17 power sudo[3271631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:17 power sudo[3271631]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:17 power sudo[3271642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep 12 14:42:17 power sudo[3271642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:17 power sudo[3271642]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:17 power sudo[3271648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho test -e /home/bianasho/wordpress-backups
Sep 12 14:42:17 power sudo[3271648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:17 power sudo[3271648]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:17 power sudo[3271659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep 12 14:42:17 power sudo[3271659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:18 power sudo[3271659]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:18 power sudo[3271665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk test -e /home/velmk/wordpress-backups
Sep 12 14:42:18 power sudo[3271665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:18 power sudo[3271665]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:18 power sudo[3271676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep 12 14:42:18 power sudo[3271676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:18 power sudo[3271676]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:18 power sudo[3271684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep 12 14:42:18 power sudo[3271684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:18 power sudo[3271684]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:18 power sudo[3271695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep 12 14:42:18 power sudo[3271695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:18 power sudo[3271695]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:18 power sudo[3271703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi test -e /home/bonitavi/wordpress-backups
Sep 12 14:42:18 power sudo[3271703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:18 power sudo[3271703]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:18 power sudo[3271715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep 12 14:42:18 power sudo[3271715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:18 power sudo[3271715]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:18 power sudo[3271721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom test -e /home/bovincom/wordpress-backups
Sep 12 14:42:18 power sudo[3271721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:18 power sudo[3271721]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:18 power sudo[3271733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep 12 14:42:18 power sudo[3271733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271733]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:19 power sudo[3271738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk test -e /home/butelmk/wordpress-backups
Sep 12 14:42:19 power sudo[3271738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271738]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:19 power sudo[3271749]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep 12 14:42:19 power sudo[3271749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271749]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:19 power sudo[3271754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep 12 14:42:19 power sudo[3271754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271754]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:19 power sudo[3271766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 12 14:42:19 power sudo[3271766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271766]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:19 power sudo[3271777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 12 14:42:19 power sudo[3271777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271777]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:19 power sudo[3271791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep 12 14:42:19 power sudo[3271791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271791]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:19 power sudo[3271796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep 12 14:42:19 power sudo[3271796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271796]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:19 power sudo[3271808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep 12 14:42:19 power sudo[3271808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271808]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:19 power sudo[3271817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob test -e /home/cosmatob/wordpress-backups
Sep 12 14:42:19 power sudo[3271817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:19 power sudo[3271817]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep 12 14:42:20 power sudo[3271828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:20 power sudo[3271828]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep 12 14:42:20 power sudo[3271839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:20 power sudo[3271839]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca test -e /home/delcevca/wordpress-backups
Sep 12 14:42:20 power sudo[3271846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:20 power sudo[3271846]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep 12 14:42:20 power sudo[3271857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:20 power sudo[3271857]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 12 14:42:20 power sudo[3271865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:20 power sudo[3271865]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 12 14:42:20 power sudo[3271876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:20 power sudo[3271876]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 12 14:42:20 power sudo[3271887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:20 power sudo[3271887]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep 12 14:42:20 power sudo[3271899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:20 power sudo[3271899]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr test -e /home/detskagr/wordpress-backups
Sep 12 14:42:20 power sudo[3271908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:20 power sudo[3271908]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:20 power sudo[3271920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep 12 14:42:20 power sudo[3271920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:21 power sudo[3271920]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:21 power sudo[3271928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam test -e /home/eaptekam/wordpress-backups
Sep 12 14:42:21 power sudo[3271928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:21 power sudo[3271928]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:21 power sudo[3271940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep 12 14:42:21 power sudo[3271940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:21 power sudo[3271940]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:21 power sudo[3271948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne test -e /home/dimpalne/wordpress-backups
Sep 12 14:42:21 power sudo[3271948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:21 power sudo[3271948]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:21 power sudo[3271959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep 12 14:42:21 power sudo[3271959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:21 power sudo[3271959]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:21 power sudo[3271971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin test -e /home/dnevnoin/wordpress-backups
Sep 12 14:42:21 power sudo[3271971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:21 power sudo[3271971]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:21 power sudo[3271982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep 12 14:42:21 power sudo[3271982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:21 power sudo[3271982]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:21 power sudo[3271993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep 12 14:42:21 power sudo[3271993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:21 power sudo[3271993]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:21 power sudo[3271999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk test -e /home/drleomk/wordpress-backups
Sep 12 14:42:21 power sudo[3271999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:21 power sudo[3271999]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:21 power sudo[3272010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep 12 14:42:21 power sudo[3272010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272010]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 12 14:42:22 power sudo[3272022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272022]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep 12 14:42:22 power sudo[3272035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272035]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol test -e /home/electrol/wordpress-backups
Sep 12 14:42:22 power sudo[3272044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272044]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep 12 14:42:22 power sudo[3272055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272055]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot test -e /home/elektrot/wordpress-backups
Sep 12 14:42:22 power sudo[3272064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272064]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep 12 14:42:22 power sudo[3272075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272075]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep 12 14:42:22 power sudo[3272087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272087]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk test -e /home/enochmk/wordpress-backups
Sep 12 14:42:22 power sudo[3272095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272095]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 12 14:42:22 power sudo[3272106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:22 power sudo[3272106]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:22 power sudo[3272119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep 12 14:42:22 power sudo[3272119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:23 power sudo[3272119]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:23 power sudo[3272123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm test -e /home/eurofarm/wordpress-backups
Sep 12 14:42:23 power sudo[3272123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:23 power sudo[3272123]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:23 power sudo[3272139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep 12 14:42:23 power sudo[3272139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:23 power sudo[3272139]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:23 power sudo[3272147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki test -e /home/euromaki/wordpress-backups
Sep 12 14:42:23 power sudo[3272147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:23 power sudo[3272147]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:23 power sudo[3272162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep 12 14:42:23 power sudo[3272162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:23 power sudo[3272162]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:23 power sudo[3272180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm test -e /home/evberasm/wordpress-backups
Sep 12 14:42:23 power sudo[3272180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:23 power sudo[3272180]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:23 power sudo[3272191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep 12 14:42:23 power sudo[3272191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:24 power sudo[3272191]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:24 power sudo[3272198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl test -e /home/evolvepl/wordpress-backups
Sep 12 14:42:24 power sudo[3272198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:24 power sudo[3272198]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:24 power sudo[3272209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 12 14:42:24 power sudo[3272209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:24 power sudo[3272209]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:24 power sudo[3272220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep 12 14:42:24 power sudo[3272220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:24 power sudo[3272220]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:24 power sudo[3272229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 12 14:42:24 power sudo[3272229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:24 power sudo[3272229]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:24 power sudo[3272240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep 12 14:42:24 power sudo[3272240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:24 power sudo[3272240]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:24 power sudo[3272249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep 12 14:42:24 power sudo[3272249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:24 power sudo[3272249]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:24 power sudo[3272260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep 12 14:42:24 power sudo[3272260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:24 power sudo[3272260]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:24 power sudo[3272266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore test -e /home/folklore/wordpress-backups
Sep 12 14:42:24 power sudo[3272266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:24 power sudo[3272266]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:24 power sudo[3272278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep 12 14:42:24 power sudo[3272278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:25 power sudo[3272278]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:25 power sudo[3272287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares test -e /home/forzares/wordpress-backups
Sep 12 14:42:25 power sudo[3272287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:25 power sudo[3272287]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:25 power sudo[3272298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep 12 14:42:25 power sudo[3272298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:25 power sudo[3272298]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:25 power sudo[3272310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus test -e /home/getaldus/wordpress-backups
Sep 12 14:42:25 power sudo[3272310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:25 power sudo[3272310]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:25 power sudo[3272321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep 12 14:42:25 power sudo[3272321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:25 power sudo[3272321]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:25 power sudo[3272332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise test -e /home/gocruise/wordpress-backups
Sep 12 14:42:25 power sudo[3272332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:25 power sudo[3272332]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:25 power sudo[3272344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep 12 14:42:25 power sudo[3272344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:25 power sudo[3272344]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:25 power sudo[3272351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 test -e /home/gogovan1/wordpress-backups
Sep 12 14:42:25 power sudo[3272351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:25 power sudo[3272351]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:25 power sudo[3272363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep 12 14:42:25 power sudo[3272363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272363]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom test -e /home/golakkom/wordpress-backups
Sep 12 14:42:26 power sudo[3272370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272370]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 12 14:42:26 power sudo[3272381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272381]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep 12 14:42:26 power sudo[3272392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272392]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl test -e /home/herbalpl/wordpress-backups
Sep 12 14:42:26 power sudo[3272402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272402]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 12 14:42:26 power sudo[3272416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272416]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 12 14:42:26 power sudo[3272427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272427]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep 12 14:42:26 power sudo[3272438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272438]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 12 14:42:26 power sudo[3272449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272449]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 12 14:42:26 power sudo[3272461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272461]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 12 14:42:26 power sudo[3272473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272473]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 12 14:42:26 power sudo[3272485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272485]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 12 14:42:26 power sudo[3272497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:26 power sudo[3272497]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:26 power sudo[3272508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep 12 14:42:26 power sudo[3272508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:27 power sudo[3272508]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:27 power sudo[3272516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk test -e /home/madzomk/wordpress-backups
Sep 12 14:42:27 power sudo[3272516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:27 power sudo[3272516]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:27 power sudo[3272527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep 12 14:42:27 power sudo[3272527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:27 power sudo[3272527]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:27 power sudo[3272534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj test -e /home/imdskopj/wordpress-backups
Sep 12 14:42:27 power sudo[3272534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:27 power sudo[3272534]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:27 power sudo[3272545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep 12 14:42:27 power sudo[3272545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:27 power sudo[3272545]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:27 power sudo[3272555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 test -e /home/infopor1/wordpress-backups
Sep 12 14:42:27 power sudo[3272555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:27 power sudo[3272555]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:27 power sudo[3272567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep 12 14:42:27 power sudo[3272567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:27 power sudo[3272567]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:27 power sudo[3272579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user inkigaic test -e /home/inkigaic/wordpress-backups
Sep 12 14:42:27 power sudo[3272579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:27 power sudo[3272579]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:27 power sudo[3272591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep 12 14:42:27 power sudo[3272591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:28 power sudo[3272591]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:28 power sudo[3272599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 test -e /home/intelek1/wordpress-backups
Sep 12 14:42:28 power sudo[3272599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:28 power sudo[3272599]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:28 power sudo[3272610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 12 14:42:28 power sudo[3272610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:28 power sudo[3272610]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:28 power sudo[3272621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep 12 14:42:28 power sudo[3272621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:28 power sudo[3272621]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:28 power sudo[3272629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin test -e /home/jpparkin/wordpress-backups
Sep 12 14:42:28 power sudo[3272629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:28 power sudo[3272629]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:28 power sudo[3272642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep 12 14:42:28 power sudo[3272642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:28 power sudo[3272642]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:28 power sudo[3272648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo test -e /home/karpospo/wordpress-backups
Sep 12 14:42:28 power sudo[3272648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:28 power sudo[3272648]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:28 power sudo[3272659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 12 14:42:28 power sudo[3272659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:28 power sudo[3272659]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:28 power sudo[3272670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 12 14:42:28 power sudo[3272670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:28 power sudo[3272670]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:28 power sudo[3272681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep 12 14:42:28 power sudo[3272681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:29 power sudo[3272681]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:29 power sudo[3272689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 test -e /home/kolened1/wordpress-backups
Sep 12 14:42:29 power sudo[3272689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:29 power sudo[3272689]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:29 power sudo[3272701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep 12 14:42:29 power sudo[3272701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:29 power sudo[3272701]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:29 power sudo[3272710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco test -e /home/kouzonco/wordpress-backups
Sep 12 14:42:29 power sudo[3272710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:29 power sudo[3272710]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:29 power sudo[3272721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep 12 14:42:29 power sudo[3272721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:29 power sudo[3272721]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:29 power sudo[3272732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst test -e /home/sprintst/wordpress-backups
Sep 12 14:42:29 power sudo[3272732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:29 power sudo[3272732]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:29 power sudo[3272744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep 12 14:42:29 power sudo[3272744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:29 power sudo[3272744]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:29 power sudo[3272754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon test -e /home/kujnamon/wordpress-backups
Sep 12 14:42:29 power sudo[3272754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:29 power sudo[3272754]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:29 power sudo[3272765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 12 14:42:29 power sudo[3272765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:29 power sudo[3272765]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:29 power sudo[3272776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep 12 14:42:29 power sudo[3272776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:30 power sudo[3272776]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:30 power sudo[3272783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone test -e /home/makdrone/wordpress-backups
Sep 12 14:42:30 power sudo[3272783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:30 power sudo[3272783]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:30 power sudo[3272795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep 12 14:42:30 power sudo[3272795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:30 power sudo[3272795]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:30 power sudo[3272806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk test -e /home/makoasmk/wordpress-backups
Sep 12 14:42:30 power sudo[3272806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:30 power sudo[3272806]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:30 power sudo[3272821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep 12 14:42:30 power sudo[3272821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:30 power sudo[3272821]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:30 power sudo[3272832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 12 14:42:30 power sudo[3272832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:30 power sudo[3272832]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:30 power sudo[3272843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep 12 14:42:30 power sudo[3272843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:30 power sudo[3272843]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:30 power sudo[3272852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar test -e /home/modernar/wordpress-backups
Sep 12 14:42:30 power sudo[3272852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:30 power sudo[3272852]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:30 power sudo[3272865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep 12 14:42:30 power sudo[3272865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:30 power sudo[3272865]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:30 power sudo[3272876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep 12 14:42:30 power sudo[3272876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:31 power sudo[3272876]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:31 power sudo[3272886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk test -e /home/mpbmk/wordpress-backups
Sep 12 14:42:31 power sudo[3272886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:31 power sudo[3272886]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:33 power sudo[3272941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep 12 14:42:33 power sudo[3272941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:33 power sudo[3272941]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:33 power sudo[3272955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk test -e /home/mspmk/wordpress-backups
Sep 12 14:42:33 power sudo[3272955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:33 power sudo[3272955]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:33 power sudo[3272967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep 12 14:42:33 power sudo[3272967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:33 power sudo[3272967]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:33 power sudo[3272973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk test -e /home/mstmmk/wordpress-backups
Sep 12 14:42:33 power sudo[3272973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:33 power sudo[3272973]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:33 power sudo[3272984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep 12 14:42:33 power sudo[3272984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:34 power sudo[3272984]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:34 power sudo[3272990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm test -e /home/naksorgm/wordpress-backups
Sep 12 14:42:34 power sudo[3272990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:34 power sudo[3272990]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:34 power sudo[3273003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep 12 14:42:34 power sudo[3273003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:34 power sudo[3273003]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:34 power sudo[3273011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep 12 14:42:34 power sudo[3273011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:34 power sudo[3273011]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:34 power sudo[3273022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep 12 14:42:34 power sudo[3273022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:34 power sudo[3273022]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:34 power sudo[3273036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep 12 14:42:34 power sudo[3273036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:34 power sudo[3273036]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:34 power sudo[3273043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag test -e /home/ismassag/wordpress-backups
Sep 12 14:42:34 power sudo[3273043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:34 power sudo[3273043]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:34 power sudo[3273054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep 12 14:42:34 power sudo[3273054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:34 power sudo[3273054]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:34 power sudo[3273065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep 12 14:42:34 power sudo[3273065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:34 power sudo[3273065]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:35 power sudo[3273071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 test -e /home/nikolov1/wordpress-backups
Sep 12 14:42:35 power sudo[3273071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:35 power sudo[3273071]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:35 power sudo[3273082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep 12 14:42:35 power sudo[3273082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:35 power sudo[3273082]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:35 power sudo[3273089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits test -e /home/nolimits/wordpress-backups
Sep 12 14:42:35 power sudo[3273089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:35 power sudo[3273089]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:35 power sudo[3273100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep 12 14:42:35 power sudo[3273100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:35 power sudo[3273100]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:35 power sudo[3273108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh test -e /home/onlinesh/wordpress-backups
Sep 12 14:42:35 power sudo[3273108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:35 power sudo[3273108]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:35 power sudo[3273119]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep 12 14:42:35 power sudo[3273119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:35 power sudo[3273119]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:35 power sudo[3273128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok test -e /home/palenzok/wordpress-backups
Sep 12 14:42:35 power sudo[3273128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:35 power sudo[3273128]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:35 power sudo[3273141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep 12 14:42:35 power sudo[3273141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:36 power sudo[3273141]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:36 power sudo[3273147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni test -e /home/pelagoni/wordpress-backups
Sep 12 14:42:36 power sudo[3273147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:36 power sudo[3273147]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:36 power sudo[3273160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep 12 14:42:36 power sudo[3273160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:36 power sudo[3273160]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:36 power sudo[3273168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk test -e /home/biplmk/wordpress-backups
Sep 12 14:42:36 power sudo[3273168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:36 power sudo[3273168]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:36 power sudo[3273179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep 12 14:42:36 power sudo[3273179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:36 power sudo[3273179]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:36 power sudo[3273194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi test -e /home/premiumi/wordpress-backups
Sep 12 14:42:36 power sudo[3273194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:36 power sudo[3273194]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:36 power sudo[3273207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep 12 14:42:36 power sudo[3273207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:36 power sudo[3273207]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:36 power sudo[3273218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep 12 14:42:36 power sudo[3273218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:36 power sudo[3273218]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:36 power sudo[3273226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat test -e /home/radekrat/wordpress-backups
Sep 12 14:42:36 power sudo[3273226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:36 power sudo[3273226]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:36 power sudo[3273237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep 12 14:42:36 power sudo[3273237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:37 power sudo[3273237]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:37 power sudo[3273245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm test -e /home/rasmorgm/wordpress-backups
Sep 12 14:42:37 power sudo[3273245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:37 power sudo[3273245]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:37 power sudo[3273257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep 12 14:42:37 power sudo[3273257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:37 power sudo[3273257]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:37 power sudo[3273262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk test -e /home/recorgmk/wordpress-backups
Sep 12 14:42:37 power sudo[3273262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:37 power sudo[3273262]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:37 power sudo[3273273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep 12 14:42:37 power sudo[3273273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:37 power sudo[3273273]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:37 power sudo[3273281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm test -e /home/stravelm/wordpress-backups
Sep 12 14:42:37 power sudo[3273281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:37 power sudo[3273281]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:37 power sudo[3273292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep 12 14:42:37 power sudo[3273292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:37 power sudo[3273292]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:37 power sudo[3273301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome test -e /home/simbiome/wordpress-backups
Sep 12 14:42:37 power sudo[3273301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:37 power sudo[3273301]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:37 power sudo[3273312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 12 14:42:37 power sudo[3273312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:37 power sudo[3273312]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:37 power sudo[3273323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 12 14:42:37 power sudo[3273323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273323]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep 12 14:42:38 power sudo[3273332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273332]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep 12 14:42:38 power sudo[3273343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273343]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep 12 14:42:38 power sudo[3273354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273354]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti test -e /home/sssoluti/wordpress-backups
Sep 12 14:42:38 power sudo[3273362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273362]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep 12 14:42:38 power sudo[3273373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273373]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep 12 14:42:38 power sudo[3273394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273394]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep 12 14:42:38 power sudo[3273405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273405]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro test -e /home/tehnodro/wordpress-backups
Sep 12 14:42:38 power sudo[3273412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273412]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep 12 14:42:38 power sudo[3273427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:38 power sudo[3273427]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:38 power sudo[3273438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep 12 14:42:38 power sudo[3273438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:39 power sudo[3273438]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:39 power sudo[3273444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn test -e /home/viewinn/wordpress-backups
Sep 12 14:42:39 power sudo[3273444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:39 power sudo[3273444]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:39 power sudo[3273455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep 12 14:42:39 power sudo[3273455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:39 power sudo[3273455]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:39 power sudo[3273465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp test -e /home/wikicamp/wordpress-backups
Sep 12 14:42:39 power sudo[3273465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:39 power sudo[3273465]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:39 power sudo[3273476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep 12 14:42:39 power sudo[3273476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:39 power sudo[3273476]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:39 power sudo[3273484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt test -e /home/workandt/wordpress-backups
Sep 12 14:42:39 power sudo[3273484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:39 power sudo[3273484]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:39 power sudo[3273497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 12 14:42:39 power sudo[3273497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:39 power sudo[3273497]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:39 power sudo[3273508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep 12 14:42:39 power sudo[3273508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:39 power sudo[3273508]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:39 power sudo[3273515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua test -e /home/youthgua/wordpress-backups
Sep 12 14:42:40 power sudo[3273515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:40 power sudo[3273515]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:40 power sudo[3273527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep 12 14:42:40 power sudo[3273527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:40 power sudo[3273527]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:40 power sudo[3273534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk test -e /home/zampmk/wordpress-backups
Sep 12 14:42:40 power sudo[3273534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:40 power sudo[3273534]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:40 power sudo[3273546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep 12 14:42:40 power sudo[3273546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:40 power sudo[3273546]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:40 power sudo[3273554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord test -e /home/ivanjord/wordpress-backups
Sep 12 14:42:40 power sudo[3273554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:40 power sudo[3273554]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:40 power sudo[3273565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep 12 14:42:40 power sudo[3273565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:40 power sudo[3273565]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:40 power sudo[3273577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep 12 14:42:40 power sudo[3273577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:40 power sudo[3273577]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:40 power sudo[3273585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja test -e /home/janiboja/wordpress-backups
Sep 12 14:42:40 power sudo[3273585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:40 power sudo[3273585]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:40 power sudo[3273596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep 12 14:42:40 power sudo[3273596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:41 power sudo[3273596]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:41 power sudo[3273606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk test -e /home/jaramk/wordpress-backups
Sep 12 14:42:41 power sudo[3273606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:41 power sudo[3273606]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:41 power sudo[3273619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep 12 14:42:41 power sudo[3273619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:41 power sudo[3273619]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:41 power sudo[3273632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep 12 14:42:41 power sudo[3273632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:41 power sudo[3273632]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:41 power sudo[3273645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep 12 14:42:41 power sudo[3273645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:41 power sudo[3273645]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:41 power sudo[3273650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep 12 14:42:41 power sudo[3273650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:41 power sudo[3273650]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:41 power sudo[3273663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep 12 14:42:41 power sudo[3273663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:41 power sudo[3273663]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:41 power sudo[3273675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep 12 14:42:41 power sudo[3273675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:41 power sudo[3273675]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:41 power sudo[3273683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag test -e /home/mediatag/wordpress-backups
Sep 12 14:42:42 power sudo[3273683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:42 power sudo[3273683]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:42 power sudo[3273698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep 12 14:42:42 power sudo[3273698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:42 power sudo[3273698]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:42 power sudo[3273709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep 12 14:42:42 power sudo[3273709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:42 power sudo[3273709]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:42 power sudo[3273714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog test -e /home/nefrolog/wordpress-backups
Sep 12 14:42:42 power sudo[3273714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:42 power sudo[3273714]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:42 power sudo[3273725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep 12 14:42:42 power sudo[3273725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:42 power sudo[3273725]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:42 power sudo[3273735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep 12 14:42:42 power sudo[3273735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:42 power sudo[3273735]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:42 power sudo[3273746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep 12 14:42:42 power sudo[3273746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:42 power sudo[3273746]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:42 power sudo[3273757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep 12 14:42:42 power sudo[3273757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:42 power sudo[3273757]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:42 power sudo[3273764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep 12 14:42:42 power sudo[3273764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:42 power sudo[3273764]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:42 power sudo[3273776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep 12 14:42:42 power sudo[3273776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:43 power sudo[3273776]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:43 power sudo[3273789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom test -e /home/pravekom/wordpress-backups
Sep 12 14:42:43 power sudo[3273789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:43 power sudo[3273789]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:43 power sudo[3273808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep 12 14:42:43 power sudo[3273808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:43 power sudo[3273808]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:43 power sudo[3273824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim test -e /home/proverim/wordpress-backups
Sep 12 14:42:43 power sudo[3273824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:43 power sudo[3273824]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:43 power sudo[3273835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep 12 14:42:43 power sudo[3273835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:43 power sudo[3273835]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:43 power sudo[3273847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz test -e /home/rastiraz/wordpress-backups
Sep 12 14:42:43 power sudo[3273847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:43 power sudo[3273847]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:43 power sudo[3273860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep 12 14:42:43 power sudo[3273860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:43 power sudo[3273860]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:43 power sudo[3273871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva test -e /home/conserva/wordpress-backups
Sep 12 14:42:43 power sudo[3273871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:43 power sudo[3273871]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:43 power sudo[3273882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep 12 14:42:43 power sudo[3273882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:44 power sudo[3273882]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:44 power sudo[3273893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne test -e /home/maleshne/wordpress-backups
Sep 12 14:42:44 power sudo[3273893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:44 power sudo[3273893]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:44 power sudo[3273904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep 12 14:42:44 power sudo[3273904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:44 power sudo[3273904]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:44 power sudo[3273911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped test -e /home/samasped/wordpress-backups
Sep 12 14:42:44 power sudo[3273911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:44 power sudo[3273911]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:44 power sudo[3273924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep 12 14:42:44 power sudo[3273924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:44 power sudo[3273924]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:44 power sudo[3273930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro test -e /home/seloviro/wordpress-backups
Sep 12 14:42:44 power sudo[3273930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:44 power sudo[3273930]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:44 power sudo[3273941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep 12 14:42:44 power sudo[3273941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:44 power sudo[3273941]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:45 power sudo[3273947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart test -e /home/skyapart/wordpress-backups
Sep 12 14:42:45 power sudo[3273947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:45 power sudo[3273947]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:45 power sudo[3273965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep 12 14:42:45 power sudo[3273965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:45 power sudo[3273965]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:45 power sudo[3273970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz test -e /home/socioloz/wordpress-backups
Sep 12 14:42:45 power sudo[3273970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:45 power sudo[3273970]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:45 power sudo[3273982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep 12 14:42:45 power sudo[3273982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:45 power sudo[3273982]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:45 power sudo[3273996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi test -e /home/stojnevi/wordpress-backups
Sep 12 14:42:45 power sudo[3273996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:45 power sudo[3273996]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:45 power sudo[3274010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep 12 14:42:45 power sudo[3274010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:45 power sudo[3274010]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:45 power sudo[3274021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep 12 14:42:45 power sudo[3274021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:45 power sudo[3274021]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:45 power sudo[3274031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop test -e /home/trudovop/wordpress-backups
Sep 12 14:42:45 power sudo[3274031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:45 power sudo[3274031]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:45 power sudo[3274047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep 12 14:42:45 power sudo[3274047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:46 power sudo[3274047]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:46 power sudo[3274058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp test -e /home/urbanexp/wordpress-backups
Sep 12 14:42:46 power sudo[3274058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:46 power sudo[3274058]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:46 power sudo[3274069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep 12 14:42:46 power sudo[3274069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:46 power sudo[3274069]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:46 power sudo[3274080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc test -e /home/vfxnestc/wordpress-backups
Sep 12 14:42:46 power sudo[3274080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:46 power sudo[3274080]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:46 power sudo[3274092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep 12 14:42:46 power sudo[3274092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:46 power sudo[3274092]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:46 power sudo[3274102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/wordpress-backups
Sep 12 14:42:46 power sudo[3274102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:46 power sudo[3274102]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:46 power sudo[3274115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep 12 14:42:46 power sudo[3274115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:46 power sudo[3274115]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:46 power sudo[3274122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace test -e /home/glammace/wordpress-backups
Sep 12 14:42:46 power sudo[3274122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:46 power sudo[3274122]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:47 power sudo[3274133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep 12 14:42:47 power sudo[3274133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:47 power sudo[3274133]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:47 power sudo[3274147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep 12 14:42:47 power sudo[3274147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:47 power sudo[3274147]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:47 power sudo[3274159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc test -e /home/workbenc/wordpress-backups
Sep 12 14:42:47 power sudo[3274159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:47 power sudo[3274159]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:47 power sudo[3274171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 12 14:42:47 power sudo[3274171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:47 power sudo[3274171]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:47 power sudo[3274184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/wordpress-backups
Sep 12 14:42:47 power sudo[3274184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:47 power sudo[3274184]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:47 power sudo[3274196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 12 14:42:47 power sudo[3274196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:47 power sudo[3274196]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:48 power sudo[3275545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json'
Sep 12 14:42:48 power sudo[3275545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:48 power sudo[3275545]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:48 power sudo[3275554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=5.9.96.240 --output=json'
Sep 12 14:42:48 power sudo[3275554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:48 power sudo[3275554]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:51 power sudo[3275599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 14:42:51 power sudo[3275599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:51 power sudo[3275599]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:51 power sudo[3275603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5t8iNDofhZQjj1l0.~
Sep 12 14:42:51 power sudo[3275603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:51 power sudo[3275603]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:51 power sudo[3275607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5t8iNDofhZQjj1l0.~\''
Sep 12 14:42:51 power sudo[3275607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:51 power sudo[3275607]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:51 power sudo[3275612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5t8iNDofhZQjj1l0.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 14:42:51 power sudo[3275612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:51 power sudo[3275612]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:51 power sudo[3275616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 14:42:51 power sudo[3275616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:51 power sudo[3275616]: pam_unix(sudo:session): session closed for user root
Sep 12 14:42:52 power sudo[3276542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 14:42:52 power sudo[3276542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 14:42:52 power sudo[3276542]: pam_unix(sudo:session): session closed for user root
Sep 12 14:45:01 power systemd[3279324]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:45:01 power systemd[3279326]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:50:01 power systemd[3285926]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:50:01 power systemd[3285927]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 14:55:01 power systemd[3291757]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 14:55:01 power systemd[3291759]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:00:02 power systemd[3297790]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:00:02 power systemd[3297794]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:00:02 power systemd[3297795]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 15:00:02 power systemd[3297797]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 15:00:02 power systemd[3297798]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 15:04:01 power systemd[3303738]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:05:02 power systemd[3305111]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:05:02 power systemd[3305113]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:06:01 power systemd[3306274]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 15:07:01 power systemd[3307342]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 15:09:01 power systemd[3309412]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:10:01 power systemd[3310537]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:10:01 power systemd[3310538]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:12:01 power systemd[3312539]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 15:15:01 power systemd[3316887]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:15:01 power systemd[3316888]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:18:20 power pam_imunify[2249480]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 31.59.98.41 has been locked due to Imunify RBL
Sep 12 15:20:01 power systemd[3324757]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:20:01 power systemd[3324758]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:25:01 power systemd[3332275]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:25:01 power systemd[3332277]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:30:02 power systemd[3339898]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:30:02 power systemd[3339900]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:30:02 power systemd[3339901]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 15:30:02 power systemd[3339903]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 15:30:02 power systemd[3339904]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 15:35:01 power systemd[3347135]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:35:01 power systemd[3347137]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:36:01 power systemd[3348524]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 15:37:01 power systemd[3349668]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 15:39:01 power systemd[3352244]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:40:01 power systemd[3353688]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:40:01 power systemd[3353689]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:42:01 power systemd[3356534]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 15:42:11 power sudo[3356737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 15:42:11 power systemd[3356743]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:42:11 power sudo[3356737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356737]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 15:42:11 power sudo[3356765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356765]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 15:42:11 power sudo[3356769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356769]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=jgqrG5FEbv'
Sep 12 15:42:11 power sudo[3356773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356773]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 15:42:11 power sudo[3356779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356779]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 15:42:11 power sudo[3356783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356783]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 15:42:11 power sudo[3356789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356789]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 15:42:11 power sudo[3356793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356793]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 15:42:11 power sudo[3356805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356805]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 15:42:11 power sudo[3356809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356809]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 15:42:11 power sudo[3356813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356813]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 15:42:11 power sudo[3356818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356818]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 15:42:11 power sudo[3356822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:11 power sudo[3356822]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:11 power sudo[3356826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 15:42:11 power sudo[3356826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:12 power sudo[3356826]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:13 power sudo[3356878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 15:42:13 power sudo[3356878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:13 power sudo[3356878]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:13 power sudo[3356916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 15:42:13 power sudo[3356916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:13 power sudo[3356916]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:13 power sudo[3356953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bovincom user-2=stojano1 user-3=vezilkac user-4=cabinetm user-5=janiboja user-6=itradeco user-7=custome1 user-8=palenzok user-9=zvskopje user-10=busymard user-11=zampmk user-12=klimimk user-13=sparkupm user-14=stokovna user-15=cetplatf user-16=dalmacom user-17=kouzonco user-18=premiuma user-19=jpparkin user-20=inotekso user-21=drleomk user-22=premiums user-23=daris user-24=butelmk user-25=ideaplus user-26=karpospo user-27=nasaidni user-28=screenme user-29=arturaco user-30=goartsym user-31=volkanco user-32=dhamachi user-33=mfashion user-34=getaldus user-35=delcevca user-36=simbiome user-37=barececo user-38=workandt user-39=rasmorgm user-40=makoasmk user-41=bianasho user-42=skyapart user-43=velmk user-44=gogovan1 user-45=univerz1 user-46=kujnamon user-47=datalink user-48=agrosind user-49=mpbmk user-50=datelcom
Sep 12 15:42:13 power sudo[3356953]: wp-toolkit : (command continued) user-51=maleshne user-52=bizporta user-53=vfxnestc user-54=polyeste user-55=sedcmk user-56=ivanjord user-57=groskome user-58=wikicamp user-59=urbanexp user-60=infobadi user-61=mspmk user-62=spdcompu user-63=detskagr user-64=raremk user-65=oouslave user-66=uhostmk5 user-67=bauerbg user-68=stojnevi user-69=enaspotc user-70=vmro user-71=viewinn user-72=trudovop user-73=cajsproc user-74=hotammk user-75=youthgua user-76=anitermc user-77=caramk user-78=frizered user-79=hidrommk user-80=nefrolog user-81=levantmk user-82=oncolog1 user-83=ekostoc1 user-84=pelagoni user-85=socioloz user-86=avtogumi user-87=evolvepl user-88=seloviro user-89=nolimits user-90=centarba user-91=nlpmkorg user-92=kolened1 user-93=edomcomm user-94=berbermk user-95=dikimk12 user-96=sprintst user-97=herbalpl user-98=enochmk user-99=dnevnoin user-100=gjorgeiv user-101=tradeyou user-102=holiyayt user-103=rastiraz user-104=pecakome user-105=wondersp
Sep 12 15:42:13 power sudo[3356953]: wp-toolkit : (command continued) user-106=stravelm user-107=robustco user-108=dadarmk user-109=proverim user-110=tealmk user-111=gocruise user-112=goodnews user-113=mstmmk user-114=pelagini user-115=biplmk user-116=kaoilmk user-117=bbbustou user-118=progress user-119=animatem user-120=cleanerm user-121=sssoluti user-122=atspedco user-123=jaramk user-124=solointe user-125=taktcomm user-126=recorgmk user-127=solarinv user-128=eurofarm user-129=trigemat user-130=naksorgm user-131=eliksirz user-132=electrol user-133=golakkom user-134=mbmehani user-135=workbenc user-136=ismassag user-137=wineberr user-138=viplastc user-139=conserva user-140=euronic3 user-141=vegemk1 user-142=cupidpro user-143=bonitavi user-144=evberasm user-145=bauerin2 user-146=folklore user-147=gradbai1 user-148=evacommk user-149=madzomk user-150=aptekafa user-151=peshkai1 user-152=fxxcom user-153=eaptekam user-154=dimpalne user-155=makdrone user-156=tehnodro user-157=izzomk
Sep 12 15:42:13 power sudo[3356953]: wp-toolkit : (command continued) user-158=jpkomuna user-159=taneccom user-160=tehnologija user-161=bozinovm user-162=fnjorgmk user-163=darkogor user-164=prizmapl user-165=dslmk user-166=innofabl user-167=premiumi user-168=vacuacti user-169=inkigaic user-170=modernar user-171=zdmgpsor user-172=v5srybi9dcdx user-173=supremel user-174=gorsajmk user-175=aquatech user-176=solemor1 user-177=mapaspla user-178=onlinesh user-179=nationa2 user-180=tcieuroc user-181=radekrat user-182=starluxm user-183=fffhpcwr user-184=versusmk user-185=ambitiou user-186=fiziosmk user-187=nucktra1 user-188=lblawcom user-189=intelek1 user-190=mediatag user-191=nikolov1 user-192=hausmark user-193=aptekazd user-194=nikimare user-195=forzares user-196=kardiome user-197=mediasol user-198=bogdanos user-199=carrent1 user-200=apgrupmk user-201=euronic2 user-202=matratze user-203=zapovim1 user-204=elektrot user-205=cosmatob user-206=euromaki user-207=nutrivim user-208=chemhemc
Sep 12 15:42:13 power sudo[3356953]: wp-toolkit : (command continued) user-209=samasped user-210=glammace user-211=albuname user-212=imdskopj user-213=vtranseu user-214=pravekom user-215=infopor1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 15:42:13 power sudo[3356953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:14 power sudo[3356953]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:14 power sudo[3356969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 15:42:14 power sudo[3356969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:14 power sudo[3356969]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:14 power sudo[3356974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s0SmnlhsWk01sVHq.~
Sep 12 15:42:14 power sudo[3356974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:14 power sudo[3356974]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:14 power sudo[3356979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s0SmnlhsWk01sVHq.~\''
Sep 12 15:42:14 power sudo[3356979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:14 power sudo[3356979]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:14 power sudo[3356984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s0SmnlhsWk01sVHq.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 15:42:14 power sudo[3356984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:14 power sudo[3356984]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:14 power sudo[3356988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 15:42:14 power sudo[3356988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:14 power sudo[3356988]: pam_unix(sudo:session): session closed for user root
Sep 12 15:42:14 power sudo[3357280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 15:42:14 power sudo[3357280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 15:42:14 power sudo[3357280]: pam_unix(sudo:session): session closed for user root
Sep 12 15:45:02 power systemd[3362071]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:45:02 power systemd[3362072]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:50:01 power systemd[3370011]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:50:01 power systemd[3370012]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 15:55:01 power systemd[3375270]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 15:55:01 power systemd[3375271]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:00:01 power systemd[3380738]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:00:01 power systemd[3380740]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:00:01 power systemd[3380743]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 16:00:01 power systemd[3380741]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 16:00:01 power systemd[3380747]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 16:04:01 power systemd[3386760]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:05:01 power systemd[3388230]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:05:01 power systemd[3388231]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:06:01 power systemd[3389764]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 16:07:01 power systemd[3391026]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 16:09:01 power systemd[3393700]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:10:01 power systemd[3395230]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:10:01 power systemd[3395231]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:12:01 power systemd[3397695]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 16:15:01 power systemd[3401482]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:15:01 power systemd[3401483]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:20:01 power systemd[3408150]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:20:01 power systemd[3408151]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:21:19 power sudo[3409527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 16:21:19 power systemd[3409532]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:21:19 power sudo[3409527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:21:19 power sudo[3409527]: pam_unix(sudo:session): session closed for user root
Sep 12 16:21:19 power sudo[3409550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status oncolog1'
Sep 12 16:21:19 power sudo[3409550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:21:20 power sudo[3409550]: pam_unix(sudo:session): session closed for user root
Sep 12 16:25:01 power systemd[3414380]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:25:01 power systemd[3414381]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:30:01 power systemd[3419441]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:30:01 power systemd[3419442]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:30:01 power systemd[3419443]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 16:30:01 power systemd[3419445]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 16:30:01 power systemd[3419447]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 16:35:01 power systemd[3424811]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:35:01 power systemd[3424812]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:36:01 power systemd[3425888]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 16:37:01 power systemd[3427132]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 16:39:01 power systemd[3429087]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:40:01 power systemd[3430174]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:40:01 power systemd[3430175]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:42:01 power systemd[3432016]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 16:42:11 power sudo[3432193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 16:42:11 power systemd[3432198]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:42:11 power sudo[3432193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432193]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 16:42:11 power sudo[3432217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432217]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 16:42:11 power sudo[3432221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432221]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=coDEPDiDRF'
Sep 12 16:42:11 power sudo[3432226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432226]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 16:42:11 power sudo[3432232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432232]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 16:42:11 power sudo[3432236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432236]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 16:42:11 power sudo[3432240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432240]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 16:42:11 power sudo[3432244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432244]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 16:42:11 power sudo[3432255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432255]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 16:42:11 power sudo[3432259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432259]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 16:42:11 power sudo[3432263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432263]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 16:42:11 power sudo[3432267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432267]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 16:42:11 power sudo[3432271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:11 power sudo[3432271]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:11 power sudo[3432276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 16:42:11 power sudo[3432276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:12 power sudo[3432276]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:13 power sudo[3432311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 16:42:13 power sudo[3432311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:13 power sudo[3432311]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:13 power sudo[3432318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 16:42:13 power sudo[3432318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:13 power sudo[3432318]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:13 power sudo[3432327]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=workbenc user-2=ismassag user-3=mbmehani user-4=wineberr user-5=viplastc user-6=eurofarm user-7=solarinv user-8=golakkom user-9=trigemat user-10=naksorgm user-11=eliksirz user-12=electrol user-13=atspedco user-14=sssoluti user-15=progress user-16=animatem user-17=cleanerm user-18=taktcomm user-19=recorgmk user-20=jaramk user-21=solointe user-22=pelagini user-23=biplmk user-24=kaoilmk user-25=bbbustou user-26=tehnodro user-27=makdrone user-28=izzomk user-29=jpkomuna user-30=evacommk user-31=aptekafa user-32=madzomk user-33=gradbai1 user-34=eaptekam user-35=dimpalne user-36=peshkai1 user-37=fxxcom user-38=folklore user-39=bauerin2 user-40=euronic3 user-41=vegemk1 user-42=cupidpro user-43=conserva user-44=bonitavi user-45=evberasm user-46=fffhpcwr user-47=radekrat user-48=starluxm user-49=ambitiou
Sep 12 16:42:13 power sudo[3432327]: wp-toolkit : (command continued) user-50=fiziosmk user-51=versusmk user-52=onlinesh user-53=nationa2 user-54=solemor1 user-55=mapaspla user-56=tcieuroc user-57=zdmgpsor user-58=gorsajmk user-59=aquatech user-60=v5srybi9dcdx user-61=supremel user-62=bozinovm user-63=prizmapl user-64=fnjorgmk user-65=dslmk user-66=darkogor user-67=premiumi user-68=innofabl user-69=vacuacti user-70=taneccom user-71=tehnologija user-72=modernar user-73=inkigaic user-74=imdskopj user-75=glammace user-76=albuname user-77=infopor1 user-78=vtranseu user-79=pravekom user-80=cosmatob user-81=euromaki user-82=zapovim1 user-83=elektrot user-84=samasped user-85=chemhemc user-86=nutrivim user-87=mediasol user-88=bogdanos user-89=carrent1 user-90=apgrupmk user-91=kardiome user-92=euronic2 user-93=matratze user-94=intelek1 user-95=mediatag user-96=nucktra1 user-97=lblawcom user-98=aptekazd user-99=nikimare user-100=forzares user-101=hausmark user-102=nikolov1 user-103=jpparkin
Sep 12 16:42:13 power sudo[3432327]: wp-toolkit : (command continued) user-104=inotekso user-105=drleomk user-106=ideaplus user-107=nasaidni user-108=karpospo user-109=screenme user-110=arturaco user-111=premiums user-112=butelmk user-113=daris user-114=kouzonco user-115=premiuma user-116=cetplatf user-117=dalmacom user-118=palenzok user-119=busymard user-120=zvskopje user-121=zampmk user-122=custome1 user-123=sparkupm user-124=stokovna user-125=klimimk user-126=stojano1 user-127=bovincom user-128=janiboja user-129=itradeco user-130=vezilkac user-131=cabinetm user-132=wikicamp user-133=urbanexp user-134=spdcompu user-135=detskagr user-136=mspmk user-137=infobadi user-138=bizporta user-139=datelcom user-140=maleshne user-141=sedcmk user-142=ivanjord user-143=groskome user-144=vfxnestc user-145=polyeste user-146=datalink user-147=velmk user-148=gogovan1 user-149=kujnamon user-150=univerz1 user-151=agrosind user-152=mpbmk user-153=simbiome user-154=getaldus user-155=delcevca
Sep 12 16:42:13 power sudo[3432327]: wp-toolkit : (command continued) user-156=barececo user-157=workandt user-158=volkanco user-159=goartsym user-160=dhamachi user-161=mfashion user-162=bianasho user-163=makoasmk user-164=skyapart user-165=rasmorgm user-166=socioloz user-167=avtogumi user-168=pelagoni user-169=evolvepl user-170=frizered user-171=hidrommk user-172=caramk user-173=nefrolog user-174=levantmk user-175=ekostoc1 user-176=oncolog1 user-177=cajsproc user-178=hotammk user-179=youthgua user-180=anitermc user-181=stojnevi user-182=raremk user-183=oouslave user-184=uhostmk5 user-185=bauerbg user-186=enaspotc user-187=vmro user-188=viewinn user-189=trudovop user-190=tealmk user-191=dadarmk user-192=proverim user-193=goodnews user-194=mstmmk user-195=gocruise user-196=tradeyou user-197=gjorgeiv user-198=dnevnoin user-199=pecakome user-200=wondersp user-201=robustco user-202=stravelm user-203=holiyayt user-204=rastiraz user-205=edomcomm user-206=berbermk user-207=dikimk12
Sep 12 16:42:13 power sudo[3432327]: wp-toolkit : (command continued) user-208=sprintst user-209=enochmk user-210=herbalpl user-211=seloviro user-212=centarba user-213=nlpmkorg user-214=kolened1 user-215=nolimits feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 16:42:13 power sudo[3432327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:13 power sudo[3432327]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:14 power sudo[3432334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 16:42:14 power sudo[3432334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:14 power sudo[3432334]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:14 power sudo[3432338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UFuup7s0nsZ2kmpr.~
Sep 12 16:42:14 power sudo[3432338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:14 power sudo[3432338]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:14 power sudo[3432342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UFuup7s0nsZ2kmpr.~\''
Sep 12 16:42:14 power sudo[3432342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:14 power sudo[3432342]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:14 power sudo[3432347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UFuup7s0nsZ2kmpr.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 16:42:14 power sudo[3432347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:14 power sudo[3432347]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:14 power sudo[3432351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 16:42:14 power sudo[3432351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:14 power sudo[3432351]: pam_unix(sudo:session): session closed for user root
Sep 12 16:42:15 power sudo[3433272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 16:42:15 power sudo[3433272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 16:42:15 power sudo[3433272]: pam_unix(sudo:session): session closed for user root
Sep 12 16:45:02 power systemd[3435925]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:45:02 power systemd[3435927]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:50:01 power systemd[3441345]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:50:01 power systemd[3441346]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 16:55:01 power systemd[3446559]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 16:55:01 power systemd[3446561]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:00:01 power systemd[3451342]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:00:01 power systemd[3451343]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:00:01 power systemd[3451344]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 17:00:01 power systemd[3451346]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 17:00:01 power systemd[3451348]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 17:01:23 power sshd[3453390]: error: kex_exchange_identification: banner line contains invalid characters
Sep 12 17:01:23 power sshd[3453390]: banner exchange: Connection from 165.154.138.33 port 40270: invalid format
Sep 12 17:01:41 power sshd[3453394]: error: kex_exchange_identification: Connection closed by remote host
Sep 12 17:01:41 power sshd[3453394]: Connection closed by 165.154.138.33 port 40286
Sep 12 17:01:41 power sshd[3453703]: Connection closed by 165.154.138.33 port 35530 [preauth]
Sep 12 17:01:41 power sshd[3453705]: error: Protocol major versions differ: 2 vs. 1
Sep 12 17:01:41 power sshd[3453705]: banner exchange: Connection from 165.154.138.33 port 35542: could not read protocol version
Sep 12 17:03:59 power sshd[3455975]: error: kex_exchange_identification: banner line contains invalid characters
Sep 12 17:03:59 power sshd[3455975]: banner exchange: Connection from 103.209.129.62 port 49676: invalid format
Sep 12 17:04:01 power systemd[3456045]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:05:01 power systemd[3457053]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:05:01 power systemd[3457054]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:06:01 power systemd[3458026]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 17:07:01 power systemd[3459124]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 17:09:01 power systemd[3460817]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:09:44 power sshd[3461565]: error: kex_exchange_identification: banner line contains invalid characters
Sep 12 17:09:44 power sshd[3461565]: banner exchange: Connection from 103.209.129.62 port 64681: invalid format
Sep 12 17:10:01 power systemd[3461927]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:10:01 power systemd[3461929]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:11:46 power sshd[3463479]: error: kex_exchange_identification: banner line contains invalid characters
Sep 12 17:11:46 power sshd[3463479]: banner exchange: Connection from 103.209.129.62 port 58095: invalid format
Sep 12 17:12:01 power systemd[3463798]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 17:15:01 power systemd[3466957]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:15:01 power systemd[3466958]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:20:01 power systemd[3471759]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:20:01 power systemd[3471763]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:25:01 power systemd[3476313]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:25:01 power systemd[3476314]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:25:46 power sshd[3476810]: Connection closed by 66.132.153.115 port 47488 [preauth]
Sep 12 17:30:01 power systemd[3481526]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:30:01 power systemd[3481527]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:30:01 power systemd[3481530]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 17:30:01 power systemd[3481528]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 17:30:01 power systemd[3481532]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 17:35:01 power systemd[3486781]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:35:01 power systemd[3486783]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:36:01 power systemd[3487823]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 17:37:01 power systemd[3489024]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 17:39:01 power systemd[3491071]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:40:01 power systemd[3492227]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:40:01 power systemd[3492229]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:42:01 power systemd[3494286]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 17:42:11 power sudo[3494461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 17:42:11 power systemd[3494467]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:42:11 power sudo[3494461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494461]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 17:42:11 power sudo[3494482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494482]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 17:42:11 power sudo[3494486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494486]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=2sGGLx6H24'
Sep 12 17:42:11 power sudo[3494490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494490]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 17:42:11 power sudo[3494497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494497]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 17:42:11 power sudo[3494501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494501]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 17:42:11 power sudo[3494505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494505]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 17:42:11 power sudo[3494509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494509]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 17:42:11 power sudo[3494518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494518]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 17:42:11 power sudo[3494523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494523]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 17:42:11 power sudo[3494527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494527]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 17:42:11 power sudo[3494531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494531]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 17:42:11 power sudo[3494536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:11 power sudo[3494536]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:11 power sudo[3494540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 17:42:11 power sudo[3494540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:12 power sudo[3494540]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:13 power sudo[3494586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 17:42:13 power sudo[3494586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:13 power sudo[3494586]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:13 power sudo[3494592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 17:42:13 power sudo[3494592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:13 power sudo[3494592]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:13 power sudo[3494597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=centarba user-2=nlpmkorg user-3=kolened1 user-4=nolimits user-5=seloviro user-6=dikimk12 user-7=sprintst user-8=enochmk user-9=herbalpl user-10=edomcomm user-11=berbermk user-12=pecakome user-13=wondersp user-14=stravelm user-15=robustco user-16=holiyayt user-17=rastiraz user-18=tradeyou user-19=gjorgeiv user-20=dnevnoin user-21=goodnews user-22=mstmmk user-23=gocruise user-24=tealmk user-25=dadarmk user-26=proverim user-27=enaspotc user-28=vmro user-29=viewinn user-30=trudovop user-31=stojnevi user-32=raremk user-33=oouslave user-34=uhostmk5 user-35=bauerbg user-36=youthgua user-37=anitermc user-38=cajsproc user-39=hotammk user-40=nefrolog user-41=ekostoc1 user-42=oncolog1 user-43=levantmk user-44=frizered user-45=hidrommk user-46=caramk user-47=evolvepl user-48=avtogumi user-49=socioloz user-50=pelagoni
Sep 12 17:42:13 power sudo[3494597]: wp-toolkit : (command continued) user-51=bianasho user-52=makoasmk user-53=skyapart user-54=rasmorgm user-55=getaldus user-56=simbiome user-57=delcevca user-58=barececo user-59=workandt user-60=volkanco user-61=goartsym user-62=dhamachi user-63=mfashion user-64=agrosind user-65=mpbmk user-66=datalink user-67=gogovan1 user-68=velmk user-69=univerz1 user-70=kujnamon user-71=sedcmk user-72=groskome user-73=ivanjord user-74=vfxnestc user-75=polyeste user-76=bizporta user-77=datelcom user-78=maleshne user-79=spdcompu user-80=detskagr user-81=infobadi user-82=mspmk user-83=wikicamp user-84=urbanexp user-85=janiboja user-86=itradeco user-87=vezilkac user-88=cabinetm user-89=stojano1 user-90=bovincom user-91=sparkupm user-92=stokovna user-93=klimimk user-94=palenzok user-95=busymard user-96=zvskopje user-97=zampmk user-98=custome1 user-99=kouzonco user-100=premiuma user-101=cetplatf user-102=dalmacom user-103=ideaplus user-104=nasaidni user-105=karpospo
Sep 12 17:42:13 power sudo[3494597]: wp-toolkit : (command continued) user-106=arturaco user-107=screenme user-108=premiums user-109=butelmk user-110=daris user-111=jpparkin user-112=inotekso user-113=drleomk user-114=aptekazd user-115=nikimare user-116=forzares user-117=hausmark user-118=nikolov1 user-119=intelek1 user-120=mediatag user-121=nucktra1 user-122=lblawcom user-123=euronic2 user-124=matratze user-125=mediasol user-126=carrent1 user-127=bogdanos user-128=apgrupmk user-129=kardiome user-130=chemhemc user-131=samasped user-132=nutrivim user-133=euromaki user-134=cosmatob user-135=elektrot user-136=zapovim1 user-137=infopor1 user-138=pravekom user-139=vtranseu user-140=imdskopj user-141=glammace user-142=albuname user-143=modernar user-144=inkigaic user-145=bozinovm user-146=dslmk user-147=fnjorgmk user-148=prizmapl user-149=darkogor user-150=premiumi user-151=innofabl user-152=vacuacti user-153=taneccom user-154=tehnologija user-155=gorsajmk user-156=aquatech
Sep 12 17:42:13 power sudo[3494597]: wp-toolkit : (command continued) user-157=v5srybi9dcdx user-158=supremel user-159=zdmgpsor user-160=tcieuroc user-161=onlinesh user-162=nationa2 user-163=solemor1 user-164=mapaspla user-165=ambitiou user-166=fiziosmk user-167=versusmk user-168=fffhpcwr user-169=radekrat user-170=starluxm user-171=bonitavi user-172=evberasm user-173=euronic3 user-174=vegemk1 user-175=cupidpro user-176=conserva user-177=folklore user-178=bauerin2 user-179=eaptekam user-180=dimpalne user-181=peshkai1 user-182=fxxcom user-183=evacommk user-184=madzomk user-185=aptekafa user-186=gradbai1 user-187=izzomk user-188=jpkomuna user-189=tehnodro user-190=makdrone user-191=biplmk user-192=kaoilmk user-193=bbbustou user-194=pelagini user-195=recorgmk user-196=taktcomm user-197=jaramk user-198=solointe user-199=atspedco user-200=sssoluti user-201=progress user-202=animatem user-203=cleanerm user-204=golakkom user-205=trigemat user-206=eliksirz user-207=naksorgm
Sep 12 17:42:13 power sudo[3494597]: wp-toolkit : (command continued) user-208=electrol user-209=eurofarm user-210=solarinv user-211=wineberr user-212=viplastc user-213=workbenc user-214=ismassag user-215=mbmehani feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 17:42:13 power sudo[3494597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:14 power sudo[3494597]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:14 power sudo[3494607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 17:42:14 power sudo[3494607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:14 power sudo[3494607]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:14 power sudo[3494611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DuQeOmjVDieDaYAk.~
Sep 12 17:42:14 power sudo[3494611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:14 power sudo[3494611]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:14 power sudo[3494615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DuQeOmjVDieDaYAk.~\''
Sep 12 17:42:14 power sudo[3494615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:14 power sudo[3494615]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:14 power sudo[3494620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DuQeOmjVDieDaYAk.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 17:42:14 power sudo[3494620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:14 power sudo[3494620]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:14 power sudo[3494624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 17:42:14 power sudo[3494624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:14 power sudo[3494624]: pam_unix(sudo:session): session closed for user root
Sep 12 17:42:15 power sudo[3495580]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 17:42:15 power sudo[3495580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 17:42:15 power sudo[3495580]: pam_unix(sudo:session): session closed for user root
Sep 12 17:45:01 power systemd[3498429]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:45:01 power systemd[3498431]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:50:01 power systemd[3503602]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:50:01 power systemd[3503604]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 17:55:02 power systemd[3508648]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 17:55:02 power systemd[3508649]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:00:01 power systemd[3513341]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:00:01 power systemd[3513347]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:00:01 power systemd[3513350]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 18:00:01 power systemd[3513348]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 18:00:01 power systemd[3513351]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 18:04:01 power systemd[3517881]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:05:01 power systemd[3519169]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:05:01 power systemd[3519173]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:06:01 power systemd[3520182]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 18:07:01 power systemd[3520964]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 18:09:01 power systemd[3522838]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:10:01 power systemd[3523986]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:10:01 power systemd[3523987]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:12:01 power systemd[3525607]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 18:15:01 power systemd[3528362]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:15:01 power systemd[3528363]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:20:01 power systemd[3533296]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:20:01 power systemd[3533297]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:25:01 power systemd[3538010]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:25:01 power systemd[3538014]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:30:01 power systemd[3542637]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:30:01 power systemd[3542640]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 18:30:01 power systemd[3542639]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:30:01 power systemd[3542642]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 18:30:01 power systemd[3542644]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 18:35:01 power systemd[3547910]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:35:01 power systemd[3547911]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:36:01 power systemd[3549064]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 18:37:01 power systemd[3549859]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 18:39:01 power systemd[3551683]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:40:01 power systemd[3553041]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:40:01 power systemd[3553044]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:42:01 power systemd[3554996]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 18:42:11 power sudo[3555171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 18:42:11 power systemd[3555176]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:42:11 power sudo[3555171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555171]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 18:42:11 power sudo[3555193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555193]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 18:42:11 power sudo[3555197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555197]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=NCuo131URM'
Sep 12 18:42:11 power sudo[3555201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555201]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 18:42:11 power sudo[3555206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555206]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 18:42:11 power sudo[3555210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555210]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 18:42:11 power sudo[3555214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555214]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 18:42:11 power sudo[3555218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555218]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 18:42:11 power sudo[3555227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555227]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 18:42:11 power sudo[3555231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555231]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 18:42:11 power sudo[3555235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555235]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 18:42:11 power sudo[3555239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555239]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 18:42:11 power sudo[3555243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:11 power sudo[3555243]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:11 power sudo[3555247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 18:42:11 power sudo[3555247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:12 power sudo[3555247]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:13 power sudo[3555292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 18:42:13 power sudo[3555292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:13 power sudo[3555292]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:13 power sudo[3555297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 18:42:13 power sudo[3555297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:14 power sudo[3555297]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:14 power sudo[3555306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=golakkom user-2=trigemat user-3=naksorgm user-4=eliksirz user-5=electrol user-6=eurofarm user-7=solarinv user-8=wineberr user-9=viplastc user-10=workbenc user-11=ismassag user-12=mbmehani user-13=kaoilmk user-14=biplmk user-15=bbbustou user-16=pelagini user-17=recorgmk user-18=taktcomm user-19=jaramk user-20=solointe user-21=atspedco user-22=sssoluti user-23=progress user-24=animatem user-25=cleanerm user-26=eaptekam user-27=dimpalne user-28=peshkai1 user-29=fxxcom user-30=evacommk user-31=madzomk user-32=aptekafa user-33=gradbai1 user-34=izzomk user-35=jpkomuna user-36=tehnodro user-37=makdrone user-38=bonitavi user-39=evberasm user-40=euronic3 user-41=vegemk1 user-42=cupidpro user-43=conserva user-44=folklore user-45=bauerin2 user-46=tcieuroc user-47=onlinesh user-48=nationa2 user-49=solemor1
Sep 12 18:42:14 power sudo[3555306]: wp-toolkit : (command continued) user-50=mapaspla user-51=ambitiou user-52=fiziosmk user-53=versusmk user-54=fffhpcwr user-55=radekrat user-56=starluxm user-57=modernar user-58=inkigaic user-59=bozinovm user-60=prizmapl user-61=dslmk user-62=fnjorgmk user-63=darkogor user-64=innofabl user-65=premiumi user-66=vacuacti user-67=taneccom user-68=tehnologija user-69=gorsajmk user-70=aquatech user-71=v5srybi9dcdx user-72=supremel user-73=zdmgpsor user-74=chemhemc user-75=samasped user-76=nutrivim user-77=cosmatob user-78=euromaki user-79=zapovim1 user-80=elektrot user-81=infopor1 user-82=pravekom user-83=vtranseu user-84=imdskopj user-85=glammace user-86=albuname user-87=aptekazd user-88=nikimare user-89=forzares user-90=nikolov1 user-91=hausmark user-92=intelek1 user-93=mediatag user-94=nucktra1 user-95=lblawcom user-96=euronic2 user-97=matratze user-98=mediasol user-99=carrent1 user-100=bogdanos user-101=apgrupmk user-102=kardiome user-103=kouzonco
Sep 12 18:42:14 power sudo[3555306]: wp-toolkit : (command continued) user-104=premiuma user-105=cetplatf user-106=dalmacom user-107=ideaplus user-108=nasaidni user-109=karpospo user-110=screenme user-111=arturaco user-112=premiums user-113=daris user-114=butelmk user-115=jpparkin user-116=inotekso user-117=drleomk user-118=janiboja user-119=itradeco user-120=vezilkac user-121=cabinetm user-122=stojano1 user-123=bovincom user-124=sparkupm user-125=stokovna user-126=klimimk user-127=palenzok user-128=zampmk user-129=busymard user-130=zvskopje user-131=custome1 user-132=sedcmk user-133=ivanjord user-134=groskome user-135=vfxnestc user-136=polyeste user-137=bizporta user-138=datelcom user-139=maleshne user-140=spdcompu user-141=detskagr user-142=mspmk user-143=infobadi user-144=wikicamp user-145=urbanexp user-146=makoasmk user-147=bianasho user-148=skyapart user-149=rasmorgm user-150=simbiome user-151=getaldus user-152=delcevca user-153=barececo user-154=workandt user-155=volkanco
Sep 12 18:42:14 power sudo[3555306]: wp-toolkit : (command continued) user-156=goartsym user-157=dhamachi user-158=mfashion user-159=agrosind user-160=mpbmk user-161=datalink user-162=velmk user-163=gogovan1 user-164=univerz1 user-165=kujnamon user-166=nefrolog user-167=levantmk user-168=oncolog1 user-169=ekostoc1 user-170=frizered user-171=hidrommk user-172=caramk user-173=evolvepl user-174=socioloz user-175=avtogumi user-176=pelagoni user-177=enaspotc user-178=vmro user-179=viewinn user-180=trudovop user-181=stojnevi user-182=raremk user-183=oouslave user-184=uhostmk5 user-185=bauerbg user-186=youthgua user-187=anitermc user-188=cajsproc user-189=hotammk user-190=pecakome user-191=wondersp user-192=robustco user-193=stravelm user-194=holiyayt user-195=rastiraz user-196=gjorgeiv user-197=tradeyou user-198=dnevnoin user-199=goodnews user-200=mstmmk user-201=gocruise user-202=tealmk user-203=dadarmk user-204=proverim user-205=centarba user-206=nlpmkorg user-207=kolened1
Sep 12 18:42:14 power sudo[3555306]: wp-toolkit : (command continued) user-208=nolimits user-209=seloviro user-210=dikimk12 user-211=sprintst user-212=enochmk user-213=herbalpl user-214=edomcomm user-215=berbermk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 18:42:14 power sudo[3555306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:14 power sudo[3555306]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:14 power sudo[3555318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 18:42:14 power sudo[3555318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:14 power sudo[3555318]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:14 power sudo[3555322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jRJVJ0mdomC3PGb8.~
Sep 12 18:42:14 power sudo[3555322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:14 power sudo[3555322]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:14 power sudo[3555326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jRJVJ0mdomC3PGb8.~\''
Sep 12 18:42:14 power sudo[3555326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:14 power sudo[3555326]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:14 power sudo[3555332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jRJVJ0mdomC3PGb8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 18:42:14 power sudo[3555332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:14 power sudo[3555332]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:14 power sudo[3555336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 18:42:14 power sudo[3555336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:14 power sudo[3555336]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:14 power sudo[3555341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_licenses --output=json'
Sep 12 18:42:14 power sudo[3555341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:15 power sudo[3555341]: pam_unix(sudo:session): session closed for user root
Sep 12 18:42:15 power sudo[3556036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 18:42:15 power sudo[3556036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 18:42:15 power sudo[3556036]: pam_unix(sudo:session): session closed for user root
Sep 12 18:45:01 power systemd[3559121]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:45:01 power systemd[3559122]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:50:01 power systemd[3564216]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:50:01 power systemd[3564217]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 18:55:01 power systemd[3569044]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 18:55:01 power systemd[3569045]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:00:02 power systemd[3573763]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:00:02 power systemd[3573764]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:00:02 power systemd[3573766]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 19:00:02 power systemd[3573765]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 19:00:02 power systemd[3573769]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 19:04:01 power systemd[3578190]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:05:01 power systemd[3579140]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:05:01 power systemd[3579141]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:06:01 power systemd[3580231]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 19:07:01 power systemd[3581282]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 19:09:01 power systemd[3583049]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:10:01 power systemd[3584360]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:10:01 power systemd[3584362]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:12:01 power systemd[3586204]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 19:15:01 power systemd[3589420]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:15:01 power systemd[3589421]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:20:01 power systemd[3594600]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:20:01 power systemd[3594603]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:25:02 power systemd[3599442]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:25:02 power systemd[3599445]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:30:01 power systemd[3604396]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:30:01 power systemd[3604395]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:30:01 power systemd[3604397]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 19:30:01 power systemd[3604399]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 19:30:01 power systemd[3604402]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 19:35:01 power systemd[3609503]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:35:01 power systemd[3609504]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:36:01 power systemd[3610509]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 19:37:01 power systemd[3611289]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 19:39:01 power systemd[3612997]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:40:01 power systemd[3614077]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:40:01 power systemd[3614078]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:42:01 power systemd[3616047]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 19:42:11 power sudo[3616180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 19:42:11 power systemd[3616185]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:42:11 power sudo[3616180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616180]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 19:42:11 power sudo[3616202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616202]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 19:42:11 power sudo[3616206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616206]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=pxV6Srg5c1'
Sep 12 19:42:11 power sudo[3616210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616210]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 19:42:11 power sudo[3616217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616217]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 19:42:11 power sudo[3616224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616224]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 19:42:11 power sudo[3616228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616228]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 19:42:11 power sudo[3616232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616232]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 19:42:11 power sudo[3616241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616241]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 19:42:11 power sudo[3616245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616245]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 19:42:11 power sudo[3616249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616249]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 19:42:11 power sudo[3616253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616253]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 19:42:11 power sudo[3616257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:11 power sudo[3616257]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:11 power sudo[3616261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 19:42:11 power sudo[3616261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:12 power sudo[3616261]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:16 power sudo[3616308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 19:42:16 power sudo[3616308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:16 power sudo[3616308]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:16 power sudo[3616313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 19:42:16 power sudo[3616313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:16 power sudo[3616313]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:16 power sudo[3616318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=anitermc user-2=youthgua user-3=hotammk user-4=cajsproc user-5=viewinn user-6=trudovop user-7=vmro user-8=enaspotc user-9=bauerbg user-10=uhostmk5 user-11=oouslave user-12=raremk user-13=stojnevi user-14=evolvepl user-15=pelagoni user-16=avtogumi user-17=socioloz user-18=ekostoc1 user-19=oncolog1 user-20=levantmk user-21=nefrolog user-22=caramk user-23=hidrommk user-24=frizered user-25=enochmk user-26=herbalpl user-27=sprintst user-28=dikimk12 user-29=berbermk user-30=edomcomm user-31=nolimits user-32=kolened1 user-33=nlpmkorg user-34=centarba user-35=seloviro user-36=gocruise user-37=mstmmk user-38=goodnews user-39=proverim user-40=dadarmk user-41=tealmk user-42=rastiraz user-43=holiyayt user-44=stravelm user-45=robustco user-46=wondersp user-47=pecakome user-48=dnevnoin user-49=gjorgeiv user-50=tradeyou
Sep 12 19:42:16 power sudo[3616318]: wp-toolkit : (command continued) user-51=klimimk user-52=stokovna user-53=sparkupm user-54=custome1 user-55=zvskopje user-56=busymard user-57=zampmk user-58=palenzok user-59=cabinetm user-60=vezilkac user-61=itradeco user-62=janiboja user-63=bovincom user-64=stojano1 user-65=butelmk user-66=daris user-67=premiums user-68=arturaco user-69=screenme user-70=karpospo user-71=nasaidni user-72=ideaplus user-73=drleomk user-74=inotekso user-75=jpparkin user-76=dalmacom user-77=cetplatf user-78=premiuma user-79=kouzonco user-80=mpbmk user-81=agrosind user-82=univerz1 user-83=kujnamon user-84=gogovan1 user-85=velmk user-86=datalink user-87=rasmorgm user-88=skyapart user-89=makoasmk user-90=bianasho user-91=mfashion user-92=dhamachi user-93=volkanco user-94=goartsym user-95=workandt user-96=barececo user-97=getaldus user-98=simbiome user-99=delcevca user-100=infobadi user-101=mspmk user-102=detskagr user-103=spdcompu user-104=urbanexp user-105=wikicamp
Sep 12 19:42:16 power sudo[3616318]: wp-toolkit : (command continued) user-106=polyeste user-107=vfxnestc user-108=groskome user-109=ivanjord user-110=sedcmk user-111=maleshne user-112=datelcom user-113=bizporta user-114=supremel user-115=v5srybi9dcdx user-116=aquatech user-117=gorsajmk user-118=zdmgpsor user-119=inkigaic user-120=modernar user-121=tehnologija user-122=taneccom user-123=vacuacti user-124=innofabl user-125=premiumi user-126=fnjorgmk user-127=dslmk user-128=darkogor user-129=prizmapl user-130=bozinovm user-131=versusmk user-132=fiziosmk user-133=ambitiou user-134=starluxm user-135=radekrat user-136=fffhpcwr user-137=tcieuroc user-138=mapaspla user-139=solemor1 user-140=nationa2 user-141=onlinesh user-142=matratze user-143=euronic2 user-144=kardiome user-145=apgrupmk user-146=bogdanos user-147=carrent1 user-148=mediasol user-149=nikolov1 user-150=hausmark user-151=forzares user-152=nikimare user-153=aptekazd user-154=lblawcom user-155=nucktra1 user-156=mediatag
Sep 12 19:42:16 power sudo[3616318]: wp-toolkit : (command continued) user-157=intelek1 user-158=vtranseu user-159=pravekom user-160=infopor1 user-161=albuname user-162=glammace user-163=imdskopj user-164=nutrivim user-165=chemhemc user-166=samasped user-167=zapovim1 user-168=elektrot user-169=euromaki user-170=cosmatob user-171=solointe user-172=jaramk user-173=taktcomm user-174=recorgmk user-175=cleanerm user-176=animatem user-177=progress user-178=sssoluti user-179=atspedco user-180=bbbustou user-181=kaoilmk user-182=biplmk user-183=pelagini user-184=viplastc user-185=wineberr user-186=mbmehani user-187=ismassag user-188=workbenc user-189=electrol user-190=eliksirz user-191=naksorgm user-192=trigemat user-193=golakkom user-194=solarinv user-195=eurofarm user-196=bauerin2 user-197=folklore user-198=evberasm user-199=bonitavi user-200=conserva user-201=cupidpro user-202=vegemk1 user-203=euronic3 user-204=jpkomuna user-205=izzomk user-206=makdrone user-207=tehnodro user-208=fxxcom
Sep 12 19:42:16 power sudo[3616318]: wp-toolkit : (command continued) user-209=peshkai1 user-210=dimpalne user-211=eaptekam user-212=gradbai1 user-213=aptekafa user-214=madzomk user-215=evacommk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 19:42:16 power sudo[3616318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:16 power sudo[3616318]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:16 power sudo[3616329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 19:42:16 power sudo[3616329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:16 power sudo[3616329]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:16 power sudo[3616334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hrtGw4AclERL2HBj.~
Sep 12 19:42:16 power sudo[3616334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:16 power sudo[3616334]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:16 power sudo[3616338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hrtGw4AclERL2HBj.~\''
Sep 12 19:42:16 power sudo[3616338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:16 power sudo[3616338]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:16 power sudo[3616343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hrtGw4AclERL2HBj.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 19:42:16 power sudo[3616343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:16 power sudo[3616343]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:16 power sudo[3616347]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 19:42:16 power sudo[3616347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:16 power sudo[3616347]: pam_unix(sudo:session): session closed for user root
Sep 12 19:42:17 power sudo[3616860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 19:42:17 power sudo[3616860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 19:42:17 power sudo[3616860]: pam_unix(sudo:session): session closed for user root
Sep 12 19:45:02 power systemd[3619627]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:45:02 power systemd[3619629]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:50:01 power systemd[3624235]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:50:01 power systemd[3624236]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 19:55:01 power systemd[3628551]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 19:55:01 power systemd[3628555]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:00:01 power systemd[3632779]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:00:01 power systemd[3632780]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:00:01 power systemd[3632781]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 20:00:01 power systemd[3632783]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 20:00:01 power systemd[3632785]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 20:04:01 power systemd[3637581]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:05:01 power systemd[3638646]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:05:01 power systemd[3638647]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:06:01 power systemd[3639678]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 20:07:01 power systemd[3640582]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 20:09:01 power systemd[3642367]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:10:01 power systemd[3643406]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:10:01 power systemd[3643408]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:12:01 power systemd[3645528]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 20:15:01 power systemd[3650537]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:15:01 power systemd[3650538]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:20:01 power systemd[3657629]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:20:01 power systemd[3657630]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:25:01 power systemd[3662430]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:25:01 power systemd[3662431]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:30:02 power systemd[3667293]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:30:02 power systemd[3667294]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:30:02 power systemd[3667297]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 20:30:02 power systemd[3667295]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 20:30:02 power systemd[3667299]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 20:35:01 power systemd[3672402]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:35:01 power systemd[3672404]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:36:01 power systemd[3673563]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 20:37:01 power systemd[3674426]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 20:39:01 power systemd[3676136]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:40:01 power systemd[3677044]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:40:01 power systemd[3677045]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:42:01 power systemd[3678962]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 20:42:11 power sudo[3679140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 20:42:11 power systemd[3679145]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:42:11 power sudo[3679140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679140]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 20:42:11 power sudo[3679163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679163]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 20:42:11 power sudo[3679167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679167]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=O6dxU4jzlv'
Sep 12 20:42:11 power sudo[3679171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679171]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 20:42:11 power sudo[3679176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679176]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 20:42:11 power sudo[3679183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679183]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 20:42:11 power sudo[3679187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679187]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 20:42:11 power sudo[3679193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679193]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 20:42:11 power sudo[3679202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679202]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 20:42:11 power sudo[3679207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679207]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 20:42:11 power sudo[3679211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679211]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 20:42:11 power sudo[3679216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679216]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 20:42:11 power sudo[3679220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:11 power sudo[3679220]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:11 power sudo[3679225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 20:42:11 power sudo[3679225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:12 power sudo[3679225]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:13 power sudo[3679271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 20:42:13 power sudo[3679271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:14 power sudo[3679271]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:14 power sudo[3679276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 20:42:14 power sudo[3679276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:14 power sudo[3679276]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:14 power sudo[3679283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=gocruise user-2=goodnews user-3=mstmmk user-4=dadarmk user-5=proverim user-6=tealmk user-7=holiyayt user-8=rastiraz user-9=pecakome user-10=robustco user-11=stravelm user-12=wondersp user-13=dnevnoin user-14=tradeyou user-15=gjorgeiv user-16=dikimk12 user-17=enochmk user-18=herbalpl user-19=sprintst user-20=edomcomm user-21=berbermk user-22=nolimits user-23=kolened1 user-24=nlpmkorg user-25=centarba user-26=seloviro user-27=evolvepl user-28=pelagoni user-29=socioloz user-30=avtogumi user-31=levantmk user-32=ekostoc1 user-33=oncolog1 user-34=nefrolog user-35=caramk user-36=hidrommk user-37=frizered user-38=anitermc user-39=youthgua user-40=cajsproc user-41=hotammk user-42=enaspotc user-43=trudovop user-44=viewinn user-45=vmro user-46=oouslave user-47=raremk user-48=bauerbg user-49=uhostmk5 user-50=stojnevi
Sep 12 20:42:14 power sudo[3679283]: wp-toolkit : (command continued) user-51=mspmk user-52=infobadi user-53=spdcompu user-54=detskagr user-55=wikicamp user-56=urbanexp user-57=polyeste user-58=vfxnestc user-59=sedcmk user-60=ivanjord user-61=groskome user-62=maleshne user-63=datelcom user-64=bizporta user-65=mpbmk user-66=agrosind user-67=kujnamon user-68=univerz1 user-69=gogovan1 user-70=velmk user-71=datalink user-72=rasmorgm user-73=skyapart user-74=makoasmk user-75=bianasho user-76=dhamachi user-77=goartsym user-78=volkanco user-79=mfashion user-80=barececo user-81=getaldus user-82=delcevca user-83=simbiome user-84=workandt user-85=daris user-86=butelmk user-87=premiums user-88=nasaidni user-89=karpospo user-90=ideaplus user-91=arturaco user-92=screenme user-93=inotekso user-94=jpparkin user-95=drleomk user-96=cetplatf user-97=dalmacom user-98=kouzonco user-99=premiuma user-100=klimimk user-101=stokovna user-102=sparkupm user-103=custome1 user-104=palenzok user-105=zvskopje
Sep 12 20:42:14 power sudo[3679283]: wp-toolkit : (command continued) user-106=busymard user-107=zampmk user-108=vezilkac user-109=cabinetm user-110=janiboja user-111=itradeco user-112=bovincom user-113=stojano1 user-114=vtranseu user-115=pravekom user-116=infopor1 user-117=albuname user-118=glammace user-119=imdskopj user-120=nutrivim user-121=chemhemc user-122=samasped user-123=elektrot user-124=zapovim1 user-125=cosmatob user-126=euromaki user-127=matratze user-128=euronic2 user-129=kardiome user-130=carrent1 user-131=bogdanos user-132=mediasol user-133=apgrupmk user-134=nikolov1 user-135=hausmark user-136=nikimare user-137=aptekazd user-138=forzares user-139=nucktra1 user-140=lblawcom user-141=mediatag user-142=intelek1 user-143=versusmk user-144=ambitiou user-145=fiziosmk user-146=starluxm user-147=radekrat user-148=fffhpcwr user-149=tcieuroc user-150=solemor1 user-151=mapaspla user-152=onlinesh user-153=nationa2 user-154=v5srybi9dcdx user-155=supremel user-156=aquatech
Sep 12 20:42:14 power sudo[3679283]: wp-toolkit : (command continued) user-157=gorsajmk user-158=zdmgpsor user-159=inkigaic user-160=modernar user-161=taneccom user-162=tehnologija user-163=darkogor user-164=fnjorgmk user-165=prizmapl user-166=dslmk user-167=bozinovm user-168=vacuacti user-169=innofabl user-170=premiumi user-171=izzomk user-172=jpkomuna user-173=makdrone user-174=tehnodro user-175=fxxcom user-176=peshkai1 user-177=eaptekam user-178=dimpalne user-179=gradbai1 user-180=aptekafa user-181=madzomk user-182=evacommk user-183=bauerin2 user-184=folklore user-185=evberasm user-186=bonitavi user-187=conserva user-188=euronic3 user-189=cupidpro user-190=vegemk1 user-191=wineberr user-192=viplastc user-193=mbmehani user-194=workbenc user-195=ismassag user-196=eliksirz user-197=naksorgm user-198=trigemat user-199=electrol user-200=golakkom user-201=solarinv user-202=eurofarm user-203=jaramk user-204=solointe user-205=taktcomm user-206=recorgmk user-207=progress
Sep 12 20:42:14 power sudo[3679283]: wp-toolkit : (command continued) user-208=cleanerm user-209=animatem user-210=sssoluti user-211=atspedco user-212=kaoilmk user-213=biplmk user-214=bbbustou user-215=pelagini feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 20:42:14 power sudo[3679283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:14 power sudo[3679283]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:14 power sudo[3679293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 20:42:14 power sudo[3679293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:14 power sudo[3679293]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:14 power sudo[3679297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ol0XRHa0BlUKbcOe.~
Sep 12 20:42:14 power sudo[3679297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:14 power sudo[3679297]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:14 power sudo[3679301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ol0XRHa0BlUKbcOe.~\''
Sep 12 20:42:14 power sudo[3679301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:14 power sudo[3679301]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:14 power sudo[3679306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ol0XRHa0BlUKbcOe.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 20:42:14 power sudo[3679306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:14 power sudo[3679306]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:14 power sudo[3679310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 20:42:14 power sudo[3679310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:14 power sudo[3679310]: pam_unix(sudo:session): session closed for user root
Sep 12 20:42:15 power sudo[3680232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 20:42:15 power sudo[3680232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 20:42:15 power sudo[3680232]: pam_unix(sudo:session): session closed for user root
Sep 12 20:45:01 power systemd[3682938]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:45:01 power systemd[3682939]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:50:02 power systemd[3688048]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:50:02 power systemd[3688050]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 20:55:01 power systemd[3693109]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 20:55:01 power systemd[3693111]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:00:01 power systemd[3697708]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:00:01 power systemd[3697709]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:00:01 power systemd[3697710]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 21:00:01 power systemd[3697712]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 21:00:01 power systemd[3697714]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 21:04:01 power systemd[3702263]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:05:01 power systemd[3703212]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:05:01 power systemd[3703215]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:06:01 power systemd[3704290]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 21:07:01 power systemd[3705075]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 21:09:01 power systemd[3706627]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:10:01 power systemd[3707503]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:10:01 power systemd[3707504]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:12:01 power systemd[3709547]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 21:15:01 power systemd[3712211]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:15:01 power systemd[3712213]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:15:01 power systemd[3712214]: pam_unix(systemd-user:session): session opened for user polyeste(uid=1217) by polyeste(uid=0)
Sep 12 21:20:01 power systemd[3717482]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:20:01 power systemd[3717485]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:25:01 power systemd[3721752]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:25:01 power systemd[3721753]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:30:01 power systemd[3727265]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:30:01 power systemd[3727270]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 21:30:01 power systemd[3727266]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:30:01 power systemd[3727271]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 21:30:01 power systemd[3727273]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 21:35:02 power systemd[3733733]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:35:02 power systemd[3733734]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:36:01 power systemd[3734983]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 21:37:01 power systemd[3736426]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 21:39:01 power systemd[3738368]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:40:01 power systemd[3739284]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:40:01 power systemd[3739285]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:42:01 power systemd[3741294]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 21:42:11 power sudo[3741480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 21:42:11 power systemd[3741485]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:42:11 power sudo[3741480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741480]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 21:42:11 power sudo[3741503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741503]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 21:42:11 power sudo[3741507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741507]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=WiQWU6Eg60'
Sep 12 21:42:11 power sudo[3741511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741511]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 21:42:11 power sudo[3741521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741521]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 21:42:11 power sudo[3741525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741525]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 21:42:11 power sudo[3741529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741529]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 21:42:11 power sudo[3741534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741534]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 21:42:11 power sudo[3741541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741541]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 21:42:11 power sudo[3741546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741546]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 21:42:11 power sudo[3741550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741550]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 21:42:11 power sudo[3741554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741554]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 21:42:11 power sudo[3741558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:11 power sudo[3741558]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:11 power sudo[3741562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 21:42:11 power sudo[3741562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:12 power sudo[3741562]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:14 power sudo[3741608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 21:42:14 power sudo[3741608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:14 power sudo[3741608]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:14 power sudo[3741613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 21:42:14 power sudo[3741613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:14 power sudo[3741613]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:14 power sudo[3741621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=cajsproc user-2=hotammk user-3=anitermc user-4=youthgua user-5=stojnevi user-6=oouslave user-7=raremk user-8=bauerbg user-9=uhostmk5 user-10=enaspotc user-11=viewinn user-12=trudovop user-13=vmro user-14=avtogumi user-15=socioloz user-16=pelagoni user-17=evolvepl user-18=hidrommk user-19=frizered user-20=caramk user-21=levantmk user-22=oncolog1 user-23=ekostoc1 user-24=nefrolog user-25=edomcomm user-26=berbermk user-27=dikimk12 user-28=herbalpl user-29=enochmk user-30=sprintst user-31=seloviro user-32=kolened1 user-33=centarba user-34=nlpmkorg user-35=nolimits user-36=tealmk user-37=dadarmk user-38=proverim user-39=goodnews user-40=mstmmk user-41=gocruise user-42=tradeyou user-43=gjorgeiv user-44=dnevnoin user-45=pecakome user-46=stravelm user-47=robustco user-48=wondersp user-49=holiyayt user-50=rastiraz
Sep 12 21:42:14 power sudo[3741621]: wp-toolkit : (command continued) user-51=palenzok user-52=zampmk user-53=busymard user-54=zvskopje user-55=custome1 user-56=stokovna user-57=sparkupm user-58=klimimk user-59=stojano1 user-60=bovincom user-61=janiboja user-62=itradeco user-63=vezilkac user-64=cabinetm user-65=inotekso user-66=jpparkin user-67=drleomk user-68=karpospo user-69=nasaidni user-70=ideaplus user-71=arturaco user-72=screenme user-73=butelmk user-74=daris user-75=premiums user-76=kouzonco user-77=premiuma user-78=cetplatf user-79=dalmacom user-80=datalink user-81=kujnamon user-82=univerz1 user-83=velmk user-84=gogovan1 user-85=mpbmk user-86=agrosind user-87=barececo user-88=getaldus user-89=delcevca user-90=simbiome user-91=workandt user-92=dhamachi user-93=volkanco user-94=goartsym user-95=mfashion user-96=skyapart user-97=makoasmk user-98=bianasho user-99=rasmorgm user-100=wikicamp user-101=urbanexp user-102=spdcompu user-103=detskagr user-104=mspmk user-105=infobadi
Sep 12 21:42:14 power sudo[3741621]: wp-toolkit : (command continued) user-106=bizporta user-107=maleshne user-108=datelcom user-109=sedcmk user-110=groskome user-111=ivanjord user-112=polyeste user-113=vfxnestc user-114=zdmgpsor user-115=aquatech user-116=gorsajmk user-117=v5srybi9dcdx user-118=supremel user-119=fnjorgmk user-120=prizmapl user-121=dslmk user-122=darkogor user-123=bozinovm user-124=vacuacti user-125=innofabl user-126=premiumi user-127=taneccom user-128=tehnologija user-129=modernar user-130=inkigaic user-131=fffhpcwr user-132=starluxm user-133=radekrat user-134=ambitiou user-135=fiziosmk user-136=versusmk user-137=onlinesh user-138=nationa2 user-139=solemor1 user-140=mapaspla user-141=tcieuroc user-142=carrent1 user-143=bogdanos user-144=mediasol user-145=apgrupmk user-146=kardiome user-147=matratze user-148=euronic2 user-149=mediatag user-150=intelek1 user-151=nucktra1 user-152=lblawcom user-153=nikimare user-154=aptekazd user-155=forzares user-156=hausmark
Sep 12 21:42:14 power sudo[3741621]: wp-toolkit : (command continued) user-157=nikolov1 user-158=imdskopj user-159=albuname user-160=glammace user-161=infopor1 user-162=vtranseu user-163=pravekom user-164=euromaki user-165=cosmatob user-166=zapovim1 user-167=elektrot user-168=samasped user-169=chemhemc user-170=nutrivim user-171=sssoluti user-172=atspedco user-173=progress user-174=cleanerm user-175=animatem user-176=recorgmk user-177=taktcomm user-178=jaramk user-179=solointe user-180=pelagini user-181=kaoilmk user-182=biplmk user-183=bbbustou user-184=workbenc user-185=ismassag user-186=mbmehani user-187=wineberr user-188=viplastc user-189=eurofarm user-190=solarinv user-191=golakkom user-192=eliksirz user-193=naksorgm user-194=trigemat user-195=electrol user-196=folklore user-197=bauerin2 user-198=euronic3 user-199=cupidpro user-200=vegemk1 user-201=conserva user-202=evberasm user-203=bonitavi user-204=tehnodro user-205=makdrone user-206=izzomk user-207=jpkomuna user-208=madzomk
Sep 12 21:42:14 power sudo[3741621]: wp-toolkit : (command continued) user-209=aptekafa user-210=evacommk user-211=gradbai1 user-212=eaptekam user-213=dimpalne user-214=fxxcom user-215=peshkai1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 21:42:14 power sudo[3741621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:14 power sudo[3741621]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:14 power sudo[3741635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 21:42:14 power sudo[3741635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:14 power sudo[3741635]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:14 power sudo[3741639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tOJzo6moczghv8Rm.~
Sep 12 21:42:14 power sudo[3741639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:14 power sudo[3741639]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:14 power sudo[3741643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tOJzo6moczghv8Rm.~\''
Sep 12 21:42:14 power sudo[3741643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:14 power sudo[3741643]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:14 power sudo[3741648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tOJzo6moczghv8Rm.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 21:42:14 power sudo[3741648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:14 power sudo[3741648]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:14 power sudo[3741652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 21:42:14 power sudo[3741652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:14 power sudo[3741652]: pam_unix(sudo:session): session closed for user root
Sep 12 21:42:15 power sudo[3741814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 21:42:15 power sudo[3741814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 21:42:15 power sudo[3741814]: pam_unix(sudo:session): session closed for user root
Sep 12 21:45:01 power systemd[3745111]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:45:01 power systemd[3745112]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:50:01 power systemd[3750630]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:50:01 power systemd[3750631]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 21:55:01 power systemd[3755561]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 21:55:01 power systemd[3755562]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:00:01 power systemd[3760117]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:00:01 power systemd[3760118]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:00:01 power systemd[3760121]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 22:00:01 power systemd[3760119]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 22:00:01 power systemd[3760122]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 22:04:01 power systemd[3764495]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:05:01 power systemd[3765310]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:05:01 power systemd[3765312]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:06:02 power systemd[3766180]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 22:07:01 power systemd[3767265]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 22:09:01 power systemd[3768854]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:09:01 power systemd[3768855]: pam_unix(systemd-user:session): session opened for user chemhemc(uid=1006) by chemhemc(uid=0)
Sep 12 22:10:01 power systemd[3769832]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:10:01 power systemd[3769833]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:12:01 power systemd[3771758]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 22:15:01 power systemd[3774667]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:15:01 power systemd[3774669]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:20:01 power systemd[3779774]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:20:01 power systemd[3779775]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:21:26 power sudo[3781287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 22:21:26 power systemd[3781296]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:21:26 power sudo[3781287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:21:26 power sudo[3781287]: pam_unix(sudo:session): session closed for user root
Sep 12 22:21:26 power sudo[3781334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 12 22:21:26 power sudo[3781334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:21:27 power sudo[3781334]: pam_unix(sudo:session): session closed for user root
Sep 12 22:21:27 power sudo[3781366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 Mime list_redirects --output=json'
Sep 12 22:21:27 power sudo[3781366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:21:27 power sudo[3781366]: pam_unix(sudo:session): session closed for user root
Sep 12 22:25:02 power systemd[3784957]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:25:02 power systemd[3784956]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:30:01 power systemd[3788952]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:30:01 power systemd[3788951]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:30:01 power systemd[3788954]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 22:30:01 power systemd[3788953]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 22:30:01 power systemd[3788957]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 22:35:01 power systemd[3793579]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:35:01 power systemd[3793582]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:35:01 power systemd[3793581]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep 12 22:36:01 power systemd[3794510]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 22:37:01 power systemd[3795499]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 22:39:01 power systemd[3797040]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:40:01 power systemd[3798151]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:40:01 power systemd[3798153]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:42:01 power systemd[3800359]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 22:42:11 power sudo[3800520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 22:42:11 power systemd[3800525]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:42:11 power sudo[3800520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800520]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 22:42:11 power sudo[3800540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800540]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 22:42:11 power sudo[3800544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800544]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=kyZFkWleeC'
Sep 12 22:42:11 power sudo[3800548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800548]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 22:42:11 power sudo[3800556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800556]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 22:42:11 power sudo[3800560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800560]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 22:42:11 power sudo[3800565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800565]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 22:42:11 power sudo[3800569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800569]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 22:42:11 power sudo[3800575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800575]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 22:42:11 power sudo[3800579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800579]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 22:42:11 power sudo[3800583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800583]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 22:42:11 power sudo[3800587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800587]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800591]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 22:42:11 power sudo[3800591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:11 power sudo[3800591]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:11 power sudo[3800595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 22:42:11 power sudo[3800595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:12 power sudo[3800595]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:13 power sudo[3800636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 22:42:13 power sudo[3800636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:13 power sudo[3800636]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:13 power sudo[3800647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 22:42:14 power sudo[3800647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:14 power sudo[3800647]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:14 power sudo[3800653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=hotammk user-2=cajsproc user-3=anitermc user-4=youthgua user-5=bauerbg user-6=uhostmk5 user-7=oouslave user-8=raremk user-9=stojnevi user-10=trudovop user-11=viewinn user-12=vmro user-13=enaspotc user-14=pelagoni user-15=avtogumi user-16=socioloz user-17=evolvepl user-18=caramk user-19=hidrommk user-20=frizered user-21=oncolog1 user-22=levantmk user-23=ekostoc1 user-24=nefrolog user-25=berbermk user-26=edomcomm user-27=herbalpl user-28=enochmk user-29=sprintst user-30=dikimk12 user-31=seloviro user-32=nolimits user-33=kolened1 user-34=centarba user-35=nlpmkorg user-36=proverim user-37=dadarmk user-38=tealmk user-39=gocruise user-40=mstmmk user-41=goodnews user-42=dnevnoin user-43=tradeyou user-44=gjorgeiv user-45=rastiraz user-46=holiyayt user-47=stravelm user-48=robustco user-49=wondersp user-50=pecakome
Sep 12 22:42:14 power sudo[3800653]: wp-toolkit : (command continued) user-51=custome1 user-52=busymard user-53=zvskopje user-54=zampmk user-55=palenzok user-56=klimimk user-57=stokovna user-58=sparkupm user-59=bovincom user-60=stojano1 user-61=cabinetm user-62=vezilkac user-63=itradeco user-64=janiboja user-65=drleomk user-66=inotekso user-67=jpparkin user-68=daris user-69=butelmk user-70=premiums user-71=arturaco user-72=screenme user-73=nasaidni user-74=karpospo user-75=ideaplus user-76=dalmacom user-77=cetplatf user-78=premiuma user-79=kouzonco user-80=univerz1 user-81=kujnamon user-82=gogovan1 user-83=velmk user-84=datalink user-85=mpbmk user-86=agrosind user-87=mfashion user-88=dhamachi user-89=goartsym user-90=volkanco user-91=workandt user-92=barececo user-93=getaldus user-94=delcevca user-95=simbiome user-96=rasmorgm user-97=skyapart user-98=makoasmk user-99=bianasho user-100=urbanexp user-101=wikicamp user-102=infobadi user-103=mspmk user-104=detskagr user-105=spdcompu
Sep 12 22:42:14 power sudo[3800653]: wp-toolkit : (command continued) user-106=maleshne user-107=datelcom user-108=bizporta user-109=polyeste user-110=vfxnestc user-111=ivanjord user-112=groskome user-113=sedcmk user-114=zdmgpsor user-115=supremel user-116=v5srybi9dcdx user-117=aquatech user-118=gorsajmk user-119=tehnologija user-120=taneccom user-121=vacuacti user-122=innofabl user-123=premiumi user-124=prizmapl user-125=fnjorgmk user-126=dslmk user-127=darkogor user-128=bozinovm user-129=inkigaic user-130=modernar user-131=starluxm user-132=radekrat user-133=fffhpcwr user-134=versusmk user-135=fiziosmk user-136=ambitiou user-137=mapaspla user-138=solemor1 user-139=nationa2 user-140=onlinesh user-141=tcieuroc user-142=kardiome user-143=apgrupmk user-144=bogdanos user-145=carrent1 user-146=mediasol user-147=matratze user-148=euronic2 user-149=lblawcom user-150=nucktra1 user-151=mediatag user-152=intelek1 user-153=hausmark user-154=nikolov1 user-155=forzares user-156=nikimare
Sep 12 22:42:14 power sudo[3800653]: wp-toolkit : (command continued) user-157=aptekazd user-158=albuname user-159=glammace user-160=imdskopj user-161=pravekom user-162=vtranseu user-163=infopor1 user-164=zapovim1 user-165=elektrot user-166=euromaki user-167=cosmatob user-168=nutrivim user-169=chemhemc user-170=samasped user-171=cleanerm user-172=animatem user-173=progress user-174=atspedco user-175=sssoluti user-176=solointe user-177=jaramk user-178=taktcomm user-179=recorgmk user-180=pelagini user-181=bbbustou user-182=biplmk user-183=kaoilmk user-184=mbmehani user-185=ismassag user-186=workbenc user-187=viplastc user-188=wineberr user-189=solarinv user-190=eurofarm user-191=electrol user-192=naksorgm user-193=eliksirz user-194=trigemat user-195=golakkom user-196=bauerin2 user-197=folklore user-198=conserva user-199=cupidpro user-200=vegemk1 user-201=euronic3 user-202=evberasm user-203=bonitavi user-204=makdrone user-205=tehnodro user-206=jpkomuna user-207=izzomk
Sep 12 22:42:14 power sudo[3800653]: wp-toolkit : (command continued) user-208=gradbai1 user-209=madzomk user-210=aptekafa user-211=evacommk user-212=fxxcom user-213=peshkai1 user-214=dimpalne user-215=eaptekam feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 22:42:14 power sudo[3800653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:14 power sudo[3800653]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:14 power sudo[3800662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 22:42:14 power sudo[3800662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:14 power sudo[3800662]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:14 power sudo[3800666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CKwLh34STjZcZH5V.~
Sep 12 22:42:14 power sudo[3800666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:14 power sudo[3800666]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:14 power sudo[3800670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CKwLh34STjZcZH5V.~\''
Sep 12 22:42:14 power sudo[3800670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:14 power sudo[3800670]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:14 power sudo[3800675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CKwLh34STjZcZH5V.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 22:42:14 power sudo[3800675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:14 power sudo[3800675]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:14 power sudo[3800679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 22:42:14 power sudo[3800679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:14 power sudo[3800679]: pam_unix(sudo:session): session closed for user root
Sep 12 22:42:15 power sudo[3801473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 22:42:15 power sudo[3801473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 22:42:15 power sudo[3801473]: pam_unix(sudo:session): session closed for user root
Sep 12 22:45:02 power systemd[3803800]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:45:02 power systemd[3803801]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:50:01 power systemd[3808746]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:50:01 power systemd[3808747]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 22:55:01 power systemd[3813472]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 22:55:01 power systemd[3813473]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:00:01 power systemd[3818089]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:00:01 power systemd[3818092]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:00:01 power systemd[3818093]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 23:00:01 power systemd[3818095]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 23:00:01 power systemd[3818096]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 23:04:01 power systemd[3822261]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:05:02 power systemd[3823186]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:05:02 power systemd[3823187]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:06:01 power systemd[3824005]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 23:07:01 power systemd[3824921]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 23:09:01 power systemd[3826829]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:10:01 power systemd[3827646]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:10:01 power systemd[3827647]: pam_unix(systemd-user:session): session opened for user spdcompu(uid=1023) by spdcompu(uid=0)
Sep 12 23:10:01 power systemd[3827648]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:12:01 power systemd[3829565]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 23:15:01 power systemd[3832619]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:15:01 power systemd[3832622]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:20:01 power systemd[3837598]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:20:01 power systemd[3837599]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:25:01 power systemd[3842297]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:25:01 power systemd[3842296]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:30:01 power systemd[3846745]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:30:01 power systemd[3846753]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:30:01 power systemd[3846755]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 12 23:30:01 power systemd[3846757]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 12 23:30:01 power systemd[3846759]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 12 23:35:02 power systemd[3851811]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:35:02 power systemd[3851813]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:36:01 power systemd[3852787]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 12 23:37:01 power systemd[3854268]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 23:39:01 power systemd[3855941]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:40:01 power systemd[3856769]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:40:01 power systemd[3856772]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:42:01 power systemd[3858427]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 12 23:42:11 power sudo[3858528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 12 23:42:11 power systemd[3858533]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:42:11 power sudo[3858528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858528]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 12 23:42:11 power sudo[3858547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858547]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 12 23:42:11 power sudo[3858551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858551]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=bTbzZR1Lrd'
Sep 12 23:42:11 power sudo[3858555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858555]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 12 23:42:11 power sudo[3858561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858561]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 12 23:42:11 power sudo[3858569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858569]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 12 23:42:11 power sudo[3858575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858575]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 12 23:42:11 power sudo[3858585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858585]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 12 23:42:11 power sudo[3858592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858592]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 12 23:42:11 power sudo[3858596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858596]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 12 23:42:11 power sudo[3858600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858600]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 23:42:11 power sudo[3858604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858604]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 12 23:42:11 power sudo[3858608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:11 power sudo[3858608]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:11 power sudo[3858613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 12 23:42:11 power sudo[3858613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:12 power sudo[3858613]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:14 power sudo[3858655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 12 23:42:14 power sudo[3858655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:14 power sudo[3858655]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:14 power sudo[3858660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 12 23:42:14 power sudo[3858660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:14 power sudo[3858660]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:14 power sudo[3858666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=vfxnestc user-2=polyeste user-3=sedcmk user-4=groskome user-5=ivanjord user-6=datelcom user-7=maleshne user-8=bizporta user-9=mspmk user-10=infobadi user-11=spdcompu user-12=detskagr user-13=wikicamp user-14=urbanexp user-15=rasmorgm user-16=makoasmk user-17=bianasho user-18=skyapart user-19=goartsym user-20=volkanco user-21=dhamachi user-22=mfashion user-23=delcevca user-24=getaldus user-25=simbiome user-26=barececo user-27=workandt user-28=agrosind user-29=mpbmk user-30=velmk user-31=gogovan1 user-32=univerz1 user-33=kujnamon user-34=datalink user-35=cetplatf user-36=dalmacom user-37=kouzonco user-38=premiuma user-39=premiums user-40=butelmk user-41=daris user-42=ideaplus user-43=nasaidni user-44=karpospo user-45=arturaco user-46=screenme user-47=jpparkin user-48=inotekso user-49=drleomk user-50=vezilkac
Sep 12 23:42:14 power sudo[3858666]: wp-toolkit : (command continued) user-51=cabinetm user-52=janiboja user-53=itradeco user-54=bovincom user-55=stojano1 user-56=klimimk user-57=sparkupm user-58=stokovna user-59=custome1 user-60=palenzok user-61=busymard user-62=zampmk user-63=zvskopje user-64=holiyayt user-65=rastiraz user-66=pecakome user-67=wondersp user-68=robustco user-69=stravelm user-70=dnevnoin user-71=tradeyou user-72=gjorgeiv user-73=gocruise user-74=goodnews user-75=mstmmk user-76=dadarmk user-77=proverim user-78=tealmk user-79=nolimits user-80=centarba user-81=nlpmkorg user-82=kolened1 user-83=seloviro user-84=dikimk12 user-85=sprintst user-86=enochmk user-87=herbalpl user-88=edomcomm user-89=berbermk user-90=nefrolog user-91=oncolog1 user-92=levantmk user-93=ekostoc1 user-94=caramk user-95=frizered user-96=hidrommk user-97=evolvepl user-98=pelagoni user-99=avtogumi user-100=socioloz user-101=enaspotc user-102=vmro user-103=viewinn user-104=trudovop user-105=raremk
Sep 12 23:42:14 power sudo[3858666]: wp-toolkit : (command continued) user-106=oouslave user-107=uhostmk5 user-108=bauerbg user-109=stojnevi user-110=youthgua user-111=anitermc user-112=cajsproc user-113=hotammk user-114=peshkai1 user-115=fxxcom user-116=eaptekam user-117=dimpalne user-118=gradbai1 user-119=evacommk user-120=madzomk user-121=aptekafa user-122=izzomk user-123=jpkomuna user-124=makdrone user-125=tehnodro user-126=bonitavi user-127=evberasm user-128=conserva user-129=euronic3 user-130=vegemk1 user-131=cupidpro user-132=bauerin2 user-133=folklore user-134=trigemat user-135=naksorgm user-136=eliksirz user-137=electrol user-138=golakkom user-139=solarinv user-140=eurofarm user-141=wineberr user-142=viplastc user-143=mbmehani user-144=workbenc user-145=ismassag user-146=biplmk user-147=kaoilmk user-148=bbbustou user-149=pelagini user-150=jaramk user-151=solointe user-152=recorgmk user-153=taktcomm user-154=progress user-155=animatem user-156=cleanerm user-157=atspedco
Sep 12 23:42:14 power sudo[3858666]: wp-toolkit : (command continued) user-158=sssoluti user-159=nutrivim user-160=chemhemc user-161=samasped user-162=elektrot user-163=zapovim1 user-164=euromaki user-165=cosmatob user-166=pravekom user-167=vtranseu user-168=infopor1 user-169=glammace user-170=albuname user-171=imdskopj user-172=hausmark user-173=nikolov1 user-174=aptekazd user-175=nikimare user-176=forzares user-177=nucktra1 user-178=lblawcom user-179=intelek1 user-180=mediatag user-181=euronic2 user-182=matratze user-183=kardiome user-184=mediasol user-185=carrent1 user-186=bogdanos user-187=apgrupmk user-188=tcieuroc user-189=solemor1 user-190=mapaspla user-191=onlinesh user-192=nationa2 user-193=versusmk user-194=ambitiou user-195=fiziosmk user-196=radekrat user-197=starluxm user-198=fffhpcwr user-199=inkigaic user-200=modernar user-201=taneccom user-202=tehnologija user-203=bozinovm user-204=darkogor user-205=fnjorgmk user-206=prizmapl user-207=dslmk user-208=innofabl
Sep 12 23:42:14 power sudo[3858666]: wp-toolkit : (command continued) user-209=premiumi user-210=vacuacti user-211=v5srybi9dcdx user-212=supremel user-213=gorsajmk user-214=aquatech user-215=zdmgpsor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 12 23:42:14 power sudo[3858666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:14 power sudo[3858666]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:14 power sudo[3858676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 23:42:14 power sudo[3858676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:14 power sudo[3858676]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:14 power sudo[3858681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MZU1cP2xbz3MZXqr.~
Sep 12 23:42:14 power sudo[3858681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:14 power sudo[3858681]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:14 power sudo[3858685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MZU1cP2xbz3MZXqr.~\''
Sep 12 23:42:14 power sudo[3858685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:14 power sudo[3858685]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:14 power sudo[3858690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MZU1cP2xbz3MZXqr.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 12 23:42:14 power sudo[3858690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:14 power sudo[3858690]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:14 power sudo[3858694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 12 23:42:14 power sudo[3858694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:14 power sudo[3858694]: pam_unix(sudo:session): session closed for user root
Sep 12 23:42:15 power sudo[3859619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 12 23:42:15 power sudo[3859619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 12 23:42:15 power sudo[3859619]: pam_unix(sudo:session): session closed for user root
Sep 12 23:45:01 power systemd[3861577]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:45:01 power systemd[3861579]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:50:01 power systemd[3866328]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:50:01 power systemd[3866329]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 12 23:55:01 power systemd[3870098]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 12 23:55:01 power systemd[3870099]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:00:02 power systemd[3874562]: pam_unix(systemd-user:session): session opened for user fffhpcwr(uid=1010) by fffhpcwr(uid=0)
Sep 13 00:00:02 power systemd[3874557]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:00:02 power systemd[3874563]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:00:02 power systemd[3874565]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 00:00:02 power systemd[3874567]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 00:00:02 power systemd[3874571]: pam_unix(systemd-user:session): session opened for user tcieuroc(uid=1184) by tcieuroc(uid=0)
Sep 13 00:00:02 power systemd[3874569]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 00:04:01 power systemd[3879346]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:05:01 power systemd[3880215]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:05:01 power systemd[3880214]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:06:01 power systemd[3881020]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 00:07:01 power systemd[3881765]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 00:09:01 power systemd[3883366]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:10:01 power systemd[3884248]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:10:01 power systemd[3884249]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:12:01 power systemd[3885721]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 00:15:01 power systemd[3888113]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:15:01 power systemd[3888114]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:20:02 power systemd[3892780]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:20:02 power systemd[3892781]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:25:01 power systemd[3896734]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:25:01 power systemd[3896735]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:26:01 power systemd[3897465]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:26:13 power sshd[3175733]: Received signal 15; terminating.
Sep 13 00:26:13 power sshd[3897818]: Server listening on 0.0.0.0 port 2200.
Sep 13 00:26:13 power sshd[3897818]: Server listening on :: port 2200.
Sep 13 00:30:01 power systemd[3906462]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:30:02 power systemd[3906464]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:30:02 power systemd[3906465]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 00:30:02 power systemd[3906467]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 00:30:02 power systemd[3906468]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 00:35:02 power systemd[3910806]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:35:02 power systemd[3910808]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:36:01 power systemd[3911511]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 00:37:01 power systemd[3912238]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 00:39:01 power systemd[3913975]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:40:01 power systemd[3914858]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:40:01 power systemd[3914859]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:42:01 power systemd[3916333]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 00:42:10 power sudo[3916462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 00:42:10 power systemd[3916467]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:42:11 power sudo[3916462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916462]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 00:42:11 power sudo[3916483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916483]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 00:42:11 power sudo[3916487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916487]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=h6vXgPnjOn'
Sep 13 00:42:11 power sudo[3916491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916491]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 00:42:11 power sudo[3916497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916497]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 00:42:11 power sudo[3916503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916503]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 00:42:11 power sudo[3916507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916507]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 00:42:11 power sudo[3916514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916514]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 00:42:11 power sudo[3916523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916523]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 00:42:11 power sudo[3916527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916527]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 00:42:11 power sudo[3916531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916531]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 00:42:11 power sudo[3916535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916535]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 00:42:11 power sudo[3916539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:11 power sudo[3916539]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:11 power sudo[3916543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 00:42:11 power sudo[3916543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:12 power sudo[3916543]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:13 power sudo[3916574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 00:42:13 power sudo[3916574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:13 power sudo[3916574]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:13 power sudo[3916579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 00:42:13 power sudo[3916579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:13 power sudo[3916579]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:13 power sudo[3916584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=progress user-2=animatem user-3=cleanerm user-4=atspedco user-5=sssoluti user-6=jaramk user-7=solointe user-8=taktcomm user-9=recorgmk user-10=pelagini user-11=kaoilmk user-12=biplmk user-13=bbbustou user-14=mbmehani user-15=workbenc user-16=ismassag user-17=wineberr user-18=viplastc user-19=solarinv user-20=eurofarm user-21=trigemat user-22=eliksirz user-23=naksorgm user-24=electrol user-25=golakkom user-26=bauerin2 user-27=folklore user-28=conserva user-29=euronic3 user-30=vegemk1 user-31=cupidpro user-32=bonitavi user-33=evberasm user-34=makdrone user-35=tehnodro user-36=izzomk user-37=jpkomuna user-38=gradbai1 user-39=evacommk user-40=madzomk user-41=aptekafa user-42=peshkai1 user-43=fxxcom user-44=eaptekam user-45=dimpalne user-46=zdmgpsor user-47=v5srybi9dcdx user-48=supremel user-49=gorsajmk
Sep 13 00:42:13 power sudo[3916584]: wp-toolkit : (command continued) user-50=aquatech user-51=taneccom user-52=tehnologija user-53=bozinovm user-54=darkogor user-55=dslmk user-56=fnjorgmk user-57=prizmapl user-58=innofabl user-59=premiumi user-60=vacuacti user-61=inkigaic user-62=modernar user-63=radekrat user-64=starluxm user-65=fffhpcwr user-66=versusmk user-67=ambitiou user-68=fiziosmk user-69=solemor1 user-70=mapaspla user-71=onlinesh user-72=nationa2 user-73=tcieuroc user-74=kardiome user-75=mediasol user-76=bogdanos user-77=carrent1 user-78=apgrupmk user-79=euronic2 user-80=matratze user-81=nucktra1 user-82=lblawcom user-83=intelek1 user-84=mediatag user-85=nikolov1 user-86=hausmark user-87=aptekazd user-88=nikimare user-89=forzares user-90=glammace user-91=albuname user-92=imdskopj user-93=vtranseu user-94=pravekom user-95=infopor1 user-96=elektrot user-97=zapovim1 user-98=euromaki user-99=cosmatob user-100=nutrivim user-101=chemhemc user-102=samasped user-103=custome1
Sep 13 00:42:13 power sudo[3916584]: wp-toolkit : (command continued) user-104=palenzok user-105=zvskopje user-106=busymard user-107=zampmk user-108=klimimk user-109=sparkupm user-110=stokovna user-111=bovincom user-112=stojano1 user-113=vezilkac user-114=cabinetm user-115=janiboja user-116=itradeco user-117=jpparkin user-118=inotekso user-119=drleomk user-120=premiums user-121=butelmk user-122=daris user-123=ideaplus user-124=karpospo user-125=nasaidni user-126=arturaco user-127=screenme user-128=cetplatf user-129=dalmacom user-130=kouzonco user-131=premiuma user-132=velmk user-133=gogovan1 user-134=univerz1 user-135=kujnamon user-136=datalink user-137=agrosind user-138=mpbmk user-139=goartsym user-140=volkanco user-141=dhamachi user-142=mfashion user-143=delcevca user-144=getaldus user-145=simbiome user-146=barececo user-147=workandt user-148=rasmorgm user-149=makoasmk user-150=bianasho user-151=skyapart user-152=wikicamp user-153=urbanexp user-154=infobadi user-155=mspmk
Sep 13 00:42:13 power sudo[3916584]: wp-toolkit : (command continued) user-156=spdcompu user-157=detskagr user-158=datelcom user-159=maleshne user-160=bizporta user-161=vfxnestc user-162=polyeste user-163=sedcmk user-164=groskome user-165=ivanjord user-166=cajsproc user-167=hotammk user-168=youthgua user-169=anitermc user-170=raremk user-171=oouslave user-172=uhostmk5 user-173=bauerbg user-174=stojnevi user-175=enaspotc user-176=vmro user-177=viewinn user-178=trudovop user-179=pelagoni user-180=avtogumi user-181=socioloz user-182=evolvepl user-183=caramk user-184=frizered user-185=hidrommk user-186=nefrolog user-187=oncolog1 user-188=ekostoc1 user-189=levantmk user-190=edomcomm user-191=berbermk user-192=dikimk12 user-193=sprintst user-194=herbalpl user-195=enochmk user-196=seloviro user-197=nolimits user-198=centarba user-199=nlpmkorg user-200=kolened1 user-201=dadarmk user-202=proverim user-203=tealmk user-204=gocruise user-205=goodnews user-206=mstmmk user-207=dnevnoin
Sep 13 00:42:13 power sudo[3916584]: wp-toolkit : (command continued) user-208=gjorgeiv user-209=tradeyou user-210=holiyayt user-211=rastiraz user-212=pecakome user-213=wondersp user-214=stravelm user-215=robustco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 00:42:13 power sudo[3916584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:14 power sudo[3916584]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:14 power sudo[3916600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 00:42:14 power sudo[3916600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:14 power sudo[3916600]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:14 power sudo[3916608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4Ofz8iU0212Oiz4g.~
Sep 13 00:42:14 power sudo[3916608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:14 power sudo[3916608]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:14 power sudo[3916612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4Ofz8iU0212Oiz4g.~\''
Sep 13 00:42:14 power sudo[3916612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:14 power sudo[3916612]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:14 power sudo[3916617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4Ofz8iU0212Oiz4g.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 00:42:14 power sudo[3916617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:14 power sudo[3916617]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:14 power sudo[3916621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 00:42:14 power sudo[3916621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:14 power sudo[3916621]: pam_unix(sudo:session): session closed for user root
Sep 13 00:42:18 power sudo[3916844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 00:42:18 power sudo[3916844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 00:42:18 power sudo[3916844]: pam_unix(sudo:session): session closed for user root
Sep 13 00:45:01 power systemd[3919904]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:45:01 power systemd[3919905]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:50:01 power systemd[3925554]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:50:01 power systemd[3925555]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 00:55:01 power systemd[3929551]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 00:55:01 power systemd[3929552]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:00:01 power systemd[3933654]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:00:01 power systemd[3933658]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:00:01 power systemd[3933663]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 01:00:01 power systemd[3933664]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 01:00:01 power systemd[3933666]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 01:04:01 power systemd[3937967]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:05:01 power systemd[3938716]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:05:01 power systemd[3938717]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:06:01 power systemd[3939452]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 01:07:01 power systemd[3940214]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 01:09:01 power systemd[3941724]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:10:01 power systemd[3942433]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:10:01 power systemd[3942434]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:12:01 power systemd[3944231]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 01:15:01 power systemd[3946419]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:15:01 power systemd[3946421]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:20:01 power systemd[3950781]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:20:01 power systemd[3950782]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:25:01 power systemd[3954755]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:25:01 power systemd[3954756]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:30:01 power systemd[3958402]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:30:01 power systemd[3958404]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 01:30:01 power systemd[3958403]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:30:01 power systemd[3958406]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 01:30:01 power systemd[3958407]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 01:35:01 power systemd[3962785]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:35:01 power systemd[3962787]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:36:01 power systemd[3963618]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 01:37:01 power systemd[3964624]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 01:39:01 power systemd[3966122]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:40:01 power systemd[3966943]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:40:01 power systemd[3966944]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:42:01 power systemd[3968369]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 01:42:10 power sudo[3968489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 01:42:10 power systemd[3968494]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:42:11 power sudo[3968489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968489]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 01:42:11 power sudo[3968508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968508]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 01:42:11 power sudo[3968512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968512]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=knXUeLcEsk'
Sep 13 01:42:11 power sudo[3968516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968516]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 01:42:11 power sudo[3968521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968521]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 01:42:11 power sudo[3968525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968525]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 01:42:11 power sudo[3968529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968529]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 01:42:11 power sudo[3968534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968534]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 01:42:11 power sudo[3968543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968543]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 01:42:11 power sudo[3968547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968547]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 01:42:11 power sudo[3968551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968551]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 01:42:11 power sudo[3968555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968555]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 01:42:11 power sudo[3968559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:11 power sudo[3968559]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:11 power sudo[3968563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 01:42:11 power sudo[3968563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:12 power sudo[3968563]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:13 power sudo[3968599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 01:42:13 power sudo[3968599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:13 power sudo[3968599]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:13 power sudo[3968604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 01:42:13 power sudo[3968604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:13 power sudo[3968604]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:13 power sudo[3968611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=infopor1 user-2=pravekom user-3=vtranseu user-4=imdskopj user-5=glammace user-6=albuname user-7=chemhemc user-8=samasped user-9=nutrivim user-10=euromaki user-11=cosmatob user-12=zapovim1 user-13=elektrot user-14=euronic2 user-15=matratze user-16=apgrupmk user-17=mediasol user-18=carrent1 user-19=bogdanos user-20=kardiome user-21=forzares user-22=aptekazd user-23=nikimare user-24=nikolov1 user-25=hausmark user-26=intelek1 user-27=mediatag user-28=lblawcom user-29=nucktra1 user-30=fiziosmk user-31=ambitiou user-32=versusmk user-33=fffhpcwr user-34=radekrat user-35=starluxm user-36=tcieuroc user-37=nationa2 user-38=onlinesh user-39=mapaspla user-40=solemor1 user-41=gorsajmk user-42=aquatech user-43=supremel user-44=v5srybi9dcdx user-45=zdmgpsor user-46=modernar user-47=inkigaic user-48=premiumi
Sep 13 01:42:13 power sudo[3968611]: wp-toolkit : (command continued) user-49=innofabl user-50=vacuacti user-51=bozinovm user-52=prizmapl user-53=darkogor user-54=dslmk user-55=fnjorgmk user-56=tehnologija user-57=taneccom user-58=jpkomuna user-59=izzomk user-60=tehnodro user-61=makdrone user-62=dimpalne user-63=eaptekam user-64=peshkai1 user-65=fxxcom user-66=evacommk user-67=madzomk user-68=aptekafa user-69=gradbai1 user-70=folklore user-71=bauerin2 user-72=bonitavi user-73=evberasm user-74=vegemk1 user-75=cupidpro user-76=euronic3 user-77=conserva user-78=viplastc user-79=wineberr user-80=ismassag user-81=workbenc user-82=mbmehani user-83=golakkom user-84=electrol user-85=trigemat user-86=eliksirz user-87=naksorgm user-88=eurofarm user-89=solarinv user-90=recorgmk user-91=taktcomm user-92=solointe user-93=jaramk user-94=sssoluti user-95=atspedco user-96=animatem user-97=cleanerm user-98=progress user-99=bbbustou user-100=kaoilmk user-101=biplmk user-102=pelagini user-103=mstmmk
Sep 13 01:42:13 power sudo[3968611]: wp-toolkit : (command continued) user-104=goodnews user-105=gocruise user-106=tealmk user-107=proverim user-108=dadarmk user-109=wondersp user-110=robustco user-111=stravelm user-112=pecakome user-113=rastiraz user-114=holiyayt user-115=tradeyou user-116=gjorgeiv user-117=dnevnoin user-118=sprintst user-119=enochmk user-120=herbalpl user-121=dikimk12 user-122=berbermk user-123=edomcomm user-124=nlpmkorg user-125=centarba user-126=kolened1 user-127=nolimits user-128=seloviro user-129=evolvepl user-130=socioloz user-131=avtogumi user-132=pelagoni user-133=nefrolog user-134=levantmk user-135=ekostoc1 user-136=oncolog1 user-137=frizered user-138=hidrommk user-139=caramk user-140=youthgua user-141=anitermc user-142=hotammk user-143=cajsproc user-144=vmro user-145=trudovop user-146=viewinn user-147=enaspotc user-148=stojnevi user-149=uhostmk5 user-150=bauerbg user-151=raremk user-152=oouslave user-153=detskagr user-154=spdcompu user-155=mspmk
Sep 13 01:42:13 power sudo[3968611]: wp-toolkit : (command continued) user-156=infobadi user-157=urbanexp user-158=wikicamp user-159=ivanjord user-160=groskome user-161=sedcmk user-162=vfxnestc user-163=polyeste user-164=bizporta user-165=datelcom user-166=maleshne user-167=agrosind user-168=mpbmk user-169=datalink user-170=gogovan1 user-171=velmk user-172=univerz1 user-173=kujnamon user-174=makoasmk user-175=bianasho user-176=skyapart user-177=rasmorgm user-178=workandt user-179=getaldus user-180=delcevca user-181=simbiome user-182=barececo user-183=mfashion user-184=volkanco user-185=goartsym user-186=dhamachi user-187=arturaco user-188=screenme user-189=ideaplus user-190=karpospo user-191=nasaidni user-192=premiums user-193=butelmk user-194=daris user-195=drleomk user-196=jpparkin user-197=inotekso user-198=premiuma user-199=kouzonco user-200=dalmacom user-201=cetplatf user-202=sparkupm user-203=stokovna user-204=klimimk user-205=zampmk user-206=busymard user-207=zvskopje
Sep 13 01:42:13 power sudo[3968611]: wp-toolkit : (command continued) user-208=palenzok user-209=custome1 user-210=itradeco user-211=janiboja user-212=cabinetm user-213=vezilkac user-214=stojano1 user-215=bovincom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 01:42:13 power sudo[3968611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:14 power sudo[3968611]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:14 power sudo[3968620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 01:42:14 power sudo[3968620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:14 power sudo[3968620]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:14 power sudo[3968625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-89Eva4VVfltciKgn.~
Sep 13 01:42:14 power sudo[3968625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:14 power sudo[3968625]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:14 power sudo[3968629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-89Eva4VVfltciKgn.~\''
Sep 13 01:42:14 power sudo[3968629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:14 power sudo[3968629]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:14 power sudo[3968634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-89Eva4VVfltciKgn.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 01:42:14 power sudo[3968634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:14 power sudo[3968634]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:14 power sudo[3968638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 01:42:14 power sudo[3968638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:14 power sudo[3968638]: pam_unix(sudo:session): session closed for user root
Sep 13 01:42:18 power sudo[3969283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 01:42:18 power sudo[3969283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 01:42:18 power sudo[3969283]: pam_unix(sudo:session): session closed for user root
Sep 13 01:45:01 power systemd[3971748]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:45:01 power systemd[3971749]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:50:02 power systemd[3975620]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:50:02 power systemd[3975621]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 01:55:01 power systemd[3980233]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 01:55:01 power systemd[3980234]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:00:01 power systemd[3984530]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 02:00:01 power systemd[3984531]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:00:01 power systemd[3984532]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 02:00:01 power systemd[3984534]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 02:00:01 power systemd[3984536]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 02:05:01 power systemd[3990174]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:06:02 power systemd[3990981]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 02:07:01 power systemd[3991792]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 02:10:01 power systemd[3994651]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:12:01 power systemd[3996211]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 02:15:01 power systemd[3998933]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:20:01 power systemd[4003718]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:25:01 power systemd[4007612]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:30:01 power systemd[4011363]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:30:01 power systemd[4011364]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 02:30:01 power systemd[4011367]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 02:30:01 power systemd[4011365]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 02:35:01 power systemd[4015475]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:36:01 power systemd[4016258]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 02:37:01 power systemd[4016974]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 02:40:01 power systemd[4019228]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:42:01 power systemd[4020590]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 02:42:10 power sudo[4020727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 02:42:10 power sudo[4020727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:10 power sudo[4020727]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 02:42:11 power sudo[4020731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020731]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 02:42:11 power sudo[4020735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020735]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=P4KT2AHGkW'
Sep 13 02:42:11 power sudo[4020739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020739]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 02:42:11 power sudo[4020744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020744]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 02:42:11 power sudo[4020748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020748]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 02:42:11 power sudo[4020752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020752]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 02:42:11 power sudo[4020756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020756]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 02:42:11 power sudo[4020763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020763]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 02:42:11 power sudo[4020767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020767]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 02:42:11 power sudo[4020771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020771]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 02:42:11 power sudo[4020776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020776]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 02:42:11 power sudo[4020783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020783]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:11 power sudo[4020787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 02:42:11 power sudo[4020787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:11 power sudo[4020787]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:13 power sudo[4020805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 02:42:13 power sudo[4020805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:13 power sudo[4020805]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:13 power sudo[4020813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 02:42:13 power sudo[4020813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:13 power sudo[4020813]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:13 power sudo[4020820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=stravelm user-2=robustco user-3=wondersp user-4=pecakome user-5=rastiraz user-6=holiyayt user-7=gjorgeiv user-8=tradeyou user-9=dnevnoin user-10=mstmmk user-11=goodnews user-12=gocruise user-13=tealmk user-14=proverim user-15=dadarmk user-16=kolened1 user-17=nlpmkorg user-18=centarba user-19=nolimits user-20=seloviro user-21=enochmk user-22=herbalpl user-23=sprintst user-24=dikimk12 user-25=berbermk user-26=edomcomm user-27=ekostoc1 user-28=oncolog1 user-29=levantmk user-30=nefrolog user-31=hidrommk user-32=frizered user-33=caramk user-34=evolvepl user-35=socioloz user-36=avtogumi user-37=pelagoni user-38=trudovop user-39=viewinn user-40=vmro user-41=enaspotc user-42=stojnevi user-43=bauerbg user-44=uhostmk5 user-45=oouslave user-46=raremk user-47=anitermc user-48=youthgua user-49=hotammk user-50=cajsproc
Sep 13 02:42:13 power sudo[4020820]: wp-toolkit : (command continued) user-51=groskome user-52=ivanjord user-53=sedcmk user-54=polyeste user-55=vfxnestc user-56=bizporta user-57=maleshne user-58=datelcom user-59=detskagr user-60=spdcompu user-61=infobadi user-62=mspmk user-63=urbanexp user-64=wikicamp user-65=skyapart user-66=bianasho user-67=makoasmk user-68=rasmorgm user-69=workandt user-70=barececo user-71=getaldus user-72=delcevca user-73=simbiome user-74=mfashion user-75=dhamachi user-76=goartsym user-77=volkanco user-78=mpbmk user-79=agrosind user-80=datalink user-81=kujnamon user-82=univerz1 user-83=gogovan1 user-84=velmk user-85=premiuma user-86=kouzonco user-87=dalmacom user-88=cetplatf user-89=arturaco user-90=screenme user-91=karpospo user-92=nasaidni user-93=ideaplus user-94=butelmk user-95=daris user-96=premiums user-97=drleomk user-98=inotekso user-99=jpparkin user-100=itradeco user-101=janiboja user-102=cabinetm user-103=vezilkac user-104=stojano1 user-105=bovincom
Sep 13 02:42:13 power sudo[4020820]: wp-toolkit : (command continued) user-106=stokovna user-107=sparkupm user-108=klimimk user-109=zvskopje user-110=busymard user-111=zampmk user-112=palenzok user-113=custome1 user-114=chemhemc user-115=samasped user-116=nutrivim user-117=cosmatob user-118=euromaki user-119=elektrot user-120=zapovim1 user-121=infopor1 user-122=pravekom user-123=vtranseu user-124=imdskopj user-125=albuname user-126=glammace user-127=forzares user-128=nikimare user-129=aptekazd user-130=hausmark user-131=nikolov1 user-132=mediatag user-133=intelek1 user-134=lblawcom user-135=nucktra1 user-136=matratze user-137=euronic2 user-138=apgrupmk user-139=carrent1 user-140=bogdanos user-141=mediasol user-142=kardiome user-143=tcieuroc user-144=nationa2 user-145=onlinesh user-146=mapaspla user-147=solemor1 user-148=fiziosmk user-149=ambitiou user-150=versusmk user-151=fffhpcwr user-152=starluxm user-153=radekrat user-154=modernar user-155=inkigaic user-156=vacuacti
Sep 13 02:42:13 power sudo[4020820]: wp-toolkit : (command continued) user-157=innofabl user-158=premiumi user-159=fnjorgmk user-160=darkogor user-161=dslmk user-162=prizmapl user-163=bozinovm user-164=tehnologija user-165=taneccom user-166=aquatech user-167=gorsajmk user-168=supremel user-169=v5srybi9dcdx user-170=zdmgpsor user-171=dimpalne user-172=eaptekam user-173=fxxcom user-174=peshkai1 user-175=madzomk user-176=aptekafa user-177=evacommk user-178=gradbai1 user-179=jpkomuna user-180=izzomk user-181=tehnodro user-182=makdrone user-183=evberasm user-184=bonitavi user-185=cupidpro user-186=vegemk1 user-187=euronic3 user-188=conserva user-189=folklore user-190=bauerin2 user-191=golakkom user-192=electrol user-193=eliksirz user-194=naksorgm user-195=trigemat user-196=eurofarm user-197=solarinv user-198=viplastc user-199=wineberr user-200=ismassag user-201=workbenc user-202=mbmehani user-203=bbbustou user-204=biplmk user-205=kaoilmk user-206=pelagini user-207=taktcomm
Sep 13 02:42:13 power sudo[4020820]: wp-toolkit : (command continued) user-208=recorgmk user-209=solointe user-210=jaramk user-211=atspedco user-212=sssoluti user-213=cleanerm user-214=animatem user-215=progress feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 02:42:13 power sudo[4020820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:13 power sudo[4020820]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:14 power sudo[4020826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 02:42:14 power sudo[4020826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:14 power sudo[4020826]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:14 power sudo[4020830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DuqoLMO0ndXm0FX2.~
Sep 13 02:42:14 power sudo[4020830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:14 power sudo[4020830]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:14 power sudo[4020834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DuqoLMO0ndXm0FX2.~\''
Sep 13 02:42:14 power sudo[4020834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:14 power sudo[4020834]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:14 power sudo[4020839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DuqoLMO0ndXm0FX2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 02:42:14 power sudo[4020839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:14 power sudo[4020839]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:14 power sudo[4020844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 02:42:14 power sudo[4020844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:14 power sudo[4020844]: pam_unix(sudo:session): session closed for user root
Sep 13 02:42:14 power sudo[4021584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 02:42:14 power sudo[4021584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 02:42:14 power sudo[4021584]: pam_unix(sudo:session): session closed for user root
Sep 13 02:45:01 power systemd[4024020]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:45:38 power sshd[4024705]: error: kex_exchange_identification: banner line contains invalid characters
Sep 13 02:45:38 power sshd[4024705]: banner exchange: Connection from 91.231.89.201 port 53227: invalid format
Sep 13 02:45:41 power sshd[4024706]: error: kex_exchange_identification: Connection closed by remote host
Sep 13 02:45:41 power sshd[4024706]: Connection closed by 91.231.89.207 port 43067
Sep 13 02:50:01 power systemd[4028072]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 02:52:02 power sshd[4029666]: Connection closed by 172.236.228.229 port 39552 [preauth]
Sep 13 02:52:04 power sshd[4029695]: Connection closed by 172.236.228.229 port 39566 [preauth]
Sep 13 02:52:05 power sshd[4029719]: Connection closed by 172.236.228.229 port 39568 [preauth]
Sep 13 02:52:15 power sshd[4029855]: Connection closed by 91.196.152.27 port 54989 [preauth]
Sep 13 02:55:01 power systemd[4032596]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:00:02 power systemd[4036752]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:00:02 power systemd[4036753]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 03:00:02 power systemd[4036755]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 03:00:02 power systemd[4036757]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 03:05:02 power systemd[4042171]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:06:01 power systemd[4043024]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 03:07:01 power systemd[4043813]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 03:10:01 power systemd[4046474]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:12:01 power systemd[4048117]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 03:15:01 power systemd[4050695]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:20:01 power systemd[4055428]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:25:01 power systemd[4059486]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:27:01 power systemd[4061157]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 13 03:30:01 power systemd[4063747]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:30:01 power systemd[4063748]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 03:30:01 power systemd[4063750]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 03:30:01 power systemd[4063751]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 03:35:01 power systemd[4068978]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:36:01 power systemd[4069741]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 03:37:01 power systemd[4070359]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 03:40:01 power systemd[4073461]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:42:01 power systemd[4075016]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 03:42:10 power sudo[4075161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 03:42:11 power sudo[4075161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075161]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 03:42:11 power sudo[4075165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075165]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 03:42:11 power sudo[4075169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075169]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=3ZWo7XnJO5'
Sep 13 03:42:11 power sudo[4075173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075173]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 03:42:11 power sudo[4075178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075178]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 03:42:11 power sudo[4075182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075182]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 03:42:11 power sudo[4075186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075186]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 03:42:11 power sudo[4075190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075190]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 03:42:11 power sudo[4075196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075196]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 03:42:11 power sudo[4075204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075204]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 03:42:11 power sudo[4075208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075208]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 03:42:11 power sudo[4075212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075212]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 03:42:11 power sudo[4075216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:11 power sudo[4075216]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:11 power sudo[4075220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 03:42:11 power sudo[4075220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:12 power sudo[4075220]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:13 power sudo[4075245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 03:42:13 power sudo[4075245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:13 power sudo[4075245]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:13 power sudo[4075250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 03:42:13 power sudo[4075250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:13 power sudo[4075250]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:13 power sudo[4075257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bauerbg user-2=uhostmk5 user-3=oouslave user-4=raremk user-5=stojnevi user-6=trudovop user-7=viewinn user-8=vmro user-9=enaspotc user-10=hotammk user-11=cajsproc user-12=anitermc user-13=youthgua user-14=caramk user-15=hidrommk user-16=frizered user-17=levantmk user-18=ekostoc1 user-19=oncolog1 user-20=nefrolog user-21=pelagoni user-22=avtogumi user-23=socioloz user-24=evolvepl user-25=seloviro user-26=nolimits user-27=kolened1 user-28=centarba user-29=nlpmkorg user-30=berbermk user-31=edomcomm user-32=herbalpl user-33=enochmk user-34=sprintst user-35=dikimk12 user-36=dnevnoin user-37=tradeyou user-38=gjorgeiv user-39=rastiraz user-40=holiyayt user-41=robustco user-42=stravelm user-43=wondersp user-44=pecakome user-45=proverim user-46=dadarmk user-47=tealmk user-48=gocruise user-49=mstmmk user-50=goodnews
Sep 13 03:42:13 power sudo[4075257]: wp-toolkit : (command continued) user-51=bovincom user-52=stojano1 user-53=cabinetm user-54=vezilkac user-55=itradeco user-56=janiboja user-57=custome1 user-58=busymard user-59=zvskopje user-60=zampmk user-61=palenzok user-62=klimimk user-63=stokovna user-64=sparkupm user-65=dalmacom user-66=cetplatf user-67=premiuma user-68=kouzonco user-69=drleomk user-70=inotekso user-71=jpparkin user-72=daris user-73=butelmk user-74=premiums user-75=screenme user-76=arturaco user-77=karpospo user-78=nasaidni user-79=ideaplus user-80=mfashion user-81=dhamachi user-82=goartsym user-83=volkanco user-84=workandt user-85=barececo user-86=simbiome user-87=delcevca user-88=getaldus user-89=rasmorgm user-90=skyapart user-91=bianasho user-92=makoasmk user-93=univerz1 user-94=kujnamon user-95=gogovan1 user-96=velmk user-97=datalink user-98=mpbmk user-99=agrosind user-100=maleshne user-101=datelcom user-102=bizporta user-103=polyeste user-104=vfxnestc user-105=ivanjord
Sep 13 03:42:13 power sudo[4075257]: wp-toolkit : (command continued) user-106=groskome user-107=sedcmk user-108=urbanexp user-109=wikicamp user-110=mspmk user-111=infobadi user-112=detskagr user-113=spdcompu user-114=tehnologija user-115=taneccom user-116=vacuacti user-117=innofabl user-118=premiumi user-119=dslmk user-120=darkogor user-121=prizmapl user-122=fnjorgmk user-123=bozinovm user-124=inkigaic user-125=modernar user-126=zdmgpsor user-127=supremel user-128=v5srybi9dcdx user-129=aquatech user-130=gorsajmk user-131=mapaspla user-132=solemor1 user-133=nationa2 user-134=onlinesh user-135=tcieuroc user-136=starluxm user-137=radekrat user-138=fffhpcwr user-139=versusmk user-140=fiziosmk user-141=ambitiou user-142=lblawcom user-143=nucktra1 user-144=mediatag user-145=intelek1 user-146=hausmark user-147=nikolov1 user-148=forzares user-149=nikimare user-150=aptekazd user-151=kardiome user-152=apgrupmk user-153=carrent1 user-154=bogdanos user-155=mediasol user-156=matratze
Sep 13 03:42:13 power sudo[4075257]: wp-toolkit : (command continued) user-157=euronic2 user-158=elektrot user-159=zapovim1 user-160=euromaki user-161=cosmatob user-162=nutrivim user-163=samasped user-164=chemhemc user-165=albuname user-166=glammace user-167=imdskopj user-168=vtranseu user-169=pravekom user-170=infopor1 user-171=pelagini user-172=bbbustou user-173=biplmk user-174=kaoilmk user-175=cleanerm user-176=animatem user-177=progress user-178=sssoluti user-179=atspedco user-180=solointe user-181=jaramk user-182=taktcomm user-183=recorgmk user-184=solarinv user-185=eurofarm user-186=electrol user-187=eliksirz user-188=naksorgm user-189=trigemat user-190=golakkom user-191=mbmehani user-192=ismassag user-193=workbenc user-194=viplastc user-195=wineberr user-196=conserva user-197=cupidpro user-198=vegemk1 user-199=euronic3 user-200=evberasm user-201=bonitavi user-202=bauerin2 user-203=folklore user-204=gradbai1 user-205=aptekafa user-206=madzomk user-207=evacommk user-208=fxxcom
Sep 13 03:42:13 power sudo[4075257]: wp-toolkit : (command continued) user-209=peshkai1 user-210=dimpalne user-211=eaptekam user-212=makdrone user-213=tehnodro user-214=jpkomuna user-215=izzomk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 03:42:13 power sudo[4075257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:14 power sudo[4075257]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:14 power sudo[4075262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 03:42:14 power sudo[4075262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:14 power sudo[4075262]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:14 power sudo[4075266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XYHjh3RdxuNpg9Da.~
Sep 13 03:42:14 power sudo[4075266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:14 power sudo[4075266]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:14 power sudo[4075273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XYHjh3RdxuNpg9Da.~\''
Sep 13 03:42:14 power sudo[4075273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:14 power sudo[4075273]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:14 power sudo[4075278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XYHjh3RdxuNpg9Da.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 03:42:14 power sudo[4075278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:14 power sudo[4075278]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:14 power sudo[4075282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 03:42:14 power sudo[4075282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:14 power sudo[4075282]: pam_unix(sudo:session): session closed for user root
Sep 13 03:42:15 power sudo[4076198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 03:42:15 power sudo[4076198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 03:42:15 power sudo[4076198]: pam_unix(sudo:session): session closed for user root
Sep 13 03:45:01 power systemd[4078269]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:50:01 power systemd[4082445]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 03:55:01 power systemd[4086354]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:00:01 power systemd[4091016]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 04:00:01 power systemd[4091031]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:00:01 power systemd[4091037]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 04:00:01 power systemd[4091040]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 04:05:01 power systemd[4096743]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:06:01 power systemd[4097625]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 04:07:01 power systemd[4098542]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 04:07:37 power sshd[4099007]: error: kex_exchange_identification: banner line contains invalid characters
Sep 13 04:07:37 power sshd[4099007]: banner exchange: Connection from 8.219.157.156 port 42460: invalid format
Sep 13 04:07:38 power sshd[4099015]: Invalid user  from 8.219.157.156 port 42470
Sep 13 04:07:38 power sshd[4099015]: Connection closed by invalid user  8.219.157.156 port 42470 [preauth]
Sep 13 04:10:01 power systemd[4101132]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:12:01 power systemd[4102905]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 04:15:01 power systemd[4105660]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:20:01 power systemd[4110822]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:25:01 power systemd[4115854]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:30:01 power systemd[4119973]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 04:30:01 power systemd[4119971]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:30:01 power systemd[4119972]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 04:30:01 power systemd[4119974]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 04:30:01 power systemd[4119976]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 13 04:35:01 power systemd[4124280]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:36:01 power systemd[4124999]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 04:37:01 power systemd[4125611]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 04:40:01 power systemd[4127956]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:42:01 power systemd[4129277]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 04:42:11 power sudo[4129443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 04:42:11 power sudo[4129443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129443]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 04:42:11 power sudo[4129447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129447]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 04:42:11 power sudo[4129451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129451]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=eFD4zXL8Wv'
Sep 13 04:42:11 power sudo[4129455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129455]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 04:42:11 power sudo[4129460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129460]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 04:42:11 power sudo[4129465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129465]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 04:42:11 power sudo[4129469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129469]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 04:42:11 power sudo[4129473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129473]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 04:42:11 power sudo[4129482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129482]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 04:42:11 power sudo[4129486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129486]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 04:42:11 power sudo[4129490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129490]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 04:42:11 power sudo[4129494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129494]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 04:42:11 power sudo[4129501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:11 power sudo[4129501]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:11 power sudo[4129505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 04:42:11 power sudo[4129505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:12 power sudo[4129505]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:12 power sudo[4129528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 04:42:12 power sudo[4129528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:12 power sudo[4129528]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:12 power sudo[4129533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 04:42:13 power sudo[4129533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:13 power sudo[4129533]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:13 power sudo[4129540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=sprintst user-2=herbalpl user-3=enochmk user-4=dikimk12 user-5=berbermk user-6=edomcomm user-7=nolimits user-8=centarba user-9=nlpmkorg user-10=kolened1 user-11=seloviro user-12=gocruise user-13=mstmmk user-14=goodnews user-15=proverim user-16=dadarmk user-17=tealmk user-18=rastiraz user-19=holiyayt user-20=wondersp user-21=stravelm user-22=robustco user-23=pecakome user-24=dnevnoin user-25=tradeyou user-26=gjorgeiv user-27=youthgua user-28=anitermc user-29=hotammk user-30=cajsproc user-31=vmro user-32=trudovop user-33=viewinn user-34=enaspotc user-35=uhostmk5 user-36=bauerbg user-37=raremk user-38=oouslave user-39=stojnevi user-40=evolvepl user-41=pelagoni user-42=avtogumi user-43=socioloz user-44=nefrolog user-45=ekostoc1 user-46=levantmk user-47=oncolog1 user-48=caramk user-49=frizered user-50=hidrommk
Sep 13 04:42:13 power sudo[4129540]: wp-toolkit : (command continued) user-51=agrosind user-52=mpbmk user-53=gogovan1 user-54=velmk user-55=univerz1 user-56=kujnamon user-57=datalink user-58=rasmorgm user-59=makoasmk user-60=bianasho user-61=skyapart user-62=mfashion user-63=goartsym user-64=volkanco user-65=dhamachi user-66=workandt user-67=delcevca user-68=simbiome user-69=getaldus user-70=barececo user-71=infobadi user-72=mspmk user-73=detskagr user-74=spdcompu user-75=urbanexp user-76=wikicamp user-77=vfxnestc user-78=polyeste user-79=groskome user-80=ivanjord user-81=sedcmk user-82=datelcom user-83=maleshne user-84=bizporta user-85=klimimk user-86=sparkupm user-87=stokovna user-88=custome1 user-89=zampmk user-90=busymard user-91=zvskopje user-92=palenzok user-93=cabinetm user-94=vezilkac user-95=itradeco user-96=janiboja user-97=bovincom user-98=stojano1 user-99=premiums user-100=daris user-101=butelmk user-102=screenme user-103=arturaco user-104=ideaplus user-105=nasaidni
Sep 13 04:42:13 power sudo[4129540]: wp-toolkit : (command continued) user-106=karpospo user-107=drleomk user-108=jpparkin user-109=inotekso user-110=dalmacom user-111=cetplatf user-112=premiuma user-113=kouzonco user-114=euronic2 user-115=matratze user-116=kardiome user-117=apgrupmk user-118=mediasol user-119=bogdanos user-120=carrent1 user-121=nikolov1 user-122=hausmark user-123=forzares user-124=aptekazd user-125=nikimare user-126=lblawcom user-127=nucktra1 user-128=intelek1 user-129=mediatag user-130=pravekom user-131=vtranseu user-132=infopor1 user-133=glammace user-134=albuname user-135=imdskopj user-136=nutrivim user-137=samasped user-138=chemhemc user-139=zapovim1 user-140=elektrot user-141=cosmatob user-142=euromaki user-143=supremel user-144=v5srybi9dcdx user-145=gorsajmk user-146=aquatech user-147=zdmgpsor user-148=inkigaic user-149=modernar user-150=tehnologija user-151=taneccom user-152=innofabl user-153=premiumi user-154=vacuacti user-155=bozinovm user-156=dslmk
Sep 13 04:42:13 power sudo[4129540]: wp-toolkit : (command continued) user-157=darkogor user-158=fnjorgmk user-159=prizmapl user-160=versusmk user-161=fiziosmk user-162=ambitiou user-163=radekrat user-164=starluxm user-165=fffhpcwr user-166=tcieuroc user-167=mapaspla user-168=solemor1 user-169=nationa2 user-170=onlinesh user-171=bauerin2 user-172=folklore user-173=bonitavi user-174=evberasm user-175=conserva user-176=vegemk1 user-177=cupidpro user-178=euronic3 user-179=jpkomuna user-180=izzomk user-181=makdrone user-182=tehnodro user-183=peshkai1 user-184=fxxcom user-185=dimpalne user-186=eaptekam user-187=gradbai1 user-188=evacommk user-189=madzomk user-190=aptekafa user-191=solointe user-192=jaramk user-193=taktcomm user-194=recorgmk user-195=animatem user-196=cleanerm user-197=progress user-198=atspedco user-199=sssoluti user-200=bbbustou user-201=kaoilmk user-202=biplmk user-203=pelagini user-204=viplastc user-205=wineberr user-206=mbmehani user-207=ismassag user-208=workbenc
Sep 13 04:42:13 power sudo[4129540]: wp-toolkit : (command continued) user-209=electrol user-210=trigemat user-211=eliksirz user-212=naksorgm user-213=golakkom user-214=solarinv user-215=eurofarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 04:42:13 power sudo[4129540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:13 power sudo[4129540]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:13 power sudo[4129551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 04:42:13 power sudo[4129551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:13 power sudo[4129551]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:13 power sudo[4129556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sP6rflOTHzNCWzl2.~
Sep 13 04:42:13 power sudo[4129556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:13 power sudo[4129556]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:13 power sudo[4129560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sP6rflOTHzNCWzl2.~\''
Sep 13 04:42:13 power sudo[4129560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:13 power sudo[4129560]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:13 power sudo[4129565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sP6rflOTHzNCWzl2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 04:42:13 power sudo[4129565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:13 power sudo[4129565]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:13 power sudo[4129570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 04:42:13 power sudo[4129570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:13 power sudo[4129570]: pam_unix(sudo:session): session closed for user root
Sep 13 04:42:14 power sudo[4130487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 04:42:14 power sudo[4130487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:42:14 power sudo[4130487]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:10 power sudo[4131928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 04:44:10 power sudo[4131928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:11 power sudo[4131928]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:11 power sudo[4131935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 04:44:11 power sudo[4131935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:11 power sudo[4131935]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:11 power sudo[4131946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 04:44:11 power sudo[4131946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:11 power sudo[4131946]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:11 power sudo[4131955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=stokovna user-2=sparkupm user-3=klimimk user-4=palenzok user-5=zvskopje user-6=busymard user-7=zampmk user-8=custome1 user-9=janiboja user-10=itradeco user-11=vezilkac user-12=cabinetm user-13=stojano1 user-14=bovincom user-15=karpospo user-16=nasaidni user-17=ideaplus user-18=screenme user-19=arturaco user-20=butelmk user-21=daris user-22=premiums user-23=inotekso user-24=jpparkin user-25=drleomk user-26=kouzonco user-27=premiuma user-28=cetplatf user-29=dalmacom user-30=mpbmk user-31=agrosind user-32=datalink user-33=univerz1 user-34=kujnamon user-35=velmk user-36=gogovan1 user-37=skyapart user-38=bianasho user-39=makoasmk user-40=rasmorgm user-41=barececo user-42=delcevca user-43=simbiome user-44=getaldus user-45=workandt user-46=dhamachi user-47=volkanco user-48=goartsym user-49=mfashion user-50=spdcompu
Sep 13 04:44:11 power sudo[4131955]: wp-toolkit : (command continued) user-51=detskagr user-52=mspmk user-53=infobadi user-54=wikicamp user-55=urbanexp user-56=sedcmk user-57=groskome user-58=ivanjord user-59=polyeste user-60=vfxnestc user-61=bizporta user-62=maleshne user-63=datelcom user-64=anitermc user-65=youthgua user-66=cajsproc user-67=hotammk user-68=enaspotc user-69=trudovop user-70=viewinn user-71=vmro user-72=stojnevi user-73=oouslave user-74=raremk user-75=bauerbg user-76=uhostmk5 user-77=evolvepl user-78=avtogumi user-79=socioloz user-80=pelagoni user-81=ekostoc1 user-82=levantmk user-83=oncolog1 user-84=nefrolog user-85=hidrommk user-86=frizered user-87=caramk user-88=dikimk12 user-89=enochmk user-90=herbalpl user-91=sprintst user-92=edomcomm user-93=berbermk user-94=kolened1 user-95=centarba user-96=nlpmkorg user-97=nolimits user-98=seloviro user-99=goodnews user-100=mstmmk user-101=gocruise user-102=tealmk user-103=dadarmk user-104=proverim user-105=pecakome
Sep 13 04:44:11 power sudo[4131955]: wp-toolkit : (command continued) user-106=stravelm user-107=robustco user-108=wondersp user-109=holiyayt user-110=rastiraz user-111=tradeyou user-112=gjorgeiv user-113=dnevnoin user-114=taktcomm user-115=recorgmk user-116=jaramk user-117=solointe user-118=sssoluti user-119=atspedco user-120=progress user-121=cleanerm user-122=animatem user-123=biplmk user-124=kaoilmk user-125=bbbustou user-126=pelagini user-127=wineberr user-128=viplastc user-129=workbenc user-130=ismassag user-131=mbmehani user-132=golakkom user-133=eliksirz user-134=naksorgm user-135=trigemat user-136=electrol user-137=eurofarm user-138=solarinv user-139=folklore user-140=bauerin2 user-141=evberasm user-142=bonitavi user-143=euronic3 user-144=cupidpro user-145=vegemk1 user-146=conserva user-147=izzomk user-148=jpkomuna user-149=tehnodro user-150=makdrone user-151=eaptekam user-152=dimpalne user-153=fxxcom user-154=peshkai1 user-155=aptekafa user-156=madzomk user-157=evacommk
Sep 13 04:44:11 power sudo[4131955]: wp-toolkit : (command continued) user-158=gradbai1 user-159=aquatech user-160=gorsajmk user-161=v5srybi9dcdx user-162=supremel user-163=zdmgpsor user-164=modernar user-165=inkigaic user-166=darkogor user-167=dslmk user-168=prizmapl user-169=fnjorgmk user-170=bozinovm user-171=vacuacti user-172=premiumi user-173=innofabl user-174=taneccom user-175=tehnologija user-176=ambitiou user-177=fiziosmk user-178=versusmk user-179=fffhpcwr user-180=starluxm user-181=radekrat user-182=tcieuroc user-183=onlinesh user-184=nationa2 user-185=solemor1 user-186=mapaspla user-187=matratze user-188=euronic2 user-189=carrent1 user-190=bogdanos user-191=mediasol user-192=apgrupmk user-193=kardiome user-194=nikimare user-195=aptekazd user-196=forzares user-197=nikolov1 user-198=hausmark user-199=mediatag user-200=intelek1 user-201=nucktra1 user-202=lblawcom user-203=infopor1 user-204=pravekom user-205=vtranseu user-206=imdskopj user-207=albuname user-208=glammace
Sep 13 04:44:11 power sudo[4131955]: wp-toolkit : (command continued) user-209=chemhemc user-210=samasped user-211=nutrivim user-212=euromaki user-213=cosmatob user-214=elektrot user-215=zapovim1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 04:44:11 power sudo[4131955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:11 power sudo[4131955]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:11 power sudo[4131962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep 13 04:44:11 power sudo[4131962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:12 power sudo[4131962]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:12 power sudo[4131968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vmro --output=json'
Sep 13 04:44:12 power sudo[4131968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:12 power sudo[4131968]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:14 power sudo[4132017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro /bin/sh -c 'cd /home/vmro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:44:14 power sudo[4132017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:14 power sudo[4132017]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:14 power sudo[4132023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vmro --user-current --json'
Sep 13 04:44:14 power sudo[4132023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:15 power sudo[4132023]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:15 power sudo[4132030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro LangPHP php_get_vhost_versions --output=json'
Sep 13 04:44:15 power sudo[4132030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:15 power sudo[4132030]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:15 power sudo[4132035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php83 --output=json'
Sep 13 04:44:15 power sudo[4132035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:15 power sudo[4132035]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:15 power sudo[4132044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:44:15 power sudo[4132044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:15 power sudo[4132044]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:16 power sudo[4132059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DomainInfo single_domain_data domain=vmro-dpmne.org.mk return_https_redirect_status=1 --output=json'
Sep 13 04:44:16 power sudo[4132059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:16 power sudo[4132059]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:16 power sudo[4132065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_vhost_ssl_components --output=json'
Sep 13 04:44:16 power sudo[4132065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:16 power sudo[4132065]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:16 power sudo[4132078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_ssl_vhosts --output=json'
Sep 13 04:44:16 power sudo[4132078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:16 power sudo[4132078]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:16 power sudo[4132089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro Mime list_redirects --output=json'
Sep 13 04:44:16 power sudo[4132089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:16 power sudo[4132089]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:18 power sudo[4132161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vmro DirectoryPrivacy is_directory_protected dir=/home/vmro/public_html --output=json'
Sep 13 04:44:18 power sudo[4132161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:18 power sudo[4132161]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:22 power sudo[4132382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep 13 04:44:22 power sudo[4132382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:22 power sudo[4132382]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:22 power sudo[4132392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dadarmk --output=json'
Sep 13 04:44:22 power sudo[4132392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:22 power sudo[4132392]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:26 power sudo[4132491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/academy.dadar.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:44:26 power sudo[4132491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:26 power sudo[4132491]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:26 power sudo[4132497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep 13 04:44:27 power sudo[4132497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:27 power sudo[4132497]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:27 power sudo[4132505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk LangPHP php_get_vhost_versions --output=json'
Sep 13 04:44:27 power sudo[4132505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:27 power sudo[4132505]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:27 power sudo[4132509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:44:27 power sudo[4132509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:27 power sudo[4132509]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:27 power sudo[4132531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=academy.dadar.mk return_https_redirect_status=1 --output=json'
Sep 13 04:44:27 power sudo[4132531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:27 power sudo[4132531]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:27 power sudo[4132537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk Mime list_redirects --output=json'
Sep 13 04:44:27 power sudo[4132537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:27 power sudo[4132537]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:30 power sudo[4132623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/academy.dadar.mk --output=json'
Sep 13 04:44:30 power sudo[4132623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:30 power sudo[4132623]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:34 power sudo[4132814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep 13 04:44:34 power sudo[4132814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:34 power sudo[4132814]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:34 power sudo[4132820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=agrosind --output=json'
Sep 13 04:44:34 power sudo[4132820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:34 power sudo[4132820]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:41 power sudo[4132957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:44:41 power sudo[4132957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:41 power sudo[4132957]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:41 power sudo[4132963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user agrosind --user-current --json'
Sep 13 04:44:41 power sudo[4132963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:41 power sudo[4132963]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:41 power sudo[4132976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind LangPHP php_get_vhost_versions --output=json'
Sep 13 04:44:41 power sudo[4132976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:41 power sudo[4132976]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:41 power sudo[4132982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php81 --output=json'
Sep 13 04:44:41 power sudo[4132982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:42 power sudo[4132982]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:42 power sudo[4132991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:44:42 power sudo[4132991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:42 power sudo[4132991]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:42 power sudo[4133014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DomainInfo single_domain_data domain=agrosindikat.mk return_https_redirect_status=1 --output=json'
Sep 13 04:44:42 power sudo[4133014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:43 power sudo[4133014]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:43 power sudo[4133022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind Mime list_redirects --output=json'
Sep 13 04:44:43 power sudo[4133022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:43 power sudo[4133022]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:47 power sudo[4133109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agrosind DirectoryPrivacy is_directory_protected dir=/home/agrosind/public_html --output=json'
Sep 13 04:44:47 power sudo[4133109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:47 power sudo[4133109]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:48 power sudo[4133177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:44:48 power sudo[4133177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:48 power sudo[4133177]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:48 power sudo[4133182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:44:48 power sudo[4133182]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:44:48 power sudo[4133182]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:44:48 power sudo[4133182]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:44:48 power sudo[4133182]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:44:48 power sudo[4133182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:48 power sudo[4133182]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:48 power sudo[4133187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:44:48 power sudo[4133187]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:44:48 power sudo[4133187]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:44:48 power sudo[4133187]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:44:48 power sudo[4133187]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:44:48 power sudo[4133187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:48 power sudo[4133187]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:50 power sudo[4133301]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:44:50 power sudo[4133301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:50 power sudo[4133301]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:50 power sudo[4133306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:44:50 power sudo[4133306]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:44:50 power sudo[4133306]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:44:50 power sudo[4133306]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:44:50 power sudo[4133306]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:44:50 power sudo[4133306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:50 power sudo[4133306]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:50 power sudo[4133311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind /bin/sh -c 'cd /home/agrosind/public_html && find /home/agrosind/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user agrosind \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:44:50 power sudo[4133311]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:44:50 power sudo[4133311]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:44:50 power sudo[4133311]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:44:50 power sudo[4133311]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:44:50 power sudo[4133311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:50 power sudo[4133311]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:50 power sudo[4133349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep 13 04:44:50 power sudo[4133349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:51 power sudo[4133349]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:51 power sudo[4133363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=fffhpcwr --output=json'
Sep 13 04:44:51 power sudo[4133363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:51 power sudo[4133363]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:55 power sudo[4133444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/al.rsbsp.org.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:44:55 power sudo[4133444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:55 power sudo[4133444]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:55 power sudo[4133451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep 13 04:44:55 power sudo[4133451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:56 power sudo[4133451]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:56 power sudo[4133465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr LangPHP php_get_vhost_versions --output=json'
Sep 13 04:44:56 power sudo[4133465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:56 power sudo[4133465]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:56 power sudo[4133472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:44:56 power sudo[4133472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:56 power sudo[4133472]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:56 power sudo[4133491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=al.rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep 13 04:44:56 power sudo[4133491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:56 power sudo[4133491]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:56 power sudo[4133497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr Mime list_redirects --output=json'
Sep 13 04:44:56 power sudo[4133497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:56 power sudo[4133497]: pam_unix(sudo:session): session closed for user root
Sep 13 04:44:59 power sudo[4133571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/al.rsbsp.org.mk --output=json'
Sep 13 04:44:59 power sudo[4133571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:44:59 power sudo[4133571]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:01 power systemd[4133756]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:45:04 power sudo[4133962]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep 13 04:45:04 power sudo[4133962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:04 power sudo[4133962]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:04 power sudo[4133971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ambitiou --output=json'
Sep 13 04:45:04 power sudo[4133971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:04 power sudo[4133971]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:09 power sudo[4134269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/public_html/site && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:45:09 power sudo[4134269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:09 power sudo[4134269]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:09 power sudo[4134276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep 13 04:45:09 power sudo[4134276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:09 power sudo[4134276]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:09 power sudo[4134288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou LangPHP php_get_vhost_versions --output=json'
Sep 13 04:45:09 power sudo[4134288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:09 power sudo[4134288]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:09 power sudo[4134293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json'
Sep 13 04:45:09 power sudo[4134293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:10 power sudo[4134293]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:10 power sudo[4134304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:45:10 power sudo[4134304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:10 power sudo[4134304]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:10 power sudo[4134321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep 13 04:45:10 power sudo[4134321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:11 power sudo[4134321]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:11 power sudo[4134335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou Mime list_redirects --output=json'
Sep 13 04:45:11 power sudo[4134335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:11 power sudo[4134335]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:14 power sudo[4134497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/public_html/site --output=json'
Sep 13 04:45:14 power sudo[4134497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:14 power sudo[4134497]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:18 power sudo[4134709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep 13 04:45:18 power sudo[4134709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:18 power sudo[4134709]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:18 power sudo[4134715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=animatem --output=json'
Sep 13 04:45:18 power sudo[4134715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:18 power sudo[4134715]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:23 power sudo[4134825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem /bin/sh -c 'cd /home/animatem/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:45:23 power sudo[4134825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:23 power sudo[4134825]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:23 power sudo[4134831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user animatem --user-current --json'
Sep 13 04:45:23 power sudo[4134831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:23 power sudo[4134831]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:23 power sudo[4134841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem LangPHP php_get_vhost_versions --output=json'
Sep 13 04:45:24 power sudo[4134841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:24 power sudo[4134841]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:24 power sudo[4134849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php73 --output=json'
Sep 13 04:45:24 power sudo[4134849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:24 power sudo[4134849]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:24 power sudo[4134856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:45:24 power sudo[4134856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:24 power sudo[4134856]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:24 power sudo[4134870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DomainInfo single_domain_data domain=animate.mk return_https_redirect_status=1 --output=json'
Sep 13 04:45:24 power sudo[4134870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:25 power sudo[4134870]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:25 power sudo[4134881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem Mime list_redirects --output=json'
Sep 13 04:45:25 power sudo[4134881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:25 power sudo[4134881]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:30 power sudo[4135009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem DirectoryPrivacy is_directory_protected dir=/home/animatem/public_html --output=json'
Sep 13 04:45:30 power sudo[4135009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:30 power sudo[4135009]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:33 power sudo[4135225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep 13 04:45:33 power sudo[4135225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:33 power sudo[4135225]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:33 power sudo[4135231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=anitermc --output=json'
Sep 13 04:45:33 power sudo[4135231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:33 power sudo[4135231]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:45 power sudo[4135495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc /bin/sh -c 'cd /home/anitermc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:45:45 power sudo[4135495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:45 power sudo[4135495]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:45 power sudo[4135502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user anitermc --user-current --json'
Sep 13 04:45:45 power sudo[4135502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:45 power sudo[4135502]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:45 power sudo[4135512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc LangPHP php_get_vhost_versions --output=json'
Sep 13 04:45:45 power sudo[4135512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:45 power sudo[4135512]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:45 power sudo[4135518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:45:45 power sudo[4135518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:45 power sudo[4135518]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:46 power sudo[4135540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DomainInfo single_domain_data domain=aniterm.com.mk return_https_redirect_status=1 --output=json'
Sep 13 04:45:46 power sudo[4135540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:46 power sudo[4135540]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:46 power sudo[4135546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc Mime list_redirects --output=json'
Sep 13 04:45:46 power sudo[4135546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:46 power sudo[4135546]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:53 power sudo[4135695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anitermc DirectoryPrivacy is_directory_protected dir=/home/anitermc/public_html --output=json'
Sep 13 04:45:53 power sudo[4135695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:53 power sudo[4135695]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:56 power sudo[4135898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep 13 04:45:56 power sudo[4135898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:57 power sudo[4135898]: pam_unix(sudo:session): session closed for user root
Sep 13 04:45:57 power sudo[4135907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wineberr --output=json'
Sep 13 04:45:57 power sudo[4135907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:45:57 power sudo[4135907]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:03 power sudo[4136029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/app.wineberry.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:46:03 power sudo[4136029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:03 power sudo[4136029]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:03 power sudo[4136036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep 13 04:46:03 power sudo[4136036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:03 power sudo[4136036]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:03 power sudo[4136041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr LangPHP php_get_vhost_versions --output=json'
Sep 13 04:46:03 power sudo[4136041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:03 power sudo[4136041]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:03 power sudo[4136046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:46:03 power sudo[4136046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:03 power sudo[4136046]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:04 power sudo[4136069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=app.wineberry.mk return_https_redirect_status=1 --output=json'
Sep 13 04:46:04 power sudo[4136069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:04 power sudo[4136069]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:04 power sudo[4136075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr Mime list_redirects --output=json'
Sep 13 04:46:04 power sudo[4136075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:04 power sudo[4136075]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:08 power sudo[4136198]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/app.wineberry.mk/bck --output=json'
Sep 13 04:46:08 power sudo[4136198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:08 power sudo[4136198]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:12 power sudo[4136432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep 13 04:46:12 power sudo[4136432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:12 power sudo[4136432]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:12 power sudo[4136437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=aptekazd --output=json'
Sep 13 04:46:12 power sudo[4136437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:12 power sudo[4136437]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:17 power sudo[4136519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:46:17 power sudo[4136519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:17 power sudo[4136519]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:17 power sudo[4136525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user aptekazd --user-current --json'
Sep 13 04:46:17 power sudo[4136525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:17 power sudo[4136525]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:17 power sudo[4136531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd LangPHP php_get_vhost_versions --output=json'
Sep 13 04:46:17 power sudo[4136531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:17 power sudo[4136531]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:17 power sudo[4136536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:46:17 power sudo[4136536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:17 power sudo[4136536]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:18 power sudo[4136553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DomainInfo single_domain_data domain=aptekazdravje.mk return_https_redirect_status=1 --output=json'
Sep 13 04:46:18 power sudo[4136553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:18 power sudo[4136553]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:18 power sudo[4136559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd Mime list_redirects --output=json'
Sep 13 04:46:18 power sudo[4136559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:18 power sudo[4136559]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:21 power sudo[4136652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=aptekazd DirectoryPrivacy is_directory_protected dir=/home/aptekazd/public_html --output=json'
Sep 13 04:46:21 power sudo[4136652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:21 power sudo[4136652]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:23 power sudo[4136719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:46:23 power sudo[4136719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:23 power sudo[4136719]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:23 power sudo[4136724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:46:23 power sudo[4136724]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:46:23 power sudo[4136724]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:46:23 power sudo[4136724]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:46:23 power sudo[4136724]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:46:23 power sudo[4136724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:23 power sudo[4136724]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:23 power sudo[4136729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:46:23 power sudo[4136729]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:46:23 power sudo[4136729]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:46:23 power sudo[4136729]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:46:23 power sudo[4136729]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:46:23 power sudo[4136729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:23 power sudo[4136729]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:25 power sudo[4136841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:46:25 power sudo[4136841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:25 power sudo[4136841]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:25 power sudo[4136846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:46:25 power sudo[4136846]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:46:25 power sudo[4136846]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:46:25 power sudo[4136846]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:46:25 power sudo[4136846]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:46:25 power sudo[4136846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:25 power sudo[4136846]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:25 power sudo[4136854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd /bin/sh -c 'cd /home/aptekazd/public_html && find /home/aptekazd/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user aptekazd \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:46:25 power sudo[4136854]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:46:25 power sudo[4136854]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:46:25 power sudo[4136854]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:46:25 power sudo[4136854]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:46:25 power sudo[4136854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:25 power sudo[4136854]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:25 power sudo[4136899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep 13 04:46:25 power sudo[4136899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:26 power sudo[4136899]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:26 power sudo[4136906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=progress --output=json'
Sep 13 04:46:26 power sudo[4136906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:26 power sudo[4136906]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:30 power sudo[4137000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress /bin/sh -c 'cd /home/progress/artivo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:46:30 power sudo[4137000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:30 power sudo[4137000]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:30 power sudo[4137008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user progress --user-current --json'
Sep 13 04:46:30 power sudo[4137008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:31 power sudo[4137008]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:31 power sudo[4137017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress LangPHP php_get_vhost_versions --output=json'
Sep 13 04:46:31 power sudo[4137017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:31 power sudo[4137017]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:31 power sudo[4137026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:46:31 power sudo[4137026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:31 power sudo[4137026]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:31 power sudo[4137044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DomainInfo single_domain_data domain=artivo.mk return_https_redirect_status=1 --output=json'
Sep 13 04:46:32 power sudo[4137044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:32 power sudo[4137044]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:32 power sudo[4137054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress Mime list_redirects --output=json'
Sep 13 04:46:32 power sudo[4137054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:32 power sudo[4137054]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:35 power sudo[4137139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=progress DirectoryPrivacy is_directory_protected dir=/home/progress/artivo.mk --output=json'
Sep 13 04:46:35 power sudo[4137139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:35 power sudo[4137139]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:39 power sudo[4137341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep 13 04:46:39 power sudo[4137341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:39 power sudo[4137341]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:39 power sudo[4137350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bbbustou --output=json'
Sep 13 04:46:39 power sudo[4137350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:39 power sudo[4137350]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:45 power sudo[4137489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:46:45 power sudo[4137489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:45 power sudo[4137489]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:45 power sudo[4137495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep 13 04:46:45 power sudo[4137495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:46 power sudo[4137495]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:46 power sudo[4137501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou LangPHP php_get_vhost_versions --output=json'
Sep 13 04:46:46 power sudo[4137501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:46 power sudo[4137501]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:46 power sudo[4137507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php84 --output=json'
Sep 13 04:46:46 power sudo[4137507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:46 power sudo[4137507]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:46 power sudo[4137518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:46:46 power sudo[4137518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:46 power sudo[4137518]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:47 power sudo[4137532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=bbbustours.mk return_https_redirect_status=1 --output=json'
Sep 13 04:46:47 power sudo[4137532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:47 power sudo[4137532]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:47 power sudo[4137541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou Mime list_redirects --output=json'
Sep 13 04:46:47 power sudo[4137541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:47 power sudo[4137541]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:50 power sudo[4137756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/public_html --output=json'
Sep 13 04:46:50 power sudo[4137756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:51 power sudo[4137756]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:54 power sudo[4138063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep 13 04:46:54 power sudo[4138063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:55 power sudo[4138063]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:55 power sudo[4138068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nationa2 --output=json'
Sep 13 04:46:55 power sudo[4138068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:55 power sudo[4138068]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:58 power sudo[4138199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 /bin/sh -c 'cd /home/nationa2/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:46:58 power sudo[4138199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:58 power sudo[4138199]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:58 power sudo[4138212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nationa2 --user-current --json'
Sep 13 04:46:58 power sudo[4138212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:59 power sudo[4138212]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:59 power sudo[4138229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 LangPHP php_get_vhost_versions --output=json'
Sep 13 04:46:59 power sudo[4138229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:59 power sudo[4138229]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:59 power sudo[4138234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php74 --output=json'
Sep 13 04:46:59 power sudo[4138234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:59 power sudo[4138234]: pam_unix(sudo:session): session closed for user root
Sep 13 04:46:59 power sudo[4138251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:46:59 power sudo[4138251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:46:59 power sudo[4138251]: pam_unix(sudo:session): session closed for user root
Sep 13 04:47:00 power sudo[4138278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DomainInfo single_domain_data domain=beactiveday.mk return_https_redirect_status=1 --output=json'
Sep 13 04:47:00 power sudo[4138278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:47:00 power sudo[4138278]: pam_unix(sudo:session): session closed for user root
Sep 13 04:47:00 power sudo[4138283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 Mime list_redirects --output=json'
Sep 13 04:47:00 power sudo[4138283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:47:00 power sudo[4138283]: pam_unix(sudo:session): session closed for user root
Sep 13 04:47:02 power sudo[4138417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nationa2 DirectoryPrivacy is_directory_protected dir=/home/nationa2/public_html --output=json'
Sep 13 04:47:02 power sudo[4138417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:47:02 power sudo[4138417]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:16 power sudo[4140800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep 13 04:48:16 power sudo[4140800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:16 power sudo[4140800]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:16 power sudo[4140806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cetplatf --output=json'
Sep 13 04:48:16 power sudo[4140806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:16 power sudo[4140806]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:21 power sudo[4140887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/beep.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:48:21 power sudo[4140887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:21 power sudo[4140887]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:21 power sudo[4140897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 13 04:48:21 power sudo[4140897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:21 power sudo[4140897]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:21 power sudo[4140904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf LangPHP php_get_vhost_versions --output=json'
Sep 13 04:48:21 power sudo[4140904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:21 power sudo[4140904]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:21 power sudo[4140911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:48:21 power sudo[4140911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:21 power sudo[4140911]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:22 power sudo[4140925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=beep.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 04:48:22 power sudo[4140925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:22 power sudo[4140925]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:22 power sudo[4140931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf Mime list_redirects --output=json'
Sep 13 04:48:22 power sudo[4140931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:22 power sudo[4140931]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:25 power sudo[4141040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/beep.cetplatform.mk --output=json'
Sep 13 04:48:25 power sudo[4141040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:25 power sudo[4141040]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:28 power sudo[4141368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep 13 04:48:29 power sudo[4141368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:29 power sudo[4141368]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:29 power sudo[4141373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bianasho --output=json'
Sep 13 04:48:29 power sudo[4141373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:29 power sudo[4141373]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:36 power sudo[4141468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho /bin/sh -c 'cd /home/bianasho/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:48:36 power sudo[4141468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:36 power sudo[4141468]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:36 power sudo[4141474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bianasho --user-current --json'
Sep 13 04:48:36 power sudo[4141474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:36 power sudo[4141474]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:36 power sudo[4141481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho LangPHP php_get_vhost_versions --output=json'
Sep 13 04:48:36 power sudo[4141481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:37 power sudo[4141481]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:37 power sudo[4141487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:48:37 power sudo[4141487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:37 power sudo[4141487]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:38 power sudo[4141529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DomainInfo single_domain_data domain=bianashoes.mk return_https_redirect_status=1 --output=json'
Sep 13 04:48:38 power sudo[4141529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:38 power sudo[4141529]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:38 power sudo[4141536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho Mime list_redirects --output=json'
Sep 13 04:48:38 power sudo[4141536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:38 power sudo[4141536]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:43 power sudo[4141670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bianasho DirectoryPrivacy is_directory_protected dir=/home/bianasho/public_html --output=json'
Sep 13 04:48:43 power sudo[4141670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:43 power sudo[4141670]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:47 power sudo[4141883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep 13 04:48:47 power sudo[4141883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:47 power sudo[4141883]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:47 power sudo[4141890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=velmk --output=json'
Sep 13 04:48:47 power sudo[4141890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:47 power sudo[4141890]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:53 power sudo[4141998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk /bin/sh -c 'cd /home/velmk/blog.vel.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:48:53 power sudo[4141998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:53 power sudo[4141998]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:54 power sudo[4142006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user velmk --user-current --json'
Sep 13 04:48:54 power sudo[4142006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:54 power sudo[4142006]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:54 power sudo[4142014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk LangPHP php_get_vhost_versions --output=json'
Sep 13 04:48:54 power sudo[4142014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:54 power sudo[4142014]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:54 power sudo[4142020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:48:54 power sudo[4142020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:54 power sudo[4142020]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:55 power sudo[4142038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DomainInfo single_domain_data domain=blog.vel.mk return_https_redirect_status=1 --output=json'
Sep 13 04:48:55 power sudo[4142038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:55 power sudo[4142038]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:55 power sudo[4142045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk Mime list_redirects --output=json'
Sep 13 04:48:55 power sudo[4142045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:55 power sudo[4142045]: pam_unix(sudo:session): session closed for user root
Sep 13 04:48:59 power sudo[4142136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=velmk DirectoryPrivacy is_directory_protected dir=/home/velmk/blog.vel.mk --output=json'
Sep 13 04:48:59 power sudo[4142136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:48:59 power sudo[4142136]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:03 power sudo[4142334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep 13 04:49:03 power sudo[4142334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:03 power sudo[4142334]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:03 power sudo[4142342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enaspotc --output=json'
Sep 13 04:49:03 power sudo[4142342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:03 power sudo[4142342]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:06 power sudo[4142411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/boiling.pt && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:49:06 power sudo[4142411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:06 power sudo[4142411]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:06 power sudo[4142417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep 13 04:49:06 power sudo[4142417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:06 power sudo[4142417]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:06 power sudo[4142427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc LangPHP php_get_vhost_versions --output=json'
Sep 13 04:49:06 power sudo[4142427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:06 power sudo[4142427]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:06 power sudo[4142436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:49:06 power sudo[4142436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:06 power sudo[4142436]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:07 power sudo[4142461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=boiling.pt return_https_redirect_status=1 --output=json'
Sep 13 04:49:07 power sudo[4142461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:07 power sudo[4142461]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:07 power sudo[4142467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc Mime list_redirects --output=json'
Sep 13 04:49:07 power sudo[4142467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:07 power sudo[4142467]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:09 power sudo[4142546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/boiling.pt --output=json'
Sep 13 04:49:09 power sudo[4142546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:09 power sudo[4142546]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:13 power sudo[4142779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep 13 04:49:13 power sudo[4142779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:13 power sudo[4142779]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:13 power sudo[4142784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bonitavi --output=json'
Sep 13 04:49:13 power sudo[4142784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:13 power sudo[4142784]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:17 power sudo[4142875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi /bin/sh -c 'cd /home/bonitavi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:49:17 power sudo[4142875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:17 power sudo[4142875]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:17 power sudo[4142881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bonitavi --user-current --json'
Sep 13 04:49:17 power sudo[4142881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:17 power sudo[4142881]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:17 power sudo[4142887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi LangPHP php_get_vhost_versions --output=json'
Sep 13 04:49:17 power sudo[4142887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:17 power sudo[4142887]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:17 power sudo[4142892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:49:17 power sudo[4142892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:17 power sudo[4142892]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:18 power sudo[4142905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DomainInfo single_domain_data domain=bonita-vita.com return_https_redirect_status=1 --output=json'
Sep 13 04:49:18 power sudo[4142905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:18 power sudo[4142905]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:18 power sudo[4142915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi Mime list_redirects --output=json'
Sep 13 04:49:18 power sudo[4142915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:18 power sudo[4142915]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:21 power sudo[4142994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bonitavi DirectoryPrivacy is_directory_protected dir=/home/bonitavi/public_html --output=json'
Sep 13 04:49:21 power sudo[4142994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:21 power sudo[4142994]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:24 power sudo[4143202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep 13 04:49:24 power sudo[4143202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:24 power sudo[4143202]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:24 power sudo[4143215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bovincom --output=json'
Sep 13 04:49:24 power sudo[4143215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:24 power sudo[4143215]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:31 power sudo[4143337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom /bin/sh -c 'cd /home/bovincom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:49:31 power sudo[4143337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:31 power sudo[4143337]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:31 power sudo[4143343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bovincom --user-current --json'
Sep 13 04:49:31 power sudo[4143343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:32 power sudo[4143343]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:32 power sudo[4143348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom LangPHP php_get_vhost_versions --output=json'
Sep 13 04:49:32 power sudo[4143348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:32 power sudo[4143348]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:32 power sudo[4143353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:49:32 power sudo[4143353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:32 power sudo[4143353]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:33 power sudo[4143370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DomainInfo single_domain_data domain=bovin.com.mk return_https_redirect_status=1 --output=json'
Sep 13 04:49:33 power sudo[4143370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:33 power sudo[4143370]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:33 power sudo[4143379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom Mime list_redirects --output=json'
Sep 13 04:49:33 power sudo[4143379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:33 power sudo[4143379]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:38 power sudo[4143493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bovincom DirectoryPrivacy is_directory_protected dir=/home/bovincom/public_html --output=json'
Sep 13 04:49:38 power sudo[4143493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:38 power sudo[4143493]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:42 power sudo[4143713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep 13 04:49:42 power sudo[4143713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:42 power sudo[4143713]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:42 power sudo[4143721]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=butelmk --output=json'
Sep 13 04:49:42 power sudo[4143721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:42 power sudo[4143721]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:54 power sudo[4143925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk /bin/sh -c 'cd /home/butelmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:49:54 power sudo[4143925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:54 power sudo[4143925]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:54 power sudo[4143934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user butelmk --user-current --json'
Sep 13 04:49:54 power sudo[4143934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:54 power sudo[4143934]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:54 power sudo[4143942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk LangPHP php_get_vhost_versions --output=json'
Sep 13 04:49:54 power sudo[4143942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:54 power sudo[4143942]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:54 power sudo[4143949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 13 04:49:54 power sudo[4143949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:55 power sudo[4143949]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:55 power sudo[4143955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=alt-php73 --output=json'
Sep 13 04:49:55 power sudo[4143955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:55 power sudo[4143955]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:55 power sudo[4143964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:49:55 power sudo[4143964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:55 power sudo[4143964]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:55 power sudo[4143984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DomainInfo single_domain_data domain=butel.mk return_https_redirect_status=1 --output=json'
Sep 13 04:49:56 power sudo[4143984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:56 power sudo[4143984]: pam_unix(sudo:session): session closed for user root
Sep 13 04:49:56 power sudo[4143996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk Mime list_redirects --output=json'
Sep 13 04:49:56 power sudo[4143996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:49:56 power sudo[4143996]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:01 power systemd[4144173]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:50:03 power sudo[4144250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=butelmk DirectoryPrivacy is_directory_protected dir=/home/butelmk/public_html --output=json'
Sep 13 04:50:03 power sudo[4144250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:03 power sudo[4144250]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:07 power sudo[4144532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep 13 04:50:07 power sudo[4144532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:08 power sudo[4144532]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:08 power sudo[4144537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=izzomk --output=json'
Sep 13 04:50:08 power sudo[4144537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:08 power sudo[4144537]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:15 power sudo[4144722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/caffeizzo.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:50:15 power sudo[4144722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:15 power sudo[4144722]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:15 power sudo[4144728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep 13 04:50:15 power sudo[4144728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:15 power sudo[4144728]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:15 power sudo[4144737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk LangPHP php_get_vhost_versions --output=json'
Sep 13 04:50:15 power sudo[4144737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:15 power sudo[4144737]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:15 power sudo[4144743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:50:15 power sudo[4144743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:15 power sudo[4144743]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:16 power sudo[4144763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=caffeizzo.mk return_https_redirect_status=1 --output=json'
Sep 13 04:50:16 power sudo[4144763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:16 power sudo[4144763]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:16 power sudo[4144770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk Mime list_redirects --output=json'
Sep 13 04:50:16 power sudo[4144770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:16 power sudo[4144770]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:20 power sudo[4144867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/caffeizzo.mk --output=json'
Sep 13 04:50:20 power sudo[4144867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:20 power sudo[4144867]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:28 power sudo[4145151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/cateye.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:50:28 power sudo[4145151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:28 power sudo[4145151]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:28 power sudo[4145157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 13 04:50:28 power sudo[4145157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:29 power sudo[4145157]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:29 power sudo[4145163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:50:29 power sudo[4145163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:29 power sudo[4145163]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:29 power sudo[4145183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cateye.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 04:50:29 power sudo[4145183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:29 power sudo[4145183]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:32 power sudo[4145274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/cateye.cetplatform.mk --output=json'
Sep 13 04:50:32 power sudo[4145274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:32 power sudo[4145274]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:41 power sudo[4145555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:50:41 power sudo[4145555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:41 power sudo[4145555]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:41 power sudo[4145561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 13 04:50:41 power sudo[4145561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:41 power sudo[4145561]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:41 power sudo[4145571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:50:41 power sudo[4145571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:41 power sudo[4145571]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:42 power sudo[4145592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 04:50:42 power sudo[4145592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:42 power sudo[4145592]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:46 power sudo[4145671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/public_html --output=json'
Sep 13 04:50:46 power sudo[4145671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:46 power sudo[4145671]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:49 power sudo[4145837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep 13 04:50:49 power sudo[4145837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:49 power sudo[4145837]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:49 power sudo[4145845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=chemhemc --output=json'
Sep 13 04:50:49 power sudo[4145845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:49 power sudo[4145845]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:53 power sudo[4145929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:50:53 power sudo[4145929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:53 power sudo[4145929]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:53 power sudo[4145935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep 13 04:50:53 power sudo[4145935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:54 power sudo[4145935]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:54 power sudo[4145942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc LangPHP php_get_vhost_versions --output=json'
Sep 13 04:50:54 power sudo[4145942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:54 power sudo[4145942]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:54 power sudo[4145947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:50:54 power sudo[4145947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:54 power sudo[4145947]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:54 power sudo[4145963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=chemhem.com return_https_redirect_status=1 --output=json'
Sep 13 04:50:54 power sudo[4145963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:54 power sudo[4145963]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:54 power sudo[4145969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc Mime list_redirects --output=json'
Sep 13 04:50:54 power sudo[4145969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:54 power sudo[4145969]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:56 power sudo[4146050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/public_html --output=json'
Sep 13 04:50:57 power sudo[4146050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:57 power sudo[4146050]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:58 power sudo[4146120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:50:58 power sudo[4146120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:58 power sudo[4146120]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:58 power sudo[4146125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:50:58 power sudo[4146125]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:50:58 power sudo[4146125]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:50:58 power sudo[4146125]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:50:58 power sudo[4146125]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:50:58 power sudo[4146125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:58 power sudo[4146125]: pam_unix(sudo:session): session closed for user root
Sep 13 04:50:58 power sudo[4146130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:50:58 power sudo[4146130]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:50:58 power sudo[4146130]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:50:58 power sudo[4146130]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:50:58 power sudo[4146130]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:50:58 power sudo[4146130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:50:58 power sudo[4146130]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:00 power sudo[4146230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:00 power sudo[4146230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:00 power sudo[4146230]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:00 power sudo[4146235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:51:00 power sudo[4146235]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:51:00 power sudo[4146235]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:51:00 power sudo[4146235]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:51:00 power sudo[4146235]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:00 power sudo[4146235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:00 power sudo[4146235]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:00 power sudo[4146240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/public_html && find /home/chemhemc/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:51:00 power sudo[4146240]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:51:00 power sudo[4146240]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:51:00 power sudo[4146240]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:51:00 power sudo[4146240]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:00 power sudo[4146240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:00 power sudo[4146240]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:00 power sudo[4146282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep 13 04:51:00 power sudo[4146282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:01 power sudo[4146282]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:01 power sudo[4146287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=cosmatob --output=json'
Sep 13 04:51:01 power sudo[4146287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:01 power sudo[4146287]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:08 power sudo[4146456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob /bin/sh -c 'cd /home/cosmatob/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:51:08 power sudo[4146456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:08 power sudo[4146456]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:08 power sudo[4146462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cosmatob --user-current --json'
Sep 13 04:51:08 power sudo[4146462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:08 power sudo[4146462]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:08 power sudo[4146467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob LangPHP php_get_vhost_versions --output=json'
Sep 13 04:51:08 power sudo[4146467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:08 power sudo[4146467]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:08 power sudo[4146472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:51:08 power sudo[4146472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:08 power sudo[4146472]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:09 power sudo[4146494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DomainInfo single_domain_data domain=cosmatobacco.mk return_https_redirect_status=1 --output=json'
Sep 13 04:51:09 power sudo[4146494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:09 power sudo[4146494]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:09 power sudo[4146499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob Mime list_redirects --output=json'
Sep 13 04:51:09 power sudo[4146499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:10 power sudo[4146499]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:14 power sudo[4146652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cosmatob DirectoryPrivacy is_directory_protected dir=/home/cosmatob/public_html --output=json'
Sep 13 04:51:14 power sudo[4146652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:14 power sudo[4146652]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:21 power sudo[4146944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk /bin/sh -c 'cd /home/dadarmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:51:21 power sudo[4146944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:21 power sudo[4146944]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:21 power sudo[4146952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dadarmk --user-current --json'
Sep 13 04:51:21 power sudo[4146952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:22 power sudo[4146952]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:22 power sudo[4146961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:51:22 power sudo[4146961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:22 power sudo[4146961]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:22 power sudo[4146974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DomainInfo single_domain_data domain=dadar.mk return_https_redirect_status=1 --output=json'
Sep 13 04:51:22 power sudo[4146974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:22 power sudo[4146974]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:24 power sudo[4147053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dadarmk DirectoryPrivacy is_directory_protected dir=/home/dadarmk/public_html --output=json'
Sep 13 04:51:24 power sudo[4147053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:24 power sudo[4147053]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:28 power sudo[4147251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep 13 04:51:28 power sudo[4147251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:28 power sudo[4147251]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:28 power sudo[4147260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=delcevca --output=json'
Sep 13 04:51:28 power sudo[4147260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:28 power sudo[4147260]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:33 power sudo[4147361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:51:33 power sudo[4147361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:33 power sudo[4147361]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:33 power sudo[4147367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user delcevca --user-current --json'
Sep 13 04:51:33 power sudo[4147367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:34 power sudo[4147367]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:34 power sudo[4147379]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca LangPHP php_get_vhost_versions --output=json'
Sep 13 04:51:34 power sudo[4147379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:34 power sudo[4147379]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:34 power sudo[4147384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:51:34 power sudo[4147384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:34 power sudo[4147384]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:34 power sudo[4147414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DomainInfo single_domain_data domain=delcevcani.mk return_https_redirect_status=1 --output=json'
Sep 13 04:51:34 power sudo[4147414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:34 power sudo[4147414]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:34 power sudo[4147421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca Mime list_redirects --output=json'
Sep 13 04:51:34 power sudo[4147421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:34 power sudo[4147421]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:37 power sudo[4147517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=delcevca DirectoryPrivacy is_directory_protected dir=/home/delcevca/public_html --output=json'
Sep 13 04:51:37 power sudo[4147517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:38 power sudo[4147517]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:38 power sudo[4147593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:38 power sudo[4147593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:38 power sudo[4147593]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:39 power sudo[4147598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:51:39 power sudo[4147598]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:51:39 power sudo[4147598]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:51:39 power sudo[4147598]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:51:39 power sudo[4147598]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:39 power sudo[4147598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:39 power sudo[4147598]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:39 power sudo[4147603]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:51:39 power sudo[4147603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:51:39 power sudo[4147603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:51:39 power sudo[4147603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:51:39 power sudo[4147603]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:39 power sudo[4147603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:39 power sudo[4147603]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:39 power sudo[4147608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:51:39 power sudo[4147608]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:51:39 power sudo[4147608]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:51:39 power sudo[4147608]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:51:39 power sudo[4147608]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:39 power sudo[4147608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:39 power sudo[4147608]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:41 power sudo[4147724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:41 power sudo[4147724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:41 power sudo[4147724]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:41 power sudo[4147729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:51:41 power sudo[4147729]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:51:41 power sudo[4147729]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:51:41 power sudo[4147729]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:51:41 power sudo[4147729]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:41 power sudo[4147729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:41 power sudo[4147729]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:41 power sudo[4147734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:51:41 power sudo[4147734]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:51:41 power sudo[4147734]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:51:41 power sudo[4147734]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:51:41 power sudo[4147734]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:41 power sudo[4147734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:41 power sudo[4147734]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:41 power sudo[4147740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca /bin/sh -c 'cd /home/delcevca/public_html && find /home/delcevca/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user delcevca \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:51:41 power sudo[4147740]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:51:41 power sudo[4147740]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:51:41 power sudo[4147740]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:51:41 power sudo[4147740]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:51:41 power sudo[4147740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:41 power sudo[4147740]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:41 power sudo[4147792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep 13 04:51:41 power sudo[4147792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:42 power sudo[4147792]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:42 power sudo[4147798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=edomcomm --output=json'
Sep 13 04:51:42 power sudo[4147798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:42 power sudo[4147798]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:45 power sudo[4147890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:51:45 power sudo[4147890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:45 power sudo[4147890]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:45 power sudo[4147900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user edomcomm --user-current --json'
Sep 13 04:51:45 power sudo[4147900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:45 power sudo[4147900]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:45 power sudo[4147913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm LangPHP php_get_vhost_versions --output=json'
Sep 13 04:51:45 power sudo[4147913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:45 power sudo[4147913]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:45 power sudo[4147918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:51:45 power sudo[4147918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:45 power sudo[4147918]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:46 power sudo[4147936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=deosol.mk return_https_redirect_status=1 --output=json'
Sep 13 04:51:46 power sudo[4147936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:46 power sudo[4147936]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:46 power sudo[4147943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm Mime list_redirects --output=json'
Sep 13 04:51:46 power sudo[4147943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:46 power sudo[4147943]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:48 power sudo[4148046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/w --output=json'
Sep 13 04:51:48 power sudo[4148046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:48 power sudo[4148046]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:55 power sudo[4148414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/ekobalans.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:51:55 power sudo[4148414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:55 power sudo[4148414]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:55 power sudo[4148423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 13 04:51:55 power sudo[4148423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:55 power sudo[4148423]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:55 power sudo[4148429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:51:55 power sudo[4148429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:55 power sudo[4148429]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:56 power sudo[4148446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=ekobalans.mk return_https_redirect_status=1 --output=json'
Sep 13 04:51:56 power sudo[4148446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:56 power sudo[4148446]: pam_unix(sudo:session): session closed for user root
Sep 13 04:51:58 power sudo[4148569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/ekobalans.mk --output=json'
Sep 13 04:51:58 power sudo[4148569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:51:58 power sudo[4148569]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:06 power sudo[4149026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/public_html/moetodete.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:52:06 power sudo[4149026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:06 power sudo[4149026]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:06 power sudo[4149038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 13 04:52:06 power sudo[4149038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:06 power sudo[4149038]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:06 power sudo[4149045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:52:06 power sudo[4149045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:06 power sudo[4149045]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:06 power sudo[4149134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=moetodete.mk return_https_redirect_status=1 --output=json'
Sep 13 04:52:06 power sudo[4149134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:07 power sudo[4149134]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:09 power sudo[4149389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/public_html/moetodete.mk --output=json'
Sep 13 04:52:09 power sudo[4149389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:09 power sudo[4149389]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:13 power sudo[4149688]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep 13 04:52:13 power sudo[4149688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:13 power sudo[4149688]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:13 power sudo[4149696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=detskagr --output=json'
Sep 13 04:52:13 power sudo[4149696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:13 power sudo[4149696]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:20 power sudo[4149809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:52:20 power sudo[4149809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:20 power sudo[4149809]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:20 power sudo[4149816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user detskagr --user-current --json'
Sep 13 04:52:21 power sudo[4149816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:21 power sudo[4149816]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:21 power sudo[4149829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr LangPHP php_get_vhost_versions --output=json'
Sep 13 04:52:21 power sudo[4149829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:21 power sudo[4149829]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:21 power sudo[4149834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:52:21 power sudo[4149834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:21 power sudo[4149834]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:21 power sudo[4149849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DomainInfo single_domain_data domain=detskagradinka-prolet.mk return_https_redirect_status=1 --output=json'
Sep 13 04:52:21 power sudo[4149849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:21 power sudo[4149849]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:21 power sudo[4149859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr Mime list_redirects --output=json'
Sep 13 04:52:21 power sudo[4149859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:21 power sudo[4149859]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:25 power sudo[4149964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=detskagr DirectoryPrivacy is_directory_protected dir=/home/detskagr/public_html/wordpress --output=json'
Sep 13 04:52:25 power sudo[4149964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:25 power sudo[4149964]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:26 power sudo[4150028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:52:26 power sudo[4150028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:26 power sudo[4150028]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:26 power sudo[4150033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 13 04:52:26 power sudo[4150033]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 13 04:52:26 power sudo[4150033]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 13 04:52:26 power sudo[4150033]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 13 04:52:26 power sudo[4150033]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:52:26 power sudo[4150033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:26 power sudo[4150033]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:26 power sudo[4150038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 13 04:52:26 power sudo[4150038]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 13 04:52:26 power sudo[4150038]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 13 04:52:26 power sudo[4150038]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 13 04:52:26 power sudo[4150038]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:52:26 power sudo[4150038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:26 power sudo[4150038]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:26 power sudo[4150043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep 13 04:52:26 power sudo[4150043]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep 13 04:52:26 power sudo[4150043]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep 13 04:52:26 power sudo[4150043]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep 13 04:52:26 power sudo[4150043]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:52:26 power sudo[4150043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:26 power sudo[4150043]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:28 power sudo[4150154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:52:28 power sudo[4150154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:28 power sudo[4150154]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:28 power sudo[4150159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 13 04:52:28 power sudo[4150159]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 13 04:52:28 power sudo[4150159]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 13 04:52:28 power sudo[4150159]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 13 04:52:28 power sudo[4150159]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:52:28 power sudo[4150159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:28 power sudo[4150159]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:28 power sudo[4150164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o
Sep 13 04:52:28 power sudo[4150164]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o
Sep 13 04:52:28 power sudo[4150164]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o
Sep 13 04:52:28 power sudo[4150164]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o
Sep 13 04:52:28 power sudo[4150164]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:52:28 power sudo[4150164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:28 power sudo[4150164]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:28 power sudo[4150171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr /bin/sh -c 'cd /home/detskagr/public_html/wordpress && find /home/detskagr/public_html/wordpress/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user detskagr \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\'
Sep 13 04:52:28 power sudo[4150171]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\'
Sep 13 04:52:28 power sudo[4150171]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\'
Sep 13 04:52:28 power sudo[4150171]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\'
Sep 13 04:52:28 power sudo[4150171]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:52:28 power sudo[4150171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:28 power sudo[4150171]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:29 power sudo[4150214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep 13 04:52:29 power sudo[4150214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:29 power sudo[4150214]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:29 power sudo[4150222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eaptekam --output=json'
Sep 13 04:52:29 power sudo[4150222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:29 power sudo[4150222]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:35 power sudo[4150333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam /bin/sh -c 'cd /home/eaptekam/dev.eapteka.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:52:35 power sudo[4150333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:35 power sudo[4150333]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:35 power sudo[4150339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eaptekam --user-current --json'
Sep 13 04:52:35 power sudo[4150339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:35 power sudo[4150339]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:35 power sudo[4150353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam LangPHP php_get_vhost_versions --output=json'
Sep 13 04:52:35 power sudo[4150353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:35 power sudo[4150353]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:35 power sudo[4150359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:52:35 power sudo[4150359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:35 power sudo[4150359]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:36 power sudo[4150377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DomainInfo single_domain_data domain=dev.eapteka.mk return_https_redirect_status=1 --output=json'
Sep 13 04:52:36 power sudo[4150377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:36 power sudo[4150377]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:36 power sudo[4150384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam Mime list_redirects --output=json'
Sep 13 04:52:36 power sudo[4150384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:36 power sudo[4150384]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:39 power sudo[4150491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eaptekam DirectoryPrivacy is_directory_protected dir=/home/eaptekam/dev.eapteka.mk --output=json'
Sep 13 04:52:39 power sudo[4150491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:39 power sudo[4150491]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:43 power sudo[4150704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep 13 04:52:43 power sudo[4150704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:43 power sudo[4150704]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:43 power sudo[4150710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=dimpalne --output=json'
Sep 13 04:52:43 power sudo[4150710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:43 power sudo[4150710]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:48 power sudo[4150809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne /bin/sh -c 'cd /home/dimpalne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:52:48 power sudo[4150809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:48 power sudo[4150809]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:48 power sudo[4150815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user dimpalne --user-current --json'
Sep 13 04:52:48 power sudo[4150815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:48 power sudo[4150815]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:48 power sudo[4150822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne LangPHP php_get_vhost_versions --output=json'
Sep 13 04:52:48 power sudo[4150822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:48 power sudo[4150822]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:48 power sudo[4150828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:52:48 power sudo[4150828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:48 power sudo[4150828]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:49 power sudo[4150845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DomainInfo single_domain_data domain=dimpal.net return_https_redirect_status=1 --output=json'
Sep 13 04:52:49 power sudo[4150845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:49 power sudo[4150845]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:49 power sudo[4150852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne Mime list_redirects --output=json'
Sep 13 04:52:49 power sudo[4150852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:49 power sudo[4150852]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:52 power sudo[4150953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=dimpalne DirectoryPrivacy is_directory_protected dir=/home/dimpalne/public_html --output=json'
Sep 13 04:52:52 power sudo[4150953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:52 power sudo[4150953]: pam_unix(sudo:session): session closed for user root
Sep 13 04:52:58 power sudo[4151215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DomainInfo single_domain_data domain=dreamholidays.bbbustours.mk return_https_redirect_status=1 --output=json'
Sep 13 04:52:58 power sudo[4151215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:52:58 power sudo[4151215]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:00 power sudo[4151264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou /bin/sh -c 'cd /home/bbbustou/dreamholidays.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:53:00 power sudo[4151264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:00 power sudo[4151264]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:00 power sudo[4151270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user bbbustou --user-current --json'
Sep 13 04:53:00 power sudo[4151270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:00 power sudo[4151270]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:00 power sudo[4151276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:53:00 power sudo[4151276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:00 power sudo[4151276]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:04 power sudo[4151393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bbbustou DirectoryPrivacy is_directory_protected dir=/home/bbbustou/dreamholidays.mk --output=json'
Sep 13 04:53:04 power sudo[4151393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:04 power sudo[4151393]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:08 power sudo[4151605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep 13 04:53:08 power sudo[4151605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:08 power sudo[4151605]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:08 power sudo[4151622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=drleomk --output=json'
Sep 13 04:53:08 power sudo[4151622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:08 power sudo[4151622]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:12 power sudo[4151724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk /bin/sh -c 'cd /home/drleomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:53:12 power sudo[4151724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:12 power sudo[4151724]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:12 power sudo[4151733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user drleomk --user-current --json'
Sep 13 04:53:12 power sudo[4151733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:13 power sudo[4151733]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:13 power sudo[4151744]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk LangPHP php_get_vhost_versions --output=json'
Sep 13 04:53:13 power sudo[4151744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:13 power sudo[4151744]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:13 power sudo[4151750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:53:13 power sudo[4151750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:13 power sudo[4151750]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:13 power sudo[4151792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DomainInfo single_domain_data domain=drleo.mk return_https_redirect_status=1 --output=json'
Sep 13 04:53:13 power sudo[4151792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:13 power sudo[4151792]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:13 power sudo[4151816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk Mime list_redirects --output=json'
Sep 13 04:53:13 power sudo[4151816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:13 power sudo[4151816]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:17 power sudo[4151987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=drleomk DirectoryPrivacy is_directory_protected dir=/home/drleomk/public_html --output=json'
Sep 13 04:53:17 power sudo[4151987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:17 power sudo[4151987]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:20 power sudo[4152207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep 13 04:53:20 power sudo[4152207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:21 power sudo[4152207]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:21 power sudo[4152217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=goodnews --output=json'
Sep 13 04:53:21 power sudo[4152217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:21 power sudo[4152217]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:25 power sudo[4152318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:53:25 power sudo[4152318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:25 power sudo[4152318]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:25 power sudo[4152325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 13 04:53:25 power sudo[4152325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:25 power sudo[4152325]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:25 power sudo[4152367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews LangPHP php_get_vhost_versions --output=json'
Sep 13 04:53:25 power sudo[4152367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:25 power sudo[4152367]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:25 power sudo[4152378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:53:25 power sudo[4152378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:25 power sudo[4152378]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:26 power sudo[4152435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=elan.mk return_https_redirect_status=1 --output=json'
Sep 13 04:53:26 power sudo[4152435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:26 power sudo[4152435]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:26 power sudo[4152441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews Mime list_redirects --output=json'
Sep 13 04:53:26 power sudo[4152441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:26 power sudo[4152441]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:28 power sudo[4152565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/elan.mk --output=json'
Sep 13 04:53:28 power sudo[4152565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:29 power sudo[4152565]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:29 power sudo[4152620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:53:29 power sudo[4152620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:29 power sudo[4152620]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:29 power sudo[4152625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 04:53:29 power sudo[4152625]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 04:53:29 power sudo[4152625]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 04:53:29 power sudo[4152625]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 04:53:29 power sudo[4152625]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:53:29 power sudo[4152625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:29 power sudo[4152625]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:29 power sudo[4152630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 04:53:29 power sudo[4152630]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 04:53:29 power sudo[4152630]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 04:53:29 power sudo[4152630]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 04:53:29 power sudo[4152630]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:53:29 power sudo[4152630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:29 power sudo[4152630]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:31 power sudo[4152716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:53:31 power sudo[4152716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:31 power sudo[4152716]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:31 power sudo[4152722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 04:53:31 power sudo[4152722]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 04:53:31 power sudo[4152722]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 04:53:31 power sudo[4152722]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 04:53:31 power sudo[4152722]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:53:31 power sudo[4152722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:31 power sudo[4152722]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:31 power sudo[4152727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/elan.mk && find /home/goodnews/elan.mk/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user goodnews \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 04:53:31 power sudo[4152727]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 04:53:31 power sudo[4152727]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 04:53:31 power sudo[4152727]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 04:53:31 power sudo[4152727]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:53:31 power sudo[4152727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:31 power sudo[4152727]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:31 power sudo[4152757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep 13 04:53:31 power sudo[4152757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:32 power sudo[4152757]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:32 power sudo[4152768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=electrol --output=json'
Sep 13 04:53:32 power sudo[4152768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:32 power sudo[4152768]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:36 power sudo[4152842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol /bin/sh -c 'cd /home/electrol/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:53:36 power sudo[4152842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:36 power sudo[4152842]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:36 power sudo[4152848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user electrol --user-current --json'
Sep 13 04:53:36 power sudo[4152848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:36 power sudo[4152848]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:36 power sudo[4152854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol LangPHP php_get_vhost_versions --output=json'
Sep 13 04:53:37 power sudo[4152854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:37 power sudo[4152854]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:37 power sudo[4152865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:53:37 power sudo[4152865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:37 power sudo[4152865]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:38 power sudo[4152894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DomainInfo single_domain_data domain=electrolight.mk return_https_redirect_status=1 --output=json'
Sep 13 04:53:38 power sudo[4152894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:38 power sudo[4152894]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:38 power sudo[4152906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol Mime list_redirects --output=json'
Sep 13 04:53:38 power sudo[4152906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:38 power sudo[4152906]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:41 power sudo[4153005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=electrol DirectoryPrivacy is_directory_protected dir=/home/electrol/public_html --output=json'
Sep 13 04:53:41 power sudo[4153005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:41 power sudo[4153005]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:45 power sudo[4153213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep 13 04:53:45 power sudo[4153213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:45 power sudo[4153213]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:45 power sudo[4153219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=elektrot --output=json'
Sep 13 04:53:45 power sudo[4153219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:45 power sudo[4153219]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:47 power sudo[4153276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot /bin/sh -c 'cd /home/elektrot/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:53:47 power sudo[4153276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:47 power sudo[4153276]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:47 power sudo[4153283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user elektrot --user-current --json'
Sep 13 04:53:47 power sudo[4153283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:48 power sudo[4153283]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:48 power sudo[4153294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot LangPHP php_get_vhost_versions --output=json'
Sep 13 04:53:48 power sudo[4153294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:48 power sudo[4153294]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:48 power sudo[4153300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:53:48 power sudo[4153300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:48 power sudo[4153300]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:48 power sudo[4153314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DomainInfo single_domain_data domain=elektrotehnika-inzinering.mk return_https_redirect_status=1 --output=json'
Sep 13 04:53:48 power sudo[4153314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:48 power sudo[4153314]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:48 power sudo[4153322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot Mime list_redirects --output=json'
Sep 13 04:53:48 power sudo[4153322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:48 power sudo[4153322]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:50 power sudo[4153456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy is_directory_protected dir=/home/elektrot/public_html/wp --output=json'
Sep 13 04:53:50 power sudo[4153456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:50 power sudo[4153456]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:50 power sudo[4153462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=elektrot DirectoryPrivacy list_users dir=/home/elektrot/public_html/wp --output=json'
Sep 13 04:53:50 power sudo[4153462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:50 power sudo[4153462]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:55 power sudo[4153870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc /bin/sh -c 'cd /home/enaspotc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:53:55 power sudo[4153870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:55 power sudo[4153870]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:55 power sudo[4153879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enaspotc --user-current --json'
Sep 13 04:53:55 power sudo[4153879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:56 power sudo[4153879]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:56 power sudo[4153901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:53:56 power sudo[4153901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:56 power sudo[4153901]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:56 power sudo[4153946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DomainInfo single_domain_data domain=enaspot.com return_https_redirect_status=1 --output=json'
Sep 13 04:53:56 power sudo[4153946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:56 power sudo[4153946]: pam_unix(sudo:session): session closed for user root
Sep 13 04:53:59 power sudo[4154190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enaspotc DirectoryPrivacy is_directory_protected dir=/home/enaspotc/public_html --output=json'
Sep 13 04:53:59 power sudo[4154190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:53:59 power sudo[4154190]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:03 power sudo[4154525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep 13 04:54:03 power sudo[4154525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:04 power sudo[4154525]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:04 power sudo[4154541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=enochmk --output=json'
Sep 13 04:54:04 power sudo[4154541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:04 power sudo[4154541]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:09 power sudo[4154829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:54:09 power sudo[4154829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:09 power sudo[4154829]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:09 power sudo[4154838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user enochmk --user-current --json'
Sep 13 04:54:09 power sudo[4154838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:10 power sudo[4154838]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:10 power sudo[4154863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk LangPHP php_get_vhost_versions --output=json'
Sep 13 04:54:10 power sudo[4154863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:10 power sudo[4154863]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:10 power sudo[4154870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:54:10 power sudo[4154870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:10 power sudo[4154870]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:11 power sudo[4154921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DomainInfo single_domain_data domain=enoch.mk return_https_redirect_status=1 --output=json'
Sep 13 04:54:11 power sudo[4154921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:11 power sudo[4154921]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:11 power sudo[4154927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk Mime list_redirects --output=json'
Sep 13 04:54:11 power sudo[4154927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:11 power sudo[4154927]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:15 power sudo[4155221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=enochmk DirectoryPrivacy is_directory_protected dir=/home/enochmk/public_html --output=json'
Sep 13 04:54:15 power sudo[4155221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:15 power sudo[4155221]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:16 power sudo[4155326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:54:16 power sudo[4155326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:16 power sudo[4155326]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:16 power sudo[4155332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 04:54:16 power sudo[4155332]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 04:54:16 power sudo[4155332]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 04:54:16 power sudo[4155332]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 04:54:16 power sudo[4155332]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:54:16 power sudo[4155332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:16 power sudo[4155332]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:16 power sudo[4155337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 04:54:16 power sudo[4155337]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 04:54:16 power sudo[4155337]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 04:54:16 power sudo[4155337]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 04:54:16 power sudo[4155337]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:54:16 power sudo[4155337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:16 power sudo[4155337]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:18 power sudo[4155528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:54:18 power sudo[4155528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:18 power sudo[4155528]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:18 power sudo[4155533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 04:54:18 power sudo[4155533]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 04:54:18 power sudo[4155533]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 04:54:18 power sudo[4155533]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 04:54:18 power sudo[4155533]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:54:18 power sudo[4155533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:18 power sudo[4155533]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:18 power sudo[4155539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk /bin/sh -c 'cd /home/enochmk/public_html && find /home/enochmk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user enochmk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 04:54:18 power sudo[4155539]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 04:54:18 power sudo[4155539]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 04:54:18 power sudo[4155539]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 04:54:18 power sudo[4155539]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:54:18 power sudo[4155539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:18 power sudo[4155539]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:22 power sudo[4155765]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/equip.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:54:22 power sudo[4155765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:22 power sudo[4155765]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:22 power sudo[4155782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 13 04:54:22 power sudo[4155782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:23 power sudo[4155782]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:23 power sudo[4155797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:54:23 power sudo[4155797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:23 power sudo[4155797]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:23 power sudo[4155836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=equip.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 04:54:23 power sudo[4155836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:23 power sudo[4155836]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:25 power sudo[4155970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/equip.cetplatform.mk --output=json'
Sep 13 04:54:25 power sudo[4155970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:25 power sudo[4155970]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:29 power sudo[4156208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep 13 04:54:29 power sudo[4156208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:29 power sudo[4156208]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:29 power sudo[4156215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=eurofarm --output=json'
Sep 13 04:54:29 power sudo[4156215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:29 power sudo[4156215]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:37 power sudo[4156355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm /bin/sh -c 'cd /home/eurofarm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:54:37 power sudo[4156355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:37 power sudo[4156355]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:37 power sudo[4156362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user eurofarm --user-current --json'
Sep 13 04:54:37 power sudo[4156362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:37 power sudo[4156362]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:37 power sudo[4156370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm LangPHP php_get_vhost_versions --output=json'
Sep 13 04:54:37 power sudo[4156370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:38 power sudo[4156370]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:38 power sudo[4156377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:54:38 power sudo[4156377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:38 power sudo[4156377]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:38 power sudo[4156411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DomainInfo single_domain_data domain=eurofarm.com.mk return_https_redirect_status=1 --output=json'
Sep 13 04:54:38 power sudo[4156411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:38 power sudo[4156411]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:38 power sudo[4156419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm Mime list_redirects --output=json'
Sep 13 04:54:38 power sudo[4156419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:38 power sudo[4156419]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:43 power sudo[4156541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=eurofarm DirectoryPrivacy is_directory_protected dir=/home/eurofarm/public_html --output=json'
Sep 13 04:54:43 power sudo[4156541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:43 power sudo[4156541]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:46 power sudo[4156750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep 13 04:54:46 power sudo[4156750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:47 power sudo[4156750]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:47 power sudo[4156760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=euromaki --output=json'
Sep 13 04:54:47 power sudo[4156760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:47 power sudo[4156760]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:51 power sudo[4156862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki /bin/sh -c 'cd /home/euromaki/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:54:51 power sudo[4156862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:51 power sudo[4156862]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:51 power sudo[4156877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user euromaki --user-current --json'
Sep 13 04:54:51 power sudo[4156877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:51 power sudo[4156877]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:51 power sudo[4156885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki LangPHP php_get_vhost_versions --output=json'
Sep 13 04:54:51 power sudo[4156885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:51 power sudo[4156885]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:51 power sudo[4156890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:54:51 power sudo[4156890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:51 power sudo[4156890]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:51 power sudo[4156906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DomainInfo single_domain_data domain=euromakinsurance.mk return_https_redirect_status=1 --output=json'
Sep 13 04:54:52 power sudo[4156906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:52 power sudo[4156906]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:52 power sudo[4156912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki Mime list_redirects --output=json'
Sep 13 04:54:52 power sudo[4156912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:52 power sudo[4156912]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:56 power sudo[4157030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=euromaki DirectoryPrivacy is_directory_protected dir=/home/euromaki/public_html --output=json'
Sep 13 04:54:56 power sudo[4157030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:56 power sudo[4157030]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:59 power sudo[4157241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep 13 04:54:59 power sudo[4157241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:59 power sudo[4157241]: pam_unix(sudo:session): session closed for user root
Sep 13 04:54:59 power sudo[4157249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evberasm --output=json'
Sep 13 04:54:59 power sudo[4157249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:54:59 power sudo[4157249]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:01 power systemd[4157368]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 04:55:05 power sudo[4157472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm /bin/sh -c 'cd /home/evberasm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:55:05 power sudo[4157472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:06 power sudo[4157472]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:06 power sudo[4157481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evberasm --user-current --json'
Sep 13 04:55:06 power sudo[4157481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:06 power sudo[4157481]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:06 power sudo[4157490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm LangPHP php_get_vhost_versions --output=json'
Sep 13 04:55:06 power sudo[4157490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:06 power sudo[4157490]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:06 power sudo[4157496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:55:06 power sudo[4157496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:06 power sudo[4157496]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:06 power sudo[4157510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DomainInfo single_domain_data domain=evberasmusplus.com.mk return_https_redirect_status=1 --output=json'
Sep 13 04:55:06 power sudo[4157510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:06 power sudo[4157510]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:06 power sudo[4157517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm Mime list_redirects --output=json'
Sep 13 04:55:06 power sudo[4157517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:06 power sudo[4157517]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:11 power sudo[4157641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evberasm DirectoryPrivacy is_directory_protected dir=/home/evberasm/public_html/wp --output=json'
Sep 13 04:55:11 power sudo[4157641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:11 power sudo[4157641]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:14 power sudo[4157847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep 13 04:55:14 power sudo[4157847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:14 power sudo[4157847]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:14 power sudo[4157853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=evolvepl --output=json'
Sep 13 04:55:14 power sudo[4157853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:14 power sudo[4157853]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:19 power sudo[4158007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:55:19 power sudo[4158007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:19 power sudo[4158007]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:19 power sudo[4158018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user evolvepl --user-current --json'
Sep 13 04:55:19 power sudo[4158018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:19 power sudo[4158018]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:19 power sudo[4158027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl LangPHP php_get_vhost_versions --output=json'
Sep 13 04:55:19 power sudo[4158027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:19 power sudo[4158027]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:19 power sudo[4158033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:55:19 power sudo[4158033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:19 power sudo[4158033]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:20 power sudo[4158061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DomainInfo single_domain_data domain=evolveplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 04:55:20 power sudo[4158061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:20 power sudo[4158061]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:20 power sudo[4158072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl Mime list_redirects --output=json'
Sep 13 04:55:20 power sudo[4158072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:20 power sudo[4158072]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:23 power sudo[4158151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=evolvepl DirectoryPrivacy is_directory_protected dir=/home/evolvepl/public_html --output=json'
Sep 13 04:55:23 power sudo[4158151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:23 power sudo[4158151]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:24 power sudo[4158215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:55:24 power sudo[4158215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:24 power sudo[4158215]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:24 power sudo[4158220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:55:24 power sudo[4158220]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:55:24 power sudo[4158220]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:55:24 power sudo[4158220]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:55:24 power sudo[4158220]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:55:24 power sudo[4158220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:24 power sudo[4158220]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:24 power sudo[4158225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:55:24 power sudo[4158225]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:55:24 power sudo[4158225]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:55:24 power sudo[4158225]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:55:24 power sudo[4158225]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:55:24 power sudo[4158225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:24 power sudo[4158225]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:24 power sudo[4158231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:55:24 power sudo[4158231]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:55:24 power sudo[4158231]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:55:24 power sudo[4158231]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:55:24 power sudo[4158231]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:55:24 power sudo[4158231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:24 power sudo[4158231]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:26 power sudo[4158350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:55:26 power sudo[4158350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:26 power sudo[4158350]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:26 power sudo[4158355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:55:26 power sudo[4158355]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:55:26 power sudo[4158355]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:55:26 power sudo[4158355]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:55:26 power sudo[4158355]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:55:26 power sudo[4158355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:26 power sudo[4158355]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:26 power sudo[4158360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:55:26 power sudo[4158360]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:55:26 power sudo[4158360]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:55:26 power sudo[4158360]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:55:26 power sudo[4158360]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:55:26 power sudo[4158360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:26 power sudo[4158360]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:26 power sudo[4158366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl /bin/sh -c 'cd /home/evolvepl/public_html && find /home/evolvepl/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user evolvepl \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:55:26 power sudo[4158366]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:55:26 power sudo[4158366]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:55:26 power sudo[4158366]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:55:26 power sudo[4158366]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:55:26 power sudo[4158366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:26 power sudo[4158366]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:31 power sudo[4158494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/ey.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:55:31 power sudo[4158494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:31 power sudo[4158494]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:31 power sudo[4158504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 13 04:55:31 power sudo[4158504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:31 power sudo[4158504]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:31 power sudo[4158514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:55:31 power sudo[4158514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:31 power sudo[4158514]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:32 power sudo[4158531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=ey.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 04:55:32 power sudo[4158531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:32 power sudo[4158531]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:34 power sudo[4158620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/ey.cetplatform.mk --output=json'
Sep 13 04:55:34 power sudo[4158620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:34 power sudo[4158620]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:38 power sudo[4158851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep 13 04:55:38 power sudo[4158851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:38 power sudo[4158851]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:38 power sudo[4158858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=holiyayt --output=json'
Sep 13 04:55:38 power sudo[4158858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:38 power sudo[4158858]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:41 power sudo[4158926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/fitkit.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:55:41 power sudo[4158926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:41 power sudo[4158926]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:41 power sudo[4158936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 13 04:55:41 power sudo[4158936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:41 power sudo[4158936]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:41 power sudo[4158943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt LangPHP php_get_vhost_versions --output=json'
Sep 13 04:55:41 power sudo[4158943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:41 power sudo[4158943]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:41 power sudo[4158948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:55:41 power sudo[4158948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:41 power sudo[4158948]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:41 power sudo[4158965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=fitkit.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 13 04:55:41 power sudo[4158965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:42 power sudo[4158965]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:42 power sudo[4158972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt Mime list_redirects --output=json'
Sep 13 04:55:42 power sudo[4158972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:42 power sudo[4158972]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:43 power sudo[4159056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/fitkit.holiyaytravel.com --output=json'
Sep 13 04:55:43 power sudo[4159056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:43 power sudo[4159056]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:47 power sudo[4159270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep 13 04:55:47 power sudo[4159270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:47 power sudo[4159270]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:47 power sudo[4159279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=v5srybi9dcdx --output=json'
Sep 13 04:55:47 power sudo[4159279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:47 power sudo[4159279]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:50 power sudo[4159352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/flowoptstudio.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:55:50 power sudo[4159352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:50 power sudo[4159352]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:50 power sudo[4159361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep 13 04:55:50 power sudo[4159361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:50 power sudo[4159361]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:50 power sudo[4159368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx LangPHP php_get_vhost_versions --output=json'
Sep 13 04:55:50 power sudo[4159368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:50 power sudo[4159368]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:50 power sudo[4159375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:55:50 power sudo[4159375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:50 power sudo[4159375]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:51 power sudo[4159388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=flowoptstudio.com return_https_redirect_status=1 --output=json'
Sep 13 04:55:51 power sudo[4159388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:51 power sudo[4159388]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:51 power sudo[4159395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx Mime list_redirects --output=json'
Sep 13 04:55:51 power sudo[4159395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:51 power sudo[4159395]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:53 power sudo[4159528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/flowoptstudio.com --output=json'
Sep 13 04:55:53 power sudo[4159528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:53 power sudo[4159528]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:57 power sudo[4159742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep 13 04:55:57 power sudo[4159742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:57 power sudo[4159742]: pam_unix(sudo:session): session closed for user root
Sep 13 04:55:57 power sudo[4159751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=folklore --output=json'
Sep 13 04:55:57 power sudo[4159751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:55:57 power sudo[4159751]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:00 power sudo[4159833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:56:00 power sudo[4159833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:00 power sudo[4159833]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:00 power sudo[4159839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user folklore --user-current --json'
Sep 13 04:56:00 power sudo[4159839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:00 power sudo[4159839]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:00 power sudo[4159849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore LangPHP php_get_vhost_versions --output=json'
Sep 13 04:56:00 power sudo[4159849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:00 power sudo[4159849]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:00 power sudo[4159855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:56:00 power sudo[4159855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:00 power sudo[4159855]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:01 power sudo[4159889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DomainInfo single_domain_data domain=folklorefestivals.com return_https_redirect_status=1 --output=json'
Sep 13 04:56:01 power sudo[4159889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:01 power sudo[4159889]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:01 power sudo[4159899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore Mime list_redirects --output=json'
Sep 13 04:56:01 power sudo[4159899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:01 power sudo[4159899]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:03 power sudo[4159982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=folklore DirectoryPrivacy is_directory_protected dir=/home/folklore/public_html --output=json'
Sep 13 04:56:03 power sudo[4159982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:03 power sudo[4159982]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:04 power sudo[4160038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:56:04 power sudo[4160038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:04 power sudo[4160038]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:04 power sudo[4160043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:56:04 power sudo[4160043]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:56:04 power sudo[4160043]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:56:04 power sudo[4160043]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:56:04 power sudo[4160043]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:56:04 power sudo[4160043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:04 power sudo[4160043]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:04 power sudo[4160050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:56:04 power sudo[4160050]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:56:04 power sudo[4160050]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:56:04 power sudo[4160050]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:56:04 power sudo[4160050]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:56:04 power sudo[4160050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:04 power sudo[4160050]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:04 power sudo[4160055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:56:04 power sudo[4160055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:56:04 power sudo[4160055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:56:04 power sudo[4160055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:56:04 power sudo[4160055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:56:04 power sudo[4160055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:04 power sudo[4160055]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:06 power sudo[4160146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:56:06 power sudo[4160146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:06 power sudo[4160146]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:06 power sudo[4160151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:56:06 power sudo[4160151]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:56:06 power sudo[4160151]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:56:06 power sudo[4160151]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:56:06 power sudo[4160151]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:56:06 power sudo[4160151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:06 power sudo[4160151]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:06 power sudo[4160157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:56:06 power sudo[4160157]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:56:06 power sudo[4160157]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:56:06 power sudo[4160157]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:56:06 power sudo[4160157]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:56:06 power sudo[4160157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:06 power sudo[4160157]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:06 power sudo[4160166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore /bin/sh -c 'cd /home/folklore/public_html && find /home/folklore/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user folklore \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:56:06 power sudo[4160166]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:56:06 power sudo[4160166]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:56:06 power sudo[4160166]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:56:06 power sudo[4160166]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:56:06 power sudo[4160166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:06 power sudo[4160166]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:06 power sudo[4160192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep 13 04:56:06 power sudo[4160192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:07 power sudo[4160192]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:07 power sudo[4160199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=forzares --output=json'
Sep 13 04:56:07 power sudo[4160199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:07 power sudo[4160199]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:12 power sudo[4160312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares /bin/sh -c 'cd /home/forzares/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:56:12 power sudo[4160312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:12 power sudo[4160312]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:12 power sudo[4160318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user forzares --user-current --json'
Sep 13 04:56:12 power sudo[4160318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:12 power sudo[4160318]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:12 power sudo[4160326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares LangPHP php_get_vhost_versions --output=json'
Sep 13 04:56:12 power sudo[4160326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:12 power sudo[4160326]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:12 power sudo[4160333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:56:12 power sudo[4160333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:12 power sudo[4160333]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:13 power sudo[4160354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DomainInfo single_domain_data domain=forzarestaurant.com.mk return_https_redirect_status=1 --output=json'
Sep 13 04:56:13 power sudo[4160354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:13 power sudo[4160354]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:13 power sudo[4160361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares Mime list_redirects --output=json'
Sep 13 04:56:13 power sudo[4160361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:13 power sudo[4160361]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:16 power sudo[4160510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=forzares DirectoryPrivacy is_directory_protected dir=/home/forzares/public_html --output=json'
Sep 13 04:56:16 power sudo[4160510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:17 power sudo[4160510]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:20 power sudo[4160680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep 13 04:56:20 power sudo[4160680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:20 power sudo[4160680]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:20 power sudo[4160693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=getaldus --output=json'
Sep 13 04:56:20 power sudo[4160693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:20 power sudo[4160693]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:22 power sudo[4160770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus /bin/sh -c 'cd /home/getaldus/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:56:22 power sudo[4160770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:22 power sudo[4160770]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:22 power sudo[4160777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user getaldus --user-current --json'
Sep 13 04:56:22 power sudo[4160777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:23 power sudo[4160777]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:23 power sudo[4160787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus LangPHP php_get_vhost_versions --output=json'
Sep 13 04:56:23 power sudo[4160787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:23 power sudo[4160787]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:23 power sudo[4160793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:56:23 power sudo[4160793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:23 power sudo[4160793]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:23 power sudo[4160812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DomainInfo single_domain_data domain=getaldus.mk return_https_redirect_status=1 --output=json'
Sep 13 04:56:23 power sudo[4160812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:23 power sudo[4160812]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:23 power sudo[4160821]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus Mime list_redirects --output=json'
Sep 13 04:56:23 power sudo[4160821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:23 power sudo[4160821]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:25 power sudo[4160899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=getaldus DirectoryPrivacy is_directory_protected dir=/home/getaldus/public_html --output=json'
Sep 13 04:56:25 power sudo[4160899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:25 power sudo[4160899]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:29 power sudo[4161112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep 13 04:56:29 power sudo[4161112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:29 power sudo[4161112]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:29 power sudo[4161120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gocruise --output=json'
Sep 13 04:56:29 power sudo[4161120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:29 power sudo[4161120]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:34 power sudo[4161206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise /bin/sh -c 'cd /home/gocruise/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:56:34 power sudo[4161206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:34 power sudo[4161206]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:34 power sudo[4161212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gocruise --user-current --json'
Sep 13 04:56:34 power sudo[4161212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:34 power sudo[4161212]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:34 power sudo[4161220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise LangPHP php_get_vhost_versions --output=json'
Sep 13 04:56:34 power sudo[4161220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:34 power sudo[4161220]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:34 power sudo[4161230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:56:34 power sudo[4161230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:34 power sudo[4161230]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:35 power sudo[4161248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DomainInfo single_domain_data domain=gocruise.mk return_https_redirect_status=1 --output=json'
Sep 13 04:56:35 power sudo[4161248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:35 power sudo[4161248]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:35 power sudo[4161257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise Mime list_redirects --output=json'
Sep 13 04:56:35 power sudo[4161257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:35 power sudo[4161257]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:38 power sudo[4161367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gocruise DirectoryPrivacy is_directory_protected dir=/home/gocruise/public_html --output=json'
Sep 13 04:56:38 power sudo[4161367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:38 power sudo[4161367]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:41 power sudo[4161590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep 13 04:56:41 power sudo[4161590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:42 power sudo[4161590]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:42 power sudo[4161597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=gogovan1 --output=json'
Sep 13 04:56:42 power sudo[4161597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:42 power sudo[4161597]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:46 power sudo[4161690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 /bin/sh -c 'cd /home/gogovan1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:56:46 power sudo[4161690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:46 power sudo[4161690]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:46 power sudo[4161698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user gogovan1 --user-current --json'
Sep 13 04:56:46 power sudo[4161698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:46 power sudo[4161698]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:46 power sudo[4161712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 LangPHP php_get_vhost_versions --output=json'
Sep 13 04:56:46 power sudo[4161712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:46 power sudo[4161712]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:46 power sudo[4161716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:56:46 power sudo[4161716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:46 power sudo[4161716]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:46 power sudo[4161737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DomainInfo single_domain_data domain=gogovan.mk return_https_redirect_status=1 --output=json'
Sep 13 04:56:46 power sudo[4161737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:47 power sudo[4161737]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:47 power sudo[4161745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 Mime list_redirects --output=json'
Sep 13 04:56:47 power sudo[4161745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:47 power sudo[4161745]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:49 power sudo[4161837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=gogovan1 DirectoryPrivacy is_directory_protected dir=/home/gogovan1/public_html --output=json'
Sep 13 04:56:49 power sudo[4161837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:49 power sudo[4161837]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:53 power sudo[4162099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep 13 04:56:53 power sudo[4162099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:53 power sudo[4162099]: pam_unix(sudo:session): session closed for user root
Sep 13 04:56:53 power sudo[4162105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=golakkom --output=json'
Sep 13 04:56:53 power sudo[4162105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:56:53 power sudo[4162105]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:00 power sudo[4162225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:57:00 power sudo[4162225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:00 power sudo[4162225]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:00 power sudo[4162232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user golakkom --user-current --json'
Sep 13 04:57:00 power sudo[4162232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:00 power sudo[4162232]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:00 power sudo[4162241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom LangPHP php_get_vhost_versions --output=json'
Sep 13 04:57:00 power sudo[4162241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:00 power sudo[4162241]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:00 power sudo[4162246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:57:00 power sudo[4162246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:00 power sudo[4162246]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:01 power sudo[4162274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DomainInfo single_domain_data domain=golak-komerc.mk return_https_redirect_status=1 --output=json'
Sep 13 04:57:01 power sudo[4162274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:01 power sudo[4162274]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:01 power sudo[4162280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom Mime list_redirects --output=json'
Sep 13 04:57:01 power sudo[4162280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:01 power sudo[4162280]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:04 power sudo[4162388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=golakkom DirectoryPrivacy is_directory_protected dir=/home/golakkom/public_html --output=json'
Sep 13 04:57:04 power sudo[4162388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:05 power sudo[4162388]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:05 power sudo[4162445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:57:05 power sudo[4162445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:05 power sudo[4162445]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:05 power sudo[4162450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:57:05 power sudo[4162450]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:57:05 power sudo[4162450]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:57:05 power sudo[4162450]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:57:05 power sudo[4162450]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:57:05 power sudo[4162450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:05 power sudo[4162450]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:05 power sudo[4162455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:57:05 power sudo[4162455]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:57:05 power sudo[4162455]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:57:05 power sudo[4162455]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:57:05 power sudo[4162455]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:57:05 power sudo[4162455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:06 power sudo[4162455]: pam_unix(sudo:session): session closed for user root
Sep 13 04:57:06 power sudo[4162460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom /bin/sh -c 'cd /home/golakkom/public_html && find /home/golakkom/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user golakkom \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:57:06 power sudo[4162460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:57:06 power sudo[4162460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:57:06 power sudo[4162460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:57:06 power sudo[4162460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:57:06 power sudo[4162460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:57:06 power sudo[4162460]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:03 power sudo[4163469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:58:03 power sudo[4163469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:03 power sudo[4163469]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:03 power sudo[4163481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 13 04:58:03 power sudo[4163481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:03 power sudo[4163481]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:03 power sudo[4163487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:58:03 power sudo[4163487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:03 power sudo[4163487]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:04 power sudo[4163517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=goodnews.mk return_https_redirect_status=1 --output=json'
Sep 13 04:58:04 power sudo[4163517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:04 power sudo[4163517]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:07 power sudo[4163598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/public_html --output=json'
Sep 13 04:58:07 power sudo[4163598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:07 power sudo[4163598]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:12 power sudo[4163865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep 13 04:58:12 power sudo[4163865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:13 power sudo[4163865]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:13 power sudo[4163871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=herbalpl --output=json'
Sep 13 04:58:13 power sudo[4163871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:13 power sudo[4163871]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:19 power sudo[4164022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl /bin/sh -c 'cd /home/herbalpl/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:58:19 power sudo[4164022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:19 power sudo[4164022]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:19 power sudo[4164028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user herbalpl --user-current --json'
Sep 13 04:58:19 power sudo[4164028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:19 power sudo[4164028]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:19 power sudo[4164037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl LangPHP php_get_vhost_versions --output=json'
Sep 13 04:58:19 power sudo[4164037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:19 power sudo[4164037]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:19 power sudo[4164043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:58:19 power sudo[4164043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:19 power sudo[4164043]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:20 power sudo[4164061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DomainInfo single_domain_data domain=herbalplus.mk return_https_redirect_status=1 --output=json'
Sep 13 04:58:20 power sudo[4164061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:20 power sudo[4164061]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:20 power sudo[4164074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl Mime list_redirects --output=json'
Sep 13 04:58:20 power sudo[4164074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:20 power sudo[4164074]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:24 power sudo[4164168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=herbalpl DirectoryPrivacy is_directory_protected dir=/home/herbalpl/public_html --output=json'
Sep 13 04:58:24 power sudo[4164168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:24 power sudo[4164168]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:58 power sudo[4165068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/hero.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:58:58 power sudo[4165068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:58 power sudo[4165068]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:58 power sudo[4165074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 13 04:58:58 power sudo[4165074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:58 power sudo[4165074]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:58 power sudo[4165084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:58:58 power sudo[4165084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:58 power sudo[4165084]: pam_unix(sudo:session): session closed for user root
Sep 13 04:58:58 power sudo[4165102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=hero.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 04:58:58 power sudo[4165102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:58:59 power sudo[4165102]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:01 power sudo[4165182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/hero.cetplatform.mk --output=json'
Sep 13 04:59:01 power sudo[4165182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:01 power sudo[4165182]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:08 power sudo[4165468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:59:08 power sudo[4165468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:08 power sudo[4165468]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:08 power sudo[4165475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 13 04:59:08 power sudo[4165475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:08 power sudo[4165475]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:08 power sudo[4165481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:59:08 power sudo[4165481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:08 power sudo[4165481]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:09 power sudo[4165502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 13 04:59:09 power sudo[4165502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:09 power sudo[4165502]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:12 power sudo[4165608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/public_html --output=json'
Sep 13 04:59:12 power sudo[4165608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:12 power sudo[4165608]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:13 power sudo[4165672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:59:13 power sudo[4165672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:13 power sudo[4165672]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:13 power sudo[4165678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:59:13 power sudo[4165678]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:59:13 power sudo[4165678]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:59:13 power sudo[4165678]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:59:13 power sudo[4165678]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:59:13 power sudo[4165678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:13 power sudo[4165678]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:13 power sudo[4165683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:59:13 power sudo[4165683]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:59:13 power sudo[4165683]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:59:13 power sudo[4165683]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:59:13 power sudo[4165683]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:59:13 power sudo[4165683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:14 power sudo[4165683]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:14 power sudo[4165696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:59:14 power sudo[4165696]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:59:14 power sudo[4165696]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:59:14 power sudo[4165696]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:59:14 power sudo[4165696]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:59:14 power sudo[4165696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:14 power sudo[4165696]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:15 power sudo[4165787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:59:15 power sudo[4165787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:15 power sudo[4165787]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:15 power sudo[4165792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 04:59:15 power sudo[4165792]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 04:59:15 power sudo[4165792]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 04:59:15 power sudo[4165792]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 04:59:15 power sudo[4165792]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:59:15 power sudo[4165792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:15 power sudo[4165792]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:15 power sudo[4165798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:59:15 power sudo[4165798]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:59:15 power sudo[4165798]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:59:15 power sudo[4165798]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:59:15 power sudo[4165798]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:59:15 power sudo[4165798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:16 power sudo[4165798]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:16 power sudo[4165805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/public_html && find /home/holiyayt/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user holiyayt \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 04:59:16 power sudo[4165805]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 04:59:16 power sudo[4165805]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 04:59:16 power sudo[4165805]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 04:59:16 power sudo[4165805]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 04:59:16 power sudo[4165805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:16 power sudo[4165805]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:16 power sudo[4165836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep 13 04:59:16 power sudo[4165836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:16 power sudo[4165836]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:16 power sudo[4165841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vezilkac --output=json'
Sep 13 04:59:16 power sudo[4165841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:16 power sudo[4165841]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:21 power sudo[4165983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/vezden.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:59:21 power sudo[4165983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:21 power sudo[4165983]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:21 power sudo[4165989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 13 04:59:21 power sudo[4165989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:21 power sudo[4165989]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:21 power sudo[4165995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac LangPHP php_get_vhost_versions --output=json'
Sep 13 04:59:21 power sudo[4165995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:22 power sudo[4165995]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:22 power sudo[4166002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:59:22 power sudo[4166002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:22 power sudo[4166002]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:22 power sudo[4166016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezden.mk return_https_redirect_status=1 --output=json'
Sep 13 04:59:22 power sudo[4166016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:22 power sudo[4166016]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:22 power sudo[4166022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac Mime list_redirects --output=json'
Sep 13 04:59:22 power sudo[4166022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:22 power sudo[4166022]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:25 power sudo[4166097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/vezden.mk --output=json'
Sep 13 04:59:25 power sudo[4166097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:25 power sudo[4166097]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:40 power sudo[4166529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/metatet && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 04:59:40 power sudo[4166529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:40 power sudo[4166529]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:40 power sudo[4166535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 13 04:59:40 power sudo[4166535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:41 power sudo[4166535]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:41 power sudo[4166544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 04:59:41 power sudo[4166544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:41 power sudo[4166544]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:41 power sudo[4166558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=metatet.com return_https_redirect_status=1 --output=json'
Sep 13 04:59:41 power sudo[4166558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:41 power sudo[4166558]: pam_unix(sudo:session): session closed for user root
Sep 13 04:59:47 power sudo[4166686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/metatet --output=json'
Sep 13 04:59:47 power sudo[4166686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 04:59:47 power sudo[4166686]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:01 power systemd[4167259]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:00:01 power systemd[4167262]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 05:00:01 power systemd[4167264]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 05:00:01 power systemd[4167265]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 05:00:03 power sudo[4167501]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:00:03 power sudo[4167501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:03 power sudo[4167501]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:03 power sudo[4167509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 13 05:00:03 power sudo[4167509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:04 power sudo[4167509]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:04 power sudo[4167537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:00:04 power sudo[4167537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:04 power sudo[4167537]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:04 power sudo[4167566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=vezilka.com return_https_redirect_status=1 --output=json'
Sep 13 05:00:04 power sudo[4167566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:04 power sudo[4167566]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:13 power sudo[4167841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html --output=json'
Sep 13 05:00:13 power sudo[4167841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:13 power sudo[4167841]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:21 power sudo[4168235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/sorabotnici && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:00:21 power sudo[4168235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:21 power sudo[4168235]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:21 power sudo[4168241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 13 05:00:21 power sudo[4168241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:21 power sudo[4168241]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:21 power sudo[4168249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:00:21 power sudo[4168249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:21 power sudo[4168249]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:21 power sudo[4168263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=sorabotnici.vezilka.com return_https_redirect_status=1 --output=json'
Sep 13 05:00:21 power sudo[4168263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:21 power sudo[4168263]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:24 power sudo[4168453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/sorabotnici --output=json'
Sep 13 05:00:24 power sudo[4168453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:24 power sudo[4168453]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:31 power sudo[4168785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac /bin/sh -c 'cd /home/vezilkac/public_html/pp && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:00:31 power sudo[4168785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:31 power sudo[4168785]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:31 power sudo[4168792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vezilkac --user-current --json'
Sep 13 05:00:31 power sudo[4168792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:31 power sudo[4168792]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:31 power sudo[4168798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:00:31 power sudo[4168798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:31 power sudo[4168798]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:31 power sudo[4168818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DomainInfo single_domain_data domain=pp.denicija.mk return_https_redirect_status=1 --output=json'
Sep 13 05:00:31 power sudo[4168818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:31 power sudo[4168818]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:34 power sudo[4168985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vezilkac DirectoryPrivacy is_directory_protected dir=/home/vezilkac/public_html/pp --output=json'
Sep 13 05:00:34 power sudo[4168985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:34 power sudo[4168985]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:37 power sudo[4169218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep 13 05:00:37 power sudo[4169218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:37 power sudo[4169218]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:37 power sudo[4169228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=madzomk --output=json'
Sep 13 05:00:37 power sudo[4169228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:37 power sudo[4169228]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:42 power sudo[4169365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk /bin/sh -c 'cd /home/madzomk/hotelcitypark.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:00:42 power sudo[4169365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:42 power sudo[4169365]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:42 power sudo[4169375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user madzomk --user-current --json'
Sep 13 05:00:42 power sudo[4169375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:43 power sudo[4169375]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:43 power sudo[4169384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:00:43 power sudo[4169384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:43 power sudo[4169384]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:43 power sudo[4169390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:00:43 power sudo[4169390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:43 power sudo[4169390]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:43 power sudo[4169408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DomainInfo single_domain_data domain=hotelcitypark.mk return_https_redirect_status=1 --output=json'
Sep 13 05:00:43 power sudo[4169408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:43 power sudo[4169408]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:43 power sudo[4169417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk Mime list_redirects --output=json'
Sep 13 05:00:43 power sudo[4169417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:43 power sudo[4169417]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:47 power sudo[4169505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=madzomk DirectoryPrivacy is_directory_protected dir=/home/madzomk/hotelcitypark.mk --output=json'
Sep 13 05:00:47 power sudo[4169505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:47 power sudo[4169505]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:51 power sudo[4169719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep 13 05:00:51 power sudo[4169719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:51 power sudo[4169719]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:51 power sudo[4169732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=imdskopj --output=json'
Sep 13 05:00:51 power sudo[4169732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:51 power sudo[4169732]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:54 power sudo[4169802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj /bin/sh -c 'cd /home/imdskopj/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:00:54 power sudo[4169802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:54 power sudo[4169802]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:54 power sudo[4169808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user imdskopj --user-current --json'
Sep 13 05:00:54 power sudo[4169808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:54 power sudo[4169808]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:54 power sudo[4169815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj LangPHP php_get_vhost_versions --output=json'
Sep 13 05:00:54 power sudo[4169815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:54 power sudo[4169815]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:54 power sudo[4169820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:00:54 power sudo[4169820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:54 power sudo[4169820]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:54 power sudo[4169838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DomainInfo single_domain_data domain=imdskopje.mk return_https_redirect_status=1 --output=json'
Sep 13 05:00:55 power sudo[4169838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:55 power sudo[4169838]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:55 power sudo[4169849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj Mime list_redirects --output=json'
Sep 13 05:00:55 power sudo[4169849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:55 power sudo[4169849]: pam_unix(sudo:session): session closed for user root
Sep 13 05:00:57 power sudo[4169948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=imdskopj DirectoryPrivacy is_directory_protected dir=/home/imdskopj/public_html --output=json'
Sep 13 05:00:57 power sudo[4169948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:00:57 power sudo[4169948]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:00 power sudo[4170197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep 13 05:01:00 power sudo[4170197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:01 power sudo[4170197]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:01 power sudo[4170230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=infopor1 --output=json'
Sep 13 05:01:01 power sudo[4170230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:01 power sudo[4170230]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:06 power sudo[4170362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:01:06 power sudo[4170362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:06 power sudo[4170362]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:06 power sudo[4170368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user infopor1 --user-current --json'
Sep 13 05:01:06 power sudo[4170368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:06 power sudo[4170368]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:06 power sudo[4170374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 LangPHP php_get_vhost_versions --output=json'
Sep 13 05:01:06 power sudo[4170374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:07 power sudo[4170374]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:07 power sudo[4170380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:01:07 power sudo[4170380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:07 power sudo[4170380]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:07 power sudo[4170403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DomainInfo single_domain_data domain=infoportal.mk return_https_redirect_status=1 --output=json'
Sep 13 05:01:07 power sudo[4170403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:07 power sudo[4170403]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:07 power sudo[4170413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 Mime list_redirects --output=json'
Sep 13 05:01:07 power sudo[4170413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:07 power sudo[4170413]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:10 power sudo[4170518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=infopor1 DirectoryPrivacy is_directory_protected dir=/home/infopor1/public_html --output=json'
Sep 13 05:01:10 power sudo[4170518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:10 power sudo[4170518]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:11 power sudo[4170583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:11 power sudo[4170583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:11 power sudo[4170583]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:11 power sudo[4170590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:01:11 power sudo[4170590]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:01:11 power sudo[4170590]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:01:11 power sudo[4170590]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:01:11 power sudo[4170590]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:11 power sudo[4170590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:11 power sudo[4170590]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:11 power sudo[4170595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:01:11 power sudo[4170595]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:01:11 power sudo[4170595]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:01:11 power sudo[4170595]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:01:11 power sudo[4170595]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:11 power sudo[4170595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:11 power sudo[4170595]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:11 power sudo[4170605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:01:11 power sudo[4170605]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:01:11 power sudo[4170605]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:01:11 power sudo[4170605]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:01:11 power sudo[4170605]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:11 power sudo[4170605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:11 power sudo[4170605]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:13 power sudo[4170718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:13 power sudo[4170718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:13 power sudo[4170718]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:13 power sudo[4170723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:01:13 power sudo[4170723]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:01:13 power sudo[4170723]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:01:13 power sudo[4170723]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:01:13 power sudo[4170723]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:13 power sudo[4170723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:13 power sudo[4170723]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:13 power sudo[4170728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:01:13 power sudo[4170728]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:01:13 power sudo[4170728]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:01:13 power sudo[4170728]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:01:13 power sudo[4170728]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:13 power sudo[4170728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:13 power sudo[4170728]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:13 power sudo[4170733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 /bin/sh -c 'cd /home/infopor1/public_html && find /home/infopor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user infopor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:01:13 power sudo[4170733]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:01:13 power sudo[4170733]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:01:13 power sudo[4170733]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:01:13 power sudo[4170733]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:13 power sudo[4170733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:13 power sudo[4170733]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:14 power sudo[4170773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep 13 05:01:14 power sudo[4170773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:14 power sudo[4170773]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:14 power sudo[4170778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=intelek1 --output=json'
Sep 13 05:01:14 power sudo[4170778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:14 power sudo[4170778]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:19 power sudo[4170868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:01:19 power sudo[4170868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:19 power sudo[4170868]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:19 power sudo[4170876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user intelek1 --user-current --json'
Sep 13 05:01:19 power sudo[4170876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:19 power sudo[4170876]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:19 power sudo[4170907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 LangPHP php_get_vhost_versions --output=json'
Sep 13 05:01:19 power sudo[4170907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:19 power sudo[4170907]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:19 power sudo[4170928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:01:19 power sudo[4170928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:19 power sudo[4170928]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:20 power sudo[4170952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DomainInfo single_domain_data domain=intelekt-bb.com return_https_redirect_status=1 --output=json'
Sep 13 05:01:20 power sudo[4170952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:20 power sudo[4170952]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:20 power sudo[4170958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 Mime list_redirects --output=json'
Sep 13 05:01:20 power sudo[4170958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:20 power sudo[4170958]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:23 power sudo[4171045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=intelek1 DirectoryPrivacy is_directory_protected dir=/home/intelek1/public_html --output=json'
Sep 13 05:01:23 power sudo[4171045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:23 power sudo[4171045]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:24 power sudo[4171109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:24 power sudo[4171109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:24 power sudo[4171109]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:24 power sudo[4171114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:01:24 power sudo[4171114]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:01:24 power sudo[4171114]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:01:24 power sudo[4171114]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:01:24 power sudo[4171114]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:24 power sudo[4171114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:24 power sudo[4171114]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:24 power sudo[4171120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:01:24 power sudo[4171120]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:01:24 power sudo[4171120]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:01:24 power sudo[4171120]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:01:24 power sudo[4171120]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:24 power sudo[4171120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:24 power sudo[4171120]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:24 power sudo[4171128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:01:24 power sudo[4171128]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:01:24 power sudo[4171128]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:01:24 power sudo[4171128]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:01:24 power sudo[4171128]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:24 power sudo[4171128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:24 power sudo[4171128]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:26 power sudo[4171245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:26 power sudo[4171245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:26 power sudo[4171245]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:26 power sudo[4171250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:01:26 power sudo[4171250]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:01:26 power sudo[4171250]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:01:26 power sudo[4171250]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:01:26 power sudo[4171250]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:26 power sudo[4171250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:26 power sudo[4171250]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:26 power sudo[4171255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:01:26 power sudo[4171255]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:01:26 power sudo[4171255]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:01:26 power sudo[4171255]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:01:26 power sudo[4171255]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:26 power sudo[4171255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:26 power sudo[4171255]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:26 power sudo[4171262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 /bin/sh -c 'cd /home/intelek1/public_html && find /home/intelek1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user intelek1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:01:26 power sudo[4171262]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:01:26 power sudo[4171262]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:01:26 power sudo[4171262]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:01:26 power sudo[4171262]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:01:26 power sudo[4171262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:26 power sudo[4171262]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:29 power sudo[4171323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DomainInfo single_domain_data domain=invoices.holiyaytravel.com return_https_redirect_status=1 --output=json'
Sep 13 05:01:29 power sudo[4171323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:29 power sudo[4171323]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:30 power sudo[4171358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt /bin/sh -c 'cd /home/holiyayt/invoices.holiyaytravel.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:01:30 power sudo[4171358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:30 power sudo[4171358]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:30 power sudo[4171364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user holiyayt --user-current --json'
Sep 13 05:01:30 power sudo[4171364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:30 power sudo[4171364]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:30 power sudo[4171370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:01:30 power sudo[4171370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:30 power sudo[4171370]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:32 power sudo[4171458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=holiyayt DirectoryPrivacy is_directory_protected dir=/home/holiyayt/invoices.holiyaytravel.com --output=json'
Sep 13 05:01:32 power sudo[4171458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:32 power sudo[4171458]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:36 power sudo[4171665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep 13 05:01:36 power sudo[4171665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:36 power sudo[4171665]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:36 power sudo[4171671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jpparkin --output=json'
Sep 13 05:01:36 power sudo[4171671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:36 power sudo[4171671]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:40 power sudo[4171773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin /bin/sh -c 'cd /home/jpparkin/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:01:40 power sudo[4171773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:40 power sudo[4171773]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:40 power sudo[4171779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jpparkin --user-current --json'
Sep 13 05:01:40 power sudo[4171779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:40 power sudo[4171779]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:40 power sudo[4171785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin LangPHP php_get_vhost_versions --output=json'
Sep 13 05:01:40 power sudo[4171785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:40 power sudo[4171785]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:40 power sudo[4171790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:01:40 power sudo[4171790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:40 power sudo[4171790]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:40 power sudo[4171803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DomainInfo single_domain_data domain=jpparkinzinegotino.mk return_https_redirect_status=1 --output=json'
Sep 13 05:01:40 power sudo[4171803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:41 power sudo[4171803]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:41 power sudo[4171810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin Mime list_redirects --output=json'
Sep 13 05:01:41 power sudo[4171810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:41 power sudo[4171810]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:42 power sudo[4171880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jpparkin DirectoryPrivacy is_directory_protected dir=/home/jpparkin/public_html --output=json'
Sep 13 05:01:42 power sudo[4171880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:42 power sudo[4171880]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:46 power sudo[4172062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep 13 05:01:46 power sudo[4172062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:46 power sudo[4172062]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:46 power sudo[4172067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=karpospo --output=json'
Sep 13 05:01:46 power sudo[4172067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:46 power sudo[4172067]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:50 power sudo[4172172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo /bin/sh -c 'cd /home/karpospo/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:01:50 power sudo[4172172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:50 power sudo[4172172]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:50 power sudo[4172182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user karpospo --user-current --json'
Sep 13 05:01:50 power sudo[4172182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:50 power sudo[4172182]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:50 power sudo[4172190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo LangPHP php_get_vhost_versions --output=json'
Sep 13 05:01:50 power sudo[4172190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:50 power sudo[4172190]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:50 power sudo[4172196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:01:50 power sudo[4172196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:50 power sudo[4172196]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:51 power sudo[4172216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DomainInfo single_domain_data domain=karpospoliklinika.com.mk return_https_redirect_status=1 --output=json'
Sep 13 05:01:51 power sudo[4172216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:51 power sudo[4172216]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:51 power sudo[4172233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo Mime list_redirects --output=json'
Sep 13 05:01:51 power sudo[4172233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:51 power sudo[4172233]: pam_unix(sudo:session): session closed for user root
Sep 13 05:01:54 power sudo[4172367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=karpospo DirectoryPrivacy is_directory_protected dir=/home/karpospo/public_html --output=json'
Sep 13 05:01:54 power sudo[4172367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:01:54 power sudo[4172367]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:01 power sudo[4172662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:02:01 power sudo[4172662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:01 power sudo[4172662]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:01 power sudo[4172671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 13 05:02:01 power sudo[4172671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:01 power sudo[4172671]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:01 power sudo[4172689]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:02:01 power sudo[4172689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:01 power sudo[4172689]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:01 power sudo[4172706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DomainInfo single_domain_data domain=kaysharov.com return_https_redirect_status=1 --output=json'
Sep 13 05:02:01 power sudo[4172706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:02 power sudo[4172706]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:04 power sudo[4172788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com --output=json'
Sep 13 05:02:04 power sudo[4172788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:04 power sudo[4172788]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:13 power sudo[4173136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews /bin/sh -c 'cd /home/goodnews/kaysharov.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:02:13 power sudo[4173136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:13 power sudo[4173136]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:13 power sudo[4173142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user goodnews --user-current --json'
Sep 13 05:02:13 power sudo[4173142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:13 power sudo[4173142]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:13 power sudo[4173152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:02:13 power sudo[4173152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:13 power sudo[4173152]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:16 power sudo[4173269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=goodnews DirectoryPrivacy is_directory_protected dir=/home/goodnews/kaysharov.com/test --output=json'
Sep 13 05:02:16 power sudo[4173269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:16 power sudo[4173269]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:20 power sudo[4173507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep 13 05:02:20 power sudo[4173507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:20 power sudo[4173507]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:20 power sudo[4173528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kolened1 --output=json'
Sep 13 05:02:20 power sudo[4173528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:20 power sudo[4173528]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:33 power sudo[4173785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:02:33 power sudo[4173785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:33 power sudo[4173785]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:33 power sudo[4173791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kolened1 --user-current --json'
Sep 13 05:02:33 power sudo[4173791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:33 power sudo[4173791]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:33 power sudo[4173797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 LangPHP php_get_vhost_versions --output=json'
Sep 13 05:02:33 power sudo[4173797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:33 power sudo[4173797]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:33 power sudo[4173802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:02:33 power sudo[4173802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:33 power sudo[4173802]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:34 power sudo[4173817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DomainInfo single_domain_data domain=kolenedelkovski.edu.mk return_https_redirect_status=1 --output=json'
Sep 13 05:02:34 power sudo[4173817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:34 power sudo[4173817]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:34 power sudo[4173823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 Mime list_redirects --output=json'
Sep 13 05:02:34 power sudo[4173823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:34 power sudo[4173823]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:40 power sudo[4173983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kolened1 DirectoryPrivacy is_directory_protected dir=/home/kolened1/public_html --output=json'
Sep 13 05:02:40 power sudo[4173983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:40 power sudo[4173983]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:41 power sudo[4174044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:02:41 power sudo[4174044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:41 power sudo[4174044]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:41 power sudo[4174049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:02:41 power sudo[4174049]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:02:41 power sudo[4174049]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:02:41 power sudo[4174049]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:02:41 power sudo[4174049]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:02:41 power sudo[4174049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:41 power sudo[4174049]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:41 power sudo[4174055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:02:41 power sudo[4174055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:02:41 power sudo[4174055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:02:41 power sudo[4174055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:02:41 power sudo[4174055]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:02:41 power sudo[4174055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:41 power sudo[4174055]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:43 power sudo[4174162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:02:43 power sudo[4174162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:43 power sudo[4174162]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:43 power sudo[4174167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:02:43 power sudo[4174167]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:02:43 power sudo[4174167]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:02:43 power sudo[4174167]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:02:43 power sudo[4174167]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:02:43 power sudo[4174167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:43 power sudo[4174167]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:43 power sudo[4174172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:02:43 power sudo[4174172]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:02:43 power sudo[4174172]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:02:43 power sudo[4174172]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:02:43 power sudo[4174172]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:02:43 power sudo[4174172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:44 power sudo[4174172]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:44 power sudo[4174210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep 13 05:02:44 power sudo[4174210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:44 power sudo[4174210]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:45 power sudo[4174215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kouzonco --output=json'
Sep 13 05:02:45 power sudo[4174215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:45 power sudo[4174215]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:48 power sudo[4174299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco /bin/sh -c 'cd /home/kouzonco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:02:48 power sudo[4174299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:48 power sudo[4174299]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:48 power sudo[4174305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kouzonco --user-current --json'
Sep 13 05:02:48 power sudo[4174305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:48 power sudo[4174305]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:48 power sudo[4174310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco LangPHP php_get_vhost_versions --output=json'
Sep 13 05:02:48 power sudo[4174310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:48 power sudo[4174310]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:48 power sudo[4174316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:02:48 power sudo[4174316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:48 power sudo[4174316]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:49 power sudo[4174330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DomainInfo single_domain_data domain=kouzon.com.hn return_https_redirect_status=1 --output=json'
Sep 13 05:02:49 power sudo[4174330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:49 power sudo[4174330]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:49 power sudo[4174340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco Mime list_redirects --output=json'
Sep 13 05:02:49 power sudo[4174340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:49 power sudo[4174340]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:51 power sudo[4174425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kouzonco DirectoryPrivacy is_directory_protected dir=/home/kouzonco/public_html --output=json'
Sep 13 05:02:51 power sudo[4174425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:51 power sudo[4174425]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:55 power sudo[4174641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep 13 05:02:55 power sudo[4174641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:55 power sudo[4174641]: pam_unix(sudo:session): session closed for user root
Sep 13 05:02:55 power sudo[4174656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sprintst --output=json'
Sep 13 05:02:55 power sudo[4174656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:02:55 power sudo[4174656]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:00 power sudo[4174779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst /bin/sh -c 'cd /home/sprintst/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:03:00 power sudo[4174779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:00 power sudo[4174779]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:00 power sudo[4174785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sprintst --user-current --json'
Sep 13 05:03:00 power sudo[4174785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:00 power sudo[4174785]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:00 power sudo[4174793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst LangPHP php_get_vhost_versions --output=json'
Sep 13 05:03:00 power sudo[4174793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:00 power sudo[4174793]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:00 power sudo[4174801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:03:00 power sudo[4174801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:00 power sudo[4174801]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:01 power sudo[4174833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DomainInfo single_domain_data domain=kritiki.mk return_https_redirect_status=1 --output=json'
Sep 13 05:03:01 power sudo[4174833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:01 power sudo[4174833]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:01 power sudo[4174840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst Mime list_redirects --output=json'
Sep 13 05:03:01 power sudo[4174840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:01 power sudo[4174840]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:04 power sudo[4174932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sprintst DirectoryPrivacy is_directory_protected dir=/home/sprintst/public_html --output=json'
Sep 13 05:03:04 power sudo[4174932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:04 power sudo[4174932]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:08 power sudo[4175146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep 13 05:03:08 power sudo[4175146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:08 power sudo[4175146]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:08 power sudo[4175162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=kujnamon --output=json'
Sep 13 05:03:08 power sudo[4175162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:08 power sudo[4175162]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:12 power sudo[4175257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon /bin/sh -c 'cd /home/kujnamon/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:03:12 power sudo[4175257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:12 power sudo[4175257]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:12 power sudo[4175263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user kujnamon --user-current --json'
Sep 13 05:03:13 power sudo[4175263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:13 power sudo[4175263]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:13 power sudo[4175277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon LangPHP php_get_vhost_versions --output=json'
Sep 13 05:03:13 power sudo[4175277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:13 power sudo[4175277]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:13 power sudo[4175282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:03:13 power sudo[4175282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:13 power sudo[4175282]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:13 power sudo[4175297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DomainInfo single_domain_data domain=kujnamoni.mk return_https_redirect_status=1 --output=json'
Sep 13 05:03:13 power sudo[4175297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:13 power sudo[4175297]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:13 power sudo[4175305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon Mime list_redirects --output=json'
Sep 13 05:03:13 power sudo[4175305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:13 power sudo[4175305]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:16 power sudo[4175395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=kujnamon DirectoryPrivacy is_directory_protected dir=/home/kujnamon/public_html --output=json'
Sep 13 05:03:16 power sudo[4175395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:16 power sudo[4175395]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:24 power sudo[4175700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/love.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:03:24 power sudo[4175700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:24 power sudo[4175700]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:24 power sudo[4175706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 13 05:03:24 power sudo[4175706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:24 power sudo[4175706]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:24 power sudo[4175714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:03:24 power sudo[4175714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:24 power sudo[4175714]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:25 power sudo[4175731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=love.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 05:03:25 power sudo[4175731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:25 power sudo[4175731]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:27 power sudo[4175870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/love.cetplatform.mk --output=json'
Sep 13 05:03:28 power sudo[4175870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:28 power sudo[4175870]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:31 power sudo[4176149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep 13 05:03:31 power sudo[4176149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:31 power sudo[4176149]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:31 power sudo[4176157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makdrone --output=json'
Sep 13 05:03:31 power sudo[4176157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:32 power sudo[4176157]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:36 power sudo[4176245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:03:36 power sudo[4176245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:36 power sudo[4176245]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:36 power sudo[4176251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makdrone --user-current --json'
Sep 13 05:03:36 power sudo[4176251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:36 power sudo[4176251]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:36 power sudo[4176264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone LangPHP php_get_vhost_versions --output=json'
Sep 13 05:03:36 power sudo[4176264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:36 power sudo[4176264]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:36 power sudo[4176271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:03:36 power sudo[4176271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:36 power sudo[4176271]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:37 power sudo[4176284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DomainInfo single_domain_data domain=makdrone.mk return_https_redirect_status=1 --output=json'
Sep 13 05:03:37 power sudo[4176284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:37 power sudo[4176284]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:37 power sudo[4176291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone Mime list_redirects --output=json'
Sep 13 05:03:37 power sudo[4176291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:37 power sudo[4176291]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:39 power sudo[4176407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makdrone DirectoryPrivacy is_directory_protected dir=/home/makdrone/public_html --output=json'
Sep 13 05:03:39 power sudo[4176407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:39 power sudo[4176407]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:40 power sudo[4176473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:03:40 power sudo[4176473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:40 power sudo[4176473]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:40 power sudo[4176478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:03:40 power sudo[4176478]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:03:40 power sudo[4176478]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:03:40 power sudo[4176478]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:03:40 power sudo[4176478]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:03:40 power sudo[4176478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:40 power sudo[4176478]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:40 power sudo[4176483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:03:40 power sudo[4176483]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:03:40 power sudo[4176483]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:03:40 power sudo[4176483]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:03:40 power sudo[4176483]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:03:40 power sudo[4176483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:41 power sudo[4176483]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:41 power sudo[4176488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:03:41 power sudo[4176488]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:03:41 power sudo[4176488]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:03:41 power sudo[4176488]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:03:41 power sudo[4176488]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:03:41 power sudo[4176488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:41 power sudo[4176488]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:43 power sudo[4176607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:03:43 power sudo[4176607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:43 power sudo[4176607]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:43 power sudo[4176612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:03:43 power sudo[4176612]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:03:43 power sudo[4176612]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:03:43 power sudo[4176612]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:03:43 power sudo[4176612]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:03:43 power sudo[4176612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:43 power sudo[4176612]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:43 power sudo[4176617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:03:43 power sudo[4176617]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:03:43 power sudo[4176617]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:03:43 power sudo[4176617]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:03:43 power sudo[4176617]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:03:43 power sudo[4176617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:43 power sudo[4176617]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:43 power sudo[4176622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone /bin/sh -c 'cd /home/makdrone/public_html && find /home/makdrone/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user makdrone \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:03:43 power sudo[4176622]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:03:43 power sudo[4176622]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:03:43 power sudo[4176622]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:03:43 power sudo[4176622]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:03:43 power sudo[4176622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:43 power sudo[4176622]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:43 power sudo[4176660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep 13 05:03:44 power sudo[4176660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:44 power sudo[4176660]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:44 power sudo[4176669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=makoasmk --output=json'
Sep 13 05:03:44 power sudo[4176669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:44 power sudo[4176669]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:49 power sudo[4176773]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk /bin/sh -c 'cd /home/makoasmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:03:49 power sudo[4176773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:49 power sudo[4176773]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:49 power sudo[4176783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user makoasmk --user-current --json'
Sep 13 05:03:49 power sudo[4176783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:49 power sudo[4176783]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:49 power sudo[4176789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:03:49 power sudo[4176789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:49 power sudo[4176789]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:49 power sudo[4176796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:03:49 power sudo[4176796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:49 power sudo[4176796]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:49 power sudo[4176813]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DomainInfo single_domain_data domain=makoas.mk return_https_redirect_status=1 --output=json'
Sep 13 05:03:49 power sudo[4176813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:50 power sudo[4176813]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:50 power sudo[4176819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk Mime list_redirects --output=json'
Sep 13 05:03:50 power sudo[4176819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:50 power sudo[4176819]: pam_unix(sudo:session): session closed for user root
Sep 13 05:03:53 power sudo[4176934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=makoasmk DirectoryPrivacy is_directory_protected dir=/home/makoasmk/public_html --output=json'
Sep 13 05:03:53 power sudo[4176934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:03:54 power sudo[4176934]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:01 power sudo[4177282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou /bin/sh -c 'cd /home/ambitiou/mango.ambitioussolutions.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:04:02 power sudo[4177282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:02 power sudo[4177282]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:02 power sudo[4177293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ambitiou --user-current --json'
Sep 13 05:04:02 power sudo[4177293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:02 power sudo[4177293]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:02 power sudo[4177302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:04:02 power sudo[4177302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:02 power sudo[4177302]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:03 power sudo[4177325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DomainInfo single_domain_data domain=mango.ambitioussolutions.mk return_https_redirect_status=1 --output=json'
Sep 13 05:04:03 power sudo[4177325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:03 power sudo[4177325]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:06 power sudo[4177425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ambitiou DirectoryPrivacy is_directory_protected dir=/home/ambitiou/mango.ambitioussolutions.mk --output=json'
Sep 13 05:04:06 power sudo[4177425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:06 power sudo[4177425]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:16 power sudo[4177793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm /bin/sh -c 'cd /home/edomcomm/mkvesti.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:04:16 power sudo[4177793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:16 power sudo[4177793]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:16 power sudo[4177802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 php_get_system_default_version --output=json'
Sep 13 05:04:16 power sudo[4177802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:16 power sudo[4177802]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:16 power sudo[4177811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:04:16 power sudo[4177811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:16 power sudo[4177811]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:17 power sudo[4177839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DomainInfo single_domain_data domain=mkvesti.mk return_https_redirect_status=1 --output=json'
Sep 13 05:04:17 power sudo[4177839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:17 power sudo[4177839]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:21 power sudo[4177947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=edomcomm DirectoryPrivacy is_directory_protected dir=/home/edomcomm/mkvesti.mk --output=json'
Sep 13 05:04:21 power sudo[4177947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:21 power sudo[4177947]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:26 power sudo[4178282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep 13 05:04:26 power sudo[4178282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:27 power sudo[4178282]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:27 power sudo[4178295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=modernar --output=json'
Sep 13 05:04:27 power sudo[4178295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:27 power sudo[4178295]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:31 power sudo[4178366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:04:31 power sudo[4178366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:31 power sudo[4178366]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:31 power sudo[4178372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user modernar --user-current --json'
Sep 13 05:04:31 power sudo[4178372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:31 power sudo[4178372]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:31 power sudo[4178382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar LangPHP php_get_vhost_versions --output=json'
Sep 13 05:04:31 power sudo[4178382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:31 power sudo[4178382]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:31 power sudo[4178388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:04:31 power sudo[4178388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:31 power sudo[4178388]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:32 power sudo[4178410]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DomainInfo single_domain_data domain=modernart.mk return_https_redirect_status=1 --output=json'
Sep 13 05:04:32 power sudo[4178410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:32 power sudo[4178410]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:32 power sudo[4178420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar Mime list_redirects --output=json'
Sep 13 05:04:32 power sudo[4178420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:32 power sudo[4178420]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:35 power sudo[4178499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=modernar DirectoryPrivacy is_directory_protected dir=/home/modernar/public_html --output=json'
Sep 13 05:04:35 power sudo[4178499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:35 power sudo[4178499]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:36 power sudo[4178559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:04:36 power sudo[4178559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:36 power sudo[4178559]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:36 power sudo[4178564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:04:36 power sudo[4178564]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:04:36 power sudo[4178564]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:04:36 power sudo[4178564]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:04:36 power sudo[4178564]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:04:36 power sudo[4178564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:36 power sudo[4178564]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:36 power sudo[4178569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:04:36 power sudo[4178569]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:04:36 power sudo[4178569]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:04:36 power sudo[4178569]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:04:36 power sudo[4178569]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:04:36 power sudo[4178569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:36 power sudo[4178569]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:36 power sudo[4178577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:04:36 power sudo[4178577]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:04:36 power sudo[4178577]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:04:36 power sudo[4178577]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:04:36 power sudo[4178577]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:04:36 power sudo[4178577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:36 power sudo[4178577]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:38 power sudo[4178703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:04:38 power sudo[4178703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:38 power sudo[4178703]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:38 power sudo[4178708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:04:38 power sudo[4178708]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:04:38 power sudo[4178708]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:04:38 power sudo[4178708]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:04:38 power sudo[4178708]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:04:38 power sudo[4178708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:38 power sudo[4178708]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:38 power sudo[4178713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:04:38 power sudo[4178713]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:04:38 power sudo[4178713]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:04:38 power sudo[4178713]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:04:38 power sudo[4178713]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:04:38 power sudo[4178713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:38 power sudo[4178713]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:38 power sudo[4178723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar /bin/sh -c 'cd /home/modernar/public_html && find /home/modernar/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user modernar \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:04:38 power sudo[4178723]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:04:38 power sudo[4178723]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:04:38 power sudo[4178723]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:04:38 power sudo[4178723]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:04:38 power sudo[4178723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:38 power sudo[4178723]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:42 power sudo[4178835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx /bin/sh -c 'cd /home/v5srybi9dcdx/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:04:42 power sudo[4178835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:42 power sudo[4178835]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:42 power sudo[4178842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user v5srybi9dcdx --user-current --json'
Sep 13 05:04:42 power sudo[4178842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:42 power sudo[4178842]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:42 power sudo[4178849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:04:42 power sudo[4178849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:42 power sudo[4178849]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:43 power sudo[4178868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DomainInfo single_domain_data domain=momcurls.com return_https_redirect_status=1 --output=json'
Sep 13 05:04:43 power sudo[4178868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:43 power sudo[4178868]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:45 power sudo[4178947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=v5srybi9dcdx DirectoryPrivacy is_directory_protected dir=/home/v5srybi9dcdx/public_html --output=json'
Sep 13 05:04:45 power sudo[4178947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:45 power sudo[4178947]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:49 power sudo[4179170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep 13 05:04:49 power sudo[4179170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:49 power sudo[4179170]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:49 power sudo[4179181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mpbmk --output=json'
Sep 13 05:04:49 power sudo[4179181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:50 power sudo[4179181]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:51 power sudo[4179241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk /bin/sh -c 'cd /home/mpbmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:04:51 power sudo[4179241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:51 power sudo[4179241]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:51 power sudo[4179248]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mpbmk --user-current --json'
Sep 13 05:04:51 power sudo[4179248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:52 power sudo[4179248]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:52 power sudo[4179254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:04:52 power sudo[4179254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:52 power sudo[4179254]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:52 power sudo[4179260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:04:52 power sudo[4179260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:52 power sudo[4179260]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:52 power sudo[4179276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DomainInfo single_domain_data domain=mpb.mk return_https_redirect_status=1 --output=json'
Sep 13 05:04:52 power sudo[4179276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:52 power sudo[4179276]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:52 power sudo[4179282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk Mime list_redirects --output=json'
Sep 13 05:04:52 power sudo[4179282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:52 power sudo[4179282]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:54 power sudo[4179359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mpbmk DirectoryPrivacy is_directory_protected dir=/home/mpbmk/public_html --output=json'
Sep 13 05:04:54 power sudo[4179359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:54 power sudo[4179359]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:57 power sudo[4179639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep 13 05:04:57 power sudo[4179639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:57 power sudo[4179639]: pam_unix(sudo:session): session closed for user root
Sep 13 05:04:57 power sudo[4179646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mspmk --output=json'
Sep 13 05:04:57 power sudo[4179646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:04:57 power sudo[4179646]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:01 power systemd[4179825]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:05:03 power sudo[4179880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk /bin/sh -c 'cd /home/mspmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:05:03 power sudo[4179880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:03 power sudo[4179880]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:03 power sudo[4179886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mspmk --user-current --json'
Sep 13 05:05:03 power sudo[4179886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:03 power sudo[4179886]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:03 power sudo[4179895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:05:03 power sudo[4179895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:03 power sudo[4179895]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:03 power sudo[4179900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:05:03 power sudo[4179900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:03 power sudo[4179900]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:04 power sudo[4179917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DomainInfo single_domain_data domain=msp.mk return_https_redirect_status=1 --output=json'
Sep 13 05:05:04 power sudo[4179917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:04 power sudo[4179917]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:04 power sudo[4179931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk Mime list_redirects --output=json'
Sep 13 05:05:04 power sudo[4179931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:04 power sudo[4179931]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:07 power sudo[4180051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mspmk DirectoryPrivacy is_directory_protected dir=/home/mspmk/public_html --output=json'
Sep 13 05:05:07 power sudo[4180051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:07 power sudo[4180051]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:11 power sudo[4180294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep 13 05:05:11 power sudo[4180294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:11 power sudo[4180294]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:11 power sudo[4180304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mstmmk --output=json'
Sep 13 05:05:11 power sudo[4180304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:11 power sudo[4180304]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:15 power sudo[4180386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk /bin/sh -c 'cd /home/mstmmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:05:15 power sudo[4180386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:15 power sudo[4180386]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:15 power sudo[4180392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mstmmk --user-current --json'
Sep 13 05:05:15 power sudo[4180392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:16 power sudo[4180392]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:16 power sudo[4180400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:05:16 power sudo[4180400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:16 power sudo[4180400]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:16 power sudo[4180411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:05:16 power sudo[4180411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:16 power sudo[4180411]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:16 power sudo[4180440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DomainInfo single_domain_data domain=mstm.mk return_https_redirect_status=1 --output=json'
Sep 13 05:05:16 power sudo[4180440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:16 power sudo[4180440]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:16 power sudo[4180458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk Mime list_redirects --output=json'
Sep 13 05:05:16 power sudo[4180458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:16 power sudo[4180458]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:20 power sudo[4180565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mstmmk DirectoryPrivacy is_directory_protected dir=/home/mstmmk/public_html --output=json'
Sep 13 05:05:20 power sudo[4180565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:20 power sudo[4180565]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:23 power sudo[4180796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep 13 05:05:23 power sudo[4180796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:23 power sudo[4180796]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:23 power sudo[4180802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=naksorgm --output=json'
Sep 13 05:05:23 power sudo[4180802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:23 power sudo[4180802]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:30 power sudo[4180961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm /bin/sh -c 'cd /home/naksorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:05:30 power sudo[4180961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:30 power sudo[4180961]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:30 power sudo[4180967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user naksorgm --user-current --json'
Sep 13 05:05:30 power sudo[4180967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:30 power sudo[4180967]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:30 power sudo[4180986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm LangPHP php_get_vhost_versions --output=json'
Sep 13 05:05:30 power sudo[4180986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:30 power sudo[4180986]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:30 power sudo[4180997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:05:30 power sudo[4180997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:30 power sudo[4180997]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:30 power sudo[4181017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DomainInfo single_domain_data domain=naks.org.mk return_https_redirect_status=1 --output=json'
Sep 13 05:05:30 power sudo[4181017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:31 power sudo[4181017]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:31 power sudo[4181023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm Mime list_redirects --output=json'
Sep 13 05:05:31 power sudo[4181023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:31 power sudo[4181023]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:34 power sudo[4181137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=naksorgm DirectoryPrivacy is_directory_protected dir=/home/naksorgm/public_html --output=json'
Sep 13 05:05:34 power sudo[4181137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:34 power sudo[4181137]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:38 power sudo[4181358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep 13 05:05:38 power sudo[4181358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:38 power sudo[4181358]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:38 power sudo[4181365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nasaidni --output=json'
Sep 13 05:05:38 power sudo[4181365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:38 power sudo[4181365]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:42 power sudo[4181454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html/test.nasaidnina.com.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:05:42 power sudo[4181454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:42 power sudo[4181454]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:42 power sudo[4181460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep 13 05:05:42 power sudo[4181460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:42 power sudo[4181460]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:42 power sudo[4181467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni LangPHP php_get_vhost_versions --output=json'
Sep 13 05:05:42 power sudo[4181467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:42 power sudo[4181467]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:42 power sudo[4181473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:05:42 power sudo[4181473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:42 power sudo[4181473]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:43 power sudo[4181488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=test.nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep 13 05:05:43 power sudo[4181488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:43 power sudo[4181488]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:43 power sudo[4181495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni Mime list_redirects --output=json'
Sep 13 05:05:43 power sudo[4181495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:43 power sudo[4181495]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:46 power sudo[4181620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html/test.nasaidnina.com.mk/wp --output=json'
Sep 13 05:05:46 power sudo[4181620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:46 power sudo[4181620]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:52 power sudo[4181897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni /bin/sh -c 'cd /home/nasaidni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:05:52 power sudo[4181897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:52 power sudo[4181897]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:52 power sudo[4181905]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nasaidni --user-current --json'
Sep 13 05:05:52 power sudo[4181905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:52 power sudo[4181905]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:52 power sudo[4181910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:05:52 power sudo[4181910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:52 power sudo[4181910]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:53 power sudo[4181926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DomainInfo single_domain_data domain=nasaidnina.com.mk return_https_redirect_status=1 --output=json'
Sep 13 05:05:53 power sudo[4181926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:53 power sudo[4181926]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:56 power sudo[4182011]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nasaidni DirectoryPrivacy is_directory_protected dir=/home/nasaidni/public_html --output=json'
Sep 13 05:05:56 power sudo[4182011]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:56 power sudo[4182011]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:58 power sudo[4182210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep 13 05:05:58 power sudo[4182210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:59 power sudo[4182210]: pam_unix(sudo:session): session closed for user root
Sep 13 05:05:59 power sudo[4182218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ismassag --output=json'
Sep 13 05:05:59 power sudo[4182218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:05:59 power sudo[4182218]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:01 power systemd[4182329]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 05:06:06 power sudo[4182623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag /bin/sh -c 'cd /home/ismassag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:06:06 power sudo[4182623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:06 power sudo[4182623]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:06 power sudo[4182629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ismassag --user-current --json'
Sep 13 05:06:07 power sudo[4182629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:07 power sudo[4182629]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:07 power sudo[4182653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag LangPHP php_get_vhost_versions --output=json'
Sep 13 05:06:07 power sudo[4182653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:07 power sudo[4182653]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:07 power sudo[4182665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:06:07 power sudo[4182665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:07 power sudo[4182665]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:07 power sudo[4182691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DomainInfo single_domain_data domain=needmassagetherapy.co.uk return_https_redirect_status=1 --output=json'
Sep 13 05:06:07 power sudo[4182691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:07 power sudo[4182691]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:07 power sudo[4182711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag Mime list_redirects --output=json'
Sep 13 05:06:07 power sudo[4182711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:07 power sudo[4182711]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:12 power sudo[4182978]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ismassag DirectoryPrivacy is_directory_protected dir=/home/ismassag/public_html --output=json'
Sep 13 05:06:12 power sudo[4182978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:12 power sudo[4182978]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:19 power sudo[4183482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:06:19 power sudo[4183482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:19 power sudo[4183482]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:19 power sudo[4183492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user chemhemc --user-current --json'
Sep 13 05:06:19 power sudo[4183492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:19 power sudo[4183492]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:19 power sudo[4183512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:06:19 power sudo[4183512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:19 power sudo[4183512]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:19 power sudo[4183555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DomainInfo single_domain_data domain=new.chemhem.com return_https_redirect_status=1 --output=json'
Sep 13 05:06:20 power sudo[4183555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:20 power sudo[4183555]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:22 power sudo[4183716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=chemhemc DirectoryPrivacy is_directory_protected dir=/home/chemhemc/new.chemhem.com --output=json'
Sep 13 05:06:22 power sudo[4183716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:22 power sudo[4183716]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:23 power sudo[4183862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:23 power sudo[4183862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:23 power sudo[4183862]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:23 power sudo[4183868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 13 05:06:23 power sudo[4183868]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 13 05:06:23 power sudo[4183868]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 13 05:06:23 power sudo[4183868]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 13 05:06:23 power sudo[4183868]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:23 power sudo[4183868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:23 power sudo[4183868]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:23 power sudo[4183874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 13 05:06:23 power sudo[4183874]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 13 05:06:23 power sudo[4183874]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 13 05:06:23 power sudo[4183874]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 13 05:06:23 power sudo[4183874]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:23 power sudo[4183874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:23 power sudo[4183874]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:23 power sudo[4183885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep 13 05:06:23 power sudo[4183885]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep 13 05:06:23 power sudo[4183885]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep 13 05:06:23 power sudo[4183885]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep 13 05:06:23 power sudo[4183885]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:23 power sudo[4183885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:23 power sudo[4183885]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:26 power sudo[4184068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:26 power sudo[4184068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:26 power sudo[4184068]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:26 power sudo[4184074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 13 05:06:26 power sudo[4184074]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 13 05:06:26 power sudo[4184074]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 13 05:06:26 power sudo[4184074]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 13 05:06:26 power sudo[4184074]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:26 power sudo[4184074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:26 power sudo[4184074]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:26 power sudo[4184080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 13 05:06:26 power sudo[4184080]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 13 05:06:26 power sudo[4184080]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 13 05:06:26 power sudo[4184080]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 13 05:06:26 power sudo[4184080]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:26 power sudo[4184080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:26 power sudo[4184080]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:26 power sudo[4184086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc /bin/sh -c 'cd /home/chemhemc/new.chemhem.com && find /home/chemhemc/new.chemhem.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user chemhemc \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\'
Sep 13 05:06:26 power sudo[4184086]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\'
Sep 13 05:06:26 power sudo[4184086]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\'
Sep 13 05:06:26 power sudo[4184086]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\'
Sep 13 05:06:26 power sudo[4184086]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:26 power sudo[4184086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:26 power sudo[4184086]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:26 power sudo[4184144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep 13 05:06:26 power sudo[4184144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:27 power sudo[4184144]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:27 power sudo[4184153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikolov1 --output=json'
Sep 13 05:06:27 power sudo[4184153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:27 power sudo[4184153]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:31 power sudo[4184392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:06:31 power sudo[4184392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:31 power sudo[4184392]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:31 power sudo[4184399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikolov1 --user-current --json'
Sep 13 05:06:31 power sudo[4184399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:31 power sudo[4184399]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:31 power sudo[4184416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 LangPHP php_get_vhost_versions --output=json'
Sep 13 05:06:31 power sudo[4184416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:32 power sudo[4184416]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:32 power sudo[4184423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:06:32 power sudo[4184423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:32 power sudo[4184423]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:32 power sudo[4184448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DomainInfo single_domain_data domain=nikolovproduction.com return_https_redirect_status=1 --output=json'
Sep 13 05:06:32 power sudo[4184448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:32 power sudo[4184448]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:32 power sudo[4184459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 Mime list_redirects --output=json'
Sep 13 05:06:32 power sudo[4184459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:32 power sudo[4184459]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:35 power sudo[4184635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikolov1 DirectoryPrivacy is_directory_protected dir=/home/nikolov1/public_html --output=json'
Sep 13 05:06:35 power sudo[4184635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:35 power sudo[4184635]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:36 power sudo[4184737]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:36 power sudo[4184737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:36 power sudo[4184737]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:36 power sudo[4184745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:06:36 power sudo[4184745]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:06:36 power sudo[4184745]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:06:36 power sudo[4184745]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:06:36 power sudo[4184745]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:36 power sudo[4184745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:36 power sudo[4184745]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:36 power sudo[4184750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:06:36 power sudo[4184750]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:06:36 power sudo[4184750]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:06:36 power sudo[4184750]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:06:36 power sudo[4184750]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:36 power sudo[4184750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:36 power sudo[4184750]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:36 power sudo[4184757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:06:36 power sudo[4184757]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:06:36 power sudo[4184757]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:06:36 power sudo[4184757]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:06:36 power sudo[4184757]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:36 power sudo[4184757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:36 power sudo[4184757]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:38 power sudo[4184969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:38 power sudo[4184969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:38 power sudo[4184969]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:38 power sudo[4184974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:06:38 power sudo[4184974]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:06:38 power sudo[4184974]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:06:38 power sudo[4184974]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:06:38 power sudo[4184974]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:38 power sudo[4184974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:38 power sudo[4184974]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:38 power sudo[4184979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:06:38 power sudo[4184979]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:06:38 power sudo[4184979]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:06:38 power sudo[4184979]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:06:38 power sudo[4184979]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:38 power sudo[4184979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:38 power sudo[4184979]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:38 power sudo[4184985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 /bin/sh -c 'cd /home/nikolov1/public_html && find /home/nikolov1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user nikolov1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:06:38 power sudo[4184985]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:06:38 power sudo[4184985]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:06:38 power sudo[4184985]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:06:38 power sudo[4184985]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:06:38 power sudo[4184985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:38 power sudo[4184985]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:39 power sudo[4185054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep 13 05:06:39 power sudo[4185054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:39 power sudo[4185054]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:39 power sudo[4185060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nolimits --output=json'
Sep 13 05:06:39 power sudo[4185060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:39 power sudo[4185060]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:44 power sudo[4185223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits /bin/sh -c 'cd /home/nolimits/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:06:44 power sudo[4185223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:44 power sudo[4185223]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:44 power sudo[4185229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nolimits --user-current --json'
Sep 13 05:06:44 power sudo[4185229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:44 power sudo[4185229]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:44 power sudo[4185238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits LangPHP php_get_vhost_versions --output=json'
Sep 13 05:06:44 power sudo[4185238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:44 power sudo[4185238]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:44 power sudo[4185244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:06:44 power sudo[4185244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:44 power sudo[4185244]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:45 power sudo[4185262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DomainInfo single_domain_data domain=nolimits.mk return_https_redirect_status=1 --output=json'
Sep 13 05:06:45 power sudo[4185262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:45 power sudo[4185262]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:45 power sudo[4185268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits Mime list_redirects --output=json'
Sep 13 05:06:45 power sudo[4185268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:45 power sudo[4185268]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:47 power sudo[4185355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nolimits DirectoryPrivacy is_directory_protected dir=/home/nolimits/public_html/tru-find --output=json'
Sep 13 05:06:47 power sudo[4185355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:47 power sudo[4185355]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:50 power sudo[4185599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep 13 05:06:50 power sudo[4185599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:50 power sudo[4185599]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:50 power sudo[4185607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=onlinesh --output=json'
Sep 13 05:06:50 power sudo[4185607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:50 power sudo[4185607]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:54 power sudo[4185711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh /bin/sh -c 'cd /home/onlinesh/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:06:54 power sudo[4185711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:54 power sudo[4185711]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:54 power sudo[4185717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user onlinesh --user-current --json'
Sep 13 05:06:54 power sudo[4185717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:54 power sudo[4185717]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:54 power sudo[4185726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh LangPHP php_get_vhost_versions --output=json'
Sep 13 05:06:54 power sudo[4185726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:54 power sudo[4185726]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:54 power sudo[4185734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:06:54 power sudo[4185734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:54 power sudo[4185734]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:54 power sudo[4185750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DomainInfo single_domain_data domain=onlineshop.com.mk return_https_redirect_status=1 --output=json'
Sep 13 05:06:54 power sudo[4185750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:54 power sudo[4185750]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:54 power sudo[4185759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh Mime list_redirects --output=json'
Sep 13 05:06:54 power sudo[4185759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:55 power sudo[4185759]: pam_unix(sudo:session): session closed for user root
Sep 13 05:06:57 power sudo[4185842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=onlinesh DirectoryPrivacy is_directory_protected dir=/home/onlinesh/public_html --output=json'
Sep 13 05:06:57 power sudo[4185842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:06:57 power sudo[4185842]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:00 power sudo[4186040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep 13 05:07:00 power sudo[4186040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:01 power sudo[4186040]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:01 power sudo[4186048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=palenzok --output=json'
Sep 13 05:07:01 power sudo[4186048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:01 power sudo[4186048]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:02 power systemd[4186097]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 05:07:04 power sudo[4186173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok /bin/sh -c 'cd /home/palenzok/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:07:04 power sudo[4186173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:04 power sudo[4186173]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:04 power sudo[4186179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user palenzok --user-current --json'
Sep 13 05:07:04 power sudo[4186179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:05 power sudo[4186179]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:05 power sudo[4186186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok LangPHP php_get_vhost_versions --output=json'
Sep 13 05:07:05 power sudo[4186186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:05 power sudo[4186186]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:05 power sudo[4186191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:07:05 power sudo[4186191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:05 power sudo[4186191]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:05 power sudo[4186214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DomainInfo single_domain_data domain=palenzokompani.mk return_https_redirect_status=1 --output=json'
Sep 13 05:07:05 power sudo[4186214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:06 power sudo[4186214]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:06 power sudo[4186221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok Mime list_redirects --output=json'
Sep 13 05:07:06 power sudo[4186221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:06 power sudo[4186221]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:08 power sudo[4186310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=palenzok DirectoryPrivacy is_directory_protected dir=/home/palenzok/public_html --output=json'
Sep 13 05:07:08 power sudo[4186310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:08 power sudo[4186310]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:12 power sudo[4186533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep 13 05:07:12 power sudo[4186533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:12 power sudo[4186533]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:12 power sudo[4186542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pelagoni --output=json'
Sep 13 05:07:12 power sudo[4186542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:12 power sudo[4186542]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:17 power sudo[4186622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni /bin/sh -c 'cd /home/pelagoni/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:07:17 power sudo[4186622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:17 power sudo[4186622]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:17 power sudo[4186629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pelagoni --user-current --json'
Sep 13 05:07:17 power sudo[4186629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:17 power sudo[4186629]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:17 power sudo[4186643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni LangPHP php_get_vhost_versions --output=json'
Sep 13 05:07:17 power sudo[4186643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:17 power sudo[4186643]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:17 power sudo[4186650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:07:17 power sudo[4186650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:17 power sudo[4186650]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:18 power sudo[4186677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DomainInfo single_domain_data domain=pelagonijaregion.mk return_https_redirect_status=1 --output=json'
Sep 13 05:07:18 power sudo[4186677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:18 power sudo[4186677]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:18 power sudo[4186684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni Mime list_redirects --output=json'
Sep 13 05:07:18 power sudo[4186684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:18 power sudo[4186684]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:21 power sudo[4186777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pelagoni DirectoryPrivacy is_directory_protected dir=/home/pelagoni/public_html/p --output=json'
Sep 13 05:07:21 power sudo[4186777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:21 power sudo[4186777]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:25 power sudo[4187033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep 13 05:07:25 power sudo[4187033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:26 power sudo[4187033]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:26 power sudo[4187040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=biplmk --output=json'
Sep 13 05:07:26 power sudo[4187040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:26 power sudo[4187040]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:29 power sudo[4187112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk /bin/sh -c 'cd /home/biplmk/petstop.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:07:29 power sudo[4187112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:29 power sudo[4187112]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:29 power sudo[4187122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user biplmk --user-current --json'
Sep 13 05:07:29 power sudo[4187122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:29 power sudo[4187122]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:29 power sudo[4187132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:07:29 power sudo[4187132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:29 power sudo[4187132]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:29 power sudo[4187140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:07:30 power sudo[4187140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:30 power sudo[4187140]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:30 power sudo[4187156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DomainInfo single_domain_data domain=petstop.mk return_https_redirect_status=1 --output=json'
Sep 13 05:07:30 power sudo[4187156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:30 power sudo[4187156]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:30 power sudo[4187162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk Mime list_redirects --output=json'
Sep 13 05:07:30 power sudo[4187162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:30 power sudo[4187162]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:33 power sudo[4187258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=biplmk DirectoryPrivacy is_directory_protected dir=/home/biplmk/petstop.mk/wp --output=json'
Sep 13 05:07:33 power sudo[4187258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:33 power sudo[4187258]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:36 power sudo[4187466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep 13 05:07:36 power sudo[4187466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:36 power sudo[4187466]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:36 power sudo[4187473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=premiumi --output=json'
Sep 13 05:07:36 power sudo[4187473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:36 power sudo[4187473]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:40 power sudo[4187578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:07:40 power sudo[4187578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:40 power sudo[4187578]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:40 power sudo[4187584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user premiumi --user-current --json'
Sep 13 05:07:40 power sudo[4187584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:40 power sudo[4187584]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:40 power sudo[4187590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi LangPHP php_get_vhost_versions --output=json'
Sep 13 05:07:40 power sudo[4187590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:40 power sudo[4187590]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:40 power sudo[4187595]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:07:41 power sudo[4187595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:41 power sudo[4187595]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:41 power sudo[4187613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DomainInfo single_domain_data domain=premiuminsurance.mk return_https_redirect_status=1 --output=json'
Sep 13 05:07:41 power sudo[4187613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:41 power sudo[4187613]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:41 power sudo[4187620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi Mime list_redirects --output=json'
Sep 13 05:07:41 power sudo[4187620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:41 power sudo[4187620]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:43 power sudo[4187705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=premiumi DirectoryPrivacy is_directory_protected dir=/home/premiumi/public_html --output=json'
Sep 13 05:07:43 power sudo[4187705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:43 power sudo[4187705]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:44 power sudo[4187748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:07:44 power sudo[4187748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:44 power sudo[4187748]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:44 power sudo[4187753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:07:44 power sudo[4187753]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:07:44 power sudo[4187753]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:07:44 power sudo[4187753]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:07:44 power sudo[4187753]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:07:44 power sudo[4187753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:44 power sudo[4187753]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:44 power sudo[4187758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:07:44 power sudo[4187758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:07:44 power sudo[4187758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:07:44 power sudo[4187758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:07:44 power sudo[4187758]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:07:44 power sudo[4187758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:44 power sudo[4187758]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:44 power sudo[4187763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:07:44 power sudo[4187763]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:07:44 power sudo[4187763]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:07:44 power sudo[4187763]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:07:44 power sudo[4187763]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:07:44 power sudo[4187763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:44 power sudo[4187763]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:46 power sudo[4187895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:07:46 power sudo[4187895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:46 power sudo[4187895]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:46 power sudo[4187901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:07:46 power sudo[4187901]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:07:46 power sudo[4187901]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:07:46 power sudo[4187901]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:07:46 power sudo[4187901]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:07:46 power sudo[4187901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:46 power sudo[4187901]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:46 power sudo[4187906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:07:46 power sudo[4187906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:07:46 power sudo[4187906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:07:46 power sudo[4187906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:07:46 power sudo[4187906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:07:46 power sudo[4187906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:46 power sudo[4187906]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:47 power sudo[4187911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi /bin/sh -c 'cd /home/premiumi/public_html && find /home/premiumi/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user premiumi \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:07:47 power sudo[4187911]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:07:47 power sudo[4187911]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:07:47 power sudo[4187911]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:07:47 power sudo[4187911]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:07:47 power sudo[4187911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:47 power sudo[4187911]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:52 power sudo[4188052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr /bin/sh -c 'cd /home/fffhpcwr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:07:52 power sudo[4188052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:52 power sudo[4188052]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:52 power sudo[4188059]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user fffhpcwr --user-current --json'
Sep 13 05:07:52 power sudo[4188059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:52 power sudo[4188059]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:52 power sudo[4188064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:07:52 power sudo[4188064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:52 power sudo[4188064]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:53 power sudo[4188084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DomainInfo single_domain_data domain=rsbsp.org.mk return_https_redirect_status=1 --output=json'
Sep 13 05:07:53 power sudo[4188084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:53 power sudo[4188084]: pam_unix(sudo:session): session closed for user root
Sep 13 05:07:56 power sudo[4188186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=fffhpcwr DirectoryPrivacy is_directory_protected dir=/home/fffhpcwr/public_html --output=json'
Sep 13 05:07:56 power sudo[4188186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:07:56 power sudo[4188186]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:00 power sudo[4188434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep 13 05:08:00 power sudo[4188434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:01 power sudo[4188434]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:01 power sudo[4188442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=radekrat --output=json'
Sep 13 05:08:01 power sudo[4188442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:01 power sudo[4188442]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:06 power sudo[4188598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:08:06 power sudo[4188598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:06 power sudo[4188598]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:06 power sudo[4188604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user radekrat --user-current --json'
Sep 13 05:08:06 power sudo[4188604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:07 power sudo[4188604]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:07 power sudo[4188612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat LangPHP php_get_vhost_versions --output=json'
Sep 13 05:08:07 power sudo[4188612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:07 power sudo[4188612]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:07 power sudo[4188618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:08:07 power sudo[4188618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:07 power sudo[4188618]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:07 power sudo[4188631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DomainInfo single_domain_data domain=radekratovce.edu.mk return_https_redirect_status=1 --output=json'
Sep 13 05:08:07 power sudo[4188631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:07 power sudo[4188631]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:07 power sudo[4188638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat Mime list_redirects --output=json'
Sep 13 05:08:07 power sudo[4188638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:07 power sudo[4188638]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:11 power sudo[4188755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=radekrat DirectoryPrivacy is_directory_protected dir=/home/radekrat/public_html/wp --output=json'
Sep 13 05:08:11 power sudo[4188755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:11 power sudo[4188755]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:11 power sudo[4188804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:08:11 power sudo[4188804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:11 power sudo[4188804]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:11 power sudo[4188809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:08:11 power sudo[4188809]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:08:11 power sudo[4188809]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:08:11 power sudo[4188809]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:08:11 power sudo[4188809]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:08:11 power sudo[4188809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:11 power sudo[4188809]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:11 power sudo[4188814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 13 05:08:11 power sudo[4188814]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 13 05:08:11 power sudo[4188814]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 13 05:08:11 power sudo[4188814]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 13 05:08:11 power sudo[4188814]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:08:11 power sudo[4188814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:12 power sudo[4188814]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:12 power sudo[4188823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat /bin/sh -c 'cd /home/radekrat/public_html/wp && find /home/radekrat/public_html/wp/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user radekrat \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm
Sep 13 05:08:12 power sudo[4188823]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm
Sep 13 05:08:12 power sudo[4188823]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm
Sep 13 05:08:12 power sudo[4188823]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm
Sep 13 05:08:12 power sudo[4188823]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:08:12 power sudo[4188823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:12 power sudo[4188823]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:17 power sudo[4189016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep 13 05:08:17 power sudo[4189016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:17 power sudo[4189016]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:17 power sudo[4189022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rasmorgm --output=json'
Sep 13 05:08:17 power sudo[4189022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:17 power sudo[4189022]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:24 power sudo[4189136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm /bin/sh -c 'cd /home/rasmorgm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:08:24 power sudo[4189136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:24 power sudo[4189136]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:24 power sudo[4189148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rasmorgm --user-current --json'
Sep 13 05:08:24 power sudo[4189148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:24 power sudo[4189148]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:24 power sudo[4189193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm LangPHP php_get_vhost_versions --output=json'
Sep 13 05:08:24 power sudo[4189193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:25 power sudo[4189193]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:25 power sudo[4189200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:08:25 power sudo[4189200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:25 power sudo[4189200]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:25 power sudo[4189218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DomainInfo single_domain_data domain=rasm.org.mk return_https_redirect_status=1 --output=json'
Sep 13 05:08:25 power sudo[4189218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:25 power sudo[4189218]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:25 power sudo[4189230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm Mime list_redirects --output=json'
Sep 13 05:08:25 power sudo[4189230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:25 power sudo[4189230]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:29 power sudo[4189436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rasmorgm DirectoryPrivacy is_directory_protected dir=/home/rasmorgm/public_html --output=json'
Sep 13 05:08:29 power sudo[4189436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:29 power sudo[4189436]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:32 power sudo[4189728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep 13 05:08:32 power sudo[4189728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:32 power sudo[4189728]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:32 power sudo[4189735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=recorgmk --output=json'
Sep 13 05:08:32 power sudo[4189735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:32 power sudo[4189735]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:39 power sudo[4189870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk /bin/sh -c 'cd /home/recorgmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:08:39 power sudo[4189870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:39 power sudo[4189870]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:39 power sudo[4189877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user recorgmk --user-current --json'
Sep 13 05:08:39 power sudo[4189877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:39 power sudo[4189877]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:39 power sudo[4189883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:08:39 power sudo[4189883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:39 power sudo[4189883]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:39 power sudo[4189890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:08:39 power sudo[4189890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:39 power sudo[4189890]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:40 power sudo[4189908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DomainInfo single_domain_data domain=rec.org.mk return_https_redirect_status=1 --output=json'
Sep 13 05:08:40 power sudo[4189908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:40 power sudo[4189908]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:40 power sudo[4189917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk Mime list_redirects --output=json'
Sep 13 05:08:40 power sudo[4189917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:40 power sudo[4189917]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:43 power sudo[4190021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=recorgmk DirectoryPrivacy is_directory_protected dir=/home/recorgmk/public_html --output=json'
Sep 13 05:08:43 power sudo[4190021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:43 power sudo[4190021]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:47 power sudo[4190242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep 13 05:08:47 power sudo[4190242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:47 power sudo[4190242]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:47 power sudo[4190249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stravelm --output=json'
Sep 13 05:08:47 power sudo[4190249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:47 power sudo[4190249]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:51 power sudo[4190338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm /bin/sh -c 'cd /home/stravelm/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:08:51 power sudo[4190338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:51 power sudo[4190338]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:51 power sudo[4190344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stravelm --user-current --json'
Sep 13 05:08:51 power sudo[4190344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:51 power sudo[4190344]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:51 power sudo[4190354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm LangPHP php_get_vhost_versions --output=json'
Sep 13 05:08:51 power sudo[4190354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:51 power sudo[4190354]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:51 power sudo[4190359]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:08:51 power sudo[4190359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:51 power sudo[4190359]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:52 power sudo[4190388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DomainInfo single_domain_data domain=s-travel.mk return_https_redirect_status=1 --output=json'
Sep 13 05:08:52 power sudo[4190388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:52 power sudo[4190388]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:52 power sudo[4190398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm Mime list_redirects --output=json'
Sep 13 05:08:52 power sudo[4190398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:52 power sudo[4190398]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:55 power sudo[4190493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stravelm DirectoryPrivacy is_directory_protected dir=/home/stravelm/public_html --output=json'
Sep 13 05:08:55 power sudo[4190493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:55 power sudo[4190493]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:58 power sudo[4190683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep 13 05:08:58 power sudo[4190683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:59 power sudo[4190683]: pam_unix(sudo:session): session closed for user root
Sep 13 05:08:59 power sudo[4190691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=simbiome --output=json'
Sep 13 05:08:59 power sudo[4190691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:08:59 power sudo[4190691]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:04 power sudo[4190809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome /bin/sh -c 'cd /home/simbiome/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:09:04 power sudo[4190809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:04 power sudo[4190809]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:04 power sudo[4190816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user simbiome --user-current --json'
Sep 13 05:09:04 power sudo[4190816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:04 power sudo[4190816]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:04 power sudo[4190824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome LangPHP php_get_vhost_versions --output=json'
Sep 13 05:09:04 power sudo[4190824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:04 power sudo[4190824]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:05 power sudo[4190832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:09:05 power sudo[4190832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:05 power sudo[4190832]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:05 power sudo[4190860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DomainInfo single_domain_data domain=simbiomedic.mk return_https_redirect_status=1 --output=json'
Sep 13 05:09:05 power sudo[4190860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:05 power sudo[4190860]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:05 power sudo[4190868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome Mime list_redirects --output=json'
Sep 13 05:09:05 power sudo[4190868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:06 power sudo[4190868]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:09 power sudo[4190981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=simbiome DirectoryPrivacy is_directory_protected dir=/home/simbiome/public_html --output=json'
Sep 13 05:09:09 power sudo[4190981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:09 power sudo[4190981]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:19 power sudo[4191307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/sk.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:09:19 power sudo[4191307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:19 power sudo[4191307]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:19 power sudo[4191313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 13 05:09:19 power sudo[4191313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:19 power sudo[4191313]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:19 power sudo[4191320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:09:19 power sudo[4191320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:19 power sudo[4191320]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:20 power sudo[4191338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=sk.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 05:09:20 power sudo[4191338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:20 power sudo[4191338]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:23 power sudo[4191446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/sk.cetplatform.mk --output=json'
Sep 13 05:09:23 power sudo[4191446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:23 power sudo[4191446]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:27 power sudo[4191697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 13 05:09:27 power sudo[4191697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:27 power sudo[4191697]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:27 power sudo[4191703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=solemor1 --output=json'
Sep 13 05:09:27 power sudo[4191703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:27 power sudo[4191703]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:30 power sudo[4191771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:09:30 power sudo[4191771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:30 power sudo[4191771]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:30 power sudo[4191777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep 13 05:09:30 power sudo[4191777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:30 power sudo[4191777]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:30 power sudo[4191788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 LangPHP php_get_vhost_versions --output=json'
Sep 13 05:09:30 power sudo[4191788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:30 power sudo[4191788]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:30 power sudo[4191794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:09:30 power sudo[4191794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:30 power sudo[4191794]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:31 power sudo[4191812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=solem.org.mk return_https_redirect_status=1 --output=json'
Sep 13 05:09:31 power sudo[4191812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:31 power sudo[4191812]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:31 power sudo[4191819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 Mime list_redirects --output=json'
Sep 13 05:09:31 power sudo[4191819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:31 power sudo[4191819]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:33 power sudo[4191922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html --output=json'
Sep 13 05:09:33 power sudo[4191922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:33 power sudo[4191922]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:34 power sudo[4191996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:09:34 power sudo[4191996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:34 power sudo[4191996]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:34 power sudo[4192001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:09:34 power sudo[4192001]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:09:34 power sudo[4192001]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:09:34 power sudo[4192001]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:09:34 power sudo[4192001]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:09:34 power sudo[4192001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:34 power sudo[4192001]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:34 power sudo[4192006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:09:34 power sudo[4192006]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:09:34 power sudo[4192006]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:09:34 power sudo[4192006]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:09:34 power sudo[4192006]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:09:34 power sudo[4192006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:34 power sudo[4192006]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:34 power sudo[4192016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:09:34 power sudo[4192016]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:09:34 power sudo[4192016]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:09:34 power sudo[4192016]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:09:34 power sudo[4192016]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:09:34 power sudo[4192016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:34 power sudo[4192016]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:36 power sudo[4192139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:09:36 power sudo[4192139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:36 power sudo[4192139]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:36 power sudo[4192144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:09:36 power sudo[4192144]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:09:36 power sudo[4192144]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:09:36 power sudo[4192144]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:09:36 power sudo[4192144]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:09:36 power sudo[4192144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:36 power sudo[4192144]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:36 power sudo[4192149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:09:36 power sudo[4192149]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:09:36 power sudo[4192149]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:09:36 power sudo[4192149]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:09:36 power sudo[4192149]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:09:36 power sudo[4192149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:36 power sudo[4192149]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:36 power sudo[4192155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html && find /home/solemor1/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user solemor1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:09:36 power sudo[4192155]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:09:36 power sudo[4192155]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:09:36 power sudo[4192155]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:09:36 power sudo[4192155]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:09:36 power sudo[4192155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:36 power sudo[4192155]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:42 power sudo[4192317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 /bin/sh -c 'cd /home/solemor1/public_html/vedi && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:09:42 power sudo[4192317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:42 power sudo[4192317]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:42 power sudo[4192323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user solemor1 --user-current --json'
Sep 13 05:09:42 power sudo[4192323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:42 power sudo[4192323]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:42 power sudo[4192330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:09:42 power sudo[4192330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:42 power sudo[4192330]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:43 power sudo[4192351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DomainInfo single_domain_data domain=vedi.mk return_https_redirect_status=1 --output=json'
Sep 13 05:09:43 power sudo[4192351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:43 power sudo[4192351]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:45 power sudo[4192434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=solemor1 DirectoryPrivacy is_directory_protected dir=/home/solemor1/public_html/vedi --output=json'
Sep 13 05:09:45 power sudo[4192434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:45 power sudo[4192434]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:48 power sudo[4192634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep 13 05:09:49 power sudo[4192634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:49 power sudo[4192634]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:49 power sudo[4192644]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=sssoluti --output=json'
Sep 13 05:09:49 power sudo[4192644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:49 power sudo[4192644]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:54 power sudo[4192761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti /bin/sh -c 'cd /home/sssoluti/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:09:54 power sudo[4192761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:54 power sudo[4192761]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:54 power sudo[4192769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user sssoluti --user-current --json'
Sep 13 05:09:54 power sudo[4192769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:54 power sudo[4192769]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:54 power sudo[4192777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti LangPHP php_get_vhost_versions --output=json'
Sep 13 05:09:54 power sudo[4192777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:54 power sudo[4192777]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:54 power sudo[4192782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:09:54 power sudo[4192782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:54 power sudo[4192782]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:55 power sudo[4192796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DomainInfo single_domain_data domain=sssolutions.mk return_https_redirect_status=1 --output=json'
Sep 13 05:09:55 power sudo[4192796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:55 power sudo[4192796]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:55 power sudo[4192805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti Mime list_redirects --output=json'
Sep 13 05:09:55 power sudo[4192805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:55 power sudo[4192805]: pam_unix(sudo:session): session closed for user root
Sep 13 05:09:58 power sudo[4192891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=sssoluti DirectoryPrivacy is_directory_protected dir=/home/sssoluti/public_html --output=json'
Sep 13 05:09:58 power sudo[4192891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:09:58 power sudo[4192891]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:01 power systemd[4193164]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:10:02 power sudo[4193226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep 13 05:10:02 power sudo[4193226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:02 power sudo[4193226]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:02 power sudo[4193236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=supremel --output=json'
Sep 13 05:10:02 power sudo[4193236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:02 power sudo[4193236]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:30 power sudo[4193672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:10:30 power sudo[4193672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:30 power sudo[4193672]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:30 power sudo[4193678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep 13 05:10:30 power sudo[4193678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:30 power sudo[4193678]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:30 power sudo[4193684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel LangPHP php_get_vhost_versions --output=json'
Sep 13 05:10:30 power sudo[4193684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:31 power sudo[4193684]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:31 power sudo[4193691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:10:31 power sudo[4193691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:31 power sudo[4193691]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:31 power sudo[4193715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=supremeleader.eu return_https_redirect_status=1 --output=json'
Sep 13 05:10:31 power sudo[4193715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:31 power sudo[4193715]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:31 power sudo[4193728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel Mime list_redirects --output=json'
Sep 13 05:10:31 power sudo[4193728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:31 power sudo[4193728]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:35 power sudo[4193851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/public_html --output=json'
Sep 13 05:10:35 power sudo[4193851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:35 power sudo[4193851]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:39 power sudo[4194068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep 13 05:10:39 power sudo[4194068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:39 power sudo[4194068]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:39 power sudo[4194076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=tehnodro --output=json'
Sep 13 05:10:39 power sudo[4194076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:39 power sudo[4194076]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:45 power sudo[4194207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:10:45 power sudo[4194207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:45 power sudo[4194207]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:45 power sudo[4194213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user tehnodro --user-current --json'
Sep 13 05:10:45 power sudo[4194213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:45 power sudo[4194213]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:45 power sudo[4194219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro LangPHP php_get_vhost_versions --output=json'
Sep 13 05:10:45 power sudo[4194219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:45 power sudo[4194219]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:45 power sudo[4194225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:10:45 power sudo[4194225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:45 power sudo[4194225]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:46 power sudo[4194253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DomainInfo single_domain_data domain=tehnodrom.mk return_https_redirect_status=1 --output=json'
Sep 13 05:10:46 power sudo[4194253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:46 power sudo[4194253]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:46 power sudo[4194259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro Mime list_redirects --output=json'
Sep 13 05:10:46 power sudo[4194259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:46 power sudo[4194259]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:49 power sudo[364]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=tehnodro DirectoryPrivacy is_directory_protected dir=/home/tehnodro/public_html --output=json'
Sep 13 05:10:49 power sudo[364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:50 power sudo[364]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:51 power sudo[429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:10:51 power sudo[429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:51 power sudo[429]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:51 power sudo[434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:10:51 power sudo[434]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:10:51 power sudo[434]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:10:51 power sudo[434]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:10:51 power sudo[434]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:10:51 power sudo[434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:51 power sudo[434]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:51 power sudo[439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:10:51 power sudo[439]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:10:51 power sudo[439]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:10:51 power sudo[439]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:10:51 power sudo[439]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:10:51 power sudo[439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:51 power sudo[439]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:51 power sudo[453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:10:51 power sudo[453]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:10:51 power sudo[453]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:10:51 power sudo[453]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:10:51 power sudo[453]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:10:51 power sudo[453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:51 power sudo[453]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:53 power sudo[582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:10:53 power sudo[582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:53 power sudo[582]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:53 power sudo[587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:10:53 power sudo[587]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:10:53 power sudo[587]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:10:53 power sudo[587]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:10:53 power sudo[587]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:10:53 power sudo[587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:53 power sudo[587]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:53 power sudo[592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:10:53 power sudo[592]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:10:53 power sudo[592]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:10:53 power sudo[592]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:10:53 power sudo[592]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:10:53 power sudo[592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:53 power sudo[592]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:53 power sudo[598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro /bin/sh -c 'cd /home/tehnodro/public_html && find /home/tehnodro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user tehnodro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:10:53 power sudo[598]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:10:53 power sudo[598]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:10:53 power sudo[598]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:10:53 power sudo[598]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:10:53 power sudo[598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:53 power sudo[598]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:59 power sudo[740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel /bin/sh -c 'cd /home/supremel/theuniversalgroup.net && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:10:59 power sudo[740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:59 power sudo[740]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:59 power sudo[751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user supremel --user-current --json'
Sep 13 05:10:59 power sudo[751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:59 power sudo[751]: pam_unix(sudo:session): session closed for user root
Sep 13 05:10:59 power sudo[761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:10:59 power sudo[761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:10:59 power sudo[761]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:00 power sudo[784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DomainInfo single_domain_data domain=theuniversalgroup.net return_https_redirect_status=1 --output=json'
Sep 13 05:11:00 power sudo[784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:00 power sudo[784]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:02 power sudo[887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=supremel DirectoryPrivacy is_directory_protected dir=/home/supremel/theuniversalgroup.net --output=json'
Sep 13 05:11:02 power sudo[887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:02 power sudo[887]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:06 power sudo[1106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep 13 05:11:06 power sudo[1106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:06 power sudo[1106]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:06 power sudo[1111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=viewinn --output=json'
Sep 13 05:11:06 power sudo[1111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:06 power sudo[1111]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:09 power sudo[1182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn /bin/sh -c 'cd /home/viewinn/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:11:09 power sudo[1182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:09 power sudo[1182]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:09 power sudo[1190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user viewinn --user-current --json'
Sep 13 05:11:09 power sudo[1190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:09 power sudo[1190]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:09 power sudo[1200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn LangPHP php_get_vhost_versions --output=json'
Sep 13 05:11:09 power sudo[1200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:09 power sudo[1200]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:09 power sudo[1205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:11:09 power sudo[1205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:09 power sudo[1205]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:09 power sudo[1220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DomainInfo single_domain_data domain=viewinn.mk return_https_redirect_status=1 --output=json'
Sep 13 05:11:09 power sudo[1220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:10 power sudo[1220]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:10 power sudo[1226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn Mime list_redirects --output=json'
Sep 13 05:11:10 power sudo[1226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:10 power sudo[1226]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:11 power sudo[1319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=viewinn DirectoryPrivacy is_directory_protected dir=/home/viewinn/public_html --output=json'
Sep 13 05:11:11 power sudo[1319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:11 power sudo[1319]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:15 power sudo[1552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep 13 05:11:15 power sudo[1552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:15 power sudo[1552]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:15 power sudo[1557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=wikicamp --output=json'
Sep 13 05:11:15 power sudo[1557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:15 power sudo[1557]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:23 power sudo[1771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp /bin/sh -c 'cd /home/wikicamp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:11:23 power sudo[1771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:23 power sudo[1771]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:23 power sudo[1777]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wikicamp --user-current --json'
Sep 13 05:11:23 power sudo[1777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:23 power sudo[1777]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:23 power sudo[1783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp LangPHP php_get_vhost_versions --output=json'
Sep 13 05:11:23 power sudo[1783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:23 power sudo[1783]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:23 power sudo[1789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:11:23 power sudo[1789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:23 power sudo[1789]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:24 power sudo[1802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DomainInfo single_domain_data domain=wikicamp.mk return_https_redirect_status=1 --output=json'
Sep 13 05:11:24 power sudo[1802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:24 power sudo[1802]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:24 power sudo[1809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp Mime list_redirects --output=json'
Sep 13 05:11:24 power sudo[1809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:24 power sudo[1809]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:28 power sudo[1967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wikicamp DirectoryPrivacy is_directory_protected dir=/home/wikicamp/public_html --output=json'
Sep 13 05:11:28 power sudo[1967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:28 power sudo[1967]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:31 power sudo[2206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep 13 05:11:31 power sudo[2206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:31 power sudo[2206]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:32 power sudo[2213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workandt --output=json'
Sep 13 05:11:32 power sudo[2213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:32 power sudo[2213]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:37 power sudo[2329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt /bin/sh -c 'cd /home/workandt/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:11:37 power sudo[2329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:37 power sudo[2329]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:37 power sudo[2335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workandt --user-current --json'
Sep 13 05:11:37 power sudo[2335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:37 power sudo[2335]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:37 power sudo[2343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt LangPHP php_get_vhost_versions --output=json'
Sep 13 05:11:37 power sudo[2343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:37 power sudo[2343]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:37 power sudo[2348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:11:37 power sudo[2348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:37 power sudo[2348]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:38 power sudo[2380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DomainInfo single_domain_data domain=workandtravel.mk return_https_redirect_status=1 --output=json'
Sep 13 05:11:38 power sudo[2380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:38 power sudo[2380]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:38 power sudo[2390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt Mime list_redirects --output=json'
Sep 13 05:11:38 power sudo[2390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:38 power sudo[2390]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:41 power sudo[2493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workandt DirectoryPrivacy is_directory_protected dir=/home/workandt/public_html --output=json'
Sep 13 05:11:41 power sudo[2493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:41 power sudo[2493]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:49 power sudo[2796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf /bin/sh -c 'cd /home/cetplatf/yoe.cetplatform.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:11:49 power sudo[2796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:49 power sudo[2796]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:49 power sudo[2802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user cetplatf --user-current --json'
Sep 13 05:11:49 power sudo[2802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:50 power sudo[2802]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:50 power sudo[2840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:11:50 power sudo[2840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:50 power sudo[2840]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:50 power sudo[2859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DomainInfo single_domain_data domain=yoe.cetplatform.mk return_https_redirect_status=1 --output=json'
Sep 13 05:11:50 power sudo[2859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:50 power sudo[2859]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:53 power sudo[2969]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=cetplatf DirectoryPrivacy is_directory_protected dir=/home/cetplatf/yoe.cetplatform.mk --output=json'
Sep 13 05:11:53 power sudo[2969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:53 power sudo[2969]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:57 power sudo[3192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep 13 05:11:57 power sudo[3192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:57 power sudo[3192]: pam_unix(sudo:session): session closed for user root
Sep 13 05:11:57 power sudo[3205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=youthgua --output=json'
Sep 13 05:11:57 power sudo[3205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:11:57 power sudo[3205]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:01 power systemd[3387]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 05:12:02 power sudo[3407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua /bin/sh -c 'cd /home/youthgua/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:12:02 power sudo[3407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:02 power sudo[3407]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:02 power sudo[3417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user youthgua --user-current --json'
Sep 13 05:12:02 power sudo[3417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:02 power sudo[3417]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:02 power sudo[3430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua LangPHP php_get_vhost_versions --output=json'
Sep 13 05:12:02 power sudo[3430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:02 power sudo[3430]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:02 power sudo[3436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:12:02 power sudo[3436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:02 power sudo[3436]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:03 power sudo[3456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DomainInfo single_domain_data domain=youthguarantee-wb.eu return_https_redirect_status=1 --output=json'
Sep 13 05:12:03 power sudo[3456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:03 power sudo[3456]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:03 power sudo[3469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua Mime list_redirects --output=json'
Sep 13 05:12:03 power sudo[3469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:03 power sudo[3469]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:05 power sudo[3574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=youthgua DirectoryPrivacy is_directory_protected dir=/home/youthgua/public_html --output=json'
Sep 13 05:12:05 power sudo[3574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:05 power sudo[3574]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:09 power sudo[3897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep 13 05:12:09 power sudo[3897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:09 power sudo[3897]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:09 power sudo[3911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=zampmk --output=json'
Sep 13 05:12:09 power sudo[3911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:09 power sudo[3911]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:13 power sudo[4155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk /bin/sh -c 'cd /home/zampmk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:12:13 power sudo[4155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:13 power sudo[4155]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:13 power sudo[4161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user zampmk --user-current --json'
Sep 13 05:12:13 power sudo[4161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:13 power sudo[4161]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:13 power sudo[4169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:12:13 power sudo[4169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:13 power sudo[4169]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:13 power sudo[4175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:12:13 power sudo[4175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:13 power sudo[4175]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:14 power sudo[4196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DomainInfo single_domain_data domain=zamp.mk return_https_redirect_status=1 --output=json'
Sep 13 05:12:14 power sudo[4196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:14 power sudo[4196]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:14 power sudo[4204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk Mime list_redirects --output=json'
Sep 13 05:12:14 power sudo[4204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:14 power sudo[4204]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:17 power sudo[4290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=zampmk DirectoryPrivacy is_directory_protected dir=/home/zampmk/public_html --output=json'
Sep 13 05:12:17 power sudo[4290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:17 power sudo[4290]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:21 power sudo[4515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep 13 05:12:21 power sudo[4515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:21 power sudo[4515]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:21 power sudo[4522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=ivanjord --output=json'
Sep 13 05:12:21 power sudo[4522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:21 power sudo[4522]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:31 power sudo[4732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord /bin/sh -c 'cd /home/ivanjord/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:12:31 power sudo[4732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:31 power sudo[4732]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:31 power sudo[4739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user ivanjord --user-current --json'
Sep 13 05:12:31 power sudo[4739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:31 power sudo[4739]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:31 power sudo[4750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord LangPHP php_get_vhost_versions --output=json'
Sep 13 05:12:31 power sudo[4750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:31 power sudo[4750]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:31 power sudo[4757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:12:31 power sudo[4757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:31 power sudo[4757]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:32 power sudo[4781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DomainInfo single_domain_data domain=novaidninazastip.mk return_https_redirect_status=1 --output=json'
Sep 13 05:12:32 power sudo[4781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:32 power sudo[4781]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:32 power sudo[4788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord Mime list_redirects --output=json'
Sep 13 05:12:32 power sudo[4788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:32 power sudo[4788]: pam_unix(sudo:session): session closed for user root
Sep 13 05:12:37 power sudo[4887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ivanjord DirectoryPrivacy is_directory_protected dir=/home/ivanjord/public_html --output=json'
Sep 13 05:12:37 power sudo[4887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:12:38 power sudo[4887]: pam_unix(sudo:session): session closed for user root
Sep 13 05:13:50 power sudo[7328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk /bin/sh -c 'cd /home/izzomk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:13:50 power sudo[7328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:13:50 power sudo[7328]: pam_unix(sudo:session): session closed for user root
Sep 13 05:13:50 power sudo[7335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user izzomk --user-current --json'
Sep 13 05:13:50 power sudo[7335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:13:51 power sudo[7335]: pam_unix(sudo:session): session closed for user root
Sep 13 05:13:51 power sudo[7355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:13:51 power sudo[7355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:13:51 power sudo[7355]: pam_unix(sudo:session): session closed for user root
Sep 13 05:13:51 power sudo[7383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DomainInfo single_domain_data domain=izzo.mk return_https_redirect_status=1 --output=json'
Sep 13 05:13:51 power sudo[7383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:13:51 power sudo[7383]: pam_unix(sudo:session): session closed for user root
Sep 13 05:13:54 power sudo[7578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=izzomk DirectoryPrivacy is_directory_protected dir=/home/izzomk/public_html/wp --output=json'
Sep 13 05:13:54 power sudo[7578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:13:54 power sudo[7578]: pam_unix(sudo:session): session closed for user root
Sep 13 05:13:57 power sudo[7919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep 13 05:13:57 power sudo[7919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:13:58 power sudo[7919]: pam_unix(sudo:session): session closed for user root
Sep 13 05:13:58 power sudo[7945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=janiboja --output=json'
Sep 13 05:13:58 power sudo[7945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:13:58 power sudo[7945]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:01 power sudo[8159]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:14:01 power sudo[8159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:01 power sudo[8159]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:01 power sudo[8165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user janiboja --user-current --json'
Sep 13 05:14:01 power sudo[8165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:01 power sudo[8165]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:01 power sudo[8192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja LangPHP php_get_vhost_versions --output=json'
Sep 13 05:14:01 power sudo[8192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:01 power sudo[8192]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:01 power sudo[8212]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:14:01 power sudo[8212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:01 power sudo[8212]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:02 power sudo[8236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DomainInfo single_domain_data domain=janibojadzi.com return_https_redirect_status=1 --output=json'
Sep 13 05:14:02 power sudo[8236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:02 power sudo[8236]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:02 power sudo[8243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja Mime list_redirects --output=json'
Sep 13 05:14:02 power sudo[8243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:02 power sudo[8243]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:04 power sudo[8391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=janiboja DirectoryPrivacy is_directory_protected dir=/home/janiboja/public_html --output=json'
Sep 13 05:14:04 power sudo[8391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:04 power sudo[8391]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:05 power sudo[8502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:05 power sudo[8502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:05 power sudo[8502]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:05 power sudo[8508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:14:05 power sudo[8508]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:14:05 power sudo[8508]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:14:05 power sudo[8508]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:14:05 power sudo[8508]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:05 power sudo[8508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:05 power sudo[8508]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:05 power sudo[8514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:14:05 power sudo[8514]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:14:05 power sudo[8514]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:14:05 power sudo[8514]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:14:05 power sudo[8514]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:05 power sudo[8514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:05 power sudo[8514]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:05 power sudo[8523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:14:05 power sudo[8523]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:14:05 power sudo[8523]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:14:05 power sudo[8523]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:14:05 power sudo[8523]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:05 power sudo[8523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:05 power sudo[8523]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:07 power sudo[8691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:07 power sudo[8691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:07 power sudo[8691]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:07 power sudo[8696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:14:07 power sudo[8696]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:14:07 power sudo[8696]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:14:07 power sudo[8696]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:14:07 power sudo[8696]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:07 power sudo[8696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:07 power sudo[8696]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:07 power sudo[8701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:14:07 power sudo[8701]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:14:07 power sudo[8701]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:14:07 power sudo[8701]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:14:07 power sudo[8701]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:07 power sudo[8701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:07 power sudo[8701]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:07 power sudo[8709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja /bin/sh -c 'cd /home/janiboja/public_html && find /home/janiboja/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user janiboja \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:14:07 power sudo[8709]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:14:07 power sudo[8709]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:14:07 power sudo[8709]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:14:07 power sudo[8709]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:07 power sudo[8709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:07 power sudo[8709]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:08 power sudo[8764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep 13 05:14:08 power sudo[8764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:08 power sudo[8764]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:08 power sudo[8788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=jaramk --output=json'
Sep 13 05:14:08 power sudo[8788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:08 power sudo[8788]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:13 power sudo[8911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:14:13 power sudo[8911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:13 power sudo[8911]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:13 power sudo[8917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user jaramk --user-current --json'
Sep 13 05:14:13 power sudo[8917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:14 power sudo[8917]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:14 power sudo[8925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:14:14 power sudo[8925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:14 power sudo[8925]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:14 power sudo[8930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:14:14 power sudo[8930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:14 power sudo[8930]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:14 power sudo[8948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DomainInfo single_domain_data domain=jara.mk return_https_redirect_status=1 --output=json'
Sep 13 05:14:14 power sudo[8948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:14 power sudo[8948]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:14 power sudo[8955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk Mime list_redirects --output=json'
Sep 13 05:14:14 power sudo[8955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:14 power sudo[8955]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:17 power sudo[9055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=jaramk DirectoryPrivacy is_directory_protected dir=/home/jaramk/public_html --output=json'
Sep 13 05:14:17 power sudo[9055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:17 power sudo[9055]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:18 power sudo[9121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:18 power sudo[9121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:18 power sudo[9121]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:18 power sudo[9126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep 13 05:14:18 power sudo[9126]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep 13 05:14:18 power sudo[9126]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep 13 05:14:18 power sudo[9126]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep 13 05:14:18 power sudo[9126]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:18 power sudo[9126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:18 power sudo[9126]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:18 power sudo[9131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 05:14:18 power sudo[9131]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 05:14:18 power sudo[9131]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 05:14:18 power sudo[9131]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 05:14:18 power sudo[9131]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:18 power sudo[9131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:18 power sudo[9131]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:18 power sudo[9136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 05:14:18 power sudo[9136]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 05:14:18 power sudo[9136]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 05:14:18 power sudo[9136]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 05:14:18 power sudo[9136]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:18 power sudo[9136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:18 power sudo[9136]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:20 power sudo[9258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:20 power sudo[9258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:20 power sudo[9258]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:20 power sudo[9264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\'
Sep 13 05:14:20 power sudo[9264]: wp-toolkit : (command continued) -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\'
Sep 13 05:14:20 power sudo[9264]: wp-toolkit : (command continued) -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\'
Sep 13 05:14:20 power sudo[9264]: wp-toolkit : (command continued) -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\'
Sep 13 05:14:20 power sudo[9264]: wp-toolkit : (command continued) -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:20 power sudo[9264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:20 power sudo[9264]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:20 power sudo[9269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 05:14:20 power sudo[9269]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 05:14:20 power sudo[9269]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 05:14:20 power sudo[9269]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 05:14:20 power sudo[9269]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:20 power sudo[9269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:20 power sudo[9269]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:20 power sudo[9274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk /bin/sh -c 'cd /home/jaramk/public_html && find /home/jaramk/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user jaramk \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o
Sep 13 05:14:20 power sudo[9274]: wp-toolkit : (command continued) \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o
Sep 13 05:14:20 power sudo[9274]: wp-toolkit : (command continued) \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o
Sep 13 05:14:20 power sudo[9274]: wp-toolkit : (command continued) \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o
Sep 13 05:14:20 power sudo[9274]: wp-toolkit : (command continued) \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:14:20 power sudo[9274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:20 power sudo[9274]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:21 power sudo[9318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep 13 05:14:21 power sudo[9318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:21 power sudo[9318]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:21 power sudo[9329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=innofabl --output=json'
Sep 13 05:14:21 power sudo[9329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:21 power sudo[9329]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:35 power sudo[9633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/kupireciklirano.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:14:35 power sudo[9633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:35 power sudo[9633]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:36 power sudo[9640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep 13 05:14:36 power sudo[9640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:36 power sudo[9640]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:36 power sudo[9651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl LangPHP php_get_vhost_versions --output=json'
Sep 13 05:14:36 power sudo[9651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:36 power sudo[9651]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:36 power sudo[9658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:14:36 power sudo[9658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:36 power sudo[9658]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:38 power sudo[9703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=kupireciklirano.mk return_https_redirect_status=1 --output=json'
Sep 13 05:14:38 power sudo[9703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:38 power sudo[9703]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:38 power sudo[9713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl Mime list_redirects --output=json'
Sep 13 05:14:38 power sudo[9713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:38 power sudo[9713]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:47 power sudo[9881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/kupireciklirano.mk --output=json'
Sep 13 05:14:47 power sudo[9881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:47 power sudo[9881]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:51 power sudo[10093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep 13 05:14:51 power sudo[10093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:51 power sudo[10093]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:51 power sudo[10109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mapaspla --output=json'
Sep 13 05:14:51 power sudo[10109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:51 power sudo[10109]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:55 power sudo[10196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:14:55 power sudo[10196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:55 power sudo[10196]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:55 power sudo[10202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep 13 05:14:55 power sudo[10202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:55 power sudo[10202]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:55 power sudo[10211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla LangPHP php_get_vhost_versions --output=json'
Sep 13 05:14:55 power sudo[10211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:55 power sudo[10211]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:55 power sudo[10220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:14:55 power sudo[10220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:55 power sudo[10220]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:56 power sudo[10238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DomainInfo single_domain_data domain=mapasplastik.com return_https_redirect_status=1 --output=json'
Sep 13 05:14:56 power sudo[10238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:56 power sudo[10238]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:56 power sudo[10244]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla Mime list_redirects --output=json'
Sep 13 05:14:56 power sudo[10244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:56 power sudo[10244]: pam_unix(sudo:session): session closed for user root
Sep 13 05:14:59 power sudo[10331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html/eng --output=json'
Sep 13 05:14:59 power sudo[10331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:14:59 power sudo[10331]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:01 power systemd[10560]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:15:15 power sudo[11214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla /bin/sh -c 'cd /home/mapaspla/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:15:15 power sudo[11214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:15 power sudo[11214]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:15 power sudo[11220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mapaspla --user-current --json'
Sep 13 05:15:15 power sudo[11220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:15 power sudo[11220]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:15 power sudo[11226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:15:15 power sudo[11226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:15 power sudo[11226]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:19 power sudo[11331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mapaspla DirectoryPrivacy is_directory_protected dir=/home/mapaspla/public_html --output=json'
Sep 13 05:15:19 power sudo[11331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:19 power sudo[11331]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:24 power sudo[11550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep 13 05:15:24 power sudo[11550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:24 power sudo[11550]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:24 power sudo[11556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=mediatag --output=json'
Sep 13 05:15:25 power sudo[11556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:25 power sudo[11556]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:29 power sudo[11666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag /bin/sh -c 'cd /home/mediatag/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:15:29 power sudo[11666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:29 power sudo[11666]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:29 power sudo[11678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user mediatag --user-current --json'
Sep 13 05:15:29 power sudo[11678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:30 power sudo[11678]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:30 power sudo[11713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag LangPHP php_get_vhost_versions --output=json'
Sep 13 05:15:30 power sudo[11713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:30 power sudo[11713]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:30 power sudo[11720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:15:30 power sudo[11720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:30 power sudo[11720]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:30 power sudo[11747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DomainInfo single_domain_data domain=mediatag.mk return_https_redirect_status=1 --output=json'
Sep 13 05:15:30 power sudo[11747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:30 power sudo[11747]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:30 power sudo[11753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag Mime list_redirects --output=json'
Sep 13 05:15:30 power sudo[11753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:30 power sudo[11753]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:35 power sudo[11896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=mediatag DirectoryPrivacy is_directory_protected dir=/home/mediatag/public_html --output=json'
Sep 13 05:15:35 power sudo[11896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:35 power sudo[11896]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:46 power sudo[12302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl /bin/sh -c 'cd /home/innofabl/mulprotex.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:15:46 power sudo[12302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:46 power sudo[12302]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:46 power sudo[12309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user innofabl --user-current --json'
Sep 13 05:15:46 power sudo[12309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:46 power sudo[12309]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:46 power sudo[12317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:15:46 power sudo[12317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:46 power sudo[12317]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:47 power sudo[12338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DomainInfo single_domain_data domain=mulprotex.com return_https_redirect_status=1 --output=json'
Sep 13 05:15:47 power sudo[12338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:47 power sudo[12338]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:51 power sudo[12453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=innofabl DirectoryPrivacy is_directory_protected dir=/home/innofabl/mulprotex.com --output=json'
Sep 13 05:15:51 power sudo[12453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:51 power sudo[12453]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:55 power sudo[12663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep 13 05:15:55 power sudo[12663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:55 power sudo[12663]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:55 power sudo[12673]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nefrolog --output=json'
Sep 13 05:15:55 power sudo[12673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:55 power sudo[12673]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:58 power sudo[12769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog /bin/sh -c 'cd /home/nefrolog/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:15:58 power sudo[12769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:58 power sudo[12769]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:58 power sudo[12776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nefrolog --user-current --json'
Sep 13 05:15:58 power sudo[12776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:59 power sudo[12776]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:59 power sudo[12786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog LangPHP php_get_vhost_versions --output=json'
Sep 13 05:15:59 power sudo[12786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:59 power sudo[12786]: pam_unix(sudo:session): session closed for user root
Sep 13 05:15:59 power sudo[12791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:15:59 power sudo[12791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:15:59 power sudo[12791]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:00 power sudo[12809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DomainInfo single_domain_data domain=nefrologija.mk return_https_redirect_status=1 --output=json'
Sep 13 05:16:00 power sudo[12809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:00 power sudo[12809]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:00 power sudo[12818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog Mime list_redirects --output=json'
Sep 13 05:16:00 power sudo[12818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:00 power sudo[12818]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:02 power sudo[12909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nefrolog DirectoryPrivacy is_directory_protected dir=/home/nefrolog/public_html --output=json'
Sep 13 05:16:02 power sudo[12909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:02 power sudo[12909]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:05 power sudo[13103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep 13 05:16:05 power sudo[13103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:06 power sudo[13103]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:06 power sudo[13111]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nikimare --output=json'
Sep 13 05:16:06 power sudo[13111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:06 power sudo[13111]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:13 power sudo[13265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:16:13 power sudo[13265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:13 power sudo[13265]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:13 power sudo[13271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep 13 05:16:13 power sudo[13271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:13 power sudo[13271]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:13 power sudo[13277]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare LangPHP php_get_vhost_versions --output=json'
Sep 13 05:16:13 power sudo[13277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:13 power sudo[13277]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:13 power sudo[13282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:16:13 power sudo[13282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:13 power sudo[13282]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:14 power sudo[13296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DomainInfo single_domain_data domain=niki-mare.com return_https_redirect_status=1 --output=json'
Sep 13 05:16:14 power sudo[13296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:14 power sudo[13296]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:14 power sudo[13305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare Mime list_redirects --output=json'
Sep 13 05:16:14 power sudo[13305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:14 power sudo[13305]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:18 power sudo[13402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html/wp --output=json'
Sep 13 05:16:18 power sudo[13402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:18 power sudo[13402]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:28 power sudo[13776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare /bin/sh -c 'cd /home/nikimare/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:16:28 power sudo[13776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:28 power sudo[13776]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:28 power sudo[13782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nikimare --user-current --json'
Sep 13 05:16:28 power sudo[13782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:28 power sudo[13782]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:28 power sudo[13788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:16:28 power sudo[13788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:28 power sudo[13788]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:32 power sudo[13960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nikimare DirectoryPrivacy is_directory_protected dir=/home/nikimare/public_html --output=json'
Sep 13 05:16:32 power sudo[13960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:32 power sudo[13960]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:36 power sudo[14169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep 13 05:16:36 power sudo[14169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:36 power sudo[14169]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:36 power sudo[14176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=nucktra1 --output=json'
Sep 13 05:16:36 power sudo[14176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:36 power sudo[14176]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:41 power sudo[14313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:16:41 power sudo[14313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:41 power sudo[14313]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:41 power sudo[14323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep 13 05:16:41 power sudo[14323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:41 power sudo[14323]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:41 power sudo[14336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 LangPHP php_get_vhost_versions --output=json'
Sep 13 05:16:41 power sudo[14336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:41 power sudo[14336]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:41 power sudo[14341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php56 --output=json'
Sep 13 05:16:41 power sudo[14341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:42 power sudo[14341]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:42 power sudo[14365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:16:42 power sudo[14365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:42 power sudo[14365]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:42 power sudo[14390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep 13 05:16:42 power sudo[14390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:42 power sudo[14390]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:42 power sudo[14397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 Mime list_redirects --output=json'
Sep 13 05:16:42 power sudo[14397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:42 power sudo[14397]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:46 power sudo[14527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/public_html --output=json'
Sep 13 05:16:46 power sudo[14527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:46 power sudo[14527]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:52 power sudo[14796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep 13 05:16:52 power sudo[14796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:52 power sudo[14796]: pam_unix(sudo:session): session closed for user root
Sep 13 05:16:52 power sudo[14801]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=pravekom --output=json'
Sep 13 05:16:52 power sudo[14801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:16:52 power sudo[14801]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:03 power sudo[15018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom /bin/sh -c 'cd /home/pravekom/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:17:03 power sudo[15018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:03 power sudo[15018]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:03 power sudo[15024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user pravekom --user-current --json'
Sep 13 05:17:03 power sudo[15024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:03 power sudo[15024]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:03 power sudo[15037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom LangPHP php_get_vhost_versions --output=json'
Sep 13 05:17:03 power sudo[15037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:03 power sudo[15037]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:03 power sudo[15042]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:17:03 power sudo[15042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:03 power sudo[15042]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:03 power sudo[15058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DomainInfo single_domain_data domain=praveko.mk return_https_redirect_status=1 --output=json'
Sep 13 05:17:03 power sudo[15058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:03 power sudo[15058]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:03 power sudo[15067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom Mime list_redirects --output=json'
Sep 13 05:17:03 power sudo[15067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:04 power sudo[15067]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:09 power sudo[15252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=pravekom DirectoryPrivacy is_directory_protected dir=/home/pravekom/public_html --output=json'
Sep 13 05:17:09 power sudo[15252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:09 power sudo[15252]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:13 power sudo[15482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep 13 05:17:13 power sudo[15482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:13 power sudo[15482]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:13 power sudo[15489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=proverim --output=json'
Sep 13 05:17:13 power sudo[15489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:13 power sudo[15489]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:19 power sudo[15624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:17:19 power sudo[15624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:19 power sudo[15624]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:19 power sudo[15632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user proverim --user-current --json'
Sep 13 05:17:19 power sudo[15632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:19 power sudo[15632]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:19 power sudo[15637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim LangPHP php_get_vhost_versions --output=json'
Sep 13 05:17:19 power sudo[15637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:19 power sudo[15637]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:19 power sudo[15642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:17:19 power sudo[15642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:19 power sudo[15642]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:20 power sudo[15666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DomainInfo single_domain_data domain=proveri.mk return_https_redirect_status=1 --output=json'
Sep 13 05:17:20 power sudo[15666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:20 power sudo[15666]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:20 power sudo[15672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim Mime list_redirects --output=json'
Sep 13 05:17:20 power sudo[15672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:20 power sudo[15672]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:23 power sudo[15782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=proverim DirectoryPrivacy is_directory_protected dir=/home/proverim/public_html --output=json'
Sep 13 05:17:23 power sudo[15782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:23 power sudo[15782]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:24 power sudo[15851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:24 power sudo[15851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:24 power sudo[15851]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:24 power sudo[15859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:17:24 power sudo[15859]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:17:24 power sudo[15859]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:17:24 power sudo[15859]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:17:24 power sudo[15859]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:24 power sudo[15859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:24 power sudo[15859]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:24 power sudo[15864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:24 power sudo[15864]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:24 power sudo[15864]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:24 power sudo[15864]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:24 power sudo[15864]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:24 power sudo[15864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:24 power sudo[15864]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:24 power sudo[15869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:24 power sudo[15869]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:24 power sudo[15869]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:24 power sudo[15869]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:24 power sudo[15869]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:24 power sudo[15869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:24 power sudo[15869]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:26 power sudo[15990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:26 power sudo[15990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:26 power sudo[15990]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:26 power sudo[15995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:17:26 power sudo[15995]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:17:26 power sudo[15995]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:17:26 power sudo[15995]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:17:26 power sudo[15995]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:26 power sudo[15995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:26 power sudo[15995]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:26 power sudo[16003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:26 power sudo[16003]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:26 power sudo[16003]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:26 power sudo[16003]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:26 power sudo[16003]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:26 power sudo[16003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:26 power sudo[16003]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:26 power sudo[16008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim /bin/sh -c 'cd /home/proverim/public_html && find /home/proverim/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user proverim \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:26 power sudo[16008]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:26 power sudo[16008]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:26 power sudo[16008]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:26 power sudo[16008]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:26 power sudo[16008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:26 power sudo[16008]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:26 power sudo[16044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep 13 05:17:26 power sudo[16044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:27 power sudo[16044]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:27 power sudo[16049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=rastiraz --output=json'
Sep 13 05:17:27 power sudo[16049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:27 power sudo[16049]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:30 power sudo[16122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:17:30 power sudo[16122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:30 power sudo[16122]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:30 power sudo[16131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user rastiraz --user-current --json'
Sep 13 05:17:30 power sudo[16131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:30 power sudo[16131]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:30 power sudo[16143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz LangPHP php_get_vhost_versions --output=json'
Sep 13 05:17:30 power sudo[16143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:30 power sudo[16143]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:30 power sudo[16149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:17:30 power sudo[16149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:30 power sudo[16149]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:30 power sudo[16166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DomainInfo single_domain_data domain=rastirazvoj.mk return_https_redirect_status=1 --output=json'
Sep 13 05:17:30 power sudo[16166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:31 power sudo[16166]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:31 power sudo[16176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz Mime list_redirects --output=json'
Sep 13 05:17:31 power sudo[16176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:31 power sudo[16176]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:33 power sudo[16310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=rastiraz DirectoryPrivacy is_directory_protected dir=/home/rastiraz/public_html --output=json'
Sep 13 05:17:33 power sudo[16310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:33 power sudo[16310]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:34 power sudo[16387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:34 power sudo[16387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:34 power sudo[16387]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:34 power sudo[16392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:17:34 power sudo[16392]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:17:34 power sudo[16392]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:17:34 power sudo[16392]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:17:34 power sudo[16392]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:34 power sudo[16392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:34 power sudo[16392]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:34 power sudo[16397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:34 power sudo[16397]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:34 power sudo[16397]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:34 power sudo[16397]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:34 power sudo[16397]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:34 power sudo[16397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:34 power sudo[16397]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:34 power sudo[16403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:34 power sudo[16403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:34 power sudo[16403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:34 power sudo[16403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:34 power sudo[16403]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:34 power sudo[16403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:34 power sudo[16403]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:36 power sudo[16527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:36 power sudo[16527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:36 power sudo[16527]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:36 power sudo[16532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:17:36 power sudo[16532]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:17:36 power sudo[16532]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:17:36 power sudo[16532]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:17:36 power sudo[16532]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:36 power sudo[16532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:36 power sudo[16532]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:36 power sudo[16537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:36 power sudo[16537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:36 power sudo[16537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:36 power sudo[16537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:36 power sudo[16537]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:36 power sudo[16537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:36 power sudo[16537]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:36 power sudo[16542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz /bin/sh -c 'cd /home/rastiraz/public_html && find /home/rastiraz/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user rastiraz \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:36 power sudo[16542]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:36 power sudo[16542]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:36 power sudo[16542]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:36 power sudo[16542]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:36 power sudo[16542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:36 power sudo[16542]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:36 power sudo[16586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep 13 05:17:36 power sudo[16586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:37 power sudo[16586]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:37 power sudo[16596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=conserva --output=json'
Sep 13 05:17:37 power sudo[16596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:37 power sudo[16596]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:41 power sudo[16713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva /bin/sh -c 'cd /home/conserva/RebornMacedonia.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:17:41 power sudo[16713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:41 power sudo[16713]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:41 power sudo[16719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user conserva --user-current --json'
Sep 13 05:17:41 power sudo[16719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:41 power sudo[16719]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:41 power sudo[16730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva LangPHP php_get_vhost_versions --output=json'
Sep 13 05:17:41 power sudo[16730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:41 power sudo[16730]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:41 power sudo[16740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:17:41 power sudo[16740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:41 power sudo[16740]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:41 power sudo[16754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DomainInfo single_domain_data domain=rebornmacedonia.com return_https_redirect_status=1 --output=json'
Sep 13 05:17:41 power sudo[16754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:41 power sudo[16754]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:41 power sudo[16761]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva Mime list_redirects --output=json'
Sep 13 05:17:41 power sudo[16761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:41 power sudo[16761]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:45 power sudo[16854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=conserva DirectoryPrivacy is_directory_protected dir=/home/conserva/RebornMacedonia.com --output=json'
Sep 13 05:17:45 power sudo[16854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:45 power sudo[16854]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:48 power sudo[17061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep 13 05:17:48 power sudo[17061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:48 power sudo[17061]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:48 power sudo[17082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=maleshne --output=json'
Sep 13 05:17:48 power sudo[17082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:48 power sudo[17082]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:52 power sudo[17194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:17:52 power sudo[17194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:52 power sudo[17194]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:52 power sudo[17200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user maleshne --user-current --json'
Sep 13 05:17:52 power sudo[17200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:53 power sudo[17200]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:53 power sudo[17209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne LangPHP php_get_vhost_versions --output=json'
Sep 13 05:17:53 power sudo[17209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:53 power sudo[17209]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:53 power sudo[17214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:17:53 power sudo[17214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:53 power sudo[17214]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:53 power sudo[17233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DomainInfo single_domain_data domain=restoranmrs.mk return_https_redirect_status=1 --output=json'
Sep 13 05:17:53 power sudo[17233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:53 power sudo[17233]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:53 power sudo[17239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne Mime list_redirects --output=json'
Sep 13 05:17:53 power sudo[17239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:53 power sudo[17239]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:55 power sudo[17341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=maleshne DirectoryPrivacy is_directory_protected dir=/home/maleshne/public_html --output=json'
Sep 13 05:17:55 power sudo[17341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:56 power sudo[17341]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:56 power sudo[17408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:56 power sudo[17408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:56 power sudo[17408]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:56 power sudo[17413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:17:56 power sudo[17413]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:17:56 power sudo[17413]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:17:56 power sudo[17413]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:17:56 power sudo[17413]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:56 power sudo[17413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:56 power sudo[17413]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:56 power sudo[17418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:56 power sudo[17418]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:56 power sudo[17418]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:56 power sudo[17418]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:56 power sudo[17418]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:56 power sudo[17418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:56 power sudo[17418]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:59 power sudo[17572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:59 power sudo[17572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:59 power sudo[17572]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:59 power sudo[17578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:17:59 power sudo[17578]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:17:59 power sudo[17578]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:17:59 power sudo[17578]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:17:59 power sudo[17578]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:59 power sudo[17578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:59 power sudo[17578]: pam_unix(sudo:session): session closed for user root
Sep 13 05:17:59 power sudo[17583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne /bin/sh -c 'cd /home/maleshne/public_html && find /home/maleshne/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user maleshne \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:17:59 power sudo[17583]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:17:59 power sudo[17583]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:17:59 power sudo[17583]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:17:59 power sudo[17583]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:17:59 power sudo[17583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:17:59 power sudo[17583]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:00 power sudo[17625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep 13 05:18:00 power sudo[17625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:00 power sudo[17625]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:00 power sudo[17634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=samasped --output=json'
Sep 13 05:18:00 power sudo[17634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:00 power sudo[17634]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:07 power sudo[17792]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped /bin/sh -c 'cd /home/samasped/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:18:07 power sudo[17792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:07 power sudo[17792]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:07 power sudo[17798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user samasped --user-current --json'
Sep 13 05:18:07 power sudo[17798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:07 power sudo[17798]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:07 power sudo[17808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped LangPHP php_get_vhost_versions --output=json'
Sep 13 05:18:07 power sudo[17808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:07 power sudo[17808]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:07 power sudo[17814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:18:07 power sudo[17814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:07 power sudo[17814]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:08 power sudo[17830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DomainInfo single_domain_data domain=samasped.mk return_https_redirect_status=1 --output=json'
Sep 13 05:18:08 power sudo[17830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:08 power sudo[17830]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:08 power sudo[17853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped Mime list_redirects --output=json'
Sep 13 05:18:08 power sudo[17853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:08 power sudo[17853]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:12 power sudo[17972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=samasped DirectoryPrivacy is_directory_protected dir=/home/samasped/public_html --output=json'
Sep 13 05:18:12 power sudo[17972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:12 power sudo[17972]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:15 power sudo[18178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep 13 05:18:15 power sudo[18178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:15 power sudo[18178]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:15 power sudo[18185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=seloviro --output=json'
Sep 13 05:18:15 power sudo[18185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:15 power sudo[18185]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:22 power sudo[18306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:18:22 power sudo[18306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:22 power sudo[18306]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:22 power sudo[18312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user seloviro --user-current --json'
Sep 13 05:18:22 power sudo[18312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:22 power sudo[18312]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:22 power sudo[18323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro LangPHP php_get_vhost_versions --output=json'
Sep 13 05:18:22 power sudo[18323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:22 power sudo[18323]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:22 power sudo[18328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:18:22 power sudo[18328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:22 power sudo[18328]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:22 power sudo[18342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DomainInfo single_domain_data domain=selovirovo.mk return_https_redirect_status=1 --output=json'
Sep 13 05:18:22 power sudo[18342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:23 power sudo[18342]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:23 power sudo[18348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro Mime list_redirects --output=json'
Sep 13 05:18:23 power sudo[18348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:23 power sudo[18348]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:26 power sudo[18464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=seloviro DirectoryPrivacy is_directory_protected dir=/home/seloviro/public_html --output=json'
Sep 13 05:18:26 power sudo[18464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:26 power sudo[18464]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:27 power sudo[18544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:18:27 power sudo[18544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:27 power sudo[18544]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:27 power sudo[18549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:18:27 power sudo[18549]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:18:27 power sudo[18549]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:18:27 power sudo[18549]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:18:27 power sudo[18549]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:18:27 power sudo[18549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:27 power sudo[18549]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:27 power sudo[18554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:18:27 power sudo[18554]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:18:27 power sudo[18554]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:18:27 power sudo[18554]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:18:27 power sudo[18554]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:18:27 power sudo[18554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:27 power sudo[18554]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:27 power sudo[18559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:18:27 power sudo[18559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:18:27 power sudo[18559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:18:27 power sudo[18559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:18:27 power sudo[18559]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:18:27 power sudo[18559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:27 power sudo[18559]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:29 power sudo[18665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:18:29 power sudo[18665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:29 power sudo[18665]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:29 power sudo[18671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:18:29 power sudo[18671]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:18:29 power sudo[18671]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:18:29 power sudo[18671]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:18:29 power sudo[18671]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:18:29 power sudo[18671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:29 power sudo[18671]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:29 power sudo[18676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:18:29 power sudo[18676]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:18:29 power sudo[18676]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:18:29 power sudo[18676]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:18:29 power sudo[18676]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:18:29 power sudo[18676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:29 power sudo[18676]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:29 power sudo[18681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro /bin/sh -c 'cd /home/seloviro/public_html && find /home/seloviro/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user seloviro \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:18:29 power sudo[18681]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:18:29 power sudo[18681]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:18:29 power sudo[18681]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:18:29 power sudo[18681]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:18:29 power sudo[18681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:29 power sudo[18681]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:30 power sudo[18734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep 13 05:18:30 power sudo[18734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:30 power sudo[18734]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:30 power sudo[18771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=skyapart --output=json'
Sep 13 05:18:30 power sudo[18771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:30 power sudo[18771]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:33 power sudo[18920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart /bin/sh -c 'cd /home/skyapart/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:18:33 power sudo[18920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:33 power sudo[18920]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:33 power sudo[18926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user skyapart --user-current --json'
Sep 13 05:18:33 power sudo[18926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:33 power sudo[18926]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:33 power sudo[18943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart LangPHP php_get_vhost_versions --output=json'
Sep 13 05:18:33 power sudo[18943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:33 power sudo[18943]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:33 power sudo[18949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:18:33 power sudo[18949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:33 power sudo[18949]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:34 power sudo[19005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DomainInfo single_domain_data domain=skyapartments.mk return_https_redirect_status=1 --output=json'
Sep 13 05:18:34 power sudo[19005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:34 power sudo[19005]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:34 power sudo[19012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart Mime list_redirects --output=json'
Sep 13 05:18:34 power sudo[19012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:34 power sudo[19012]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:35 power sudo[19092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=skyapart DirectoryPrivacy is_directory_protected dir=/home/skyapart/public_html --output=json'
Sep 13 05:18:35 power sudo[19092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:36 power sudo[19092]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:39 power sudo[19312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep 13 05:18:39 power sudo[19312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:39 power sudo[19312]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:39 power sudo[19322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=socioloz --output=json'
Sep 13 05:18:39 power sudo[19322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:39 power sudo[19322]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:52 power sudo[19531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz /bin/sh -c 'cd /home/socioloz/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:18:52 power sudo[19531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:52 power sudo[19531]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:52 power sudo[19537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user socioloz --user-current --json'
Sep 13 05:18:52 power sudo[19537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:52 power sudo[19537]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:52 power sudo[19546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz LangPHP php_get_vhost_versions --output=json'
Sep 13 05:18:52 power sudo[19546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:52 power sudo[19546]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:52 power sudo[19551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:18:52 power sudo[19551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:52 power sudo[19551]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:52 power sudo[19565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DomainInfo single_domain_data domain=sociolozi.org.mk return_https_redirect_status=1 --output=json'
Sep 13 05:18:52 power sudo[19565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:52 power sudo[19565]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:52 power sudo[19572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz Mime list_redirects --output=json'
Sep 13 05:18:52 power sudo[19572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:53 power sudo[19572]: pam_unix(sudo:session): session closed for user root
Sep 13 05:18:58 power sudo[19715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=socioloz DirectoryPrivacy is_directory_protected dir=/home/socioloz/public_html --output=json'
Sep 13 05:18:58 power sudo[19715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:18:58 power sudo[19715]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:03 power sudo[19920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep 13 05:19:03 power sudo[19920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:03 power sudo[19920]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:03 power sudo[19925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=stojnevi --output=json'
Sep 13 05:19:03 power sudo[19925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:03 power sudo[19925]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:06 power sudo[20002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi /bin/sh -c 'cd /home/stojnevi/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:19:06 power sudo[20002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:06 power sudo[20002]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:06 power sudo[20008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user stojnevi --user-current --json'
Sep 13 05:19:06 power sudo[20008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:07 power sudo[20008]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:07 power sudo[20016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi LangPHP php_get_vhost_versions --output=json'
Sep 13 05:19:07 power sudo[20016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:07 power sudo[20016]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:07 power sudo[20022]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:19:07 power sudo[20022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:07 power sudo[20022]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:07 power sudo[20043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DomainInfo single_domain_data domain=stojnevi.mk return_https_redirect_status=1 --output=json'
Sep 13 05:19:07 power sudo[20043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:07 power sudo[20043]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:07 power sudo[20054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi Mime list_redirects --output=json'
Sep 13 05:19:07 power sudo[20054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:07 power sudo[20054]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:10 power sudo[20149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=stojnevi DirectoryPrivacy is_directory_protected dir=/home/stojnevi/public_html --output=json'
Sep 13 05:19:10 power sudo[20149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:10 power sudo[20149]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:20 power sudo[20483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 /bin/sh -c 'cd /home/nucktra1/teatar.nucktrajkoprokopiev.mk && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:19:20 power sudo[20483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:20 power sudo[20483]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:20 power sudo[20489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user nucktra1 --user-current --json'
Sep 13 05:19:20 power sudo[20489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:20 power sudo[20489]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:20 power sudo[20495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:19:20 power sudo[20495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:20 power sudo[20495]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:21 power sudo[20508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DomainInfo single_domain_data domain=teatar.nucktrajkoprokopiev.mk return_https_redirect_status=1 --output=json'
Sep 13 05:19:21 power sudo[20508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:21 power sudo[20508]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:24 power sudo[20614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=nucktra1 DirectoryPrivacy is_directory_protected dir=/home/nucktra1/teatar.nucktrajkoprokopiev.mk/mk --output=json'
Sep 13 05:19:24 power sudo[20614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:24 power sudo[20614]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:28 power sudo[20837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep 13 05:19:28 power sudo[20837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:28 power sudo[20837]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:28 power sudo[20842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=trudovop --output=json'
Sep 13 05:19:28 power sudo[20842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:28 power sudo[20842]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:36 power sudo[21009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop /bin/sh -c 'cd /home/trudovop/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:19:36 power sudo[21009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:36 power sudo[21009]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:36 power sudo[21015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user trudovop --user-current --json'
Sep 13 05:19:36 power sudo[21015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:36 power sudo[21015]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:36 power sudo[21024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop LangPHP php_get_vhost_versions --output=json'
Sep 13 05:19:36 power sudo[21024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:36 power sudo[21024]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:36 power sudo[21029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:19:36 power sudo[21029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:36 power sudo[21029]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:37 power sudo[21048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DomainInfo single_domain_data domain=trudovopravo.mk return_https_redirect_status=1 --output=json'
Sep 13 05:19:37 power sudo[21048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:37 power sudo[21048]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:37 power sudo[21055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop Mime list_redirects --output=json'
Sep 13 05:19:37 power sudo[21055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:37 power sudo[21055]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:41 power sudo[21176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=trudovop DirectoryPrivacy is_directory_protected dir=/home/trudovop/public_html --output=json'
Sep 13 05:19:41 power sudo[21176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:41 power sudo[21176]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:45 power sudo[21386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep 13 05:19:45 power sudo[21386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:45 power sudo[21386]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:45 power sudo[21393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=urbanexp --output=json'
Sep 13 05:19:45 power sudo[21393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:45 power sudo[21393]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:52 power sudo[21527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp /bin/sh -c 'cd /home/urbanexp/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:19:52 power sudo[21527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:52 power sudo[21527]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:52 power sudo[21533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user urbanexp --user-current --json'
Sep 13 05:19:52 power sudo[21533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:52 power sudo[21533]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:52 power sudo[21547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp LangPHP php_get_vhost_versions --output=json'
Sep 13 05:19:52 power sudo[21547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:52 power sudo[21547]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:52 power sudo[21553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:19:52 power sudo[21553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:52 power sudo[21553]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:52 power sudo[21567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DomainInfo single_domain_data domain=urbanexpert.mk return_https_redirect_status=1 --output=json'
Sep 13 05:19:52 power sudo[21567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:52 power sudo[21567]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:52 power sudo[21574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp Mime list_redirects --output=json'
Sep 13 05:19:52 power sudo[21574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:53 power sudo[21574]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:55 power sudo[21665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=urbanexp DirectoryPrivacy is_directory_protected dir=/home/urbanexp/public_html --output=json'
Sep 13 05:19:55 power sudo[21665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:55 power sudo[21665]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:59 power sudo[21875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep 13 05:19:59 power sudo[21875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:59 power sudo[21875]: pam_unix(sudo:session): session closed for user root
Sep 13 05:19:59 power sudo[21883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=vfxnestc --output=json'
Sep 13 05:19:59 power sudo[21883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:19:59 power sudo[21883]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:02 power systemd[22041]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:20:05 power sudo[22145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc /bin/sh -c 'cd /home/vfxnestc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:20:05 power sudo[22145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:05 power sudo[22145]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:05 power sudo[22151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user vfxnestc --user-current --json'
Sep 13 05:20:05 power sudo[22151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:06 power sudo[22151]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:06 power sudo[22161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc LangPHP php_get_vhost_versions --output=json'
Sep 13 05:20:06 power sudo[22161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:06 power sudo[22161]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:06 power sudo[22167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:20:06 power sudo[22167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:06 power sudo[22167]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:06 power sudo[22185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DomainInfo single_domain_data domain=vfxnest.com return_https_redirect_status=1 --output=json'
Sep 13 05:20:06 power sudo[22185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:06 power sudo[22185]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:06 power sudo[22193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc Mime list_redirects --output=json'
Sep 13 05:20:06 power sudo[22193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:06 power sudo[22193]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:10 power sudo[22322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=vfxnestc DirectoryPrivacy is_directory_protected dir=/home/vfxnestc/public_html --output=json'
Sep 13 05:20:10 power sudo[22322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:10 power sudo[22322]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:15 power sudo[22578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep 13 05:20:15 power sudo[22578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:15 power sudo[22578]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:15 power sudo[22584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=volkanco --output=json'
Sep 13 05:20:15 power sudo[22584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:15 power sudo[22584]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:19 power sudo[22683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:20:19 power sudo[22683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:19 power sudo[22683]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:19 power sudo[22690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user volkanco --user-current --json'
Sep 13 05:20:19 power sudo[22690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:20 power sudo[22690]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:20 power sudo[22697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco LangPHP php_get_vhost_versions --output=json'
Sep 13 05:20:20 power sudo[22697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:20 power sudo[22697]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:20 power sudo[22709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:20:20 power sudo[22709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:20 power sudo[22709]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:20 power sudo[22733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DomainInfo single_domain_data domain=volkan.com.mk return_https_redirect_status=1 --output=json'
Sep 13 05:20:20 power sudo[22733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:20 power sudo[22733]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:20 power sudo[22739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco Mime list_redirects --output=json'
Sep 13 05:20:20 power sudo[22739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:20 power sudo[22739]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:23 power sudo[22824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=volkanco DirectoryPrivacy is_directory_protected dir=/home/volkanco/public_html --output=json'
Sep 13 05:20:23 power sudo[22824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:23 power sudo[22824]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:24 power sudo[22891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:20:24 power sudo[22891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:24 power sudo[22891]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:24 power sudo[22896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:20:24 power sudo[22896]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:20:24 power sudo[22896]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:20:24 power sudo[22896]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:20:24 power sudo[22896]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:20:24 power sudo[22896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:24 power sudo[22896]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:24 power sudo[22901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:20:24 power sudo[22901]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:20:24 power sudo[22901]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:20:24 power sudo[22901]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:20:24 power sudo[22901]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:20:24 power sudo[22901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:24 power sudo[22901]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:24 power sudo[22906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:20:24 power sudo[22906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:20:24 power sudo[22906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:20:24 power sudo[22906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:20:24 power sudo[22906]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:20:24 power sudo[22906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:24 power sudo[22906]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:26 power sudo[23018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:20:26 power sudo[23018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:26 power sudo[23018]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:26 power sudo[23023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 05:20:26 power sudo[23023]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 05:20:26 power sudo[23023]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 05:20:26 power sudo[23023]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 05:20:26 power sudo[23023]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:20:26 power sudo[23023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:26 power sudo[23023]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:26 power sudo[23028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:20:26 power sudo[23028]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:20:26 power sudo[23028]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:20:26 power sudo[23028]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:20:26 power sudo[23028]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:20:26 power sudo[23028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:26 power sudo[23028]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:26 power sudo[23034]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco /bin/sh -c 'cd /home/volkanco/public_html && find /home/volkanco/public_html/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user volkanco \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 05:20:26 power sudo[23034]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 05:20:26 power sudo[23034]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 05:20:26 power sudo[23034]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 05:20:26 power sudo[23034]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 05:20:26 power sudo[23034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:26 power sudo[23034]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:27 power sudo[23076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep 13 05:20:27 power sudo[23076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:27 power sudo[23076]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:27 power sudo[23081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=glammace --output=json'
Sep 13 05:20:27 power sudo[23081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:27 power sudo[23081]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:37 power sudo[23336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace /bin/sh -c 'cd /home/glammace/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:20:37 power sudo[23336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:37 power sudo[23336]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:37 power sudo[23342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user glammace --user-current --json'
Sep 13 05:20:37 power sudo[23342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:37 power sudo[23342]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:37 power sudo[23349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace LangPHP php_get_vhost_versions --output=json'
Sep 13 05:20:37 power sudo[23349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:37 power sudo[23349]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:37 power sudo[23355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:20:37 power sudo[23355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:37 power sudo[23355]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:38 power sudo[23375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DomainInfo single_domain_data domain=wikimedia.mk return_https_redirect_status=1 --output=json'
Sep 13 05:20:38 power sudo[23375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:38 power sudo[23375]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:38 power sudo[23388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace Mime list_redirects --output=json'
Sep 13 05:20:38 power sudo[23388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:38 power sudo[23388]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:43 power sudo[23546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=glammace DirectoryPrivacy is_directory_protected dir=/home/glammace/public_html --output=json'
Sep 13 05:20:43 power sudo[23546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:43 power sudo[23546]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:54 power sudo[23920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr /bin/sh -c 'cd /home/wineberr/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:20:54 power sudo[23920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:54 power sudo[23920]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:54 power sudo[23926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user wineberr --user-current --json'
Sep 13 05:20:54 power sudo[23926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:54 power sudo[23926]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:54 power sudo[23932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:20:54 power sudo[23932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:54 power sudo[23932]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:55 power sudo[23950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DomainInfo single_domain_data domain=wineberry.mk return_https_redirect_status=1 --output=json'
Sep 13 05:20:55 power sudo[23950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:55 power sudo[23950]: pam_unix(sudo:session): session closed for user root
Sep 13 05:20:59 power sudo[24065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=wineberr DirectoryPrivacy is_directory_protected dir=/home/wineberr/public_html --output=json'
Sep 13 05:20:59 power sudo[24065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:20:59 power sudo[24065]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:03 power sudo[24336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep 13 05:21:03 power sudo[24336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:03 power sudo[24336]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:03 power sudo[24342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=workbenc --output=json'
Sep 13 05:21:03 power sudo[24342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:03 power sudo[24342]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:06 power sudo[24412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc /bin/sh -c 'cd /home/workbenc/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:21:06 power sudo[24412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:06 power sudo[24412]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:06 power sudo[24420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user workbenc --user-current --json'
Sep 13 05:21:06 power sudo[24420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:06 power sudo[24420]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:06 power sudo[24426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc LangPHP php_get_vhost_versions --output=json'
Sep 13 05:21:06 power sudo[24426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:07 power sudo[24426]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:07 power sudo[24431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:21:07 power sudo[24431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:07 power sudo[24431]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:07 power sudo[24449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DomainInfo single_domain_data domain=workbench-ent.com return_https_redirect_status=1 --output=json'
Sep 13 05:21:07 power sudo[24449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:07 power sudo[24449]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:07 power sudo[24456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc Mime list_redirects --output=json'
Sep 13 05:21:07 power sudo[24456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:07 power sudo[24456]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:09 power sudo[24556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=workbenc DirectoryPrivacy is_directory_protected dir=/home/workbenc/public_html --output=json'
Sep 13 05:21:09 power sudo[24556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:09 power sudo[24556]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:14 power sudo[24841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 13 05:21:14 power sudo[24841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:14 power sudo[24841]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:14 power sudo[24847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=berbermk --output=json'
Sep 13 05:21:14 power sudo[24847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:15 power sudo[24847]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:21 power sudo[24987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cd /home/berbermk/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null'
Sep 13 05:21:21 power sudo[24987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:21 power sudo[24987]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:21 power sudo[24994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'selectorctl --user berbermk --user-current --json'
Sep 13 05:21:21 power sudo[24994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:21 power sudo[24994]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:21 power sudo[25003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk LangPHP php_get_vhost_versions --output=json'
Sep 13 05:21:21 power sudo[25003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:21 power sudo[25003]: pam_unix(sudo:session): session closed for user root
Sep 13 05:21:21 power sudo[25010]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 13 05:21:21 power sudo[25010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:21:21 power sudo[25010]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/hooks
Sep 13 05:22:26 power sudo[29130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29130]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep 13 05:22:26 power sudo[29140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29140]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29144]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29149]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29153]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vmro/vmro-dpmne.org.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29157]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29161]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29165]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29171]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29175]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/academy.dadar.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29175]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29179]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29183]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29187]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/agrosind/agrosindikat.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29191]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29195]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29199]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29203]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/al.rsbsp.org.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29207]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29211]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29216]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29220]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29220]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/ambitioussolutions.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29224]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29228]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/animatem/animate.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29228]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/animatem/animate.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29232]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29236]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/animatem/animate.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29240]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29246]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 13 05:22:26 power sudo[29250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:26 power sudo[29250]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:26 power sudo[29254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29254]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/anitermc/aniterm.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29258]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29262]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29266]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29270]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/app.wineberry.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29274]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29278]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29283]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29288]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29288]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/aptekazd/aptekazdravje.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29292]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29296]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29300]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29304]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29308]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29312]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29316]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29316]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29320]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/progress/artivo.mk.progressiva.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29324]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29328]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29332]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29336]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29340]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29344]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29348]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29352]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/bbbustours.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29357]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29361]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29365]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29369]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nationa2/beactiveday.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29373]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29377]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29381]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29385]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/beep.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29389]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29396]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29400]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29404]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bianasho/bianashoes.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29408]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29412]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/velmk/blog.vel.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29416]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29420]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/velmk/blog.vel.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29424]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29428]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29432]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29437]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29444]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29448]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29452]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29456]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/boiling.pt.enaspot.com/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29460]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29464]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29464]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29468]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29472]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bonitavi/bonita-vita.com/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29476]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29480]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29484]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29488]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29492]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29496]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bovincom/bovin.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29500]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29504]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bovincom/bovin.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29508]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29512]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29516]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29520]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.com.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29524]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29528]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:27 power sudo[29532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/butelmk/butel.mk/wp-toolkit.conf
Sep 13 05:22:27 power sudo[29532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:27 power sudo[29532]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29536]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/butelmk/butel.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29540]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29544]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29548]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29552]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29556]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29560]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29564]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29564]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29569]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/caffeizzo.mk.izzo.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29573]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29577]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29582]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29586]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cateye.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29590]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29594]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29598]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29602]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29606]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29610]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/chemhem.com/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29614]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29618]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/chemhem.com/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29622]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29626]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29630]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29634]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cosmatob/cosmatobacco.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29638]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29643]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dadarmk/dadar.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29647]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29651]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dadarmk/dadar.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29655]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29659]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29663]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29670]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/delcevca/delcevcani.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29674]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29678]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29682]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29686]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29690]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29694]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29698]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29702]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29706]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29710]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29714]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29718]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29723]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29727]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29732]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29738]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/ekobalans.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29742]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29746]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29750]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29754]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29758]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29762]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29766]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29770]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.deosol.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29774]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29778]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29782]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29786]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/moetodete.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29790]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:28 power sudo[29794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 13 05:22:28 power sudo[29794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:28 power sudo[29794]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29798]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29802]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/detskagr/detskagradinka-prolet.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29806]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29810]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29814]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29814]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29818]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29818]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eaptekam/dev.eapteka.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29822]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29826]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29830]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dimpalne/dimpal.net/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29830]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29834]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29838]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dimpalne/dimpal.net/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29838]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep 13 05:22:29 power sudo[29842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29842]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29848]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29852]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29856]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/dnevnoin/dnevnoinfo.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29860]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29867]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29871]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29876]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.bbbustours.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29880]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29884]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29888]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29892]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bbbustou/dreamholidays.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29896]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29900]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/drleomk/drleo.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29904]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29908]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/drleomk/drleo.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29912]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29916]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29920]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29924]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29928]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29932]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/elan.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29936]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29940]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/elan.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29944]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29948]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/electrol/electrolight.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29952]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29956]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/electrol/electrolight.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29960]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29964]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29968]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29972]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/elektrot/elektrotehnika-inzinering.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29976]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29980]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enaspotc/enaspot.com/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29984]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29988]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enaspotc/enaspot.com/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29992]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:29 power sudo[29997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep 13 05:22:29 power sudo[29997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:29 power sudo[29997]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/enochmk/enoch.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30004]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30008]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/enochmk/enoch.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30012]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30016]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30020]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30025]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/equip.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30029]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30033]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30037]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30041]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30045]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30049]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30053]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30057]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/eurofarm/eurofarm.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30061]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30065]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30069]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30073]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/euromaki/euromakinsurance.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30077]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30081]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30085]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30089]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evberasm/evberasmusplus.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30093]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30097]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30101]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30105]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/evolvepl/evolveplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30110]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30114]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30118]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30122]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/ey.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30126]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30130]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30134]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30138]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/fitkit.holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30145]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30149]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30153]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30157]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30161]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30165]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30169]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30173]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/flowoptstudio.com.momcurls.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30177]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30181]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30185]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30189]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/folklore/folklorefestivals.com/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30193]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30197]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30201]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30205]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/forzares/forzarestaurant.com.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30209]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30213]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/getaldus/getaldus.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30217]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30221]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/getaldus/getaldus.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30225]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30229]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gocruise/gocruise.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30233]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30237]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gocruise/gocruise.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30241]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30245]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30249]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30253]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/gogovan1/gogovan.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30257]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30261]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30265]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30270]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/golakkom/golak-komerc.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30274]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30278]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/goodnews.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:30 power sudo[30282]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:30 power sudo[30286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep 13 05:22:30 power sudo[30286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30286]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/goodnews.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30290]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30294]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30298]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30302]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/herbalpl/herbalplus.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30306]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30310]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30314]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30318]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/hero.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30322]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30326]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30330]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30334]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30338]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30342]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30346]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30350]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30354]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30358]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezden.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30362]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30366]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezden.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30370]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30374]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30378]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30382]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezdenmk.vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30386]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30390]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30394]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30398]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30402]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30408]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30412]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30416]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30420]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30427]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30431]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30435]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30439]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30443]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30447]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30452]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30457]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30461]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30465]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30469]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30473]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30477]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30481]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30485]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/metatet.vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30490]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30495]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30499]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30503]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30507]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30515]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30519]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30524]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30528]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30532]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30536]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30541]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30545]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30549]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30553]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30557]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30561]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:31 power sudo[30565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:31 power sudo[30565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:31 power sudo[30565]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30569]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30573]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30577]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30581]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30585]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30589]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30593]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30597]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30601]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30605]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30605]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30609]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30613]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30617]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30621]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30625]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30625]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30629]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30633]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30633]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30638]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/sorabotnici.vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30642]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30646]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30650]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30654]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30658]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30662]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30666]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30670]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30674]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30678]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30682]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30686]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30690]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30695]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30702]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30707]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/hostel.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30711]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30715]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30719]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30723]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/pp.denicija.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30727]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30731]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30735]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30739]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30743]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30747]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30751]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30755]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.com.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30759]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30763]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30763]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30767]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30767]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30771]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30771]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vezilkac/vezilka.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30775]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30779]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30783]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30787]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.madzo.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30791]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30795]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30799]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30803]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/madzomk/hotelcitypark.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30807]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30811]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30815]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30819]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/imdskopj/imdskopje.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30823]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30827]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/infopor1/infoportal.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30831]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30835]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/infopor1/infoportal.mk/wp-toolkit.conf
Sep 13 05:22:32 power sudo[30839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:32 power sudo[30839]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:32 power sudo[30843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep 13 05:22:32 power sudo[30843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30843]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30848]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30852]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30856]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/inkigaic/inkmaster.ink/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30860]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30864]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30868]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30872]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/intelek1/intelekt-bb.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30876]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30880]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30884]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30888]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/holiyayt/invoices.holiyaytravel.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30892]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30896]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30900]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30904]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jpparkin/jpparkinzinegotino.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30908]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30912]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30916]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30916]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30920]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30924]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/karpospo/karpospoliklinika.com.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30924]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30928]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30928]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30932]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30939]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30943]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30947]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30951]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30955]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30959]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30963]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30967]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30971]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.com/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30975]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30979]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30983]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30987]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/goodnews/kaysharov.goodnews.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30991]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[30995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[30995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[30995]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31000]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31004]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31008]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31012]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31016]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31020]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kouzonco/kouzon.com.hn/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31024]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31028]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sprintst/kritiki.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31032]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31036]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sprintst/kritiki.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31040]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31044]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31048]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31052]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kujnamon/kujnamoni.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31056]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31060]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31064]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31068]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31068]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/love.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31072]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31076]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makdrone/makdrone.mk/wp-toolkit.conf
Sep 13 05:22:33 power sudo[31080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:33 power sudo[31080]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:33 power sudo[31084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31084]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31088]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makdrone/makdrone.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31088]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31092]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31092]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/makoasmk/makoas.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31096]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31100]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/makoasmk/makoas.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31104]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31108]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31108]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31112]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31112]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31116]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31116]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ambitiou/mango.ambitioussolutions.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31120]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31124]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31128]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31132]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.deosol.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31136]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31140]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31144]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31144]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31148]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/edomcomm/mkvesti.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31152]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31156]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/modernar/modernart.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31160]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31164]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/modernar/modernart.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31168]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31172]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31176]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31180]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/v5srybi9dcdx/momcurls.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31184]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31188]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mpbmk/mpb.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31193]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31197]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31197]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mpbmk/mpb.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31201]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31205]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31209]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31214]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31214]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31218]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31222]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mspmk/msp.org.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31226]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31230]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mspmk/msp.org.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31234]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31242]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mstmmk/mstm.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31246]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31250]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31250]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mstmmk/mstm.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31254]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31258]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31262]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31266]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/naksorgm/naks.org.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31270]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31274]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31278]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31282]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31286]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31290]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31294]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31298]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/test.nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31302]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31306]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31312]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31312]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31317]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31317]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31325]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nasaidni/nasaidnina.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31325]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31329]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31333]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31333]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31337]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31337]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ismassag/needmassagetherapy.co.uk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31341]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31345]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31345]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31349]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31353]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/chemhemc/new.chemhem.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31361]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31367]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31367]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31373]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31377]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikolov1/nikolovproduction.com/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31381]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31385]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nolimits/nolimits.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31389]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31398]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nolimits/nolimits.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31403]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:34 power sudo[31408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 13 05:22:34 power sudo[31408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:34 power sudo[31408]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31418]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31422]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlinesh/onlineshop.com.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31426]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31430]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31434]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31438]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/palenzok/palenzokompani.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31442]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31447]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31467]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31471]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pelagoni/pelagonijaregion.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31475]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31479]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31479]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31483]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31487]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31491]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31495]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31495]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31499]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31503]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/biplmk/petstop.mk.bipl.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31507]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31511]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31515]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31519]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/premiumi/premiuminsurance.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31523]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31527]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31531]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31535]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/pri-macedonia.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31539]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31543]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31547]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31551]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31555]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31559]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31563]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31567]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fffhpcwr/rsbsp.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31571]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31578]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31582]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31586]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/radekrat/radekratovce.edu.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31590]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31594]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31598]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31602]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rasmorgm/rasm.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31606]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31610]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31614]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31619]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31619]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/recorgmk/rec.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31623]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31627]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/s-travel.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31631]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31635]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31635]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/s-travel.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31639]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31643]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31643]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stravelm/stravel.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31647]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31651]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31655]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stravelm/stravel.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31655]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31659]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31663]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31663]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31667]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/simbiome/simbiomedic.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31671]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31675]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31679]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31679]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31683]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31683]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/sk.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31687]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31691]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31695]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31695]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31699]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31703]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31707]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31707]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/solem.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31711]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31715]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/solem.org.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31719]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:35 power sudo[31723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep 13 05:22:35 power sudo[31723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:35 power sudo[31723]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31727]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31727]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31732]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31738]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31742]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31746]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31750]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/solemor1/vedi.mk.solem.org.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31754]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31758]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31762]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31766]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/sssoluti/sssolutions.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31770]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31774]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31774]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/supremeleader.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31778]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31782]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31786]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/supremeleader.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31786]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31790]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31794]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31798]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/tehnodro/tehnodrom.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31802]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31807]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31811]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31815]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31819]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31823]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31827]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31831]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/supremel/theuniversalgroup.net.supremeleader.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31835]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31839]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/viewinn/viewinn.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31843]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31847]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/viewinn/viewinn.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31851]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31855]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31860]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31868]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wikicamp/wikicamp.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31872]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31876]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workandt/workandtravel.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31882]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31887]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workandt/workandtravel.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31891]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31895]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31899]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31903]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/cetplatf/yoe.cetplatform.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31907]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31911]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31915]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31919]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/youthgua/youthguarantee-wb.eu/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31923]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31931]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/zampmk/zamp.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31935]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31939]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/zampmk/zamp.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31943]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31947]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31947]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31951]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31951]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31955]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31955]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/ivanjordanov.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31959]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31963]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31967]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31971]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/ivanjord/novaidninazastip.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31975]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31979]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/izzomk/izzo.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31983]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31987]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/izzomk/izzo.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31991]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31995]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[31999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 13 05:22:36 power sudo[31999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[31999]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[32003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 13 05:22:36 power sudo[32003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[32003]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[32007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/janiboja/janibojadzi.com/wp-toolkit.conf
Sep 13 05:22:36 power sudo[32007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[32007]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[32012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[32012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[32012]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[32016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/jaramk/jara.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[32016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[32016]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[32020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[32020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[32020]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:36 power sudo[32024]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/jaramk/jara.mk/wp-toolkit.conf
Sep 13 05:22:36 power sudo[32024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:36 power sudo[32024]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32028]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32032]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32036]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32040]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32044]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32048]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32053]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/kupireciklirano.mk.innofablab.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32057]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32061]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32065]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32069]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32073]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32077]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32081]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32085]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mapaspla/mapasplastik.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32089]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32093]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/mediatag/mediatag.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32097]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32101]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/mediatag/mediatag.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32105]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32109]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32113]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32117]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32121]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32125]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32125]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32129]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32133]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/innofabl/mulprotex.com.innofablab.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32137]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32141]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32145]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32149]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nefrolog/nefrologija.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32156]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32160]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32164]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32168]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32172]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32176]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nikimare/niki-mare.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32181]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32188]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nikimare/niki-mare.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32192]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32196]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32201]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32205]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32209]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32209]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32213]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/pravekom/praveko.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32217]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32221]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/pravekom/praveko.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32225]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32229]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32234]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/proverim/proveri.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32234]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32241]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/proverim/proveri.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32245]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32249]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32253]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32257]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32261]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/rastiraz/rastirazvoj.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32261]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32266]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32270]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32274]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.com/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32278]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32282]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32286]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32290]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:37 power sudo[32294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/conserva/rebornmacedonia.conservative.mk/wp-toolkit.conf
Sep 13 05:22:37 power sudo[32294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:37 power sudo[32294]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32298]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32298]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32302]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32306]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/maleshne/restoranmrs.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32310]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32314]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/samasped/samasped.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32318]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32322]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32326]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/samasped/samasped.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32326]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32331]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32336]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32340]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/seloviro/selovirovo.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32344]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32348]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32353]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32361]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/skyapart/skyapartments.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32366]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32375]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32381]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32385]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/socioloz/sociolozi.org.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32389]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32393]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32397]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32401]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32401]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32401]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/stojnevi/stojnevi.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32405]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32409]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32409]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32413]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32417]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/nucktra1/teatar.nucktrajkoprokopiev.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32421]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32425]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32429]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32436]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/trudovop/trudovopravo.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32440]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32445]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32449]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32453]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/urbanexp/urbanexpert.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32457]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32462]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32466]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32470]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/vfxnestc/vfxnest.com/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32474]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32478]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32482]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32486]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/volkanco/volkan.com.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32490]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32494]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/glammace/wikimedia.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32498]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32502]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/glammace/wikimedia.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32506]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32510]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/wineberr/wineberry.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32514]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32518]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/wineberr/wineberry.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32522]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32526]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32530]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32538]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/workbenc/workbench-ent.com/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32542]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32547]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32551]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32555]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/berbermk/berber.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32559]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32563]: pam_unix(sudo:session): session closed for user root
Sep 13 05:22:38 power sudo[32567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/berbermk/berber.mk/wp-toolkit.conf
Sep 13 05:22:38 power sudo[32567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:22:38 power sudo[32567]: pam_unix(sudo:session): session closed for user root
Sep 13 05:25:01 power systemd[34532]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:30:01 power systemd[40080]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:30:01 power systemd[40081]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 05:30:01 power systemd[40082]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 05:30:01 power systemd[40084]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 05:35:01 power systemd[45258]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:35:06 power systemd[45381]: pam_unix(systemd-user:session): session opened for user dhamachi(uid=1215) by dhamachi(uid=0)
Sep 13 05:35:06 power su[45375]: pam_unix(su:session): session opened for user dhamachi(uid=1215) by (uid=0)
Sep 13 05:35:06 power su[45375]: pam_unix(su:session): session closed for user dhamachi
Sep 13 05:36:01 power systemd[46160]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 05:37:01 power systemd[46792]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 05:40:01 power systemd[49183]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:42:01 power systemd[50715]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 05:42:12 power sudo[50884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 05:42:12 power sudo[50884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:12 power sudo[50884]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:12 power sudo[50889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 05:42:12 power sudo[50889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:12 power sudo[50889]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:12 power sudo[50894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 05:42:12 power sudo[50894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:12 power sudo[50894]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:12 power sudo[50899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=zRGR17ya7D'
Sep 13 05:42:12 power sudo[50899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:12 power sudo[50899]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:12 power sudo[50904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 05:42:12 power sudo[50904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:12 power sudo[50904]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:12 power sudo[50908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 05:42:12 power sudo[50908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:12 power sudo[50908]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:12 power sudo[50913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 05:42:12 power sudo[50913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:12 power sudo[50913]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:12 power sudo[50917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 05:42:12 power sudo[50917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:13 power sudo[50917]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:13 power sudo[50923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 05:42:13 power sudo[50923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:13 power sudo[50923]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:13 power sudo[50927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 05:42:13 power sudo[50927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:13 power sudo[50927]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:13 power sudo[50931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 05:42:13 power sudo[50931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:13 power sudo[50931]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:13 power sudo[50935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 05:42:13 power sudo[50935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:13 power sudo[50935]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:13 power sudo[50939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 05:42:13 power sudo[50939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:13 power sudo[50939]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:13 power sudo[50944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 05:42:13 power sudo[50944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:13 power sudo[50944]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:14 power sudo[50964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 05:42:14 power sudo[50964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:14 power sudo[50964]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:14 power sudo[50971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 05:42:14 power sudo[50971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:15 power sudo[50971]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:15 power sudo[50979]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=vegemk1 user-2=cupidpro user-3=euronic3 user-4=conserva user-5=bonitavi user-6=evberasm user-7=folklore user-8=bauerin2 user-9=evacommk user-10=aptekafa user-11=madzomk user-12=gradbai1 user-13=dimpalne user-14=eaptekam user-15=peshkai1 user-16=fxxcom user-17=tehnodro user-18=makdrone user-19=jpkomuna user-20=izzomk user-21=pelagini user-22=bbbustou user-23=kaoilmk user-24=biplmk user-25=sssoluti user-26=atspedco user-27=animatem user-28=cleanerm user-29=progress user-30=recorgmk user-31=taktcomm user-32=solointe user-33=jaramk user-34=eurofarm user-35=solarinv user-36=golakkom user-37=electrol user-38=trigemat user-39=naksorgm user-40=eliksirz user-41=ismassag user-42=workbenc user-43=mbmehani user-44=viplastc user-45=wineberr user-46=intelek1 user-47=mediatag user-48=lblawcom user-49=nucktra1
Sep 13 05:42:15 power sudo[50979]: wp-toolkit : (command continued) user-50=forzares user-51=aptekazd user-52=nikimare user-53=nikolov1 user-54=hausmark user-55=apgrupmk user-56=mediasol user-57=carrent1 user-58=bogdanos user-59=kardiome user-60=euronic2 user-61=matratze user-62=cosmatob user-63=euromaki user-64=elektrot user-65=zapovim1 user-66=chemhemc user-67=samasped user-68=nutrivim user-69=imdskopj user-70=glammace user-71=albuname user-72=infopor1 user-73=pravekom user-74=vtranseu user-75=premiumi user-76=innofabl user-77=vacuacti user-78=bozinovm user-79=dslmk user-80=darkogor user-81=prizmapl user-82=fnjorgmk user-83=tehnologija user-84=taneccom user-85=modernar user-86=inkigaic user-87=zdmgpsor user-88=gorsajmk user-89=aquatech user-90=supremel user-91=v5srybi9dcdx user-92=nationa2 user-93=onlinesh user-94=mapaspla user-95=solemor1 user-96=tcieuroc user-97=fffhpcwr user-98=radekrat user-99=starluxm user-100=fiziosmk user-101=ambitiou user-102=versusmk user-103=workandt
Sep 13 05:42:15 power sudo[50979]: wp-toolkit : (command continued) user-104=delcevca user-105=getaldus user-106=simbiome user-107=barececo user-108=mfashion user-109=volkanco user-110=goartsym user-111=dhamachi user-112=bianasho user-113=makoasmk user-114=skyapart user-115=rasmorgm user-116=datalink user-117=velmk user-118=gogovan1 user-119=kujnamon user-120=univerz1 user-121=agrosind user-122=mpbmk user-123=bizporta user-124=datelcom user-125=maleshne user-126=groskome user-127=ivanjord user-128=sedcmk user-129=vfxnestc user-130=polyeste user-131=urbanexp user-132=wikicamp user-133=detskagr user-134=spdcompu user-135=infobadi user-136=mspmk user-137=stojano1 user-138=bovincom user-139=itradeco user-140=janiboja user-141=cabinetm user-142=vezilkac user-143=zvskopje user-144=busymard user-145=zampmk user-146=palenzok user-147=custome1 user-148=sparkupm user-149=stokovna user-150=klimimk user-151=premiuma user-152=kouzonco user-153=dalmacom user-154=cetplatf user-155=drleomk
Sep 13 05:42:15 power sudo[50979]: wp-toolkit : (command continued) user-156=jpparkin user-157=inotekso user-158=screenme user-159=arturaco user-160=ideaplus user-161=karpospo user-162=nasaidni user-163=premiums user-164=butelmk user-165=daris user-166=seloviro user-167=centarba user-168=nlpmkorg user-169=kolened1 user-170=nolimits user-171=berbermk user-172=edomcomm user-173=sprintst user-174=herbalpl user-175=enochmk user-176=dikimk12 user-177=tradeyou user-178=gjorgeiv user-179=dnevnoin user-180=wondersp user-181=robustco user-182=stravelm user-183=pecakome user-184=rastiraz user-185=holiyayt user-186=tealmk user-187=proverim user-188=dadarmk user-189=mstmmk user-190=goodnews user-191=gocruise user-192=stojnevi user-193=uhostmk5 user-194=bauerbg user-195=raremk user-196=oouslave user-197=vmro user-198=trudovop user-199=viewinn user-200=enaspotc user-201=hotammk user-202=cajsproc user-203=youthgua user-204=anitermc user-205=frizered user-206=hidrommk user-207=caramk
Sep 13 05:42:15 power sudo[50979]: wp-toolkit : (command continued) user-208=nefrolog user-209=oncolog1 user-210=ekostoc1 user-211=levantmk user-212=avtogumi user-213=socioloz user-214=pelagoni user-215=evolvepl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 05:42:15 power sudo[50979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:15 power sudo[50979]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:15 power sudo[50995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 05:42:15 power sudo[50995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:15 power sudo[50995]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:15 power sudo[50999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4LfjpunkZdvdkpDi.~
Sep 13 05:42:15 power sudo[50999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:15 power sudo[50999]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:15 power sudo[51003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4LfjpunkZdvdkpDi.~\''
Sep 13 05:42:15 power sudo[51003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:15 power sudo[51003]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:15 power sudo[51008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4LfjpunkZdvdkpDi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 05:42:15 power sudo[51008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:15 power sudo[51008]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:15 power sudo[51012]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 05:42:15 power sudo[51012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:15 power sudo[51012]: pam_unix(sudo:session): session closed for user root
Sep 13 05:42:16 power sudo[51308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 05:42:16 power sudo[51308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 05:42:16 power sudo[51308]: pam_unix(sudo:session): session closed for user root
Sep 13 05:45:01 power systemd[53981]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:50:01 power systemd[58680]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 05:55:01 power systemd[62789]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:00:01 power systemd[67101]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 06:00:01 power systemd[67100]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:00:01 power systemd[67102]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 06:00:01 power systemd[67104]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 06:05:01 power systemd[72302]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:06:01 power systemd[73059]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 06:07:01 power systemd[74110]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 06:10:01 power systemd[76519]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:12:01 power systemd[78012]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 06:15:01 power systemd[80509]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:20:01 power systemd[84626]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:25:01 power systemd[89011]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:30:01 power systemd[92799]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:30:01 power systemd[92800]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 06:30:01 power systemd[92801]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 06:30:01 power systemd[92803]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 06:35:01 power systemd[97010]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:36:01 power systemd[97831]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 06:37:01 power systemd[98540]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 06:40:01 power systemd[101038]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:42:01 power systemd[102441]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 06:42:12 power sudo[102585]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 06:42:12 power sudo[102585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:12 power sudo[102585]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:12 power sudo[102590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 06:42:12 power sudo[102590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:12 power sudo[102590]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:12 power sudo[102600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 06:42:12 power sudo[102600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:12 power sudo[102600]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:12 power sudo[102604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=jlxkmStNpl'
Sep 13 06:42:12 power sudo[102604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:12 power sudo[102604]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:12 power sudo[102609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 06:42:12 power sudo[102609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:12 power sudo[102609]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:12 power sudo[102613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 06:42:12 power sudo[102613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:12 power sudo[102613]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:12 power sudo[102617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 06:42:12 power sudo[102617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:12 power sudo[102617]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:12 power sudo[102621]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 06:42:12 power sudo[102621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:13 power sudo[102621]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:13 power sudo[102626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 06:42:13 power sudo[102626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:13 power sudo[102626]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:13 power sudo[102630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 06:42:13 power sudo[102630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:13 power sudo[102630]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:13 power sudo[102634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 06:42:13 power sudo[102634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:13 power sudo[102634]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:13 power sudo[102638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 06:42:13 power sudo[102638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:13 power sudo[102638]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:13 power sudo[102642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 06:42:13 power sudo[102642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:13 power sudo[102642]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:13 power sudo[102646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 06:42:13 power sudo[102646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:13 power sudo[102646]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:15 power sudo[102685]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 06:42:15 power sudo[102685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:15 power sudo[102685]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:15 power sudo[102691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 06:42:15 power sudo[102691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:15 power sudo[102691]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:15 power sudo[102701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tealmk user-2=proverim user-3=dadarmk user-4=mstmmk user-5=goodnews user-6=gocruise user-7=tradeyou user-8=gjorgeiv user-9=dnevnoin user-10=robustco user-11=stravelm user-12=wondersp user-13=pecakome user-14=rastiraz user-15=holiyayt user-16=berbermk user-17=edomcomm user-18=herbalpl user-19=enochmk user-20=sprintst user-21=dikimk12 user-22=seloviro user-23=kolened1 user-24=centarba user-25=nlpmkorg user-26=nolimits user-27=socioloz user-28=avtogumi user-29=pelagoni user-30=evolvepl user-31=hidrommk user-32=frizered user-33=caramk user-34=levantmk user-35=ekostoc1 user-36=oncolog1 user-37=nefrolog user-38=hotammk user-39=cajsproc user-40=anitermc user-41=youthgua user-42=stojnevi user-43=bauerbg user-44=uhostmk5 user-45=oouslave user-46=raremk user-47=trudovop user-48=viewinn user-49=vmro user-50=enaspotc
Sep 13 06:42:15 power sudo[102701]: wp-toolkit : (command continued) user-51=urbanexp user-52=wikicamp user-53=detskagr user-54=spdcompu user-55=mspmk user-56=infobadi user-57=bizporta user-58=maleshne user-59=datelcom user-60=ivanjord user-61=groskome user-62=sedcmk user-63=polyeste user-64=vfxnestc user-65=datalink user-66=univerz1 user-67=kujnamon user-68=gogovan1 user-69=velmk user-70=mpbmk user-71=agrosind user-72=workandt user-73=barececo user-74=simbiome user-75=delcevca user-76=getaldus user-77=mfashion user-78=dhamachi user-79=volkanco user-80=goartsym user-81=skyapart user-82=bianasho user-83=makoasmk user-84=rasmorgm user-85=drleomk user-86=inotekso user-87=jpparkin user-88=arturaco user-89=screenme user-90=karpospo user-91=nasaidni user-92=ideaplus user-93=daris user-94=butelmk user-95=premiums user-96=premiuma user-97=kouzonco user-98=dalmacom user-99=cetplatf user-100=busymard user-101=zvskopje user-102=zampmk user-103=palenzok user-104=custome1 user-105=stokovna
Sep 13 06:42:15 power sudo[102701]: wp-toolkit : (command continued) user-106=sparkupm user-107=klimimk user-108=stojano1 user-109=bovincom user-110=itradeco user-111=janiboja user-112=cabinetm user-113=vezilkac user-114=imdskopj user-115=albuname user-116=glammace user-117=infopor1 user-118=vtranseu user-119=pravekom user-120=euromaki user-121=cosmatob user-122=zapovim1 user-123=elektrot user-124=chemhemc user-125=samasped user-126=nutrivim user-127=apgrupmk user-128=bogdanos user-129=carrent1 user-130=mediasol user-131=kardiome user-132=matratze user-133=euronic2 user-134=mediatag user-135=intelek1 user-136=lblawcom user-137=nucktra1 user-138=forzares user-139=nikimare user-140=aptekazd user-141=nikolov1 user-142=hausmark user-143=fffhpcwr user-144=starluxm user-145=radekrat user-146=fiziosmk user-147=ambitiou user-148=versusmk user-149=nationa2 user-150=onlinesh user-151=mapaspla user-152=solemor1 user-153=tcieuroc user-154=zdmgpsor user-155=aquatech user-156=gorsajmk
Sep 13 06:42:15 power sudo[102701]: wp-toolkit : (command continued) user-157=supremel user-158=v5srybi9dcdx user-159=vacuacti user-160=innofabl user-161=premiumi user-162=darkogor user-163=prizmapl user-164=dslmk user-165=fnjorgmk user-166=bozinovm user-167=tehnologija user-168=taneccom user-169=modernar user-170=inkigaic user-171=tehnodro user-172=makdrone user-173=jpkomuna user-174=izzomk user-175=aptekafa user-176=madzomk user-177=evacommk user-178=gradbai1 user-179=dimpalne user-180=eaptekam user-181=fxxcom user-182=peshkai1 user-183=folklore user-184=bauerin2 user-185=cupidpro user-186=vegemk1 user-187=euronic3 user-188=conserva user-189=evberasm user-190=bonitavi user-191=ismassag user-192=workbenc user-193=mbmehani user-194=viplastc user-195=wineberr user-196=eurofarm user-197=solarinv user-198=golakkom user-199=electrol user-200=eliksirz user-201=naksorgm user-202=trigemat user-203=atspedco user-204=sssoluti user-205=cleanerm user-206=animatem user-207=progress
Sep 13 06:42:15 power sudo[102701]: wp-toolkit : (command continued) user-208=taktcomm user-209=recorgmk user-210=solointe user-211=jaramk user-212=pelagini user-213=bbbustou user-214=biplmk user-215=kaoilmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 06:42:15 power sudo[102701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:16 power sudo[102701]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:16 power sudo[102708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 06:42:16 power sudo[102708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:16 power sudo[102708]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:16 power sudo[102713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TIUV4OWpjdpzkioz.~
Sep 13 06:42:16 power sudo[102713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:16 power sudo[102713]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:16 power sudo[102717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TIUV4OWpjdpzkioz.~\''
Sep 13 06:42:16 power sudo[102717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:16 power sudo[102717]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:16 power sudo[102722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TIUV4OWpjdpzkioz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 06:42:16 power sudo[102722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:16 power sudo[102722]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:16 power sudo[102726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 06:42:16 power sudo[102726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:16 power sudo[102726]: pam_unix(sudo:session): session closed for user root
Sep 13 06:42:16 power sudo[102886]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 06:42:16 power sudo[102886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 06:42:16 power sudo[102886]: pam_unix(sudo:session): session closed for user root
Sep 13 06:45:01 power systemd[105855]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:50:01 power systemd[110672]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 06:55:01 power systemd[115428]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:00:01 power systemd[120609]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:00:01 power systemd[120612]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 07:00:01 power systemd[120613]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 07:00:01 power systemd[120615]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 07:05:01 power systemd[125813]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:06:01 power systemd[126807]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 07:07:01 power systemd[128172]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 07:10:01 power systemd[131084]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:11:02 power sshd[131816]: Connection closed by 162.142.125.121 port 60294 [preauth]
Sep 13 07:12:01 power systemd[132918]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 07:15:01 power systemd[136197]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:20:01 power systemd[141561]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:21:21 power sudo[142709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 07:21:21 power sudo[142709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:21:21 power sudo[142709]: pam_unix(sudo:session): session closed for user root
Sep 13 07:21:21 power sudo[142715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep 13 07:21:21 power sudo[142715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:21:21 power sudo[142715]: pam_unix(sudo:session): session closed for user root
Sep 13 07:21:21 power sudo[142722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=animatem Mime list_redirects --output=json'
Sep 13 07:21:21 power sudo[142722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:21:21 power sudo[142722]: pam_unix(sudo:session): session closed for user root
Sep 13 07:21:29 power sudo[142834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 07:21:29 power sudo[142834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:21:29 power sudo[142834]: pam_unix(sudo:session): session closed for user root
Sep 13 07:21:29 power sudo[142842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ekostoc1'
Sep 13 07:21:29 power sudo[142842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:21:29 power sudo[142842]: pam_unix(sudo:session): session closed for user root
Sep 13 07:25:01 power systemd[146122]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:30:01 power systemd[150142]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:30:01 power systemd[150144]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 07:30:01 power systemd[150145]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 07:30:01 power systemd[150147]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 07:35:01 power systemd[154334]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:36:01 power systemd[155142]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 07:37:01 power systemd[155915]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 07:40:02 power systemd[158406]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:42:01 power systemd[160524]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 07:42:12 power sudo[160712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 07:42:12 power sudo[160712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:12 power sudo[160712]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:12 power sudo[160716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 07:42:12 power sudo[160716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:12 power sudo[160716]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:12 power sudo[160720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 07:42:12 power sudo[160720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:12 power sudo[160720]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:12 power sudo[160724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=Y38E7WDHZG'
Sep 13 07:42:12 power sudo[160724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:12 power sudo[160724]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:12 power sudo[160729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 07:42:12 power sudo[160729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:12 power sudo[160729]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:12 power sudo[160734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 07:42:12 power sudo[160734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:12 power sudo[160734]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:12 power sudo[160739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 07:42:12 power sudo[160739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:12 power sudo[160739]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:12 power sudo[160743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 07:42:12 power sudo[160743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:13 power sudo[160743]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:13 power sudo[160748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 07:42:13 power sudo[160748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:13 power sudo[160748]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:13 power sudo[160752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 07:42:13 power sudo[160752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:13 power sudo[160752]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:13 power sudo[160756]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 07:42:13 power sudo[160756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:13 power sudo[160756]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:13 power sudo[160760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 07:42:13 power sudo[160760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:13 power sudo[160760]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:13 power sudo[160764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 07:42:13 power sudo[160764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:13 power sudo[160764]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:13 power sudo[160769]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 07:42:13 power sudo[160769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:13 power sudo[160769]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:15 power sudo[160837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 07:42:15 power sudo[160837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:15 power sudo[160837]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:15 power sudo[160842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 07:42:15 power sudo[160842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:15 power sudo[160842]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:15 power sudo[160847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=hidrommk user-2=frizered user-3=caramk user-4=oncolog1 user-5=levantmk user-6=ekostoc1 user-7=nefrolog user-8=socioloz user-9=avtogumi user-10=pelagoni user-11=evolvepl user-12=stojnevi user-13=oouslave user-14=raremk user-15=bauerbg user-16=uhostmk5 user-17=enaspotc user-18=trudovop user-19=viewinn user-20=vmro user-21=cajsproc user-22=hotammk user-23=anitermc user-24=youthgua user-25=tradeyou user-26=gjorgeiv user-27=dnevnoin user-28=pecakome user-29=stravelm user-30=robustco user-31=wondersp user-32=holiyayt user-33=rastiraz user-34=tealmk user-35=dadarmk user-36=proverim user-37=goodnews user-38=mstmmk user-39=gocruise user-40=seloviro user-41=kolened1 user-42=centarba user-43=nlpmkorg user-44=nolimits user-45=edomcomm user-46=berbermk user-47=dikimk12 user-48=enochmk user-49=herbalpl user-50=sprintst
Sep 13 07:42:15 power sudo[160847]: wp-toolkit : (command continued) user-51=kouzonco user-52=premiuma user-53=cetplatf user-54=dalmacom user-55=inotekso user-56=jpparkin user-57=drleomk user-58=karpospo user-59=nasaidni user-60=ideaplus user-61=arturaco user-62=screenme user-63=butelmk user-64=daris user-65=premiums user-66=stojano1 user-67=bovincom user-68=janiboja user-69=itradeco user-70=vezilkac user-71=cabinetm user-72=palenzok user-73=zvskopje user-74=busymard user-75=zampmk user-76=custome1 user-77=stokovna user-78=sparkupm user-79=klimimk user-80=bizporta user-81=maleshne user-82=datelcom user-83=sedcmk user-84=groskome user-85=ivanjord user-86=polyeste user-87=vfxnestc user-88=wikicamp user-89=urbanexp user-90=spdcompu user-91=detskagr user-92=infobadi user-93=mspmk user-94=barececo user-95=simbiome user-96=delcevca user-97=getaldus user-98=workandt user-99=dhamachi user-100=volkanco user-101=goartsym user-102=mfashion user-103=skyapart user-104=bianasho
Sep 13 07:42:15 power sudo[160847]: wp-toolkit : (command continued) user-105=makoasmk user-106=rasmorgm user-107=datalink user-108=kujnamon user-109=univerz1 user-110=velmk user-111=gogovan1 user-112=mpbmk user-113=agrosind user-114=onlinesh user-115=nationa2 user-116=solemor1 user-117=mapaspla user-118=tcieuroc user-119=fffhpcwr user-120=starluxm user-121=radekrat user-122=ambitiou user-123=fiziosmk user-124=versusmk user-125=darkogor user-126=fnjorgmk user-127=dslmk user-128=prizmapl user-129=bozinovm user-130=vacuacti user-131=premiumi user-132=innofabl user-133=taneccom user-134=tehnologija user-135=modernar user-136=inkigaic user-137=zdmgpsor user-138=aquatech user-139=gorsajmk user-140=v5srybi9dcdx user-141=supremel user-142=euromaki user-143=cosmatob user-144=zapovim1 user-145=elektrot user-146=chemhemc user-147=samasped user-148=nutrivim user-149=imdskopj user-150=albuname user-151=glammace user-152=infopor1 user-153=pravekom user-154=vtranseu user-155=mediatag
Sep 13 07:42:15 power sudo[160847]: wp-toolkit : (command continued) user-156=intelek1 user-157=nucktra1 user-158=lblawcom user-159=nikimare user-160=aptekazd user-161=forzares user-162=nikolov1 user-163=hausmark user-164=carrent1 user-165=bogdanos user-166=mediasol user-167=apgrupmk user-168=kardiome user-169=matratze user-170=euronic2 user-171=eurofarm user-172=solarinv user-173=golakkom user-174=naksorgm user-175=eliksirz user-176=trigemat user-177=electrol user-178=workbenc user-179=ismassag user-180=mbmehani user-181=wineberr user-182=viplastc user-183=pelagini user-184=kaoilmk user-185=biplmk user-186=bbbustou user-187=sssoluti user-188=atspedco user-189=progress user-190=cleanerm user-191=animatem user-192=taktcomm user-193=recorgmk user-194=jaramk user-195=solointe user-196=aptekafa user-197=madzomk user-198=evacommk user-199=gradbai1 user-200=eaptekam user-201=dimpalne user-202=fxxcom user-203=peshkai1 user-204=tehnodro user-205=makdrone user-206=izzomk user-207=jpkomuna
Sep 13 07:42:15 power sudo[160847]: wp-toolkit : (command continued) user-208=euronic3 user-209=cupidpro user-210=vegemk1 user-211=conserva user-212=evberasm user-213=bonitavi user-214=folklore user-215=bauerin2 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 07:42:15 power sudo[160847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:16 power sudo[160847]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:16 power sudo[160856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 07:42:16 power sudo[160856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:16 power sudo[160856]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:16 power sudo[160861]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-evgwCO0hArsv9cir.~
Sep 13 07:42:16 power sudo[160861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:16 power sudo[160861]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:16 power sudo[160865]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-evgwCO0hArsv9cir.~\''
Sep 13 07:42:16 power sudo[160865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:16 power sudo[160865]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:16 power sudo[160870]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-evgwCO0hArsv9cir.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 07:42:16 power sudo[160870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:16 power sudo[160870]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:16 power sudo[160874]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 07:42:16 power sudo[160874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:16 power sudo[160874]: pam_unix(sudo:session): session closed for user root
Sep 13 07:42:16 power sudo[161575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 07:42:16 power sudo[161575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 07:42:16 power sudo[161575]: pam_unix(sudo:session): session closed for user root
Sep 13 07:45:01 power systemd[164023]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:50:01 power systemd[169665]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 07:55:01 power systemd[173713]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:00:02 power systemd[177686]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:00:02 power systemd[177693]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 08:00:02 power systemd[177692]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 08:00:02 power systemd[177696]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 08:00:02 power systemd[177697]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 13 08:05:01 power systemd[182671]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:06:01 power systemd[183489]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 08:07:01 power systemd[184343]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 08:10:01 power systemd[187147]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:11:43 power pam_imunify[3875248]: pam_imunify(cpanel_ftp_auth:auth): [IM360_RBL] The IP 165.154.11.37 has been locked due to Imunify RBL
Sep 13 08:12:01 power systemd[188907]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 08:15:01 power systemd[191509]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:20:01 power systemd[198086]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:25:01 power systemd[202447]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:30:01 power systemd[206390]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:30:01 power systemd[206392]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 08:30:01 power systemd[206391]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 08:30:02 power systemd[206394]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 08:35:01 power systemd[211322]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:36:01 power systemd[212221]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 08:37:01 power systemd[213094]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 08:40:02 power systemd[215975]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:42:01 power systemd[217653]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 08:42:12 power sudo[217794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 08:42:12 power sudo[217794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:12 power sudo[217794]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:12 power sudo[217798]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 08:42:12 power sudo[217798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:12 power sudo[217798]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:12 power sudo[217802]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 08:42:12 power sudo[217802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:12 power sudo[217802]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:12 power sudo[217806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=opppdsVNUW'
Sep 13 08:42:12 power sudo[217806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:12 power sudo[217806]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:12 power sudo[217811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 08:42:12 power sudo[217811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:12 power sudo[217811]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:12 power sudo[217816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 08:42:12 power sudo[217816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:12 power sudo[217816]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:12 power sudo[217820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 08:42:12 power sudo[217820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:12 power sudo[217820]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:12 power sudo[217824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 08:42:12 power sudo[217824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:13 power sudo[217824]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:13 power sudo[217829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 08:42:13 power sudo[217829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:13 power sudo[217829]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:13 power sudo[217833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 08:42:13 power sudo[217833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:13 power sudo[217833]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:13 power sudo[217837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 08:42:13 power sudo[217837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:13 power sudo[217837]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:13 power sudo[217841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 08:42:13 power sudo[217841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:13 power sudo[217841]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:13 power sudo[217845]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 08:42:13 power sudo[217845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:13 power sudo[217845]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:13 power sudo[217849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 08:42:13 power sudo[217849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:13 power sudo[217849]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:15 power sudo[217887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 08:42:15 power sudo[217887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:15 power sudo[217887]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:15 power sudo[217892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 08:42:15 power sudo[217892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:15 power sudo[217892]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:15 power sudo[217897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=modernar user-2=inkigaic user-3=bozinovm user-4=dslmk user-5=darkogor user-6=fnjorgmk user-7=prizmapl user-8=innofabl user-9=premiumi user-10=vacuacti user-11=taneccom user-12=tehnologija user-13=gorsajmk user-14=aquatech user-15=v5srybi9dcdx user-16=supremel user-17=zdmgpsor user-18=tcieuroc user-19=onlinesh user-20=nationa2 user-21=solemor1 user-22=mapaspla user-23=ambitiou user-24=fiziosmk user-25=versusmk user-26=fffhpcwr user-27=radekrat user-28=starluxm user-29=aptekazd user-30=nikimare user-31=forzares user-32=nikolov1 user-33=hausmark user-34=intelek1 user-35=mediatag user-36=nucktra1 user-37=lblawcom user-38=euronic2 user-39=matratze user-40=mediasol user-41=carrent1 user-42=bogdanos user-43=apgrupmk user-44=kardiome user-45=samasped user-46=chemhemc user-47=nutrivim user-48=cosmatob
Sep 13 08:42:15 power sudo[217897]: wp-toolkit : (command continued) user-49=euromaki user-50=elektrot user-51=zapovim1 user-52=infopor1 user-53=vtranseu user-54=pravekom user-55=imdskopj user-56=glammace user-57=albuname user-58=kaoilmk user-59=biplmk user-60=bbbustou user-61=pelagini user-62=taktcomm user-63=recorgmk user-64=jaramk user-65=solointe user-66=atspedco user-67=sssoluti user-68=progress user-69=animatem user-70=cleanerm user-71=golakkom user-72=trigemat user-73=naksorgm user-74=eliksirz user-75=electrol user-76=eurofarm user-77=solarinv user-78=wineberr user-79=viplastc user-80=workbenc user-81=ismassag user-82=mbmehani user-83=bonitavi user-84=evberasm user-85=euronic3 user-86=vegemk1 user-87=cupidpro user-88=conserva user-89=folklore user-90=bauerin2 user-91=eaptekam user-92=dimpalne user-93=peshkai1 user-94=fxxcom user-95=evacommk user-96=madzomk user-97=aptekafa user-98=gradbai1 user-99=izzomk user-100=jpkomuna user-101=tehnodro user-102=makdrone
Sep 13 08:42:15 power sudo[217897]: wp-toolkit : (command continued) user-103=enaspotc user-104=vmro user-105=viewinn user-106=trudovop user-107=stojnevi user-108=raremk user-109=oouslave user-110=uhostmk5 user-111=bauerbg user-112=youthgua user-113=anitermc user-114=cajsproc user-115=hotammk user-116=nefrolog user-117=oncolog1 user-118=ekostoc1 user-119=levantmk user-120=frizered user-121=hidrommk user-122=caramk user-123=evolvepl user-124=avtogumi user-125=socioloz user-126=pelagoni user-127=nlpmkorg user-128=centarba user-129=kolened1 user-130=nolimits user-131=seloviro user-132=dikimk12 user-133=sprintst user-134=herbalpl user-135=enochmk user-136=edomcomm user-137=berbermk user-138=pecakome user-139=wondersp user-140=robustco user-141=stravelm user-142=holiyayt user-143=rastiraz user-144=gjorgeiv user-145=tradeyou user-146=dnevnoin user-147=goodnews user-148=mstmmk user-149=gocruise user-150=tealmk user-151=dadarmk user-152=proverim user-153=janiboja user-154=itradeco
Sep 13 08:42:15 power sudo[217897]: wp-toolkit : (command continued) user-155=vezilkac user-156=cabinetm user-157=stojano1 user-158=bovincom user-159=sparkupm user-160=stokovna user-161=klimimk user-162=palenzok user-163=zampmk user-164=busymard user-165=zvskopje user-166=custome1 user-167=kouzonco user-168=premiuma user-169=cetplatf user-170=dalmacom user-171=ideaplus user-172=karpospo user-173=nasaidni user-174=arturaco user-175=screenme user-176=premiums user-177=butelmk user-178=daris user-179=jpparkin user-180=inotekso user-181=drleomk user-182=makoasmk user-183=bianasho user-184=skyapart user-185=rasmorgm user-186=getaldus user-187=delcevca user-188=simbiome user-189=barececo user-190=workandt user-191=goartsym user-192=volkanco user-193=dhamachi user-194=mfashion user-195=agrosind user-196=mpbmk user-197=datalink user-198=velmk user-199=gogovan1 user-200=kujnamon user-201=univerz1 user-202=sedcmk user-203=groskome user-204=ivanjord user-205=vfxnestc user-206=polyeste
Sep 13 08:42:15 power sudo[217897]: wp-toolkit : (command continued) user-207=bizporta user-208=datelcom user-209=maleshne user-210=spdcompu user-211=detskagr user-212=infobadi user-213=mspmk user-214=wikicamp user-215=urbanexp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 08:42:15 power sudo[217897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:16 power sudo[217897]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:16 power sudo[217903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 08:42:16 power sudo[217903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:16 power sudo[217903]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:16 power sudo[217907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A0WYAjfzM6xbESYK.~
Sep 13 08:42:16 power sudo[217907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:16 power sudo[217907]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:16 power sudo[217911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A0WYAjfzM6xbESYK.~\''
Sep 13 08:42:16 power sudo[217911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:16 power sudo[217911]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:16 power sudo[217917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A0WYAjfzM6xbESYK.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 08:42:16 power sudo[217917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:16 power sudo[217917]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:16 power sudo[217921]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 08:42:16 power sudo[217921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:16 power sudo[217921]: pam_unix(sudo:session): session closed for user root
Sep 13 08:42:17 power sudo[218853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 08:42:17 power sudo[218853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 08:42:17 power sudo[218853]: pam_unix(sudo:session): session closed for user root
Sep 13 08:45:01 power systemd[221359]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:50:01 power systemd[226337]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 08:55:01 power systemd[230555]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:00:02 power systemd[235334]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 09:00:02 power systemd[235332]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:00:02 power systemd[235336]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 09:00:02 power systemd[235338]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 09:00:02 power systemd[235340]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 13 09:05:01 power systemd[241054]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:06:01 power systemd[242088]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 09:07:01 power systemd[242845]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 09:10:02 power systemd[245616]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:12:01 power systemd[247384]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 09:15:01 power systemd[250126]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:20:01 power systemd[254848]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:25:01 power systemd[259019]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:30:01 power systemd[263717]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 09:30:01 power systemd[263716]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:30:01 power systemd[263718]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 09:30:01 power systemd[263719]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 09:35:01 power systemd[268602]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:36:01 power systemd[269718]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 09:37:01 power systemd[270719]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 09:40:01 power systemd[273452]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:42:01 power systemd[275458]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 09:42:12 power sudo[275652]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 09:42:12 power sudo[275652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:12 power sudo[275652]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:12 power sudo[275656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 09:42:12 power sudo[275656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:12 power sudo[275656]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:12 power sudo[275660]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 09:42:12 power sudo[275660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:12 power sudo[275660]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:12 power sudo[275666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=Za5Y7SeKyS'
Sep 13 09:42:12 power sudo[275666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:12 power sudo[275666]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:12 power sudo[275672]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 09:42:12 power sudo[275672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:12 power sudo[275672]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:12 power sudo[275676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 09:42:12 power sudo[275676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:12 power sudo[275676]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:12 power sudo[275680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 09:42:12 power sudo[275680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:12 power sudo[275680]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:12 power sudo[275684]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 09:42:12 power sudo[275684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:13 power sudo[275684]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:13 power sudo[275694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 09:42:13 power sudo[275694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:13 power sudo[275694]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:13 power sudo[275699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 09:42:13 power sudo[275699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:13 power sudo[275699]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:13 power sudo[275703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 09:42:13 power sudo[275703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:13 power sudo[275703]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:13 power sudo[275711]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 09:42:13 power sudo[275711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:13 power sudo[275711]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:13 power sudo[275715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 09:42:13 power sudo[275715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:13 power sudo[275715]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:13 power sudo[275719]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 09:42:13 power sudo[275719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:13 power sudo[275719]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:15 power sudo[275747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 09:42:15 power sudo[275747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:15 power sudo[275747]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:15 power sudo[275755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 09:42:15 power sudo[275755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:15 power sudo[275755]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:15 power sudo[275760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tehnodro user-2=makdrone user-3=izzomk user-4=jpkomuna user-5=evacommk user-6=aptekafa user-7=madzomk user-8=gradbai1 user-9=eaptekam user-10=dimpalne user-11=peshkai1 user-12=fxxcom user-13=folklore user-14=bauerin2 user-15=euronic3 user-16=vegemk1 user-17=cupidpro user-18=conserva user-19=bonitavi user-20=evberasm user-21=workbenc user-22=ismassag user-23=mbmehani user-24=wineberr user-25=viplastc user-26=eurofarm user-27=solarinv user-28=golakkom user-29=trigemat user-30=eliksirz user-31=naksorgm user-32=electrol user-33=sssoluti user-34=atspedco user-35=progress user-36=animatem user-37=cleanerm user-38=taktcomm user-39=recorgmk user-40=jaramk user-41=solointe user-42=pelagini user-43=kaoilmk user-44=biplmk user-45=bbbustou user-46=imdskopj user-47=glammace user-48=albuname user-49=infopor1
Sep 13 09:42:15 power sudo[275760]: wp-toolkit : (command continued) user-50=vtranseu user-51=pravekom user-52=euromaki user-53=cosmatob user-54=elektrot user-55=zapovim1 user-56=chemhemc user-57=samasped user-58=nutrivim user-59=mediasol user-60=carrent1 user-61=bogdanos user-62=apgrupmk user-63=kardiome user-64=euronic2 user-65=matratze user-66=intelek1 user-67=mediatag user-68=nucktra1 user-69=lblawcom user-70=aptekazd user-71=nikimare user-72=forzares user-73=hausmark user-74=nikolov1 user-75=fffhpcwr user-76=radekrat user-77=starluxm user-78=ambitiou user-79=fiziosmk user-80=versusmk user-81=onlinesh user-82=nationa2 user-83=solemor1 user-84=mapaspla user-85=tcieuroc user-86=zdmgpsor user-87=gorsajmk user-88=aquatech user-89=v5srybi9dcdx user-90=supremel user-91=bozinovm user-92=dslmk user-93=darkogor user-94=fnjorgmk user-95=prizmapl user-96=innofabl user-97=premiumi user-98=vacuacti user-99=taneccom user-100=tehnologija user-101=modernar user-102=inkigaic user-103=wikicamp
Sep 13 09:42:15 power sudo[275760]: wp-toolkit : (command continued) user-104=urbanexp user-105=spdcompu user-106=detskagr user-107=infobadi user-108=mspmk user-109=bizporta user-110=datelcom user-111=maleshne user-112=sedcmk user-113=groskome user-114=ivanjord user-115=vfxnestc user-116=polyeste user-117=datalink user-118=velmk user-119=gogovan1 user-120=univerz1 user-121=kujnamon user-122=agrosind user-123=mpbmk user-124=getaldus user-125=delcevca user-126=simbiome user-127=barececo user-128=workandt user-129=volkanco user-130=goartsym user-131=dhamachi user-132=mfashion user-133=makoasmk user-134=bianasho user-135=skyapart user-136=rasmorgm user-137=jpparkin user-138=inotekso user-139=drleomk user-140=ideaplus user-141=karpospo user-142=nasaidni user-143=screenme user-144=arturaco user-145=premiums user-146=butelmk user-147=daris user-148=kouzonco user-149=premiuma user-150=cetplatf user-151=dalmacom user-152=palenzok user-153=zvskopje user-154=zampmk user-155=busymard
Sep 13 09:42:15 power sudo[275760]: wp-toolkit : (command continued) user-156=custome1 user-157=sparkupm user-158=stokovna user-159=klimimk user-160=stojano1 user-161=bovincom user-162=janiboja user-163=itradeco user-164=vezilkac user-165=cabinetm user-166=tealmk user-167=dadarmk user-168=proverim user-169=goodnews user-170=mstmmk user-171=gocruise user-172=gjorgeiv user-173=tradeyou user-174=dnevnoin user-175=pecakome user-176=wondersp user-177=stravelm user-178=robustco user-179=holiyayt user-180=rastiraz user-181=edomcomm user-182=berbermk user-183=dikimk12 user-184=sprintst user-185=enochmk user-186=herbalpl user-187=seloviro user-188=centarba user-189=nlpmkorg user-190=kolened1 user-191=nolimits user-192=socioloz user-193=avtogumi user-194=pelagoni user-195=evolvepl user-196=frizered user-197=hidrommk user-198=caramk user-199=nefrolog user-200=ekostoc1 user-201=oncolog1 user-202=levantmk user-203=cajsproc user-204=hotammk user-205=youthgua user-206=anitermc user-207=stojnevi
Sep 13 09:42:15 power sudo[275760]: wp-toolkit : (command continued) user-208=raremk user-209=oouslave user-210=uhostmk5 user-211=bauerbg user-212=enaspotc user-213=vmro user-214=viewinn user-215=trudovop feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 09:42:15 power sudo[275760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:15 power sudo[275760]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:15 power sudo[275768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 09:42:15 power sudo[275768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:15 power sudo[275768]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:15 power sudo[275772]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sX4a5QZYiUAzykzB.~
Sep 13 09:42:15 power sudo[275772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:15 power sudo[275772]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:16 power sudo[275776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sX4a5QZYiUAzykzB.~\''
Sep 13 09:42:16 power sudo[275776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:16 power sudo[275776]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:16 power sudo[275781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sX4a5QZYiUAzykzB.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 09:42:16 power sudo[275781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:16 power sudo[275781]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:16 power sudo[275785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 09:42:16 power sudo[275785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:16 power sudo[275785]: pam_unix(sudo:session): session closed for user root
Sep 13 09:42:16 power sudo[276384]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 09:42:16 power sudo[276384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 09:42:16 power sudo[276384]: pam_unix(sudo:session): session closed for user root
Sep 13 09:45:01 power systemd[279353]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:50:01 power systemd[284393]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 09:55:01 power systemd[289015]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:00:01 power systemd[293678]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:00:01 power systemd[293679]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 10:00:01 power systemd[293682]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 10:00:01 power systemd[293680]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 10:05:01 power systemd[299135]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:06:01 power systemd[300304]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 10:07:01 power systemd[301290]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 10:10:01 power systemd[304280]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:12:02 power systemd[306473]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 10:15:01 power systemd[309783]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:20:01 power systemd[316072]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:22:15 power sshd[318661]: error: kex_exchange_identification: Connection closed by remote host
Sep 13 10:22:15 power sshd[318661]: Connection closed by 95.215.0.144 port 60012
Sep 13 10:22:36 power sshd[318983]: error: kex_exchange_identification: Connection closed by remote host
Sep 13 10:22:36 power sshd[318983]: Connection closed by 95.215.0.144 port 45412
Sep 13 10:22:37 power sshd[318984]: Connection closed by 95.215.0.144 port 45416 [preauth]
Sep 13 10:25:01 power systemd[321836]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:30:01 power systemd[327346]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:30:01 power systemd[327347]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 10:30:01 power systemd[327348]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 10:30:01 power systemd[327350]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 10:35:01 power systemd[333271]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:36:01 power systemd[334320]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 10:37:01 power systemd[335317]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 10:40:01 power systemd[338271]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:42:01 power systemd[340253]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 10:42:12 power sudo[340467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 10:42:12 power sudo[340467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:12 power sudo[340467]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:12 power sudo[340471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 10:42:12 power sudo[340471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:12 power sudo[340471]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:12 power sudo[340475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 10:42:12 power sudo[340475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:12 power sudo[340475]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:12 power sudo[340483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=UNAn10o9vs'
Sep 13 10:42:12 power sudo[340483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:12 power sudo[340483]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:12 power sudo[340488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 10:42:12 power sudo[340488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:12 power sudo[340488]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:12 power sudo[340492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 10:42:12 power sudo[340492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:12 power sudo[340492]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:12 power sudo[340496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 10:42:12 power sudo[340496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:12 power sudo[340496]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:12 power sudo[340500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 10:42:12 power sudo[340500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:13 power sudo[340500]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:13 power sudo[340514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 10:42:13 power sudo[340514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:13 power sudo[340514]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:13 power sudo[340521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 10:42:13 power sudo[340521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:13 power sudo[340521]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:13 power sudo[340525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 10:42:13 power sudo[340525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:13 power sudo[340525]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:13 power sudo[340529]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 10:42:13 power sudo[340529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:13 power sudo[340529]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:13 power sudo[340533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 10:42:13 power sudo[340533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:13 power sudo[340533]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:13 power sudo[340538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 10:42:13 power sudo[340538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:13 power sudo[340538]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:15 power sudo[340584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 10:42:15 power sudo[340584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:15 power sudo[340584]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:15 power sudo[340589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 10:42:15 power sudo[340589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:15 power sudo[340589]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:15 power sudo[340594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=chemhemc user-2=samasped user-3=nutrivim user-4=euromaki user-5=cosmatob user-6=zapovim1 user-7=elektrot user-8=infopor1 user-9=vtranseu user-10=pravekom user-11=imdskopj user-12=glammace user-13=albuname user-14=aptekazd user-15=nikimare user-16=forzares user-17=hausmark user-18=nikolov1 user-19=intelek1 user-20=mediatag user-21=nucktra1 user-22=lblawcom user-23=euronic2 user-24=matratze user-25=mediasol user-26=bogdanos user-27=carrent1 user-28=apgrupmk user-29=kardiome user-30=tcieuroc user-31=onlinesh user-32=nationa2 user-33=solemor1 user-34=mapaspla user-35=ambitiou user-36=fiziosmk user-37=versusmk user-38=fffhpcwr user-39=radekrat user-40=starluxm user-41=modernar user-42=inkigaic user-43=bozinovm user-44=darkogor user-45=dslmk user-46=prizmapl user-47=fnjorgmk user-48=innofabl user-49=premiumi
Sep 13 10:42:15 power sudo[340594]: wp-toolkit : (command continued) user-50=vacuacti user-51=taneccom user-52=tehnologija user-53=gorsajmk user-54=aquatech user-55=v5srybi9dcdx user-56=supremel user-57=zdmgpsor user-58=eaptekam user-59=dimpalne user-60=peshkai1 user-61=fxxcom user-62=evacommk user-63=madzomk user-64=aptekafa user-65=gradbai1 user-66=izzomk user-67=jpkomuna user-68=tehnodro user-69=makdrone user-70=bonitavi user-71=evberasm user-72=euronic3 user-73=vegemk1 user-74=cupidpro user-75=conserva user-76=folklore user-77=bauerin2 user-78=golakkom user-79=trigemat user-80=naksorgm user-81=eliksirz user-82=electrol user-83=eurofarm user-84=solarinv user-85=wineberr user-86=viplastc user-87=workbenc user-88=ismassag user-89=mbmehani user-90=biplmk user-91=kaoilmk user-92=bbbustou user-93=pelagini user-94=recorgmk user-95=taktcomm user-96=jaramk user-97=solointe user-98=sssoluti user-99=atspedco user-100=progress user-101=animatem user-102=cleanerm user-103=pecakome
Sep 13 10:42:15 power sudo[340594]: wp-toolkit : (command continued) user-104=wondersp user-105=stravelm user-106=robustco user-107=holiyayt user-108=rastiraz user-109=gjorgeiv user-110=tradeyou user-111=dnevnoin user-112=goodnews user-113=mstmmk user-114=gocruise user-115=tealmk user-116=dadarmk user-117=proverim user-118=nlpmkorg user-119=centarba user-120=kolened1 user-121=nolimits user-122=seloviro user-123=dikimk12 user-124=sprintst user-125=herbalpl user-126=enochmk user-127=edomcomm user-128=berbermk user-129=nefrolog user-130=levantmk user-131=ekostoc1 user-132=oncolog1 user-133=frizered user-134=hidrommk user-135=caramk user-136=evolvepl user-137=avtogumi user-138=socioloz user-139=pelagoni user-140=enaspotc user-141=vmro user-142=viewinn user-143=trudovop user-144=stojnevi user-145=raremk user-146=oouslave user-147=uhostmk5 user-148=bauerbg user-149=youthgua user-150=anitermc user-151=cajsproc user-152=hotammk user-153=sedcmk user-154=groskome user-155=ivanjord
Sep 13 10:42:15 power sudo[340594]: wp-toolkit : (command continued) user-156=vfxnestc user-157=polyeste user-158=bizporta user-159=datelcom user-160=maleshne user-161=spdcompu user-162=detskagr user-163=infobadi user-164=mspmk user-165=wikicamp user-166=urbanexp user-167=makoasmk user-168=bianasho user-169=skyapart user-170=rasmorgm user-171=delcevca user-172=simbiome user-173=getaldus user-174=barececo user-175=workandt user-176=goartsym user-177=volkanco user-178=dhamachi user-179=mfashion user-180=agrosind user-181=mpbmk user-182=datalink user-183=velmk user-184=gogovan1 user-185=univerz1 user-186=kujnamon user-187=kouzonco user-188=premiuma user-189=cetplatf user-190=dalmacom user-191=ideaplus user-192=karpospo user-193=nasaidni user-194=screenme user-195=arturaco user-196=premiums user-197=butelmk user-198=daris user-199=jpparkin user-200=inotekso user-201=drleomk user-202=janiboja user-203=itradeco user-204=vezilkac user-205=cabinetm user-206=stojano1 user-207=bovincom
Sep 13 10:42:15 power sudo[340594]: wp-toolkit : (command continued) user-208=sparkupm user-209=stokovna user-210=klimimk user-211=palenzok user-212=zampmk user-213=zvskopje user-214=busymard user-215=custome1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 10:42:15 power sudo[340594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:16 power sudo[340594]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:16 power sudo[340609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 10:42:16 power sudo[340609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:16 power sudo[340609]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:16 power sudo[340614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-j98E3E1Zkuh2gMby.~
Sep 13 10:42:16 power sudo[340614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:16 power sudo[340614]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:16 power sudo[340618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-j98E3E1Zkuh2gMby.~\''
Sep 13 10:42:16 power sudo[340618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:16 power sudo[340618]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:16 power sudo[340626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-j98E3E1Zkuh2gMby.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 10:42:16 power sudo[340626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:16 power sudo[340626]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:16 power sudo[340631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 10:42:16 power sudo[340631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:16 power sudo[340631]: pam_unix(sudo:session): session closed for user root
Sep 13 10:42:17 power sudo[341508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 10:42:17 power sudo[341508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 10:42:17 power sudo[341508]: pam_unix(sudo:session): session closed for user root
Sep 13 10:45:01 power systemd[344132]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:50:01 power systemd[349229]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 10:55:01 power systemd[353957]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:00:01 power systemd[358887]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:00:01 power systemd[358888]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 11:00:01 power systemd[358889]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 11:00:01 power systemd[358881]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:00:01 power systemd[358895]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 11:04:02 power systemd[363625]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:05:01 power systemd[364767]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:05:01 power systemd[364768]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:06:01 power systemd[366456]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 11:07:01 power systemd[367392]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 11:09:01 power systemd[369588]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:10:01 power systemd[370558]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:10:01 power systemd[370559]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:12:01 power systemd[372640]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 11:15:01 power systemd[376888]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:15:01 power systemd[376889]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:20:02 power systemd[382023]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:20:02 power systemd[382024]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:25:01 power systemd[387451]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:25:01 power systemd[387452]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:30:01 power systemd[392498]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:30:01 power systemd[392499]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:30:01 power systemd[392500]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 11:30:01 power systemd[392504]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 11:30:01 power systemd[392502]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 11:35:01 power systemd[397601]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:35:01 power systemd[397600]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:36:01 power systemd[398759]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 11:37:01 power systemd[399676]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 11:39:01 power systemd[401584]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:40:01 power systemd[402988]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:40:01 power systemd[402989]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:42:01 power systemd[405149]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 11:42:12 power sudo[405368]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 11:42:12 power systemd[405373]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:42:13 power sudo[405368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405368]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 11:42:13 power sudo[405388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405388]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 11:42:13 power sudo[405392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405392]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=42wtE0Zcub'
Sep 13 11:42:13 power sudo[405396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405396]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 11:42:13 power sudo[405403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405403]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 11:42:13 power sudo[405407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405407]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 11:42:13 power sudo[405412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405412]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 11:42:13 power sudo[405416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405416]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 11:42:13 power sudo[405426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405426]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 11:42:13 power sudo[405430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405430]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 11:42:13 power sudo[405434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405434]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 11:42:13 power sudo[405438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405438]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 11:42:13 power sudo[405442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405442]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:13 power sudo[405446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 11:42:13 power sudo[405446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:13 power sudo[405446]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:15 power sudo[405473]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 11:42:15 power sudo[405473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:15 power sudo[405473]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:15 power sudo[405478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 11:42:15 power sudo[405478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:15 power sudo[405478]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:15 power sudo[405486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=fxxcom user-2=peshkai1 user-3=eaptekam user-4=dimpalne user-5=gradbai1 user-6=madzomk user-7=aptekafa user-8=evacommk user-9=izzomk user-10=jpkomuna user-11=makdrone user-12=tehnodro user-13=evberasm user-14=bonitavi user-15=conserva user-16=euronic3 user-17=cupidpro user-18=vegemk1 user-19=bauerin2 user-20=folklore user-21=eliksirz user-22=naksorgm user-23=trigemat user-24=electrol user-25=golakkom user-26=solarinv user-27=eurofarm user-28=wineberr user-29=viplastc user-30=mbmehani user-31=workbenc user-32=ismassag user-33=kaoilmk user-34=biplmk user-35=bbbustou user-36=pelagini user-37=jaramk user-38=solointe user-39=recorgmk user-40=taktcomm user-41=progress user-42=cleanerm user-43=animatem user-44=atspedco user-45=sssoluti user-46=nutrivim user-47=chemhemc user-48=samasped user-49=zapovim1
Sep 13 11:42:15 power sudo[405486]: wp-toolkit : (command continued) user-50=elektrot user-51=euromaki user-52=cosmatob user-53=pravekom user-54=vtranseu user-55=infopor1 user-56=albuname user-57=glammace user-58=imdskopj user-59=nikolov1 user-60=hausmark user-61=nikimare user-62=aptekazd user-63=forzares user-64=nucktra1 user-65=lblawcom user-66=mediatag user-67=intelek1 user-68=matratze user-69=euronic2 user-70=kardiome user-71=carrent1 user-72=bogdanos user-73=mediasol user-74=apgrupmk user-75=tcieuroc user-76=solemor1 user-77=mapaspla user-78=onlinesh user-79=nationa2 user-80=versusmk user-81=ambitiou user-82=fiziosmk user-83=starluxm user-84=radekrat user-85=fffhpcwr user-86=inkigaic user-87=modernar user-88=taneccom user-89=tehnologija user-90=fnjorgmk user-91=darkogor user-92=dslmk user-93=prizmapl user-94=bozinovm user-95=vacuacti user-96=premiumi user-97=innofabl user-98=v5srybi9dcdx user-99=supremel user-100=aquatech user-101=gorsajmk user-102=zdmgpsor user-103=polyeste
Sep 13 11:42:15 power sudo[405486]: wp-toolkit : (command continued) user-104=vfxnestc user-105=sedcmk user-106=ivanjord user-107=groskome user-108=maleshne user-109=datelcom user-110=bizporta user-111=infobadi user-112=mspmk user-113=spdcompu user-114=detskagr user-115=wikicamp user-116=urbanexp user-117=rasmorgm user-118=skyapart user-119=makoasmk user-120=bianasho user-121=dhamachi user-122=goartsym user-123=volkanco user-124=mfashion user-125=barececo user-126=getaldus user-127=simbiome user-128=delcevca user-129=workandt user-130=mpbmk user-131=agrosind user-132=kujnamon user-133=univerz1 user-134=velmk user-135=gogovan1 user-136=datalink user-137=cetplatf user-138=dalmacom user-139=kouzonco user-140=premiuma user-141=butelmk user-142=daris user-143=premiums user-144=nasaidni user-145=karpospo user-146=ideaplus user-147=screenme user-148=arturaco user-149=inotekso user-150=jpparkin user-151=drleomk user-152=vezilkac user-153=cabinetm user-154=janiboja user-155=itradeco
Sep 13 11:42:15 power sudo[405486]: wp-toolkit : (command continued) user-156=bovincom user-157=stojano1 user-158=klimimk user-159=stokovna user-160=sparkupm user-161=custome1 user-162=palenzok user-163=zampmk user-164=busymard user-165=zvskopje user-166=holiyayt user-167=rastiraz user-168=pecakome user-169=robustco user-170=stravelm user-171=wondersp user-172=dnevnoin user-173=tradeyou user-174=gjorgeiv user-175=gocruise user-176=goodnews user-177=mstmmk user-178=dadarmk user-179=proverim user-180=tealmk user-181=nolimits user-182=kolened1 user-183=nlpmkorg user-184=centarba user-185=seloviro user-186=dikimk12 user-187=herbalpl user-188=enochmk user-189=sprintst user-190=edomcomm user-191=berbermk user-192=ekostoc1 user-193=oncolog1 user-194=levantmk user-195=nefrolog user-196=caramk user-197=hidrommk user-198=frizered user-199=evolvepl user-200=pelagoni user-201=socioloz user-202=avtogumi user-203=enaspotc user-204=viewinn user-205=trudovop user-206=vmro user-207=oouslave
Sep 13 11:42:15 power sudo[405486]: wp-toolkit : (command continued) user-208=raremk user-209=bauerbg user-210=uhostmk5 user-211=stojnevi user-212=anitermc user-213=youthgua user-214=cajsproc user-215=hotammk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 11:42:15 power sudo[405486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:16 power sudo[405486]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:16 power sudo[405497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 11:42:16 power sudo[405497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:16 power sudo[405497]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:16 power sudo[405502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0rMkfo7dMnudFvgR.~
Sep 13 11:42:16 power sudo[405502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:16 power sudo[405502]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:16 power sudo[405506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0rMkfo7dMnudFvgR.~\''
Sep 13 11:42:16 power sudo[405506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:16 power sudo[405506]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:16 power sudo[405511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0rMkfo7dMnudFvgR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 11:42:16 power sudo[405511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:16 power sudo[405511]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:16 power sudo[405516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 11:42:16 power sudo[405516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:16 power sudo[405516]: pam_unix(sudo:session): session closed for user root
Sep 13 11:42:17 power sudo[406443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 11:42:17 power sudo[406443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 11:42:17 power sudo[406443]: pam_unix(sudo:session): session closed for user root
Sep 13 11:45:01 power systemd[408804]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:45:01 power systemd[408805]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:50:01 power systemd[414149]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:50:01 power systemd[414153]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 11:55:01 power systemd[418882]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 11:55:01 power systemd[418884]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:00:01 power systemd[423688]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:00:01 power systemd[423690]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:00:01 power systemd[423691]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 12:00:01 power systemd[423693]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 12:00:01 power systemd[423694]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 12:00:01 power systemd[423696]: pam_unix(systemd-user:session): session opened for user mailman(uid=991) by mailman(uid=0)
Sep 13 12:04:01 power systemd[428708]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:05:01 power systemd[429862]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:05:01 power systemd[429865]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:06:01 power systemd[430917]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 12:07:01 power systemd[431806]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 12:09:01 power systemd[433723]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:10:01 power systemd[434727]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:10:01 power systemd[434728]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:12:01 power systemd[436776]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 12:15:01 power systemd[439869]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:15:01 power systemd[439870]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:20:01 power systemd[445228]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:20:01 power systemd[445229]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:25:01 power systemd[450023]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:25:01 power systemd[450024]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:30:01 power systemd[455119]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:30:01 power systemd[455121]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:30:01 power systemd[455123]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 12:30:01 power systemd[455124]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 12:30:01 power systemd[455126]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 12:35:01 power systemd[460581]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:35:01 power systemd[460582]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:36:01 power systemd[461534]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 12:37:01 power systemd[462625]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 12:39:01 power systemd[464417]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:40:01 power systemd[465415]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:40:01 power systemd[465417]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:40:30 power sudo[465959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 12:40:30 power systemd[465964]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:40:30 power sudo[465959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:30 power sudo[465959]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:30 power sudo[465980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 12:40:30 power sudo[465980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:30 power sudo[465980]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:30 power sudo[465990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 12:40:30 power sudo[465990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:30 power sudo[465990]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:30 power sudo[465997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 12:40:30 power sudo[465997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:31 power sudo[465997]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:31 power sudo[466004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tcieuroc user-2=mapaspla user-3=solemor1 user-4=nationa2 user-5=onlinesh user-6=versusmk user-7=fiziosmk user-8=ambitiou user-9=radekrat user-10=starluxm user-11=fffhpcwr user-12=inkigaic user-13=modernar user-14=tehnologija user-15=taneccom user-16=innofabl user-17=premiumi user-18=vacuacti user-19=bozinovm user-20=darkogor user-21=fnjorgmk user-22=prizmapl user-23=dslmk user-24=supremel user-25=v5srybi9dcdx user-26=gorsajmk user-27=aquatech user-28=zdmgpsor user-29=nutrivim user-30=chemhemc user-31=samasped user-32=zapovim1 user-33=elektrot user-34=cosmatob user-35=euromaki user-36=vtranseu user-37=pravekom user-38=infopor1 user-39=glammace user-40=albuname user-41=imdskopj user-42=hausmark user-43=nikolov1 user-44=forzares user-45=aptekazd user-46=nikimare user-47=lblawcom user-48=nucktra1 user-49=intelek1
Sep 13 12:40:31 power sudo[466004]: wp-toolkit : (command continued) user-50=mediatag user-51=euronic2 user-52=matratze user-53=kardiome user-54=apgrupmk user-55=mediasol user-56=bogdanos user-57=carrent1 user-58=electrol user-59=trigemat user-60=naksorgm user-61=eliksirz user-62=golakkom user-63=solarinv user-64=eurofarm user-65=viplastc user-66=wineberr user-67=mbmehani user-68=ismassag user-69=workbenc user-70=bbbustou user-71=biplmk user-72=kaoilmk user-73=pelagini user-74=solointe user-75=jaramk user-76=recorgmk user-77=taktcomm user-78=animatem user-79=cleanerm user-80=progress user-81=atspedco user-82=sssoluti user-83=peshkai1 user-84=fxxcom user-85=dimpalne user-86=eaptekam user-87=gradbai1 user-88=evacommk user-89=madzomk user-90=aptekafa user-91=jpkomuna user-92=izzomk user-93=makdrone user-94=tehnodro user-95=bonitavi user-96=evberasm user-97=conserva user-98=vegemk1 user-99=cupidpro user-100=euronic3 user-101=bauerin2 user-102=folklore user-103=nefrolog
Sep 13 12:40:31 power sudo[466004]: wp-toolkit : (command continued) user-104=ekostoc1 user-105=oncolog1 user-106=levantmk user-107=caramk user-108=frizered user-109=hidrommk user-110=evolvepl user-111=pelagoni user-112=avtogumi user-113=socioloz user-114=vmro user-115=trudovop user-116=viewinn user-117=enaspotc user-118=uhostmk5 user-119=bauerbg user-120=raremk user-121=oouslave user-122=stojnevi user-123=youthgua user-124=anitermc user-125=hotammk user-126=cajsproc user-127=rastiraz user-128=holiyayt user-129=wondersp user-130=robustco user-131=stravelm user-132=pecakome user-133=dnevnoin user-134=gjorgeiv user-135=tradeyou user-136=gocruise user-137=mstmmk user-138=goodnews user-139=proverim user-140=dadarmk user-141=tealmk user-142=nolimits user-143=nlpmkorg user-144=centarba user-145=kolened1 user-146=seloviro user-147=sprintst user-148=enochmk user-149=herbalpl user-150=dikimk12 user-151=berbermk user-152=edomcomm user-153=dalmacom user-154=cetplatf user-155=premiuma
Sep 13 12:40:31 power sudo[466004]: wp-toolkit : (command continued) user-156=kouzonco user-157=premiums user-158=butelmk user-159=daris user-160=screenme user-161=arturaco user-162=ideaplus user-163=karpospo user-164=nasaidni user-165=drleomk user-166=jpparkin user-167=inotekso user-168=cabinetm user-169=vezilkac user-170=itradeco user-171=janiboja user-172=bovincom user-173=stojano1 user-174=klimimk user-175=sparkupm user-176=stokovna user-177=custome1 user-178=zampmk user-179=busymard user-180=zvskopje user-181=palenzok user-182=vfxnestc user-183=polyeste user-184=groskome user-185=ivanjord user-186=sedcmk user-187=datelcom user-188=maleshne user-189=bizporta user-190=infobadi user-191=mspmk user-192=detskagr user-193=spdcompu user-194=urbanexp user-195=wikicamp user-196=rasmorgm user-197=makoasmk user-198=bianasho user-199=skyapart user-200=mfashion user-201=volkanco user-202=goartsym user-203=dhamachi user-204=workandt user-205=delcevca user-206=getaldus user-207=simbiome
Sep 13 12:40:31 power sudo[466004]: wp-toolkit : (command continued) user-208=barececo user-209=agrosind user-210=mpbmk user-211=gogovan1 user-212=velmk user-213=univerz1 user-214=kujnamon user-215=datalink feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 12:40:31 power sudo[466004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:31 power sudo[466004]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:31 power sudo[466031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 12:40:32 power sudo[466031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:32 power sudo[466031]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:32 power sudo[466039]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 12:40:32 power sudo[466039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:32 power sudo[466039]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:32 power sudo[466045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 12:40:32 power sudo[466045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:32 power sudo[466045]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:32 power sudo[466050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tehnologija user-2=taneccom user-3=vacuacti user-4=premiumi user-5=innofabl user-6=dslmk user-7=darkogor user-8=fnjorgmk user-9=prizmapl user-10=bozinovm user-11=inkigaic user-12=modernar user-13=zdmgpsor user-14=supremel user-15=v5srybi9dcdx user-16=aquatech user-17=gorsajmk user-18=mapaspla user-19=solemor1 user-20=nationa2 user-21=onlinesh user-22=tcieuroc user-23=starluxm user-24=radekrat user-25=fffhpcwr user-26=versusmk user-27=fiziosmk user-28=ambitiou user-29=lblawcom user-30=nucktra1 user-31=mediatag user-32=intelek1 user-33=nikolov1 user-34=hausmark user-35=forzares user-36=nikimare user-37=aptekazd user-38=kardiome user-39=apgrupmk user-40=carrent1 user-41=bogdanos user-42=mediasol user-43=matratze user-44=euronic2 user-45=zapovim1 user-46=elektrot user-47=cosmatob user-48=euromaki user-49=nutrivim
Sep 13 12:40:32 power sudo[466050]: wp-toolkit : (command continued) user-50=samasped user-51=chemhemc user-52=albuname user-53=glammace user-54=imdskopj user-55=pravekom user-56=vtranseu user-57=infopor1 user-58=pelagini user-59=bbbustou user-60=kaoilmk user-61=biplmk user-62=cleanerm user-63=animatem user-64=progress user-65=sssoluti user-66=atspedco user-67=solointe user-68=jaramk user-69=taktcomm user-70=recorgmk user-71=solarinv user-72=eurofarm user-73=electrol user-74=eliksirz user-75=naksorgm user-76=trigemat user-77=golakkom user-78=mbmehani user-79=ismassag user-80=workbenc user-81=viplastc user-82=wineberr user-83=conserva user-84=cupidpro user-85=vegemk1 user-86=euronic3 user-87=evberasm user-88=bonitavi user-89=bauerin2 user-90=folklore user-91=gradbai1 user-92=aptekafa user-93=madzomk user-94=evacommk user-95=fxxcom user-96=peshkai1 user-97=dimpalne user-98=eaptekam user-99=makdrone user-100=tehnodro user-101=jpkomuna user-102=izzomk user-103=bauerbg
Sep 13 12:40:32 power sudo[466050]: wp-toolkit : (command continued) user-104=uhostmk5 user-105=oouslave user-106=raremk user-107=stojnevi user-108=viewinn user-109=trudovop user-110=vmro user-111=enaspotc user-112=hotammk user-113=cajsproc user-114=anitermc user-115=youthgua user-116=caramk user-117=hidrommk user-118=frizered user-119=ekostoc1 user-120=levantmk user-121=oncolog1 user-122=nefrolog user-123=pelagoni user-124=socioloz user-125=avtogumi user-126=evolvepl user-127=seloviro user-128=nolimits user-129=kolened1 user-130=nlpmkorg user-131=centarba user-132=berbermk user-133=edomcomm user-134=enochmk user-135=herbalpl user-136=sprintst user-137=dikimk12 user-138=dnevnoin user-139=gjorgeiv user-140=tradeyou user-141=rastiraz user-142=holiyayt user-143=robustco user-144=stravelm user-145=wondersp user-146=pecakome user-147=proverim user-148=dadarmk user-149=tealmk user-150=gocruise user-151=mstmmk user-152=goodnews user-153=bovincom user-154=stojano1 user-155=cabinetm
Sep 13 12:40:32 power sudo[466050]: wp-toolkit : (command continued) user-156=vezilkac user-157=itradeco user-158=janiboja user-159=custome1 user-160=busymard user-161=zampmk user-162=zvskopje user-163=palenzok user-164=klimimk user-165=stokovna user-166=sparkupm user-167=dalmacom user-168=cetplatf user-169=premiuma user-170=kouzonco user-171=drleomk user-172=inotekso user-173=jpparkin user-174=daris user-175=butelmk user-176=premiums user-177=screenme user-178=arturaco user-179=nasaidni user-180=karpospo user-181=ideaplus user-182=mfashion user-183=dhamachi user-184=volkanco user-185=goartsym user-186=workandt user-187=barececo user-188=simbiome user-189=getaldus user-190=delcevca user-191=rasmorgm user-192=skyapart user-193=bianasho user-194=makoasmk user-195=kujnamon user-196=univerz1 user-197=velmk user-198=gogovan1 user-199=datalink user-200=mpbmk user-201=agrosind user-202=maleshne user-203=datelcom user-204=bizporta user-205=polyeste user-206=vfxnestc user-207=groskome
Sep 13 12:40:32 power sudo[466050]: wp-toolkit : (command continued) user-208=ivanjord user-209=sedcmk user-210=urbanexp user-211=wikicamp user-212=mspmk user-213=infobadi user-214=detskagr user-215=spdcompu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 12:40:32 power sudo[466050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:32 power sudo[466050]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:32 power sudo[466066]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 12:40:33 power sudo[466066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:33 power sudo[466066]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:33 power sudo[466074]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 12:40:33 power sudo[466074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:33 power sudo[466074]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:33 power sudo[466080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 12:40:33 power sudo[466080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:33 power sudo[466080]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:33 power sudo[466091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 12:40:33 power sudo[466091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:33 power sudo[466091]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:33 power sudo[466097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 12:40:33 power sudo[466097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:33 power sudo[466097]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:33 power sudo[466103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 12:40:33 power sudo[466103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:33 power sudo[466103]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:34 power sudo[466129]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 12:40:34 power sudo[466129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:34 power sudo[466129]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:34 power sudo[466135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 12:40:34 power sudo[466135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:34 power sudo[466135]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:34 power sudo[466141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 12:40:34 power sudo[466141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:34 power sudo[466141]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:34 power sudo[466147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=nucktra1 user-2=lblawcom user-3=intelek1 user-4=mediatag user-5=nikolov1 user-6=hausmark user-7=aptekazd user-8=nikimare user-9=forzares user-10=kardiome user-11=mediasol user-12=bogdanos user-13=carrent1 user-14=apgrupmk user-15=euronic2 user-16=matratze user-17=elektrot user-18=zapovim1 user-19=euromaki user-20=cosmatob user-21=nutrivim user-22=samasped user-23=chemhemc user-24=glammace user-25=albuname user-26=imdskopj user-27=pravekom user-28=vtranseu user-29=infopor1 user-30=taneccom user-31=tehnologija user-32=bozinovm user-33=darkogor user-34=dslmk user-35=fnjorgmk user-36=prizmapl user-37=innofabl user-38=premiumi user-39=vacuacti user-40=inkigaic user-41=modernar user-42=zdmgpsor user-43=v5srybi9dcdx user-44=supremel user-45=gorsajmk user-46=aquatech user-47=solemor1 user-48=mapaspla user-49=onlinesh
Sep 13 12:40:34 power sudo[466147]: wp-toolkit : (command continued) user-50=nationa2 user-51=tcieuroc user-52=radekrat user-53=starluxm user-54=fffhpcwr user-55=versusmk user-56=ambitiou user-57=fiziosmk user-58=conserva user-59=euronic3 user-60=vegemk1 user-61=cupidpro user-62=bonitavi user-63=evberasm user-64=bauerin2 user-65=folklore user-66=gradbai1 user-67=evacommk user-68=aptekafa user-69=madzomk user-70=peshkai1 user-71=fxxcom user-72=eaptekam user-73=dimpalne user-74=makdrone user-75=tehnodro user-76=izzomk user-77=jpkomuna user-78=pelagini user-79=kaoilmk user-80=biplmk user-81=bbbustou user-82=progress user-83=animatem user-84=cleanerm user-85=atspedco user-86=sssoluti user-87=jaramk user-88=solointe user-89=recorgmk user-90=taktcomm user-91=solarinv user-92=eurofarm user-93=trigemat user-94=eliksirz user-95=naksorgm user-96=electrol user-97=golakkom user-98=mbmehani user-99=workbenc user-100=ismassag user-101=wineberr user-102=viplastc user-103=seloviro
Sep 13 12:40:34 power sudo[466147]: wp-toolkit : (command continued) user-104=nolimits user-105=nlpmkorg user-106=centarba user-107=kolened1 user-108=edomcomm user-109=berbermk user-110=dikimk12 user-111=sprintst user-112=herbalpl user-113=enochmk user-114=dnevnoin user-115=gjorgeiv user-116=tradeyou user-117=holiyayt user-118=rastiraz user-119=pecakome user-120=wondersp user-121=robustco user-122=stravelm user-123=dadarmk user-124=proverim user-125=tealmk user-126=gocruise user-127=goodnews user-128=mstmmk user-129=raremk user-130=oouslave user-131=uhostmk5 user-132=bauerbg user-133=stojnevi user-134=enaspotc user-135=vmro user-136=trudovop user-137=viewinn user-138=cajsproc user-139=hotammk user-140=youthgua user-141=anitermc user-142=caramk user-143=frizered user-144=hidrommk user-145=nefrolog user-146=ekostoc1 user-147=oncolog1 user-148=levantmk user-149=pelagoni user-150=avtogumi user-151=socioloz user-152=evolvepl user-153=volkanco user-154=goartsym user-155=dhamachi
Sep 13 12:40:34 power sudo[466147]: wp-toolkit : (command continued) user-156=mfashion user-157=getaldus user-158=delcevca user-159=simbiome user-160=barececo user-161=workandt user-162=rasmorgm user-163=bianasho user-164=makoasmk user-165=skyapart user-166=velmk user-167=gogovan1 user-168=kujnamon user-169=univerz1 user-170=datalink user-171=agrosind user-172=mpbmk user-173=datelcom user-174=maleshne user-175=bizporta user-176=vfxnestc user-177=polyeste user-178=sedcmk user-179=groskome user-180=ivanjord user-181=wikicamp user-182=urbanexp user-183=infobadi user-184=mspmk user-185=spdcompu user-186=detskagr user-187=bovincom user-188=stojano1 user-189=vezilkac user-190=cabinetm user-191=janiboja user-192=itradeco user-193=custome1 user-194=palenzok user-195=zvskopje user-196=busymard user-197=zampmk user-198=klimimk user-199=sparkupm user-200=stokovna user-201=cetplatf user-202=dalmacom user-203=kouzonco user-204=premiuma user-205=jpparkin user-206=inotekso user-207=drleomk
Sep 13 12:40:34 power sudo[466147]: wp-toolkit : (command continued) user-208=premiums user-209=daris user-210=butelmk user-211=ideaplus user-212=karpospo user-213=nasaidni user-214=screenme user-215=arturaco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 12:40:34 power sudo[466147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:35 power sudo[466147]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:41 power sudo[466259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 12:40:41 power sudo[466259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:41 power sudo[466259]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:41 power sudo[466264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 12:40:41 power sudo[466264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:41 power sudo[466264]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:41 power sudo[466269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 12:40:41 power sudo[466269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:41 power sudo[466269]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:41 power sudo[466274]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=imdskopj user-2=glammace user-3=albuname user-4=infopor1 user-5=pravekom user-6=vtranseu user-7=euromaki user-8=cosmatob user-9=zapovim1 user-10=elektrot user-11=samasped user-12=chemhemc user-13=nutrivim user-14=apgrupmk user-15=mediasol user-16=bogdanos user-17=carrent1 user-18=kardiome user-19=euronic2 user-20=matratze user-21=intelek1 user-22=mediatag user-23=lblawcom user-24=nucktra1 user-25=forzares user-26=aptekazd user-27=nikimare user-28=hausmark user-29=nikolov1 user-30=fffhpcwr user-31=radekrat user-32=starluxm user-33=fiziosmk user-34=ambitiou user-35=versusmk user-36=nationa2 user-37=onlinesh user-38=mapaspla user-39=solemor1 user-40=tcieuroc user-41=zdmgpsor user-42=gorsajmk user-43=aquatech user-44=supremel user-45=v5srybi9dcdx user-46=innofabl user-47=premiumi user-48=vacuacti user-49=bozinovm
Sep 13 12:40:41 power sudo[466274]: wp-toolkit : (command continued) user-50=darkogor user-51=fnjorgmk user-52=dslmk user-53=prizmapl user-54=tehnologija user-55=taneccom user-56=modernar user-57=inkigaic user-58=tehnodro user-59=makdrone user-60=jpkomuna user-61=izzomk user-62=evacommk user-63=madzomk user-64=aptekafa user-65=gradbai1 user-66=dimpalne user-67=eaptekam user-68=peshkai1 user-69=fxxcom user-70=folklore user-71=bauerin2 user-72=vegemk1 user-73=cupidpro user-74=euronic3 user-75=conserva user-76=bonitavi user-77=evberasm user-78=ismassag user-79=workbenc user-80=mbmehani user-81=viplastc user-82=wineberr user-83=eurofarm user-84=solarinv user-85=golakkom user-86=electrol user-87=trigemat user-88=eliksirz user-89=naksorgm user-90=atspedco user-91=sssoluti user-92=animatem user-93=cleanerm user-94=progress user-95=recorgmk user-96=taktcomm user-97=solointe user-98=jaramk user-99=pelagini user-100=bbbustou user-101=kaoilmk user-102=biplmk user-103=tealmk user-104=proverim
Sep 13 12:40:41 power sudo[466274]: wp-toolkit : (command continued) user-105=dadarmk user-106=mstmmk user-107=goodnews user-108=gocruise user-109=gjorgeiv user-110=tradeyou user-111=dnevnoin user-112=wondersp user-113=stravelm user-114=robustco user-115=pecakome user-116=rastiraz user-117=holiyayt user-118=berbermk user-119=edomcomm user-120=sprintst user-121=herbalpl user-122=enochmk user-123=dikimk12 user-124=seloviro user-125=centarba user-126=nlpmkorg user-127=kolened1 user-128=nolimits user-129=avtogumi user-130=socioloz user-131=pelagoni user-132=evolvepl user-133=frizered user-134=hidrommk user-135=caramk user-136=nefrolog user-137=ekostoc1 user-138=oncolog1 user-139=levantmk user-140=hotammk user-141=cajsproc user-142=youthgua user-143=anitermc user-144=stojnevi user-145=uhostmk5 user-146=bauerbg user-147=raremk user-148=oouslave user-149=vmro user-150=viewinn user-151=trudovop user-152=enaspotc user-153=urbanexp user-154=wikicamp user-155=detskagr user-156=spdcompu
Sep 13 12:40:41 power sudo[466274]: wp-toolkit : (command continued) user-157=infobadi user-158=mspmk user-159=bizporta user-160=datelcom user-161=maleshne user-162=ivanjord user-163=groskome user-164=sedcmk user-165=vfxnestc user-166=polyeste user-167=datalink user-168=velmk user-169=gogovan1 user-170=univerz1 user-171=kujnamon user-172=agrosind user-173=mpbmk user-174=workandt user-175=simbiome user-176=getaldus user-177=delcevca user-178=barececo user-179=mfashion user-180=volkanco user-181=goartsym user-182=dhamachi user-183=makoasmk user-184=bianasho user-185=skyapart user-186=rasmorgm user-187=drleomk user-188=jpparkin user-189=inotekso user-190=arturaco user-191=screenme user-192=ideaplus user-193=nasaidni user-194=karpospo user-195=premiums user-196=daris user-197=butelmk user-198=premiuma user-199=kouzonco user-200=dalmacom user-201=cetplatf user-202=zampmk user-203=busymard user-204=zvskopje user-205=palenzok user-206=custome1 user-207=sparkupm user-208=stokovna
Sep 13 12:40:41 power sudo[466274]: wp-toolkit : (command continued) user-209=klimimk user-210=stojano1 user-211=bovincom user-212=itradeco user-213=janiboja user-214=cabinetm user-215=vezilkac feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 12:40:41 power sudo[466274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:41 power sudo[466274]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:48 power sudo[466377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 12:40:48 power sudo[466377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:48 power sudo[466377]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:48 power sudo[466386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 12:40:48 power sudo[466386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:48 power sudo[466386]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:48 power sudo[466391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 12:40:48 power sudo[466391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:48 power sudo[466391]: pam_unix(sudo:session): session closed for user root
Sep 13 12:40:48 power sudo[466396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mbmehani user-2=workbenc user-3=ismassag user-4=wineberr user-5=viplastc user-6=solarinv user-7=eurofarm user-8=trigemat user-9=naksorgm user-10=eliksirz user-11=electrol user-12=golakkom user-13=progress user-14=animatem user-15=cleanerm user-16=atspedco user-17=sssoluti user-18=jaramk user-19=solointe user-20=taktcomm user-21=recorgmk user-22=pelagini user-23=biplmk user-24=kaoilmk user-25=bbbustou user-26=makdrone user-27=tehnodro user-28=izzomk user-29=jpkomuna user-30=gradbai1 user-31=evacommk user-32=madzomk user-33=aptekafa user-34=peshkai1 user-35=fxxcom user-36=eaptekam user-37=dimpalne user-38=bauerin2 user-39=folklore user-40=conserva user-41=euronic3 user-42=vegemk1 user-43=cupidpro user-44=bonitavi user-45=evberasm user-46=radekrat user-47=starluxm user-48=fffhpcwr user-49=versusmk
Sep 13 12:40:48 power sudo[466396]: wp-toolkit : (command continued) user-50=ambitiou user-51=fiziosmk user-52=solemor1 user-53=mapaspla user-54=onlinesh user-55=nationa2 user-56=tcieuroc user-57=zdmgpsor user-58=v5srybi9dcdx user-59=supremel user-60=gorsajmk user-61=aquatech user-62=taneccom user-63=tehnologija user-64=bozinovm user-65=darkogor user-66=dslmk user-67=fnjorgmk user-68=prizmapl user-69=innofabl user-70=premiumi user-71=vacuacti user-72=inkigaic user-73=modernar user-74=glammace user-75=albuname user-76=imdskopj user-77=pravekom user-78=vtranseu user-79=infopor1 user-80=zapovim1 user-81=elektrot user-82=cosmatob user-83=euromaki user-84=nutrivim user-85=chemhemc user-86=samasped user-87=kardiome user-88=mediasol user-89=carrent1 user-90=bogdanos user-91=apgrupmk user-92=euronic2 user-93=matratze user-94=nucktra1 user-95=lblawcom user-96=intelek1 user-97=mediatag user-98=hausmark user-99=nikolov1 user-100=aptekazd user-101=nikimare user-102=forzares user-103=jpparkin
Sep 13 12:40:48 power sudo[466396]: wp-toolkit : (command continued) user-104=inotekso user-105=drleomk user-106=premiums user-107=butelmk user-108=daris user-109=ideaplus user-110=nasaidni user-111=karpospo user-112=arturaco user-113=screenme user-114=cetplatf user-115=dalmacom user-116=kouzonco user-117=premiuma user-118=custome1 user-119=palenzok user-120=zampmk user-121=busymard user-122=zvskopje user-123=klimimk user-124=sparkupm user-125=stokovna user-126=bovincom user-127=stojano1 user-128=vezilkac user-129=cabinetm user-130=janiboja user-131=itradeco user-132=wikicamp user-133=urbanexp user-134=mspmk user-135=infobadi user-136=spdcompu user-137=detskagr user-138=datelcom user-139=maleshne user-140=bizporta user-141=vfxnestc user-142=polyeste user-143=sedcmk user-144=groskome user-145=ivanjord user-146=velmk user-147=gogovan1 user-148=kujnamon user-149=univerz1 user-150=datalink user-151=agrosind user-152=mpbmk user-153=volkanco user-154=goartsym user-155=dhamachi
Sep 13 12:40:48 power sudo[466396]: wp-toolkit : (command continued) user-156=mfashion user-157=delcevca user-158=simbiome user-159=getaldus user-160=barececo user-161=workandt user-162=rasmorgm user-163=bianasho user-164=makoasmk user-165=skyapart user-166=pelagoni user-167=socioloz user-168=avtogumi user-169=evolvepl user-170=caramk user-171=frizered user-172=hidrommk user-173=nefrolog user-174=levantmk user-175=ekostoc1 user-176=oncolog1 user-177=cajsproc user-178=hotammk user-179=youthgua user-180=anitermc user-181=raremk user-182=oouslave user-183=uhostmk5 user-184=bauerbg user-185=stojnevi user-186=enaspotc user-187=vmro user-188=trudovop user-189=viewinn user-190=dadarmk user-191=proverim user-192=tealmk user-193=gocruise user-194=goodnews user-195=mstmmk user-196=dnevnoin user-197=gjorgeiv user-198=tradeyou user-199=holiyayt user-200=rastiraz user-201=pecakome user-202=wondersp user-203=robustco user-204=stravelm user-205=edomcomm user-206=berbermk user-207=dikimk12
Sep 13 12:40:48 power sudo[466396]: wp-toolkit : (command continued) user-208=sprintst user-209=enochmk user-210=herbalpl user-211=seloviro user-212=nolimits user-213=nlpmkorg user-214=centarba user-215=kolened1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 12:40:48 power sudo[466396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:40:49 power sudo[466396]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:01 power systemd[467679]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 12:42:12 power sudo[467856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 12:42:12 power systemd[467861]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:42:13 power sudo[467856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467856]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 12:42:13 power sudo[467875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467875]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 12:42:13 power sudo[467881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467881]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=LHddKNv28L'
Sep 13 12:42:13 power sudo[467885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467885]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 12:42:13 power sudo[467890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467890]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 12:42:13 power sudo[467894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467894]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467902]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 12:42:13 power sudo[467902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467902]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 12:42:13 power sudo[467906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467906]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467913]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 12:42:13 power sudo[467913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467913]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 12:42:13 power sudo[467918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467918]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 12:42:13 power sudo[467922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467922]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 12:42:13 power sudo[467926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467926]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 12:42:13 power sudo[467931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:13 power sudo[467931]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:13 power sudo[467936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 12:42:13 power sudo[467936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:14 power sudo[467936]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:15 power sudo[467967]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 12:42:15 power sudo[467967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:15 power sudo[467967]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:15 power sudo[467972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 12:42:15 power sudo[467972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:15 power sudo[467972]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:15 power sudo[467977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=kouzonco user-2=premiuma user-3=cetplatf user-4=dalmacom user-5=nasaidni user-6=karpospo user-7=ideaplus user-8=arturaco user-9=screenme user-10=daris user-11=butelmk user-12=premiums user-13=inotekso user-14=jpparkin user-15=drleomk user-16=janiboja user-17=itradeco user-18=vezilkac user-19=cabinetm user-20=stojano1 user-21=bovincom user-22=stokovna user-23=sparkupm user-24=klimimk user-25=palenzok user-26=zampmk user-27=busymard user-28=zvskopje user-29=custome1 user-30=sedcmk user-31=groskome user-32=ivanjord user-33=polyeste user-34=vfxnestc user-35=bizporta user-36=maleshne user-37=datelcom user-38=spdcompu user-39=detskagr user-40=infobadi user-41=mspmk user-42=wikicamp user-43=urbanexp user-44=skyapart user-45=makoasmk user-46=bianasho user-47=rasmorgm user-48=barececo user-49=delcevca
Sep 13 12:42:15 power sudo[467977]: wp-toolkit : (command continued) user-50=simbiome user-51=getaldus user-52=workandt user-53=dhamachi user-54=volkanco user-55=goartsym user-56=mfashion user-57=mpbmk user-58=agrosind user-59=datalink user-60=kujnamon user-61=univerz1 user-62=gogovan1 user-63=velmk user-64=ekostoc1 user-65=levantmk user-66=oncolog1 user-67=nefrolog user-68=hidrommk user-69=frizered user-70=caramk user-71=evolvepl user-72=avtogumi user-73=socioloz user-74=pelagoni user-75=enaspotc user-76=viewinn user-77=trudovop user-78=vmro user-79=stojnevi user-80=oouslave user-81=raremk user-82=bauerbg user-83=uhostmk5 user-84=anitermc user-85=youthgua user-86=cajsproc user-87=hotammk user-88=pecakome user-89=stravelm user-90=robustco user-91=wondersp user-92=holiyayt user-93=rastiraz user-94=tradeyou user-95=gjorgeiv user-96=dnevnoin user-97=goodnews user-98=mstmmk user-99=gocruise user-100=tealmk user-101=dadarmk user-102=proverim user-103=kolened1 user-104=centarba
Sep 13 12:42:15 power sudo[467977]: wp-toolkit : (command continued) user-105=nlpmkorg user-106=nolimits user-107=seloviro user-108=dikimk12 user-109=herbalpl user-110=enochmk user-111=sprintst user-112=edomcomm user-113=berbermk user-114=golakkom user-115=naksorgm user-116=eliksirz user-117=trigemat user-118=electrol user-119=eurofarm user-120=solarinv user-121=wineberr user-122=viplastc user-123=workbenc user-124=ismassag user-125=mbmehani user-126=kaoilmk user-127=biplmk user-128=bbbustou user-129=pelagini user-130=recorgmk user-131=taktcomm user-132=jaramk user-133=solointe user-134=atspedco user-135=sssoluti user-136=progress user-137=cleanerm user-138=animatem user-139=eaptekam user-140=dimpalne user-141=fxxcom user-142=peshkai1 user-143=aptekafa user-144=madzomk user-145=evacommk user-146=gradbai1 user-147=izzomk user-148=jpkomuna user-149=tehnodro user-150=makdrone user-151=evberasm user-152=bonitavi user-153=euronic3 user-154=cupidpro user-155=vegemk1 user-156=conserva
Sep 13 12:42:15 power sudo[467977]: wp-toolkit : (command continued) user-157=folklore user-158=bauerin2 user-159=tcieuroc user-160=onlinesh user-161=nationa2 user-162=solemor1 user-163=mapaspla user-164=ambitiou user-165=fiziosmk user-166=versusmk user-167=fffhpcwr user-168=starluxm user-169=radekrat user-170=modernar user-171=inkigaic user-172=fnjorgmk user-173=darkogor user-174=dslmk user-175=prizmapl user-176=bozinovm user-177=vacuacti user-178=premiumi user-179=innofabl user-180=taneccom user-181=tehnologija user-182=aquatech user-183=gorsajmk user-184=v5srybi9dcdx user-185=supremel user-186=zdmgpsor user-187=chemhemc user-188=samasped user-189=nutrivim user-190=cosmatob user-191=euromaki user-192=elektrot user-193=zapovim1 user-194=infopor1 user-195=vtranseu user-196=pravekom user-197=imdskopj user-198=albuname user-199=glammace user-200=nikimare user-201=aptekazd user-202=forzares user-203=nikolov1 user-204=hausmark user-205=mediatag user-206=intelek1 user-207=nucktra1
Sep 13 12:42:15 power sudo[467977]: wp-toolkit : (command continued) user-208=lblawcom user-209=matratze user-210=euronic2 user-211=carrent1 user-212=bogdanos user-213=mediasol user-214=apgrupmk user-215=kardiome feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 12:42:15 power sudo[467977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:16 power sudo[467977]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:16 power sudo[467983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 12:42:16 power sudo[467983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:16 power sudo[467983]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:16 power sudo[467991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BvctdfpiQRPFLTFf.~
Sep 13 12:42:16 power sudo[467991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:16 power sudo[467991]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:16 power sudo[467995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BvctdfpiQRPFLTFf.~\''
Sep 13 12:42:16 power sudo[467995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:16 power sudo[467995]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:16 power sudo[468000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BvctdfpiQRPFLTFf.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 12:42:16 power sudo[468000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:16 power sudo[468000]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:16 power sudo[468004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 12:42:16 power sudo[468004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:16 power sudo[468004]: pam_unix(sudo:session): session closed for user root
Sep 13 12:42:16 power sudo[468748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 12:42:16 power sudo[468748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 12:42:16 power sudo[468748]: pam_unix(sudo:session): session closed for user root
Sep 13 12:45:01 power systemd[471623]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:45:01 power systemd[471624]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:50:01 power systemd[477119]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:50:01 power systemd[477120]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 12:55:01 power systemd[481686]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 12:55:01 power systemd[481687]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:00:01 power systemd[486438]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:00:01 power systemd[486449]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:00:01 power systemd[486450]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 13:00:01 power systemd[486452]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 13:00:01 power systemd[486454]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 13:04:01 power systemd[491172]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:05:02 power systemd[492111]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:05:02 power systemd[492113]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:06:01 power systemd[492982]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 13:07:01 power systemd[493999]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 13:09:01 power systemd[495801]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:10:01 power systemd[496852]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:10:01 power systemd[496851]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:12:01 power systemd[498920]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 13:15:01 power systemd[501857]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:15:01 power systemd[501859]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:20:01 power systemd[507662]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:20:01 power systemd[507663]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:21:13 power sudo[508832]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 13:21:13 power systemd[508837]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:21:13 power sudo[508832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:21:13 power sudo[508832]: pam_unix(sudo:session): session closed for user root
Sep 13 13:21:13 power sudo[508855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 13 13:21:13 power sudo[508855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:21:14 power sudo[508855]: pam_unix(sudo:session): session closed for user root
Sep 13 13:21:14 power sudo[508860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mime list_redirects --output=json'
Sep 13 13:21:14 power sudo[508860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:21:14 power sudo[508860]: pam_unix(sudo:session): session closed for user root
Sep 13 13:25:01 power systemd[513088]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:25:01 power systemd[513089]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:30:01 power systemd[518218]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:30:01 power systemd[518220]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 13:30:01 power systemd[518219]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:30:01 power systemd[518223]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 13:30:01 power systemd[518222]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 13:35:01 power systemd[523859]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:35:01 power systemd[523860]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:36:01 power systemd[524940]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 13:37:01 power systemd[526038]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 13:39:01 power systemd[528155]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:40:01 power systemd[529077]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:40:01 power systemd[529079]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:42:01 power systemd[531750]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 13:42:12 power sudo[531994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 13:42:12 power systemd[531999]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:42:13 power sudo[531994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[531994]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532014]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 13:42:13 power sudo[532014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532014]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 13:42:13 power sudo[532018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532018]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532026]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=BcV8RjfGCm'
Sep 13 13:42:13 power sudo[532026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532026]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 13:42:13 power sudo[532031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532031]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 13:42:13 power sudo[532036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532036]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 13:42:13 power sudo[532041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532041]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 13:42:13 power sudo[532045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532045]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 13:42:13 power sudo[532053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532053]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 13:42:13 power sudo[532057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532057]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 13:42:13 power sudo[532061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532061]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 13:42:13 power sudo[532065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532065]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 13:42:13 power sudo[532069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:13 power sudo[532069]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:13 power sudo[532073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 13:42:13 power sudo[532073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:14 power sudo[532073]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:15 power sudo[532121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 13:42:15 power sudo[532121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:15 power sudo[532121]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:15 power sudo[532127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 13:42:15 power sudo[532127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:15 power sudo[532127]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:15 power sudo[532142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=folklore user-2=bauerin2 user-3=evberasm user-4=bonitavi user-5=cupidpro user-6=vegemk1 user-7=euronic3 user-8=conserva user-9=jpkomuna user-10=izzomk user-11=tehnodro user-12=makdrone user-13=dimpalne user-14=eaptekam user-15=fxxcom user-16=peshkai1 user-17=madzomk user-18=aptekafa user-19=evacommk user-20=gradbai1 user-21=taktcomm user-22=recorgmk user-23=solointe user-24=jaramk user-25=sssoluti user-26=atspedco user-27=cleanerm user-28=animatem user-29=progress user-30=bbbustou user-31=kaoilmk user-32=biplmk user-33=pelagini user-34=viplastc user-35=wineberr user-36=ismassag user-37=workbenc user-38=mbmehani user-39=golakkom user-40=electrol user-41=eliksirz user-42=naksorgm user-43=trigemat user-44=eurofarm user-45=solarinv user-46=matratze user-47=euronic2 user-48=apgrupmk user-49=bogdanos
Sep 13 13:42:15 power sudo[532142]: wp-toolkit : (command continued) user-50=carrent1 user-51=mediasol user-52=kardiome user-53=forzares user-54=nikimare user-55=aptekazd user-56=nikolov1 user-57=hausmark user-58=mediatag user-59=intelek1 user-60=lblawcom user-61=nucktra1 user-62=infopor1 user-63=pravekom user-64=vtranseu user-65=imdskopj user-66=albuname user-67=glammace user-68=chemhemc user-69=samasped user-70=nutrivim user-71=euromaki user-72=cosmatob user-73=elektrot user-74=zapovim1 user-75=aquatech user-76=gorsajmk user-77=supremel user-78=v5srybi9dcdx user-79=zdmgpsor user-80=modernar user-81=inkigaic user-82=vacuacti user-83=innofabl user-84=premiumi user-85=darkogor user-86=fnjorgmk user-87=dslmk user-88=prizmapl user-89=bozinovm user-90=tehnologija user-91=taneccom user-92=fiziosmk user-93=ambitiou user-94=versusmk user-95=fffhpcwr user-96=starluxm user-97=radekrat user-98=tcieuroc user-99=nationa2 user-100=onlinesh user-101=mapaspla user-102=solemor1 user-103=mpbmk
Sep 13 13:42:15 power sudo[532142]: wp-toolkit : (command continued) user-104=agrosind user-105=datalink user-106=kujnamon user-107=univerz1 user-108=velmk user-109=gogovan1 user-110=skyapart user-111=bianasho user-112=makoasmk user-113=rasmorgm user-114=workandt user-115=barececo user-116=delcevca user-117=simbiome user-118=getaldus user-119=mfashion user-120=dhamachi user-121=goartsym user-122=volkanco user-123=detskagr user-124=spdcompu user-125=mspmk user-126=infobadi user-127=urbanexp user-128=wikicamp user-129=ivanjord user-130=groskome user-131=sedcmk user-132=polyeste user-133=vfxnestc user-134=bizporta user-135=maleshne user-136=datelcom user-137=stokovna user-138=sparkupm user-139=klimimk user-140=busymard user-141=zampmk user-142=zvskopje user-143=palenzok user-144=custome1 user-145=itradeco user-146=janiboja user-147=cabinetm user-148=vezilkac user-149=stojano1 user-150=bovincom user-151=screenme user-152=arturaco user-153=nasaidni user-154=karpospo user-155=ideaplus
Sep 13 13:42:15 power sudo[532142]: wp-toolkit : (command continued) user-156=butelmk user-157=daris user-158=premiums user-159=drleomk user-160=inotekso user-161=jpparkin user-162=premiuma user-163=kouzonco user-164=dalmacom user-165=cetplatf user-166=herbalpl user-167=enochmk user-168=sprintst user-169=dikimk12 user-170=berbermk user-171=edomcomm user-172=kolened1 user-173=centarba user-174=nlpmkorg user-175=nolimits user-176=seloviro user-177=mstmmk user-178=goodnews user-179=gocruise user-180=tealmk user-181=proverim user-182=dadarmk user-183=robustco user-184=stravelm user-185=wondersp user-186=pecakome user-187=rastiraz user-188=holiyayt user-189=gjorgeiv user-190=tradeyou user-191=dnevnoin user-192=anitermc user-193=youthgua user-194=hotammk user-195=cajsproc user-196=trudovop user-197=viewinn user-198=vmro user-199=enaspotc user-200=stojnevi user-201=bauerbg user-202=uhostmk5 user-203=oouslave user-204=raremk user-205=evolvepl user-206=avtogumi user-207=socioloz
Sep 13 13:42:15 power sudo[532142]: wp-toolkit : (command continued) user-208=pelagoni user-209=ekostoc1 user-210=oncolog1 user-211=levantmk user-212=nefrolog user-213=hidrommk user-214=frizered user-215=caramk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 13:42:15 power sudo[532142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:16 power sudo[532142]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:16 power sudo[532156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 13:42:16 power sudo[532156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:16 power sudo[532156]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:16 power sudo[532160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pXLs0Zhpy16fx9xF.~
Sep 13 13:42:16 power sudo[532160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:16 power sudo[532160]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:16 power sudo[532164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pXLs0Zhpy16fx9xF.~\''
Sep 13 13:42:16 power sudo[532164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:16 power sudo[532164]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:16 power sudo[532169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pXLs0Zhpy16fx9xF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 13:42:16 power sudo[532169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:16 power sudo[532169]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:16 power sudo[532174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 13:42:16 power sudo[532174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:16 power sudo[532174]: pam_unix(sudo:session): session closed for user root
Sep 13 13:42:17 power sudo[533062]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 13:42:17 power sudo[533062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 13:42:17 power sudo[533062]: pam_unix(sudo:session): session closed for user root
Sep 13 13:45:01 power systemd[535657]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:45:01 power systemd[535658]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:50:01 power systemd[540599]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:50:01 power systemd[540601]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 13:55:01 power systemd[545406]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 13:55:01 power systemd[545407]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:00:01 power systemd[550146]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:00:01 power systemd[550149]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 14:00:01 power systemd[550151]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 14:00:01 power systemd[550148]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:00:01 power systemd[550157]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 14:04:01 power systemd[554719]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:05:01 power systemd[555706]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:05:01 power systemd[555707]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:06:01 power systemd[556645]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 14:07:01 power systemd[557626]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 14:09:01 power systemd[560505]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:10:02 power systemd[562191]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:10:02 power systemd[562193]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:12:01 power systemd[564148]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 14:15:01 power systemd[567047]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:15:01 power systemd[567048]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:20:01 power systemd[572370]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:20:01 power systemd[572372]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:25:01 power systemd[577457]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:25:01 power systemd[577458]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:30:01 power systemd[582014]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:30:01 power systemd[582016]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:30:01 power systemd[582017]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 14:30:01 power systemd[582018]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 14:30:01 power systemd[582020]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 14:33:38 power sshd[586073]: Connection closed by 66.132.153.115 port 41600 [preauth]
Sep 13 14:35:01 power systemd[587605]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:35:01 power systemd[587606]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:36:01 power systemd[588733]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 14:37:01 power systemd[589746]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 14:39:02 power systemd[591450]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:40:01 power systemd[592517]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:40:01 power systemd[592518]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:42:01 power systemd[594565]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 14:42:12 power sudo[594743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 14:42:12 power systemd[594748]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:42:13 power sudo[594743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594743]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 14:42:13 power sudo[594766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594766]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 14:42:13 power sudo[594770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594770]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=YEzzamWnTr'
Sep 13 14:42:13 power sudo[594775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594775]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 14:42:13 power sudo[594781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594781]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594785]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 14:42:13 power sudo[594785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594785]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 14:42:13 power sudo[594790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594790]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 14:42:13 power sudo[594794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594794]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 14:42:13 power sudo[594808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594808]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 14:42:13 power sudo[594812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594812]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 14:42:13 power sudo[594816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594816]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594820]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 14:42:13 power sudo[594820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594820]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 14:42:13 power sudo[594825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:13 power sudo[594825]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:13 power sudo[594829]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 14:42:13 power sudo[594829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:14 power sudo[594829]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:15 power sudo[594876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 14:42:15 power sudo[594876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:15 power sudo[594876]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:15 power sudo[594881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 14:42:15 power sudo[594881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:15 power sudo[594881]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:15 power sudo[594888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=kouzonco user-2=premiuma user-3=cetplatf user-4=dalmacom user-5=jpparkin user-6=inotekso user-7=drleomk user-8=ideaplus user-9=nasaidni user-10=karpospo user-11=arturaco user-12=screenme user-13=premiums user-14=butelmk user-15=daris user-16=stojano1 user-17=bovincom user-18=janiboja user-19=itradeco user-20=vezilkac user-21=cabinetm user-22=palenzok user-23=zampmk user-24=busymard user-25=zvskopje user-26=custome1 user-27=sparkupm user-28=stokovna user-29=klimimk user-30=bizporta user-31=datelcom user-32=maleshne user-33=sedcmk user-34=ivanjord user-35=groskome user-36=vfxnestc user-37=polyeste user-38=wikicamp user-39=urbanexp user-40=spdcompu user-41=detskagr user-42=mspmk user-43=infobadi user-44=simbiome user-45=delcevca user-46=getaldus user-47=barececo user-48=workandt user-49=goartsym
Sep 13 14:42:15 power sudo[594888]: wp-toolkit : (command continued) user-50=volkanco user-51=dhamachi user-52=mfashion user-53=makoasmk user-54=bianasho user-55=skyapart user-56=rasmorgm user-57=datalink user-58=velmk user-59=gogovan1 user-60=kujnamon user-61=univerz1 user-62=agrosind user-63=mpbmk user-64=frizered user-65=hidrommk user-66=caramk user-67=nefrolog user-68=ekostoc1 user-69=levantmk user-70=oncolog1 user-71=avtogumi user-72=socioloz user-73=pelagoni user-74=evolvepl user-75=stojnevi user-76=raremk user-77=oouslave user-78=uhostmk5 user-79=bauerbg user-80=enaspotc user-81=vmro user-82=trudovop user-83=viewinn user-84=cajsproc user-85=hotammk user-86=youthgua user-87=anitermc user-88=tradeyou user-89=gjorgeiv user-90=dnevnoin user-91=pecakome user-92=wondersp user-93=robustco user-94=stravelm user-95=holiyayt user-96=rastiraz user-97=tealmk user-98=dadarmk user-99=proverim user-100=goodnews user-101=mstmmk user-102=gocruise user-103=seloviro user-104=centarba
Sep 13 14:42:15 power sudo[594888]: wp-toolkit : (command continued) user-105=nlpmkorg user-106=kolened1 user-107=nolimits user-108=edomcomm user-109=berbermk user-110=dikimk12 user-111=sprintst user-112=herbalpl user-113=enochmk user-114=eurofarm user-115=solarinv user-116=golakkom user-117=trigemat user-118=naksorgm user-119=eliksirz user-120=electrol user-121=workbenc user-122=ismassag user-123=mbmehani user-124=wineberr user-125=viplastc user-126=pelagini user-127=biplmk user-128=kaoilmk user-129=bbbustou user-130=atspedco user-131=sssoluti user-132=progress user-133=animatem user-134=cleanerm user-135=taktcomm user-136=recorgmk user-137=jaramk user-138=solointe user-139=evacommk user-140=madzomk user-141=aptekafa user-142=gradbai1 user-143=eaptekam user-144=dimpalne user-145=peshkai1 user-146=fxxcom user-147=tehnodro user-148=makdrone user-149=izzomk user-150=jpkomuna user-151=euronic3 user-152=vegemk1 user-153=cupidpro user-154=conserva user-155=bonitavi user-156=evberasm
Sep 13 14:42:15 power sudo[594888]: wp-toolkit : (command continued) user-157=folklore user-158=bauerin2 user-159=onlinesh user-160=nationa2 user-161=solemor1 user-162=mapaspla user-163=tcieuroc user-164=fffhpcwr user-165=radekrat user-166=starluxm user-167=ambitiou user-168=fiziosmk user-169=versusmk user-170=bozinovm user-171=fnjorgmk user-172=darkogor user-173=prizmapl user-174=dslmk user-175=innofabl user-176=premiumi user-177=vacuacti user-178=taneccom user-179=tehnologija user-180=modernar user-181=inkigaic user-182=zdmgpsor user-183=gorsajmk user-184=aquatech user-185=v5srybi9dcdx user-186=supremel user-187=euromaki user-188=cosmatob user-189=elektrot user-190=zapovim1 user-191=chemhemc user-192=samasped user-193=nutrivim user-194=imdskopj user-195=glammace user-196=albuname user-197=infopor1 user-198=pravekom user-199=vtranseu user-200=intelek1 user-201=mediatag user-202=nucktra1 user-203=lblawcom user-204=aptekazd user-205=nikimare user-206=forzares user-207=hausmark
Sep 13 14:42:15 power sudo[594888]: wp-toolkit : (command continued) user-208=nikolov1 user-209=mediasol user-210=bogdanos user-211=carrent1 user-212=apgrupmk user-213=kardiome user-214=euronic2 user-215=matratze feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 14:42:15 power sudo[594888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:16 power sudo[594888]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:16 power sudo[594900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vmro'
Sep 13 14:42:16 power sudo[594900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:16 power sudo[594900]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:16 power sudo[594906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vmro test -e /home/vmro/wordpress-backups
Sep 13 14:42:16 power sudo[594906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:16 power sudo[594906]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:16 power sudo[594917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dadarmk'
Sep 13 14:42:16 power sudo[594917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:16 power sudo[594917]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:16 power sudo[594925]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep 13 14:42:16 power sudo[594925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:16 power sudo[594925]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:16 power sudo[594937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status agrosind'
Sep 13 14:42:16 power sudo[594937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:17 power sudo[594937]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:17 power sudo[594949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user agrosind test -e /home/agrosind/wordpress-backups
Sep 13 14:42:17 power sudo[594949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:17 power sudo[594949]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:17 power sudo[594960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status fffhpcwr'
Sep 13 14:42:17 power sudo[594960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:17 power sudo[594960]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:17 power sudo[594973]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep 13 14:42:17 power sudo[594973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:17 power sudo[594973]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:17 power sudo[594994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ambitiou'
Sep 13 14:42:17 power sudo[594994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:17 power sudo[594994]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:17 power sudo[595013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep 13 14:42:17 power sudo[595013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:17 power sudo[595013]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:17 power sudo[595040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status animatem'
Sep 13 14:42:17 power sudo[595040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:17 power sudo[595040]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:17 power sudo[595046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user animatem test -e /home/animatem/wordpress-backups
Sep 13 14:42:17 power sudo[595046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:17 power sudo[595046]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:17 power sudo[595057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status anitermc'
Sep 13 14:42:17 power sudo[595057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:18 power sudo[595057]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:18 power sudo[595065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user anitermc test -e /home/anitermc/wordpress-backups
Sep 13 14:42:18 power sudo[595065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:18 power sudo[595065]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:18 power sudo[595077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wineberr'
Sep 13 14:42:18 power sudo[595077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:18 power sudo[595077]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:18 power sudo[595082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep 13 14:42:18 power sudo[595082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:18 power sudo[595082]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:18 power sudo[595093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status aptekazd'
Sep 13 14:42:18 power sudo[595093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:18 power sudo[595093]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:18 power sudo[595099]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user aptekazd test -e /home/aptekazd/wordpress-backups
Sep 13 14:42:18 power sudo[595099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:18 power sudo[595099]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:18 power sudo[595110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status progress'
Sep 13 14:42:18 power sudo[595110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:18 power sudo[595110]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:18 power sudo[595115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user progress test -e /home/progress/wordpress-backups
Sep 13 14:42:18 power sudo[595115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:18 power sudo[595115]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:18 power sudo[595126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bbbustou'
Sep 13 14:42:18 power sudo[595126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:19 power sudo[595126]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:19 power sudo[595137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep 13 14:42:19 power sudo[595137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:19 power sudo[595137]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:19 power sudo[595148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nationa2'
Sep 13 14:42:19 power sudo[595148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:19 power sudo[595148]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:19 power sudo[595155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nationa2 test -e /home/nationa2/wordpress-backups
Sep 13 14:42:19 power sudo[595155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:19 power sudo[595155]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:19 power sudo[595166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cetplatf'
Sep 13 14:42:19 power sudo[595166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:19 power sudo[595166]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:19 power sudo[595171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 13 14:42:19 power sudo[595171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:19 power sudo[595171]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:19 power sudo[595183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bianasho'
Sep 13 14:42:19 power sudo[595183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:19 power sudo[595183]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:19 power sudo[595193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bianasho test -e /home/bianasho/wordpress-backups
Sep 13 14:42:19 power sudo[595193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:19 power sudo[595193]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:19 power sudo[595205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status velmk'
Sep 13 14:42:19 power sudo[595205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:20 power sudo[595205]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:20 power sudo[595215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user velmk test -e /home/velmk/wordpress-backups
Sep 13 14:42:20 power sudo[595215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:20 power sudo[595215]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:20 power sudo[595226]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enaspotc'
Sep 13 14:42:20 power sudo[595226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:20 power sudo[595226]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:20 power sudo[595231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep 13 14:42:20 power sudo[595231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:20 power sudo[595231]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:20 power sudo[595242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bonitavi'
Sep 13 14:42:20 power sudo[595242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:20 power sudo[595242]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:20 power sudo[595252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bonitavi test -e /home/bonitavi/wordpress-backups
Sep 13 14:42:20 power sudo[595252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:20 power sudo[595252]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:20 power sudo[595263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status bovincom'
Sep 13 14:42:20 power sudo[595263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:20 power sudo[595263]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:20 power sudo[595278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bovincom test -e /home/bovincom/wordpress-backups
Sep 13 14:42:20 power sudo[595278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:20 power sudo[595278]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:20 power sudo[595290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status butelmk'
Sep 13 14:42:20 power sudo[595290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595290]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:21 power sudo[595299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user butelmk test -e /home/butelmk/wordpress-backups
Sep 13 14:42:21 power sudo[595299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595299]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:21 power sudo[595310]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status izzomk'
Sep 13 14:42:21 power sudo[595310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595310]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:21 power sudo[595318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep 13 14:42:21 power sudo[595318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595318]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:21 power sudo[595329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 13 14:42:21 power sudo[595329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595329]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:21 power sudo[595340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 13 14:42:21 power sudo[595340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595340]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:21 power sudo[595351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status chemhemc'
Sep 13 14:42:21 power sudo[595351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595351]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:21 power sudo[595360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep 13 14:42:21 power sudo[595360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595360]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:21 power sudo[595372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status cosmatob'
Sep 13 14:42:21 power sudo[595372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595372]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:21 power sudo[595385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cosmatob test -e /home/cosmatob/wordpress-backups
Sep 13 14:42:21 power sudo[595385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:21 power sudo[595385]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dadarmk test -e /home/dadarmk/wordpress-backups
Sep 13 14:42:22 power sudo[595397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:22 power sudo[595397]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status delcevca'
Sep 13 14:42:22 power sudo[595408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:22 power sudo[595408]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user delcevca test -e /home/delcevca/wordpress-backups
Sep 13 14:42:22 power sudo[595417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:22 power sudo[595417]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status edomcomm'
Sep 13 14:42:22 power sudo[595429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:22 power sudo[595429]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 13 14:42:22 power sudo[595434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:22 power sudo[595434]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 13 14:42:22 power sudo[595445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:22 power sudo[595445]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 13 14:42:22 power sudo[595456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:22 power sudo[595456]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status detskagr'
Sep 13 14:42:22 power sudo[595467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:22 power sudo[595467]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user detskagr test -e /home/detskagr/wordpress-backups
Sep 13 14:42:22 power sudo[595475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:22 power sudo[595475]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:22 power sudo[595487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eaptekam'
Sep 13 14:42:22 power sudo[595487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:23 power sudo[595487]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:23 power sudo[595492]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eaptekam test -e /home/eaptekam/wordpress-backups
Sep 13 14:42:23 power sudo[595492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:23 power sudo[595492]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:23 power sudo[595503]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dimpalne'
Sep 13 14:42:23 power sudo[595503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:23 power sudo[595503]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:23 power sudo[595512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dimpalne test -e /home/dimpalne/wordpress-backups
Sep 13 14:42:23 power sudo[595512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:23 power sudo[595512]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:23 power sudo[595523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status dnevnoin'
Sep 13 14:42:23 power sudo[595523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:23 power sudo[595523]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:23 power sudo[595531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user dnevnoin test -e /home/dnevnoin/wordpress-backups
Sep 13 14:42:23 power sudo[595531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:23 power sudo[595531]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:23 power sudo[595544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user bbbustou test -e /home/bbbustou/wordpress-backups
Sep 13 14:42:23 power sudo[595544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:23 power sudo[595544]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:23 power sudo[595555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status drleomk'
Sep 13 14:42:23 power sudo[595555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:23 power sudo[595555]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:23 power sudo[595560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user drleomk test -e /home/drleomk/wordpress-backups
Sep 13 14:42:23 power sudo[595560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:23 power sudo[595560]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:23 power sudo[595571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status goodnews'
Sep 13 14:42:23 power sudo[595571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595571]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 13 14:42:24 power sudo[595582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595582]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595593]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status electrol'
Sep 13 14:42:24 power sudo[595593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595593]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user electrol test -e /home/electrol/wordpress-backups
Sep 13 14:42:24 power sudo[595600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595600]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status elektrot'
Sep 13 14:42:24 power sudo[595612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595612]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user elektrot test -e /home/elektrot/wordpress-backups
Sep 13 14:42:24 power sudo[595617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595617]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enaspotc test -e /home/enaspotc/wordpress-backups
Sep 13 14:42:24 power sudo[595628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595628]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595639]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status enochmk'
Sep 13 14:42:24 power sudo[595639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595639]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user enochmk test -e /home/enochmk/wordpress-backups
Sep 13 14:42:24 power sudo[595646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595646]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 13 14:42:24 power sudo[595657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:24 power sudo[595657]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:24 power sudo[595668]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status eurofarm'
Sep 13 14:42:24 power sudo[595668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:25 power sudo[595668]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:25 power sudo[595677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user eurofarm test -e /home/eurofarm/wordpress-backups
Sep 13 14:42:25 power sudo[595677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:25 power sudo[595677]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:25 power sudo[595690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status euromaki'
Sep 13 14:42:25 power sudo[595690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:25 power sudo[595690]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:25 power sudo[595698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user euromaki test -e /home/euromaki/wordpress-backups
Sep 13 14:42:25 power sudo[595698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:25 power sudo[595698]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:25 power sudo[595709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evberasm'
Sep 13 14:42:25 power sudo[595709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:25 power sudo[595709]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:25 power sudo[595714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evberasm test -e /home/evberasm/wordpress-backups
Sep 13 14:42:25 power sudo[595714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:25 power sudo[595714]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:25 power sudo[595725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status evolvepl'
Sep 13 14:42:25 power sudo[595725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:25 power sudo[595725]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:25 power sudo[595732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user evolvepl test -e /home/evolvepl/wordpress-backups
Sep 13 14:42:25 power sudo[595732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:25 power sudo[595732]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:26 power sudo[595743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 13 14:42:26 power sudo[595743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:26 power sudo[595743]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:26 power sudo[595755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status holiyayt'
Sep 13 14:42:26 power sudo[595755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:26 power sudo[595755]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:26 power sudo[595764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 13 14:42:26 power sudo[595764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:26 power sudo[595764]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:26 power sudo[595775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status v5srybi9dcdx'
Sep 13 14:42:26 power sudo[595775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:26 power sudo[595775]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:26 power sudo[595784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep 13 14:42:26 power sudo[595784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:26 power sudo[595784]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:26 power sudo[595797]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status folklore'
Sep 13 14:42:26 power sudo[595797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:26 power sudo[595797]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:26 power sudo[595805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user folklore test -e /home/folklore/wordpress-backups
Sep 13 14:42:26 power sudo[595805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:26 power sudo[595805]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:26 power sudo[595816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status forzares'
Sep 13 14:42:26 power sudo[595816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:27 power sudo[595816]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:27 power sudo[595822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user forzares test -e /home/forzares/wordpress-backups
Sep 13 14:42:27 power sudo[595822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:27 power sudo[595822]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:27 power sudo[595836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status getaldus'
Sep 13 14:42:27 power sudo[595836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:27 power sudo[595836]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:27 power sudo[595847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user getaldus test -e /home/getaldus/wordpress-backups
Sep 13 14:42:27 power sudo[595847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:27 power sudo[595847]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:27 power sudo[595859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gocruise'
Sep 13 14:42:27 power sudo[595859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:27 power sudo[595859]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:27 power sudo[595867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gocruise test -e /home/gocruise/wordpress-backups
Sep 13 14:42:27 power sudo[595867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:27 power sudo[595867]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:27 power sudo[595880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status gogovan1'
Sep 13 14:42:27 power sudo[595880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:27 power sudo[595880]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:27 power sudo[595892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user gogovan1 test -e /home/gogovan1/wordpress-backups
Sep 13 14:42:27 power sudo[595892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:27 power sudo[595892]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:27 power sudo[595903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status golakkom'
Sep 13 14:42:27 power sudo[595903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595903]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[595909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user golakkom test -e /home/golakkom/wordpress-backups
Sep 13 14:42:28 power sudo[595909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595909]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[595923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 13 14:42:28 power sudo[595923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595923]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[595934]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status herbalpl'
Sep 13 14:42:28 power sudo[595934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595934]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[595941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user herbalpl test -e /home/herbalpl/wordpress-backups
Sep 13 14:42:28 power sudo[595941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595941]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[595953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 13 14:42:28 power sudo[595953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595953]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[595964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 13 14:42:28 power sudo[595964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595964]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[595976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vezilkac'
Sep 13 14:42:28 power sudo[595976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595976]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[595985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 13 14:42:28 power sudo[595985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595985]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[595996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 13 14:42:28 power sudo[595996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[595996]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[596007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 13 14:42:28 power sudo[596007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[596007]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[596018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 13 14:42:28 power sudo[596018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[596018]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[596029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vezilkac test -e /home/vezilkac/wordpress-backups
Sep 13 14:42:28 power sudo[596029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[596029]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[596040]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status madzomk'
Sep 13 14:42:28 power sudo[596040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:28 power sudo[596040]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:28 power sudo[596047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user madzomk test -e /home/madzomk/wordpress-backups
Sep 13 14:42:29 power sudo[596047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:29 power sudo[596047]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:29 power sudo[596058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status imdskopj'
Sep 13 14:42:29 power sudo[596058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:29 power sudo[596058]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:29 power sudo[596075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user imdskopj test -e /home/imdskopj/wordpress-backups
Sep 13 14:42:29 power sudo[596075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:29 power sudo[596075]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:29 power sudo[596086]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status infopor1'
Sep 13 14:42:29 power sudo[596086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:29 power sudo[596086]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:29 power sudo[596093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user infopor1 test -e /home/infopor1/wordpress-backups
Sep 13 14:42:29 power sudo[596093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:29 power sudo[596093]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:29 power sudo[596105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status inkigaic'
Sep 13 14:42:29 power sudo[596105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:29 power sudo[596105]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:29 power sudo[596114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user inkigaic test -e /home/inkigaic/wordpress-backups
Sep 13 14:42:29 power sudo[596114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:29 power sudo[596114]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:29 power sudo[596126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status intelek1'
Sep 13 14:42:29 power sudo[596126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596126]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596136]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user intelek1 test -e /home/intelek1/wordpress-backups
Sep 13 14:42:30 power sudo[596136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596136]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user holiyayt test -e /home/holiyayt/wordpress-backups
Sep 13 14:42:30 power sudo[596147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596147]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jpparkin'
Sep 13 14:42:30 power sudo[596158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596158]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jpparkin test -e /home/jpparkin/wordpress-backups
Sep 13 14:42:30 power sudo[596166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596166]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status karpospo'
Sep 13 14:42:30 power sudo[596178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596178]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596184]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user karpospo test -e /home/karpospo/wordpress-backups
Sep 13 14:42:30 power sudo[596184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596184]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 13 14:42:30 power sudo[596196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596196]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user goodnews test -e /home/goodnews/wordpress-backups
Sep 13 14:42:30 power sudo[596207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596207]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep 13 14:42:30 power sudo[596218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596218]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 test -e /home/kolened1/wordpress-backups
Sep 13 14:42:30 power sudo[596224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:30 power sudo[596224]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:30 power sudo[596236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kouzonco'
Sep 13 14:42:30 power sudo[596236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:31 power sudo[596236]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:31 power sudo[596247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kouzonco test -e /home/kouzonco/wordpress-backups
Sep 13 14:42:31 power sudo[596247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:31 power sudo[596247]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:31 power sudo[596260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sprintst'
Sep 13 14:42:31 power sudo[596260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:31 power sudo[596260]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:31 power sudo[596271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sprintst test -e /home/sprintst/wordpress-backups
Sep 13 14:42:31 power sudo[596271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:31 power sudo[596271]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:31 power sudo[596282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kujnamon'
Sep 13 14:42:31 power sudo[596282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:31 power sudo[596282]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:31 power sudo[596292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kujnamon test -e /home/kujnamon/wordpress-backups
Sep 13 14:42:31 power sudo[596292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:31 power sudo[596292]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:31 power sudo[596303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 13 14:42:31 power sudo[596303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:31 power sudo[596303]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:31 power sudo[596314]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makdrone'
Sep 13 14:42:31 power sudo[596314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:31 power sudo[596314]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:31 power sudo[596321]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makdrone test -e /home/makdrone/wordpress-backups
Sep 13 14:42:31 power sudo[596321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:31 power sudo[596321]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:31 power sudo[596332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status makoasmk'
Sep 13 14:42:31 power sudo[596332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:32 power sudo[596332]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:32 power sudo[596342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user makoasmk test -e /home/makoasmk/wordpress-backups
Sep 13 14:42:32 power sudo[596342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:32 power sudo[596342]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:32 power sudo[596353]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ambitiou test -e /home/ambitiou/wordpress-backups
Sep 13 14:42:32 power sudo[596353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:32 power sudo[596353]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:32 power sudo[596365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user edomcomm test -e /home/edomcomm/wordpress-backups
Sep 13 14:42:32 power sudo[596365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:32 power sudo[596365]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:32 power sudo[596376]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status modernar'
Sep 13 14:42:32 power sudo[596376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:32 power sudo[596376]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:32 power sudo[596385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user modernar test -e /home/modernar/wordpress-backups
Sep 13 14:42:32 power sudo[596385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:32 power sudo[596385]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:32 power sudo[596397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user v5srybi9dcdx test -e /home/v5srybi9dcdx/wordpress-backups
Sep 13 14:42:32 power sudo[596397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:32 power sudo[596397]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:32 power sudo[596408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mpbmk'
Sep 13 14:42:32 power sudo[596408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:32 power sudo[596408]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:32 power sudo[596418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mpbmk test -e /home/mpbmk/wordpress-backups
Sep 13 14:42:32 power sudo[596418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:32 power sudo[596418]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:35 power sudo[596453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mspmk'
Sep 13 14:42:35 power sudo[596453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:35 power sudo[596453]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:35 power sudo[596460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mspmk test -e /home/mspmk/wordpress-backups
Sep 13 14:42:35 power sudo[596460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:35 power sudo[596460]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:35 power sudo[596471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mstmmk'
Sep 13 14:42:35 power sudo[596471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:35 power sudo[596471]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:35 power sudo[596478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mstmmk test -e /home/mstmmk/wordpress-backups
Sep 13 14:42:35 power sudo[596478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:35 power sudo[596478]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:35 power sudo[596491]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status naksorgm'
Sep 13 14:42:35 power sudo[596491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:35 power sudo[596491]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:35 power sudo[596504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user naksorgm test -e /home/naksorgm/wordpress-backups
Sep 13 14:42:35 power sudo[596504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:35 power sudo[596504]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:35 power sudo[596515]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nasaidni'
Sep 13 14:42:35 power sudo[596515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:36 power sudo[596515]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:36 power sudo[596525]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep 13 14:42:36 power sudo[596525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:36 power sudo[596525]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:36 power sudo[596536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nasaidni test -e /home/nasaidni/wordpress-backups
Sep 13 14:42:36 power sudo[596536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:36 power sudo[596536]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:36 power sudo[596548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ismassag'
Sep 13 14:42:36 power sudo[596548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:36 power sudo[596548]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:36 power sudo[596556]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ismassag test -e /home/ismassag/wordpress-backups
Sep 13 14:42:36 power sudo[596556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:36 power sudo[596556]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:36 power sudo[596568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user chemhemc test -e /home/chemhemc/wordpress-backups
Sep 13 14:42:36 power sudo[596568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:36 power sudo[596568]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:36 power sudo[596579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikolov1'
Sep 13 14:42:36 power sudo[596579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:36 power sudo[596579]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:36 power sudo[596590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikolov1 test -e /home/nikolov1/wordpress-backups
Sep 13 14:42:36 power sudo[596590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:36 power sudo[596590]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:36 power sudo[596602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nolimits'
Sep 13 14:42:36 power sudo[596602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:37 power sudo[596602]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:37 power sudo[596609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nolimits test -e /home/nolimits/wordpress-backups
Sep 13 14:42:37 power sudo[596609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:37 power sudo[596609]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:37 power sudo[596620]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status onlinesh'
Sep 13 14:42:37 power sudo[596620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:37 power sudo[596620]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:37 power sudo[596629]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user onlinesh test -e /home/onlinesh/wordpress-backups
Sep 13 14:42:37 power sudo[596629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:37 power sudo[596629]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:37 power sudo[596640]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status palenzok'
Sep 13 14:42:37 power sudo[596640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:37 power sudo[596640]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:37 power sudo[596648]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user palenzok test -e /home/palenzok/wordpress-backups
Sep 13 14:42:37 power sudo[596648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:37 power sudo[596648]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:37 power sudo[596659]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pelagoni'
Sep 13 14:42:37 power sudo[596659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:37 power sudo[596659]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:37 power sudo[596664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pelagoni test -e /home/pelagoni/wordpress-backups
Sep 13 14:42:37 power sudo[596664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:37 power sudo[596664]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:37 power sudo[596675]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status biplmk'
Sep 13 14:42:37 power sudo[596675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:38 power sudo[596675]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:38 power sudo[596680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user biplmk test -e /home/biplmk/wordpress-backups
Sep 13 14:42:38 power sudo[596680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:38 power sudo[596680]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:38 power sudo[596691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status premiumi'
Sep 13 14:42:38 power sudo[596691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:38 power sudo[596691]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:38 power sudo[596712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user premiumi test -e /home/premiumi/wordpress-backups
Sep 13 14:42:38 power sudo[596712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:38 power sudo[596712]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:38 power sudo[596723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user fffhpcwr test -e /home/fffhpcwr/wordpress-backups
Sep 13 14:42:38 power sudo[596723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:38 power sudo[596723]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:38 power sudo[596734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status radekrat'
Sep 13 14:42:38 power sudo[596734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:38 power sudo[596734]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:38 power sudo[596741]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user radekrat test -e /home/radekrat/wordpress-backups
Sep 13 14:42:38 power sudo[596741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:38 power sudo[596741]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:38 power sudo[596752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rasmorgm'
Sep 13 14:42:38 power sudo[596752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:38 power sudo[596752]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:38 power sudo[596757]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rasmorgm test -e /home/rasmorgm/wordpress-backups
Sep 13 14:42:38 power sudo[596757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:38 power sudo[596757]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:38 power sudo[596768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status recorgmk'
Sep 13 14:42:38 power sudo[596768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596768]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user recorgmk test -e /home/recorgmk/wordpress-backups
Sep 13 14:42:39 power sudo[596778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596778]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stravelm'
Sep 13 14:42:39 power sudo[596790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596790]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stravelm test -e /home/stravelm/wordpress-backups
Sep 13 14:42:39 power sudo[596795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596795]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596806]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status simbiome'
Sep 13 14:42:39 power sudo[596806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596806]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user simbiome test -e /home/simbiome/wordpress-backups
Sep 13 14:42:39 power sudo[596812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596812]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 13 14:42:39 power sudo[596823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596823]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status solemor1'
Sep 13 14:42:39 power sudo[596834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596834]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep 13 14:42:39 power sudo[596839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596839]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user solemor1 test -e /home/solemor1/wordpress-backups
Sep 13 14:42:39 power sudo[596851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:39 power sudo[596851]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:39 power sudo[596862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status sssoluti'
Sep 13 14:42:39 power sudo[596862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:40 power sudo[596862]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:40 power sudo[596873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user sssoluti test -e /home/sssoluti/wordpress-backups
Sep 13 14:42:40 power sudo[596873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:40 power sudo[596873]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:40 power sudo[596884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status supremel'
Sep 13 14:42:40 power sudo[596884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:40 power sudo[596884]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:40 power sudo[596890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep 13 14:42:40 power sudo[596890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:40 power sudo[596890]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:40 power sudo[596901]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status tehnodro'
Sep 13 14:42:40 power sudo[596901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:40 power sudo[596901]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:40 power sudo[596907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user tehnodro test -e /home/tehnodro/wordpress-backups
Sep 13 14:42:40 power sudo[596907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:40 power sudo[596907]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:40 power sudo[596918]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user supremel test -e /home/supremel/wordpress-backups
Sep 13 14:42:40 power sudo[596918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:40 power sudo[596918]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:40 power sudo[596929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status viewinn'
Sep 13 14:42:40 power sudo[596929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:40 power sudo[596929]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:40 power sudo[596935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user viewinn test -e /home/viewinn/wordpress-backups
Sep 13 14:42:40 power sudo[596935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:40 power sudo[596935]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:41 power sudo[596946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status wikicamp'
Sep 13 14:42:41 power sudo[596946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:41 power sudo[596946]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:41 power sudo[596954]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wikicamp test -e /home/wikicamp/wordpress-backups
Sep 13 14:42:41 power sudo[596954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:41 power sudo[596954]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:41 power sudo[596965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workandt'
Sep 13 14:42:41 power sudo[596965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:41 power sudo[596965]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:41 power sudo[596972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workandt test -e /home/workandt/wordpress-backups
Sep 13 14:42:41 power sudo[596972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:41 power sudo[596972]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:41 power sudo[596983]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user cetplatf test -e /home/cetplatf/wordpress-backups
Sep 13 14:42:41 power sudo[596983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:41 power sudo[596983]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:41 power sudo[596995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status youthgua'
Sep 13 14:42:41 power sudo[596995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:41 power sudo[596995]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:41 power sudo[597002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user youthgua test -e /home/youthgua/wordpress-backups
Sep 13 14:42:41 power sudo[597002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:41 power sudo[597002]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:41 power sudo[597013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status zampmk'
Sep 13 14:42:41 power sudo[597013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:42 power sudo[597013]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:42 power sudo[597035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user zampmk test -e /home/zampmk/wordpress-backups
Sep 13 14:42:42 power sudo[597035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:42 power sudo[597035]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:42 power sudo[597046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status ivanjord'
Sep 13 14:42:42 power sudo[597046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:42 power sudo[597046]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:42 power sudo[597060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user ivanjord test -e /home/ivanjord/wordpress-backups
Sep 13 14:42:42 power sudo[597060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:42 power sudo[597060]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:42 power sudo[597071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user izzomk test -e /home/izzomk/wordpress-backups
Sep 13 14:42:42 power sudo[597071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:42 power sudo[597071]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:42 power sudo[597082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status janiboja'
Sep 13 14:42:42 power sudo[597082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:42 power sudo[597082]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:42 power sudo[597089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user janiboja test -e /home/janiboja/wordpress-backups
Sep 13 14:42:42 power sudo[597089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:42 power sudo[597089]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:42 power sudo[597101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status jaramk'
Sep 13 14:42:42 power sudo[597101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:42 power sudo[597101]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:42 power sudo[597109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user jaramk test -e /home/jaramk/wordpress-backups
Sep 13 14:42:42 power sudo[597109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:42 power sudo[597109]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:42 power sudo[597120]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status innofabl'
Sep 13 14:42:42 power sudo[597120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597120]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597127]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep 13 14:42:43 power sudo[597127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597127]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mapaspla'
Sep 13 14:42:43 power sudo[597141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597141]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep 13 14:42:43 power sudo[597147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597147]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mapaspla test -e /home/mapaspla/wordpress-backups
Sep 13 14:42:43 power sudo[597160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597160]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status mediatag'
Sep 13 14:42:43 power sudo[597171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597171]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user mediatag test -e /home/mediatag/wordpress-backups
Sep 13 14:42:43 power sudo[597178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597178]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597189]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user innofabl test -e /home/innofabl/wordpress-backups
Sep 13 14:42:43 power sudo[597189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597189]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nefrolog'
Sep 13 14:42:43 power sudo[597200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597200]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597206]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nefrolog test -e /home/nefrolog/wordpress-backups
Sep 13 14:42:43 power sudo[597206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:43 power sudo[597206]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:43 power sudo[597217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nikimare'
Sep 13 14:42:43 power sudo[597217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:44 power sudo[597217]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:44 power sudo[597225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep 13 14:42:44 power sudo[597225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:44 power sudo[597225]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:44 power sudo[597236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nikimare test -e /home/nikimare/wordpress-backups
Sep 13 14:42:44 power sudo[597236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:44 power sudo[597236]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:44 power sudo[597247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status nucktra1'
Sep 13 14:42:44 power sudo[597247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:44 power sudo[597247]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:44 power sudo[597253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep 13 14:42:44 power sudo[597253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:44 power sudo[597253]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:44 power sudo[597265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status pravekom'
Sep 13 14:42:44 power sudo[597265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:44 power sudo[597265]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:44 power sudo[597270]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user pravekom test -e /home/pravekom/wordpress-backups
Sep 13 14:42:44 power sudo[597270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:44 power sudo[597270]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:44 power sudo[597281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status proverim'
Sep 13 14:42:44 power sudo[597281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:44 power sudo[597281]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:44 power sudo[597289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user proverim test -e /home/proverim/wordpress-backups
Sep 13 14:42:45 power sudo[597289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:45 power sudo[597289]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:45 power sudo[597300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status rastiraz'
Sep 13 14:42:45 power sudo[597300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:45 power sudo[597300]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:45 power sudo[597311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user rastiraz test -e /home/rastiraz/wordpress-backups
Sep 13 14:42:45 power sudo[597311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:45 power sudo[597311]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:45 power sudo[597322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status conserva'
Sep 13 14:42:45 power sudo[597322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:45 power sudo[597322]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:45 power sudo[597328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user conserva test -e /home/conserva/wordpress-backups
Sep 13 14:42:45 power sudo[597328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:45 power sudo[597328]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:45 power sudo[597339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status maleshne'
Sep 13 14:42:45 power sudo[597339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:45 power sudo[597339]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:45 power sudo[597344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user maleshne test -e /home/maleshne/wordpress-backups
Sep 13 14:42:45 power sudo[597344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:45 power sudo[597344]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:45 power sudo[597355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status samasped'
Sep 13 14:42:45 power sudo[597355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:45 power sudo[597355]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:45 power sudo[597360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user samasped test -e /home/samasped/wordpress-backups
Sep 13 14:42:46 power sudo[597360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:46 power sudo[597360]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:46 power sudo[597372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status seloviro'
Sep 13 14:42:46 power sudo[597372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:46 power sudo[597372]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:46 power sudo[597383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user seloviro test -e /home/seloviro/wordpress-backups
Sep 13 14:42:46 power sudo[597383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:46 power sudo[597383]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:46 power sudo[597394]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status skyapart'
Sep 13 14:42:46 power sudo[597394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:46 power sudo[597394]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:46 power sudo[597399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user skyapart test -e /home/skyapart/wordpress-backups
Sep 13 14:42:46 power sudo[597399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:46 power sudo[597399]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:46 power sudo[597411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status socioloz'
Sep 13 14:42:46 power sudo[597411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:46 power sudo[597411]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:46 power sudo[597417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user socioloz test -e /home/socioloz/wordpress-backups
Sep 13 14:42:46 power sudo[597417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:46 power sudo[597417]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:46 power sudo[597428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status stojnevi'
Sep 13 14:42:46 power sudo[597428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:47 power sudo[597428]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:47 power sudo[597437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user stojnevi test -e /home/stojnevi/wordpress-backups
Sep 13 14:42:47 power sudo[597437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:47 power sudo[597437]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:47 power sudo[597451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user nucktra1 test -e /home/nucktra1/wordpress-backups
Sep 13 14:42:47 power sudo[597451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:47 power sudo[597451]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:47 power sudo[597462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status trudovop'
Sep 13 14:42:47 power sudo[597462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:47 power sudo[597462]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:47 power sudo[597470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user trudovop test -e /home/trudovop/wordpress-backups
Sep 13 14:42:47 power sudo[597470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:47 power sudo[597470]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:47 power sudo[597481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status urbanexp'
Sep 13 14:42:47 power sudo[597481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:47 power sudo[597481]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:47 power sudo[597493]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user urbanexp test -e /home/urbanexp/wordpress-backups
Sep 13 14:42:47 power sudo[597493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:47 power sudo[597493]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:47 power sudo[597504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status vfxnestc'
Sep 13 14:42:47 power sudo[597504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:47 power sudo[597504]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:47 power sudo[597511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user vfxnestc test -e /home/vfxnestc/wordpress-backups
Sep 13 14:42:47 power sudo[597511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:47 power sudo[597511]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:47 power sudo[597522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status volkanco'
Sep 13 14:42:47 power sudo[597522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597522]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:48 power sudo[597528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user volkanco test -e /home/volkanco/wordpress-backups
Sep 13 14:42:48 power sudo[597528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597528]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:48 power sudo[597543]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status glammace'
Sep 13 14:42:48 power sudo[597543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597543]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:48 power sudo[597552]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user glammace test -e /home/glammace/wordpress-backups
Sep 13 14:42:48 power sudo[597552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597552]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:48 power sudo[597563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user wineberr test -e /home/wineberr/wordpress-backups
Sep 13 14:42:48 power sudo[597563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597563]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:48 power sudo[597574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status workbenc'
Sep 13 14:42:48 power sudo[597574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597574]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:48 power sudo[597579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user workbenc test -e /home/workbenc/wordpress-backups
Sep 13 14:42:48 power sudo[597579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597579]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:48 power sudo[597592]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 13 14:42:48 power sudo[597592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597592]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:48 power sudo[597600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/wordpress-backups
Sep 13 14:42:48 power sudo[597600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597600]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:48 power sudo[597611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 13 14:42:48 power sudo[597611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:48 power sudo[597611]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:49 power sudo[598956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json'
Sep 13 14:42:49 power sudo[598956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:49 power sudo[598956]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:49 power sudo[598961]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=5.9.96.240 --output=json'
Sep 13 14:42:49 power sudo[598961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:49 power sudo[598961]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:52 power sudo[598987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 14:42:52 power sudo[598987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:52 power sudo[598987]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:52 power sudo[598991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-73Dr1hsN89GE5gtb.~
Sep 13 14:42:52 power sudo[598991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:52 power sudo[598991]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:52 power sudo[598995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-73Dr1hsN89GE5gtb.~\''
Sep 13 14:42:52 power sudo[598995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:52 power sudo[598995]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:52 power sudo[599000]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-73Dr1hsN89GE5gtb.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 14:42:52 power sudo[599000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:52 power sudo[599000]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:52 power sudo[599004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 14:42:52 power sudo[599004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:52 power sudo[599004]: pam_unix(sudo:session): session closed for user root
Sep 13 14:42:53 power sudo[600055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 14:42:53 power sudo[600055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 14:42:53 power sudo[600055]: pam_unix(sudo:session): session closed for user root
Sep 13 14:45:01 power systemd[602686]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:45:01 power systemd[602688]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:50:01 power systemd[608192]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:50:01 power systemd[608199]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 14:55:02 power systemd[613022]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 14:55:02 power systemd[613023]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:00:01 power systemd[617855]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:00:01 power systemd[617858]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:00:01 power systemd[617860]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 15:00:01 power systemd[617859]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 15:00:01 power systemd[617862]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 15:04:01 power systemd[623031]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:04:42 power sshd[623372]: Connection closed by 206.168.34.125 port 35664 [preauth]
Sep 13 15:05:01 power systemd[624002]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:05:01 power systemd[624003]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:06:01 power systemd[624905]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 15:07:01 power systemd[625967]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 15:09:01 power systemd[627862]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:10:01 power systemd[628759]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:10:01 power systemd[628764]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:12:01 power systemd[631069]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 15:15:01 power systemd[633979]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:15:01 power systemd[633980]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:19:45 power sshd[638756]: error: kex_exchange_identification: Connection closed by remote host
Sep 13 15:19:45 power sshd[638756]: Connection closed by 185.247.137.134 port 60395
Sep 13 15:19:45 power sshd[638837]: Connection closed by 185.247.137.134 port 60781 [preauth]
Sep 13 15:20:01 power systemd[639170]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:20:01 power systemd[639171]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:25:01 power systemd[643740]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:25:01 power systemd[643741]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:30:01 power sshd[647944]: error: kex_protocol_error: type 20 seq 2 [preauth]
Sep 13 15:30:01 power sshd[647944]: error: kex_protocol_error: type 30 seq 3 [preauth]
Sep 13 15:30:01 power systemd[648067]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:30:01 power systemd[648066]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:30:01 power systemd[648068]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 15:30:01 power systemd[648070]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 15:30:01 power systemd[648072]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 15:30:02 power sshd[647944]: error: kex_protocol_error: type 20 seq 4 [preauth]
Sep 13 15:30:02 power sshd[647944]: error: kex_protocol_error: type 30 seq 5 [preauth]
Sep 13 15:30:04 power sshd[647944]: error: kex_protocol_error: type 20 seq 6 [preauth]
Sep 13 15:30:04 power sshd[647944]: error: kex_protocol_error: type 30 seq 7 [preauth]
Sep 13 15:30:27 power sshd[648878]: error: kex_exchange_identification: banner line contains invalid characters
Sep 13 15:30:27 power sshd[648878]: banner exchange: Connection from 216.180.246.118 port 40324: invalid format
Sep 13 15:31:07 power sshd[649457]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
Sep 13 15:31:07 power sshd[649457]: banner exchange: Connection from 216.180.246.118 port 59406: invalid format
Sep 13 15:35:01 power systemd[653482]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:35:01 power systemd[653483]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:36:01 power systemd[654687]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 15:37:01 power systemd[655528]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 15:39:01 power systemd[657624]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:40:01 power systemd[658796]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:40:01 power systemd[658797]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:42:01 power systemd[660514]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 15:42:12 power sudo[660849]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 15:42:12 power systemd[660854]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:42:13 power sudo[660849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660849]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660877]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 15:42:13 power sudo[660877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660877]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 15:42:13 power sudo[660881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660881]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=G396s5CKLv'
Sep 13 15:42:13 power sudo[660885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660885]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 15:42:13 power sudo[660891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660891]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 15:42:13 power sudo[660895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660895]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 15:42:13 power sudo[660899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660899]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 15:42:13 power sudo[660903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660903]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660910]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 15:42:13 power sudo[660910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660910]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 15:42:13 power sudo[660914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660914]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 15:42:13 power sudo[660919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660919]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 15:42:13 power sudo[660923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660923]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 15:42:13 power sudo[660927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:13 power sudo[660927]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:13 power sudo[660931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 15:42:13 power sudo[660931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:14 power sudo[660931]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:15 power sudo[660963]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 15:42:15 power sudo[660963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:15 power sudo[660963]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:15 power sudo[660968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 15:42:15 power sudo[660968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:15 power sudo[660968]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:15 power sudo[660974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=golakkom user-2=naksorgm user-3=eliksirz user-4=trigemat user-5=electrol user-6=eurofarm user-7=solarinv user-8=wineberr user-9=viplastc user-10=workbenc user-11=ismassag user-12=mbmehani user-13=biplmk user-14=kaoilmk user-15=bbbustou user-16=pelagini user-17=recorgmk user-18=taktcomm user-19=jaramk user-20=solointe user-21=atspedco user-22=sssoluti user-23=progress user-24=cleanerm user-25=animatem user-26=eaptekam user-27=dimpalne user-28=fxxcom user-29=peshkai1 user-30=madzomk user-31=aptekafa user-32=evacommk user-33=gradbai1 user-34=izzomk user-35=jpkomuna user-36=tehnodro user-37=makdrone user-38=evberasm user-39=bonitavi user-40=euronic3 user-41=cupidpro user-42=vegemk1 user-43=conserva user-44=folklore user-45=bauerin2 user-46=tcieuroc user-47=onlinesh user-48=nationa2 user-49=solemor1
Sep 13 15:42:15 power sudo[660974]: wp-toolkit : (command continued) user-50=mapaspla user-51=ambitiou user-52=fiziosmk user-53=versusmk user-54=fffhpcwr user-55=starluxm user-56=radekrat user-57=modernar user-58=inkigaic user-59=darkogor user-60=dslmk user-61=fnjorgmk user-62=prizmapl user-63=bozinovm user-64=vacuacti user-65=innofabl user-66=premiumi user-67=taneccom user-68=tehnologija user-69=aquatech user-70=gorsajmk user-71=v5srybi9dcdx user-72=supremel user-73=zdmgpsor user-74=samasped user-75=chemhemc user-76=nutrivim user-77=cosmatob user-78=euromaki user-79=zapovim1 user-80=elektrot user-81=infopor1 user-82=pravekom user-83=vtranseu user-84=imdskopj user-85=albuname user-86=glammace user-87=nikimare user-88=aptekazd user-89=forzares user-90=hausmark user-91=nikolov1 user-92=mediatag user-93=intelek1 user-94=nucktra1 user-95=lblawcom user-96=matratze user-97=euronic2 user-98=carrent1 user-99=bogdanos user-100=mediasol user-101=apgrupmk user-102=kardiome user-103=kouzonco
Sep 13 15:42:15 power sudo[660974]: wp-toolkit : (command continued) user-104=premiuma user-105=cetplatf user-106=dalmacom user-107=nasaidni user-108=karpospo user-109=ideaplus user-110=arturaco user-111=screenme user-112=daris user-113=butelmk user-114=premiums user-115=inotekso user-116=jpparkin user-117=drleomk user-118=janiboja user-119=itradeco user-120=vezilkac user-121=cabinetm user-122=stojano1 user-123=bovincom user-124=stokovna user-125=sparkupm user-126=klimimk user-127=palenzok user-128=zvskopje user-129=busymard user-130=zampmk user-131=custome1 user-132=sedcmk user-133=groskome user-134=ivanjord user-135=polyeste user-136=vfxnestc user-137=bizporta user-138=maleshne user-139=datelcom user-140=spdcompu user-141=detskagr user-142=mspmk user-143=infobadi user-144=wikicamp user-145=urbanexp user-146=skyapart user-147=makoasmk user-148=bianasho user-149=rasmorgm user-150=barececo user-151=simbiome user-152=delcevca user-153=getaldus user-154=workandt user-155=dhamachi
Sep 13 15:42:15 power sudo[660974]: wp-toolkit : (command continued) user-156=volkanco user-157=goartsym user-158=mfashion user-159=mpbmk user-160=agrosind user-161=datalink user-162=kujnamon user-163=univerz1 user-164=velmk user-165=gogovan1 user-166=levantmk user-167=ekostoc1 user-168=oncolog1 user-169=nefrolog user-170=hidrommk user-171=frizered user-172=caramk user-173=evolvepl user-174=avtogumi user-175=socioloz user-176=pelagoni user-177=enaspotc user-178=viewinn user-179=trudovop user-180=vmro user-181=stojnevi user-182=oouslave user-183=raremk user-184=bauerbg user-185=uhostmk5 user-186=anitermc user-187=youthgua user-188=cajsproc user-189=hotammk user-190=pecakome user-191=stravelm user-192=robustco user-193=wondersp user-194=holiyayt user-195=rastiraz user-196=tradeyou user-197=gjorgeiv user-198=dnevnoin user-199=goodnews user-200=mstmmk user-201=gocruise user-202=tealmk user-203=dadarmk user-204=proverim user-205=kolened1 user-206=centarba user-207=nlpmkorg
Sep 13 15:42:15 power sudo[660974]: wp-toolkit : (command continued) user-208=nolimits user-209=seloviro user-210=dikimk12 user-211=herbalpl user-212=enochmk user-213=sprintst user-214=edomcomm user-215=berbermk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 15:42:15 power sudo[660974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:16 power sudo[660974]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:16 power sudo[660987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 15:42:16 power sudo[660987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:16 power sudo[660987]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:16 power sudo[660992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-furcahwAUayEsHkW.~
Sep 13 15:42:16 power sudo[660992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:16 power sudo[660992]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:16 power sudo[660996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-furcahwAUayEsHkW.~\''
Sep 13 15:42:16 power sudo[660996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:16 power sudo[660996]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:16 power sudo[661001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-furcahwAUayEsHkW.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 15:42:16 power sudo[661001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:16 power sudo[661001]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:16 power sudo[661005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 15:42:16 power sudo[661005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:16 power sudo[661005]: pam_unix(sudo:session): session closed for user root
Sep 13 15:42:17 power sudo[661680]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 15:42:17 power sudo[661680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 15:42:17 power sudo[661680]: pam_unix(sudo:session): session closed for user root
Sep 13 15:45:02 power systemd[664686]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:45:02 power systemd[664688]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:50:01 power systemd[670940]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:50:01 power systemd[670942]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 15:55:01 power systemd[675865]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 15:55:01 power systemd[675867]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:00:01 power systemd[680821]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:00:02 power systemd[680822]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 16:00:02 power systemd[680825]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 16:00:02 power systemd[680818]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:00:02 power systemd[680827]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 16:04:01 power systemd[686386]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:05:01 power systemd[687341]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:05:01 power systemd[687342]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:06:01 power systemd[688290]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 16:07:01 power systemd[689083]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 16:09:01 power systemd[691285]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:10:01 power systemd[692218]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:10:01 power systemd[692219]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:12:01 power systemd[693976]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 16:15:01 power systemd[697101]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:15:01 power systemd[697102]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:20:01 power systemd[702242]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:20:01 power systemd[702244]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:21:22 power sudo[703681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 16:21:22 power systemd[703686]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:21:22 power sudo[703681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:21:22 power sudo[703681]: pam_unix(sudo:session): session closed for user root
Sep 13 16:21:22 power sudo[703705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 13 16:21:22 power sudo[703705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:21:22 power sudo[703705]: pam_unix(sudo:session): session closed for user root
Sep 13 16:21:22 power sudo[703715]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=berbermk Mime list_redirects --output=json'
Sep 13 16:21:22 power sudo[703715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:21:22 power sudo[703715]: pam_unix(sudo:session): session closed for user root
Sep 13 16:25:01 power systemd[707557]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:25:01 power systemd[707558]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:30:01 power systemd[711823]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:30:01 power systemd[711824]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:30:01 power systemd[711825]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 16:30:01 power systemd[711827]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 16:30:01 power systemd[711829]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 16:31:29 power sshd[713266]: Connection closed by 167.94.138.35 port 44272 [preauth]
Sep 13 16:35:01 power systemd[717023]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:35:01 power systemd[717024]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:36:01 power systemd[717965]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 16:37:01 power systemd[718916]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 16:39:01 power systemd[720809]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:40:01 power systemd[721774]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:40:01 power systemd[721777]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:42:02 power systemd[723765]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 16:42:12 power sudo[723952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 16:42:12 power systemd[723957]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:42:13 power sudo[723952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[723952]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[723974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 16:42:13 power sudo[723974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[723974]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[723980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 16:42:13 power sudo[723980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[723980]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[723985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=xQx6wD6eDi'
Sep 13 16:42:13 power sudo[723985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[723985]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[723990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 16:42:13 power sudo[723990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[723990]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[723994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 16:42:13 power sudo[723994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[723994]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[723998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 16:42:13 power sudo[723998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[723998]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[724003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 16:42:13 power sudo[724003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[724003]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[724018]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 16:42:13 power sudo[724018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[724018]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[724023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 16:42:13 power sudo[724023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[724023]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[724027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 16:42:13 power sudo[724027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[724027]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[724031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 16:42:13 power sudo[724031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[724031]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[724036]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 16:42:13 power sudo[724036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:13 power sudo[724036]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:13 power sudo[724041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 16:42:13 power sudo[724041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:14 power sudo[724041]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:15 power sudo[724087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 16:42:15 power sudo[724087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:15 power sudo[724087]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:15 power sudo[724098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 16:42:15 power sudo[724098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:15 power sudo[724098]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:15 power sudo[724104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=gjorgeiv user-2=tradeyou user-3=dnevnoin user-4=robustco user-5=stravelm user-6=wondersp user-7=pecakome user-8=rastiraz user-9=holiyayt user-10=tealmk user-11=proverim user-12=dadarmk user-13=mstmmk user-14=goodnews user-15=gocruise user-16=seloviro user-17=kolened1 user-18=centarba user-19=nlpmkorg user-20=nolimits user-21=berbermk user-22=edomcomm user-23=herbalpl user-24=enochmk user-25=sprintst user-26=dikimk12 user-27=hidrommk user-28=frizered user-29=caramk user-30=levantmk user-31=ekostoc1 user-32=oncolog1 user-33=nefrolog user-34=socioloz user-35=avtogumi user-36=pelagoni user-37=evolvepl user-38=stojnevi user-39=bauerbg user-40=uhostmk5 user-41=oouslave user-42=raremk user-43=trudovop user-44=viewinn user-45=vmro user-46=enaspotc user-47=hotammk user-48=cajsproc user-49=anitermc user-50=youthgua
Sep 13 16:42:15 power sudo[724104]: wp-toolkit : (command continued) user-51=bizporta user-52=maleshne user-53=datelcom user-54=ivanjord user-55=groskome user-56=sedcmk user-57=polyeste user-58=vfxnestc user-59=urbanexp user-60=wikicamp user-61=detskagr user-62=spdcompu user-63=mspmk user-64=infobadi user-65=workandt user-66=barececo user-67=delcevca user-68=simbiome user-69=getaldus user-70=mfashion user-71=dhamachi user-72=goartsym user-73=volkanco user-74=skyapart user-75=bianasho user-76=makoasmk user-77=rasmorgm user-78=datalink user-79=univerz1 user-80=kujnamon user-81=velmk user-82=gogovan1 user-83=mpbmk user-84=agrosind user-85=premiuma user-86=kouzonco user-87=dalmacom user-88=cetplatf user-89=drleomk user-90=inotekso user-91=jpparkin user-92=screenme user-93=arturaco user-94=nasaidni user-95=karpospo user-96=ideaplus user-97=butelmk user-98=daris user-99=premiums user-100=stojano1 user-101=bovincom user-102=itradeco user-103=janiboja user-104=cabinetm user-105=vezilkac
Sep 13 16:42:15 power sudo[724104]: wp-toolkit : (command continued) user-106=zampmk user-107=busymard user-108=zvskopje user-109=palenzok user-110=custome1 user-111=stokovna user-112=sparkupm user-113=klimimk user-114=euromaki user-115=cosmatob user-116=elektrot user-117=zapovim1 user-118=chemhemc user-119=samasped user-120=nutrivim user-121=imdskopj user-122=albuname user-123=glammace user-124=infopor1 user-125=vtranseu user-126=pravekom user-127=mediatag user-128=intelek1 user-129=lblawcom user-130=nucktra1 user-131=forzares user-132=nikimare user-133=aptekazd user-134=hausmark user-135=nikolov1 user-136=apgrupmk user-137=carrent1 user-138=bogdanos user-139=mediasol user-140=kardiome user-141=matratze user-142=euronic2 user-143=nationa2 user-144=onlinesh user-145=mapaspla user-146=solemor1 user-147=tcieuroc user-148=fffhpcwr user-149=starluxm user-150=radekrat user-151=fiziosmk user-152=ambitiou user-153=versusmk user-154=vacuacti user-155=premiumi user-156=innofabl
Sep 13 16:42:15 power sudo[724104]: wp-toolkit : (command continued) user-157=darkogor user-158=fnjorgmk user-159=prizmapl user-160=dslmk user-161=bozinovm user-162=tehnologija user-163=taneccom user-164=modernar user-165=inkigaic user-166=zdmgpsor user-167=aquatech user-168=gorsajmk user-169=supremel user-170=v5srybi9dcdx user-171=aptekafa user-172=madzomk user-173=evacommk user-174=gradbai1 user-175=dimpalne user-176=eaptekam user-177=fxxcom user-178=peshkai1 user-179=tehnodro user-180=makdrone user-181=jpkomuna user-182=izzomk user-183=cupidpro user-184=vegemk1 user-185=euronic3 user-186=conserva user-187=evberasm user-188=bonitavi user-189=folklore user-190=bauerin2 user-191=eurofarm user-192=solarinv user-193=golakkom user-194=electrol user-195=eliksirz user-196=naksorgm user-197=trigemat user-198=ismassag user-199=workbenc user-200=mbmehani user-201=viplastc user-202=wineberr user-203=pelagini user-204=bbbustou user-205=kaoilmk user-206=biplmk user-207=atspedco
Sep 13 16:42:15 power sudo[724104]: wp-toolkit : (command continued) user-208=sssoluti user-209=cleanerm user-210=animatem user-211=progress user-212=recorgmk user-213=taktcomm user-214=solointe user-215=jaramk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 16:42:15 power sudo[724104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:16 power sudo[724104]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:16 power sudo[724113]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 16:42:16 power sudo[724113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:16 power sudo[724113]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:16 power sudo[724117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4WEmc1JfmzGvBS7g.~
Sep 13 16:42:16 power sudo[724117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:16 power sudo[724117]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:16 power sudo[724121]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4WEmc1JfmzGvBS7g.~\''
Sep 13 16:42:16 power sudo[724121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:16 power sudo[724121]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:16 power sudo[724126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4WEmc1JfmzGvBS7g.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 16:42:16 power sudo[724126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:16 power sudo[724126]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:16 power sudo[724130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 16:42:16 power sudo[724130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:16 power sudo[724130]: pam_unix(sudo:session): session closed for user root
Sep 13 16:42:17 power sudo[725053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 16:42:17 power sudo[725053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 16:42:17 power sudo[725053]: pam_unix(sudo:session): session closed for user root
Sep 13 16:45:01 power systemd[728392]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:45:01 power systemd[728393]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:50:01 power systemd[734351]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:50:01 power systemd[734353]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 16:55:01 power systemd[739357]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 16:55:01 power systemd[739358]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:00:01 power systemd[744285]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:00:01 power systemd[744286]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:00:01 power systemd[744287]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 17:00:01 power systemd[744289]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 17:00:01 power systemd[744291]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 17:04:01 power systemd[749100]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:05:01 power systemd[750163]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:05:01 power systemd[750164]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:06:01 power systemd[751032]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 17:07:01 power systemd[751837]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 17:09:01 power systemd[753685]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:10:01 power systemd[754748]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:10:01 power systemd[754749]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:12:01 power systemd[757227]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 17:15:01 power systemd[760434]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:15:01 power systemd[760435]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:20:01 power systemd[765808]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:20:01 power systemd[765809]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:25:01 power systemd[770816]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:25:01 power systemd[770817]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:30:01 power systemd[775210]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:30:01 power systemd[775211]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:30:01 power systemd[775212]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 17:30:01 power systemd[775214]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 17:30:01 power systemd[775217]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 17:33:16 power sshd[778390]: Connection closed by 66.132.153.112 port 33264 [preauth]
Sep 13 17:35:01 power systemd[780108]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:35:01 power systemd[780109]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:36:01 power systemd[781203]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 17:37:01 power systemd[782316]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 17:39:01 power systemd[784111]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:40:01 power systemd[784996]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:40:01 power systemd[784998]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:42:01 power systemd[786677]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 17:42:12 power sudo[786856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 17:42:13 power systemd[786862]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:42:13 power sudo[786856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786856]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786881]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 17:42:13 power sudo[786881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786881]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786885]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 17:42:13 power sudo[786885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786885]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=OuTMRlpJqH'
Sep 13 17:42:13 power sudo[786889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786889]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 17:42:13 power sudo[786895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786895]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 17:42:13 power sudo[786899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786899]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 17:42:13 power sudo[786903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786903]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 17:42:13 power sudo[786907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786907]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786917]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 17:42:13 power sudo[786917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786917]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 17:42:13 power sudo[786922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786922]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786926]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 17:42:13 power sudo[786926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786926]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786930]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 17:42:13 power sudo[786930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786930]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786935]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 17:42:13 power sudo[786935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:13 power sudo[786935]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:13 power sudo[786939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 17:42:13 power sudo[786939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:14 power sudo[786939]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:17 power sudo[787023]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 17:42:17 power sudo[787023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:17 power sudo[787023]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:18 power sudo[787028]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 17:42:18 power sudo[787028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:18 power sudo[787028]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:18 power sudo[787037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=izzomk user-2=jpkomuna user-3=tehnodro user-4=makdrone user-5=eaptekam user-6=dimpalne user-7=peshkai1 user-8=fxxcom user-9=evacommk user-10=madzomk user-11=aptekafa user-12=gradbai1 user-13=folklore user-14=bauerin2 user-15=bonitavi user-16=evberasm user-17=euronic3 user-18=vegemk1 user-19=cupidpro user-20=conserva user-21=wineberr user-22=viplastc user-23=workbenc user-24=ismassag user-25=mbmehani user-26=golakkom user-27=trigemat user-28=naksorgm user-29=eliksirz user-30=electrol user-31=eurofarm user-32=solarinv user-33=taktcomm user-34=recorgmk user-35=jaramk user-36=solointe user-37=atspedco user-38=sssoluti user-39=progress user-40=animatem user-41=cleanerm user-42=kaoilmk user-43=biplmk user-44=bbbustou user-45=pelagini user-46=infopor1 user-47=vtranseu user-48=pravekom user-49=imdskopj
Sep 13 17:42:18 power sudo[787037]: wp-toolkit : (command continued) user-50=glammace user-51=albuname user-52=chemhemc user-53=samasped user-54=nutrivim user-55=cosmatob user-56=euromaki user-57=zapovim1 user-58=elektrot user-59=euronic2 user-60=matratze user-61=mediasol user-62=bogdanos user-63=carrent1 user-64=apgrupmk user-65=kardiome user-66=aptekazd user-67=nikimare user-68=forzares user-69=nikolov1 user-70=hausmark user-71=intelek1 user-72=mediatag user-73=nucktra1 user-74=lblawcom user-75=ambitiou user-76=fiziosmk user-77=versusmk user-78=fffhpcwr user-79=radekrat user-80=starluxm user-81=tcieuroc user-82=onlinesh user-83=nationa2 user-84=solemor1 user-85=mapaspla user-86=gorsajmk user-87=aquatech user-88=v5srybi9dcdx user-89=supremel user-90=zdmgpsor user-91=modernar user-92=inkigaic user-93=bozinovm user-94=fnjorgmk user-95=darkogor user-96=dslmk user-97=prizmapl user-98=innofabl user-99=premiumi user-100=vacuacti user-101=taneccom user-102=tehnologija user-103=spdcompu
Sep 13 17:42:18 power sudo[787037]: wp-toolkit : (command continued) user-104=detskagr user-105=mspmk user-106=infobadi user-107=wikicamp user-108=urbanexp user-109=sedcmk user-110=ivanjord user-111=groskome user-112=vfxnestc user-113=polyeste user-114=bizporta user-115=datelcom user-116=maleshne user-117=agrosind user-118=mpbmk user-119=datalink user-120=gogovan1 user-121=velmk user-122=kujnamon user-123=univerz1 user-124=bianasho user-125=makoasmk user-126=skyapart user-127=rasmorgm user-128=getaldus user-129=delcevca user-130=simbiome user-131=barececo user-132=workandt user-133=goartsym user-134=volkanco user-135=dhamachi user-136=mfashion user-137=ideaplus user-138=nasaidni user-139=karpospo user-140=screenme user-141=arturaco user-142=premiums user-143=butelmk user-144=daris user-145=jpparkin user-146=inotekso user-147=drleomk user-148=kouzonco user-149=premiuma user-150=cetplatf user-151=dalmacom user-152=sparkupm user-153=stokovna user-154=klimimk user-155=palenzok
Sep 13 17:42:18 power sudo[787037]: wp-toolkit : (command continued) user-156=busymard user-157=zvskopje user-158=zampmk user-159=custome1 user-160=janiboja user-161=itradeco user-162=vezilkac user-163=cabinetm user-164=stojano1 user-165=bovincom user-166=goodnews user-167=mstmmk user-168=gocruise user-169=tealmk user-170=dadarmk user-171=proverim user-172=pecakome user-173=wondersp user-174=stravelm user-175=robustco user-176=holiyayt user-177=rastiraz user-178=tradeyou user-179=gjorgeiv user-180=dnevnoin user-181=dikimk12 user-182=sprintst user-183=enochmk user-184=herbalpl user-185=edomcomm user-186=berbermk user-187=nlpmkorg user-188=centarba user-189=kolened1 user-190=nolimits user-191=seloviro user-192=evolvepl user-193=socioloz user-194=avtogumi user-195=pelagoni user-196=nefrolog user-197=oncolog1 user-198=ekostoc1 user-199=levantmk user-200=frizered user-201=hidrommk user-202=caramk user-203=youthgua user-204=anitermc user-205=cajsproc user-206=hotammk user-207=enaspotc
Sep 13 17:42:18 power sudo[787037]: wp-toolkit : (command continued) user-208=vmro user-209=trudovop user-210=viewinn user-211=stojnevi user-212=raremk user-213=oouslave user-214=uhostmk5 user-215=bauerbg feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 17:42:18 power sudo[787037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:18 power sudo[787037]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:18 power sudo[787044]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 17:42:18 power sudo[787044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:18 power sudo[787044]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:18 power sudo[787048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-34HkR2NCpwL9edpq.~
Sep 13 17:42:18 power sudo[787048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:18 power sudo[787048]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:18 power sudo[787052]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-34HkR2NCpwL9edpq.~\''
Sep 13 17:42:18 power sudo[787052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:18 power sudo[787052]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:18 power sudo[787057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-34HkR2NCpwL9edpq.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 17:42:18 power sudo[787057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:18 power sudo[787057]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:18 power sudo[787061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 17:42:18 power sudo[787061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:18 power sudo[787061]: pam_unix(sudo:session): session closed for user root
Sep 13 17:42:18 power sudo[787232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 17:42:18 power sudo[787232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 17:42:18 power sudo[787232]: pam_unix(sudo:session): session closed for user root
Sep 13 17:45:01 power systemd[790323]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:45:01 power systemd[790324]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:50:01 power systemd[795827]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:50:01 power systemd[795829]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 17:55:01 power systemd[800799]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 17:55:01 power systemd[800800]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 18:00:02 power systemd[805749]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:00:02 power systemd[805752]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 18:00:02 power systemd[805754]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 18:00:02 power systemd[805756]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 18:00:02 power systemd[805757]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 18:04:01 power systemd[810079]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:05:01 power systemd[811004]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:05:01 power systemd[811005]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 18:06:01 power systemd[811935]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 18:07:01 power systemd[812874]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 18:09:01 power systemd[814878]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:10:01 power systemd[815851]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:10:01 power systemd[815852]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 18:12:01 power systemd[817924]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 18:15:01 power systemd[820932]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:15:01 power systemd[820933]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 18:20:01 power systemd[826407]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:20:01 power systemd[826408]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 18:25:01 power systemd[831139]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:25:01 power systemd[831140]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 18:30:02 power systemd[835856]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:30:02 power systemd[835858]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 18:30:02 power systemd[835859]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 18:30:02 power systemd[835861]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 18:30:02 power systemd[835863]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 18:35:01 power systemd[840457]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 18:35:01 power systemd[840458]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 18:36:01 power systemd[841361]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 18:37:01 power systemd[842149]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 19:20:43 power polkitd[2173]: Loading rules from directory /etc/polkit-1/rules.d
Sep 13 19:20:43 power polkitd[2173]: Loading rules from directory /usr/share/polkit-1/rules.d
Sep 13 19:20:43 power polkitd[2173]: Finished loading, compiling and executing 5 rules
Sep 13 19:20:43 power polkitd[2173]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Sep 13 19:20:55 power sshd[4745]: Server listening on 0.0.0.0 port 2200.
Sep 13 19:20:55 power sshd[4745]: Server listening on :: port 2200.
Sep 13 19:25:01 power systemd[12498]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 19:25:01 power systemd[12499]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 19:25:37 power unix_chkpwd[13048]: password check failed for user (root)
Sep 13 19:25:37 power sshd[12862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.86.30.76  user=root
Sep 13 19:25:39 power sshd[12862]: Failed password for root from 95.86.30.76 port 55950 ssh2
Sep 13 19:25:48 power sshd[12862]: Accepted password for root from 95.86.30.76 port 55950 ssh2
Sep 13 19:25:48 power systemd[13227]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 19:25:49 power sshd[12862]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 19:30:01 power systemd[17446]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 19:30:01 power systemd[17447]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 19:30:01 power systemd[17448]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 19:30:01 power systemd[17450]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 19:30:13 power sudo[17652]:    root : TTY=pts/0 ; PWD=/var/log ; USER=root ; COMMAND=/bin/bash -lc '#012set -u#012OUT="/root/freeze_diagnose_$(hostname)_$(date +%F_%H%M%S)"#012mkdir -p "$OUT"#012#012# Reboot timing (helps you correlate)#012{ echo "Reboots (newest first):"; last -x | grep -E "^reboot|^shutdown" | head -n 5; } > "$OUT/REBOOT_HISTORY.txt" || true#012#012# Journal from the PREVIOUS boot (the one that froze)#012journalctl -b -1 --no-pager -o short-iso > "$OUT/journal_prev_boot.log" 2>/dev/null || true#012journalctl -k -b -1 --no-pager -o short-iso > "$OUT/kernel_prev_boot.log" 2>/dev/null || true#012# High-priority events from previous boot#012journalctl -b -1 -p err..alert --no-pager -o short-iso > "$OUT/journal_prev_boot_errors.log" 2>/dev/null || true#012journalctl -k -b -1 -p warning..alert --no-pager -o short-iso > "$OUT/kernel_prev_boot_warn_errors.log" 2>/dev/null || true#012#012# Quick suspicion filter (OOM, hangs, I/O, panics, FS, segfaults)#012grep -Ei
Sep 13 19:30:13 power sudo[17652]:    root : (command continued) "oom-killer|out of memory|hung task|blocked for more than|call trace|BUG:|panic|I/O error|failed|EXT4|xfs|btrfs|nvme|sda|mdadm|segfault|no space left|resetting link|watchdog" \\#012  "$OUT/journal_prev_boot.log" > "$OUT/journal_prev_boot_suspect.log" 2>/dev/null || true#012#012# System logs (RHEL/CloudLinux style)#012cp -a /var/log/messages "$OUT/messages" 2>/dev/null || true#012cp -a /var/log/secure "$OUT/secure" 2>/dev/null || true#012#012# cPanel & services#012cp -a /usr/local/cpanel/logs/error_log "$OUT/cpanel_error_log" 2>/dev/null || true#012cp -a /usr/local/cpanel/logs/login_log "$OUT/cpanel_login_log" 2>/dev/null || true#012cp -a /usr/local/cpanel/logs/access_log "$OUT/cpanel_access_log" 2>/dev/null || true#012#012# Apache (EA/WHM on CL9 usually /etc/httpd or /usr/local/apache)#012{ cp -a /usr/local/apache/logs/error_log "$OUT/apache_error_log" 2>/dev/null || \\#012  cp -a /etc/httpd/logs/error_log
Sep 13 19:30:13 power sudo[17652]:    root : (command continued) "$OUT/apache_error_log" 2>/dev/null || true; }#012#012# PHP-FPM (if used by EA4)#012cp -a /var/log/php-fpm/error.log "$OUT/php-fpm_error.log" 2>/dev/null || true#012#012# MySQL/MariaDB#012for f in /var/lib/mysql/*.err /var/log/mysqld.log /var/log/mysql/mysqld.log /var/log/mariadb/mariadb.log; do#012  [ -r "$f" ] && cp -a "$f" "$OUT/$(basename "$f")" || true#012done#012#012# Exim (mail)#012for f in /var/log/exim_mainlog /var/log/exim_rejectlog /var/log/exim_paniclog; do#012  [ -r "$f" ] && tail -n 2000 "$f" > "$OUT/$(basename "$f").tail" || true#012done#012#012# Resource history (requires sysstat/sar if installed)#012if command -v sar >/dev/null 2>&1; then#012  for f in /var/log/sa/sa*; do#012    [ -r "$f" ] && sar -A -f "$f" > "$OUT/$(basename "$f").sar" 2>/dev/null || true#012  done#012fi#012#012# Disk health (optional; only if smartctl exists)#012if command -v smartctl >/dev/null 2>&1; then#012  for d in /dev/sd?
Sep 13 19:30:13 power sudo[17652]:    root : (command continued) /dev/nvme?n1; do#012    [ -b "$d" ] && { smartctl -H "$d" > "$OUT/smart_$(basename "$d").txt" 2>/dev/null || true; }#012  done#012fi#012#012# Disk state & mounts (to catch space/FS issues)#012df -hT > "$OUT/df_hT.txt"#012mount | sort > "$OUT/mounts.txt"#012#012# Also keep a short recent window from current boot for context#012journalctl --since "-2days" --no-pager -o short-iso > "$OUT/journal_last2days.log" 2>/dev/null || true#012#012# Bundle#012tar -C "$(dirname "$OUT")" -czf "$OUT.tar.gz" "$(basename "$OUT")" && echo "Collected logs in $OUT.tar.gz"#012'
Sep 13 19:30:13 power sudo[17652]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 19:30:21 power sudo[17652]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:24 power sudo[21876]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:34:24 power sudo[21876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:24 power sudo[21876]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:24 power sudo[21882]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:34:24 power sudo[21882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:25 power sudo[21882]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:25 power sudo[21887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:34:25 power sudo[21887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:25 power sudo[21887]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:25 power sudo[21893]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:34:25 power sudo[21893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:25 power sudo[21893]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:25 power sudo[21900]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=dnevnoin user-2=tradeyou user-3=gjorgeiv user-4=holiyayt user-5=rastiraz user-6=pecakome user-7=stravelm user-8=robustco user-9=wondersp user-10=dadarmk user-11=proverim user-12=tealmk user-13=gocruise user-14=goodnews user-15=mstmmk user-16=seloviro user-17=nolimits user-18=kolened1 user-19=centarba user-20=nlpmkorg user-21=edomcomm user-22=berbermk user-23=dikimk12 user-24=herbalpl user-25=enochmk user-26=sprintst user-27=caramk user-28=hidrommk user-29=frizered user-30=ekostoc1 user-31=oncolog1 user-32=levantmk user-33=nefrolog user-34=pelagoni user-35=socioloz user-36=avtogumi user-37=evolvepl user-38=oouslave user-39=raremk user-40=bauerbg user-41=uhostmk5 user-42=stojnevi user-43=enaspotc user-44=viewinn user-45=trudovop user-46=vmro user-47=cajsproc user-48=hotammk user-49=anitermc user-50=youthgua
Sep 13 19:34:25 power sudo[21900]: wp-toolkit : (command continued) user-51=maleshne user-52=datelcom user-53=bizporta user-54=polyeste user-55=vfxnestc user-56=sedcmk user-57=groskome user-58=ivanjord user-59=wikicamp user-60=urbanexp user-61=infobadi user-62=mspmk user-63=spdcompu user-64=detskagr user-65=dhamachi user-66=volkanco user-67=goartsym user-68=mfashion user-69=barececo user-70=getaldus user-71=delcevca user-72=simbiome user-73=workandt user-74=rasmorgm user-75=skyapart user-76=makoasmk user-77=bianasho user-78=kujnamon user-79=univerz1 user-80=velmk user-81=gogovan1 user-82=datalink user-83=mpbmk user-84=agrosind user-85=cetplatf user-86=dalmacom user-87=kouzonco user-88=premiuma user-89=inotekso user-90=jpparkin user-91=drleomk user-92=daris user-93=butelmk user-94=premiums user-95=nasaidni user-96=karpospo user-97=ideaplus user-98=arturaco user-99=screenme user-100=bovincom user-101=stojano1 user-102=vezilkac user-103=cabinetm user-104=janiboja user-105=itradeco
Sep 13 19:34:25 power sudo[21900]: wp-toolkit : (command continued) user-106=custome1 user-107=palenzok user-108=busymard user-109=zvskopje user-110=zampmk user-111=klimimk user-112=stokovna user-113=sparkupm user-114=elektrot user-115=zapovim1 user-116=cosmatob user-117=euromaki user-118=nutrivim user-119=chemhemc user-120=samasped user-121=albuname user-122=glammace user-123=imdskopj user-124=pravekom user-125=vtranseu user-126=infopor1 user-127=nucktra1 user-128=lblawcom user-129=mediatag user-130=intelek1 user-131=nikolov1 user-132=hausmark user-133=nikimare user-134=aptekazd user-135=forzares user-136=kardiome user-137=carrent1 user-138=bogdanos user-139=mediasol user-140=apgrupmk user-141=matratze user-142=euronic2 user-143=solemor1 user-144=mapaspla user-145=onlinesh user-146=nationa2 user-147=tcieuroc user-148=starluxm user-149=radekrat user-150=fffhpcwr user-151=versusmk user-152=ambitiou user-153=fiziosmk user-154=taneccom user-155=tehnologija user-156=darkogor
Sep 13 19:34:25 power sudo[21900]: wp-toolkit : (command continued) user-157=fnjorgmk user-158=dslmk user-159=prizmapl user-160=bozinovm user-161=vacuacti user-162=premiumi user-163=innofabl user-164=inkigaic user-165=modernar user-166=zdmgpsor user-167=v5srybi9dcdx user-168=supremel user-169=aquatech user-170=gorsajmk user-171=gradbai1 user-172=aptekafa user-173=madzomk user-174=evacommk user-175=fxxcom user-176=peshkai1 user-177=eaptekam user-178=dimpalne user-179=makdrone user-180=tehnodro user-181=izzomk user-182=jpkomuna user-183=conserva user-184=euronic3 user-185=cupidpro user-186=vegemk1 user-187=evberasm user-188=bonitavi user-189=bauerin2 user-190=folklore user-191=solarinv user-192=eurofarm user-193=eliksirz user-194=naksorgm user-195=trigemat user-196=electrol user-197=golakkom user-198=mbmehani user-199=workbenc user-200=ismassag user-201=wineberr user-202=viplastc user-203=pelagini user-204=biplmk user-205=kaoilmk user-206=bbbustou user-207=progress
Sep 13 19:34:25 power sudo[21900]: wp-toolkit : (command continued) user-208=cleanerm user-209=animatem user-210=sssoluti user-211=atspedco user-212=jaramk user-213=solointe user-214=taktcomm user-215=recorgmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:34:25 power sudo[21900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:25 power sudo[21900]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:26 power sudo[21931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:34:26 power sudo[21931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:26 power sudo[21931]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:26 power sudo[21936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:34:26 power sudo[21936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:26 power sudo[21936]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:26 power sudo[21941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:34:26 power sudo[21941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:26 power sudo[21941]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:26 power sudo[21946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=izzomk user-2=jpkomuna user-3=tehnodro user-4=makdrone user-5=eaptekam user-6=dimpalne user-7=peshkai1 user-8=fxxcom user-9=evacommk user-10=madzomk user-11=aptekafa user-12=gradbai1 user-13=folklore user-14=bauerin2 user-15=bonitavi user-16=evberasm user-17=euronic3 user-18=vegemk1 user-19=cupidpro user-20=conserva user-21=wineberr user-22=viplastc user-23=workbenc user-24=ismassag user-25=mbmehani user-26=golakkom user-27=trigemat user-28=naksorgm user-29=eliksirz user-30=electrol user-31=eurofarm user-32=solarinv user-33=taktcomm user-34=recorgmk user-35=jaramk user-36=solointe user-37=sssoluti user-38=atspedco user-39=progress user-40=animatem user-41=cleanerm user-42=kaoilmk user-43=biplmk user-44=bbbustou user-45=pelagini user-46=infopor1 user-47=vtranseu user-48=pravekom user-49=imdskopj
Sep 13 19:34:26 power sudo[21946]: wp-toolkit : (command continued) user-50=glammace user-51=albuname user-52=samasped user-53=chemhemc user-54=nutrivim user-55=cosmatob user-56=euromaki user-57=elektrot user-58=zapovim1 user-59=euronic2 user-60=matratze user-61=mediasol user-62=carrent1 user-63=bogdanos user-64=apgrupmk user-65=kardiome user-66=aptekazd user-67=nikimare user-68=forzares user-69=nikolov1 user-70=hausmark user-71=intelek1 user-72=mediatag user-73=nucktra1 user-74=lblawcom user-75=ambitiou user-76=fiziosmk user-77=versusmk user-78=fffhpcwr user-79=radekrat user-80=starluxm user-81=tcieuroc user-82=onlinesh user-83=nationa2 user-84=solemor1 user-85=mapaspla user-86=gorsajmk user-87=aquatech user-88=v5srybi9dcdx user-89=supremel user-90=zdmgpsor user-91=modernar user-92=inkigaic user-93=bozinovm user-94=dslmk user-95=darkogor user-96=fnjorgmk user-97=prizmapl user-98=innofabl user-99=premiumi user-100=vacuacti user-101=taneccom user-102=tehnologija user-103=spdcompu
Sep 13 19:34:26 power sudo[21946]: wp-toolkit : (command continued) user-104=detskagr user-105=infobadi user-106=mspmk user-107=wikicamp user-108=urbanexp user-109=sedcmk user-110=ivanjord user-111=groskome user-112=vfxnestc user-113=polyeste user-114=bizporta user-115=datelcom user-116=maleshne user-117=agrosind user-118=mpbmk user-119=datalink user-120=velmk user-121=gogovan1 user-122=univerz1 user-123=kujnamon user-124=makoasmk user-125=bianasho user-126=skyapart user-127=rasmorgm user-128=delcevca user-129=simbiome user-130=getaldus user-131=barececo user-132=workandt user-133=volkanco user-134=goartsym user-135=dhamachi user-136=mfashion user-137=ideaplus user-138=karpospo user-139=nasaidni user-140=screenme user-141=arturaco user-142=premiums user-143=butelmk user-144=daris user-145=jpparkin user-146=inotekso user-147=drleomk user-148=kouzonco user-149=premiuma user-150=cetplatf user-151=dalmacom user-152=sparkupm user-153=stokovna user-154=klimimk user-155=palenzok
Sep 13 19:34:26 power sudo[21946]: wp-toolkit : (command continued) user-156=busymard user-157=zampmk user-158=zvskopje user-159=custome1 user-160=janiboja user-161=itradeco user-162=vezilkac user-163=cabinetm user-164=stojano1 user-165=bovincom user-166=goodnews user-167=mstmmk user-168=gocruise user-169=tealmk user-170=dadarmk user-171=proverim user-172=pecakome user-173=wondersp user-174=stravelm user-175=robustco user-176=holiyayt user-177=rastiraz user-178=tradeyou user-179=gjorgeiv user-180=dnevnoin user-181=dikimk12 user-182=sprintst user-183=herbalpl user-184=enochmk user-185=edomcomm user-186=berbermk user-187=centarba user-188=nlpmkorg user-189=kolened1 user-190=nolimits user-191=seloviro user-192=evolvepl user-193=avtogumi user-194=socioloz user-195=pelagoni user-196=nefrolog user-197=levantmk user-198=ekostoc1 user-199=oncolog1 user-200=frizered user-201=hidrommk user-202=caramk user-203=youthgua user-204=anitermc user-205=cajsproc user-206=hotammk user-207=enaspotc
Sep 13 19:34:26 power sudo[21946]: wp-toolkit : (command continued) user-208=vmro user-209=trudovop user-210=viewinn user-211=stojnevi user-212=raremk user-213=oouslave user-214=uhostmk5 user-215=bauerbg feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:34:26 power sudo[21946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:27 power sudo[21946]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:27 power sudo[21965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:34:27 power sudo[21965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:27 power sudo[21965]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:27 power sudo[21970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:34:27 power sudo[21970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:27 power sudo[21970]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:27 power sudo[21976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:34:27 power sudo[21976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:27 power sudo[21976]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:27 power sudo[21991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:34:27 power sudo[21991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:27 power sudo[21991]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:27 power sudo[21996]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:34:27 power sudo[21996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:28 power sudo[21996]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:28 power sudo[22002]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:34:28 power sudo[22002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:28 power sudo[22002]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:33 power sudo[22082]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:34:33 power sudo[22082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:33 power sudo[22082]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:33 power sudo[22087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:34:33 power sudo[22087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:33 power sudo[22087]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:33 power sudo[22093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:34:33 power sudo[22093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:33 power sudo[22093]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:34 power sudo[22105]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:34:34 power sudo[22105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:34 power sudo[22105]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:34 power sudo[22110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:34:34 power sudo[22110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:34 power sudo[22110]: pam_unix(sudo:session): session closed for user root
Sep 13 19:34:34 power sudo[22115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:34:34 power sudo[22115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:34:34 power sudo[22115]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:01 power systemd[22596]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 19:35:09 power sudo[22748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:35:09 power sudo[22748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:09 power sudo[22748]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:09 power sudo[22753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:35:09 power sudo[22753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:09 power sudo[22753]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:09 power sudo[22758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:35:09 power sudo[22758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:10 power sudo[22758]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:10 power sudo[22764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:35:10 power sudo[22764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:10 power sudo[22764]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:10 power sudo[22770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=tehnologija user-2=taneccom user-3=innofabl user-4=premiumi user-5=vacuacti user-6=bozinovm user-7=prizmapl user-8=darkogor user-9=fnjorgmk user-10=dslmk user-11=inkigaic user-12=modernar user-13=zdmgpsor user-14=supremel user-15=v5srybi9dcdx user-16=gorsajmk user-17=aquatech user-18=mapaspla user-19=solemor1 user-20=nationa2 user-21=onlinesh user-22=tcieuroc user-23=radekrat user-24=starluxm user-25=fffhpcwr user-26=versusmk user-27=fiziosmk user-28=ambitiou user-29=lblawcom user-30=nucktra1 user-31=intelek1 user-32=mediatag user-33=nikolov1 user-34=hausmark user-35=forzares user-36=aptekazd user-37=nikimare user-38=kardiome user-39=apgrupmk user-40=mediasol user-41=bogdanos user-42=carrent1 user-43=euronic2 user-44=matratze user-45=zapovim1 user-46=elektrot user-47=cosmatob user-48=euromaki user-49=nutrivim
Sep 13 19:35:10 power sudo[22770]: wp-toolkit : (command continued) user-50=chemhemc user-51=samasped user-52=glammace user-53=albuname user-54=imdskopj user-55=vtranseu user-56=pravekom user-57=infopor1 user-58=pelagini user-59=bbbustou user-60=kaoilmk user-61=biplmk user-62=animatem user-63=cleanerm user-64=progress user-65=atspedco user-66=sssoluti user-67=solointe user-68=jaramk user-69=taktcomm user-70=recorgmk user-71=solarinv user-72=eurofarm user-73=electrol user-74=trigemat user-75=naksorgm user-76=eliksirz user-77=golakkom user-78=mbmehani user-79=ismassag user-80=workbenc user-81=viplastc user-82=wineberr user-83=conserva user-84=vegemk1 user-85=cupidpro user-86=euronic3 user-87=bonitavi user-88=evberasm user-89=bauerin2 user-90=folklore user-91=gradbai1 user-92=evacommk user-93=madzomk user-94=aptekafa user-95=peshkai1 user-96=fxxcom user-97=dimpalne user-98=eaptekam user-99=makdrone user-100=tehnodro user-101=jpkomuna user-102=izzomk user-103=uhostmk5
Sep 13 19:35:10 power sudo[22770]: wp-toolkit : (command continued) user-104=bauerbg user-105=raremk user-106=oouslave user-107=stojnevi user-108=vmro user-109=trudovop user-110=viewinn user-111=enaspotc user-112=hotammk user-113=cajsproc user-114=youthgua user-115=anitermc user-116=caramk user-117=frizered user-118=hidrommk user-119=nefrolog user-120=levantmk user-121=ekostoc1 user-122=oncolog1 user-123=pelagoni user-124=socioloz user-125=avtogumi user-126=evolvepl user-127=seloviro user-128=nolimits user-129=nlpmkorg user-130=centarba user-131=kolened1 user-132=berbermk user-133=edomcomm user-134=sprintst user-135=enochmk user-136=herbalpl user-137=dikimk12 user-138=dnevnoin user-139=tradeyou user-140=gjorgeiv user-141=rastiraz user-142=holiyayt user-143=wondersp user-144=stravelm user-145=robustco user-146=pecakome user-147=proverim user-148=dadarmk user-149=tealmk user-150=gocruise user-151=mstmmk user-152=goodnews user-153=bovincom user-154=stojano1 user-155=cabinetm
Sep 13 19:35:10 power sudo[22770]: wp-toolkit : (command continued) user-156=vezilkac user-157=itradeco user-158=janiboja user-159=custome1 user-160=busymard user-161=zampmk user-162=zvskopje user-163=palenzok user-164=klimimk user-165=sparkupm user-166=stokovna user-167=dalmacom user-168=cetplatf user-169=premiuma user-170=kouzonco user-171=drleomk user-172=jpparkin user-173=inotekso user-174=premiums user-175=butelmk user-176=daris user-177=arturaco user-178=screenme user-179=ideaplus user-180=karpospo user-181=nasaidni user-182=mfashion user-183=goartsym user-184=volkanco user-185=dhamachi user-186=workandt user-187=simbiome user-188=getaldus user-189=delcevca user-190=barececo user-191=rasmorgm user-192=bianasho user-193=makoasmk user-194=skyapart user-195=gogovan1 user-196=velmk user-197=univerz1 user-198=kujnamon user-199=datalink user-200=agrosind user-201=mpbmk user-202=datelcom user-203=maleshne user-204=bizporta user-205=vfxnestc user-206=polyeste user-207=groskome
Sep 13 19:35:10 power sudo[22770]: wp-toolkit : (command continued) user-208=ivanjord user-209=sedcmk user-210=urbanexp user-211=wikicamp user-212=mspmk user-213=infobadi user-214=detskagr user-215=spdcompu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:35:10 power sudo[22770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:10 power sudo[22770]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:11 power sudo[22788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:35:11 power sudo[22788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:11 power sudo[22788]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:11 power sudo[22793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:35:11 power sudo[22793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:11 power sudo[22793]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:11 power sudo[22799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:35:11 power sudo[22799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:11 power sudo[22799]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:11 power sudo[22808]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=dalmacom user-2=cetplatf user-3=premiuma user-4=kouzonco user-5=premiums user-6=daris user-7=butelmk user-8=screenme user-9=arturaco user-10=ideaplus user-11=karpospo user-12=nasaidni user-13=drleomk user-14=jpparkin user-15=inotekso user-16=cabinetm user-17=vezilkac user-18=itradeco user-19=janiboja user-20=bovincom user-21=stojano1 user-22=klimimk user-23=sparkupm user-24=stokovna user-25=custome1 user-26=busymard user-27=zvskopje user-28=zampmk user-29=palenzok user-30=vfxnestc user-31=polyeste user-32=groskome user-33=ivanjord user-34=sedcmk user-35=datelcom user-36=maleshne user-37=bizporta user-38=infobadi user-39=mspmk user-40=detskagr user-41=spdcompu user-42=urbanexp user-43=wikicamp user-44=rasmorgm user-45=makoasmk user-46=bianasho user-47=skyapart user-48=mfashion user-49=volkanco user-50=goartsym
Sep 13 19:35:11 power sudo[22808]: wp-toolkit : (command continued) user-51=dhamachi user-52=workandt user-53=delcevca user-54=getaldus user-55=simbiome user-56=barececo user-57=agrosind user-58=mpbmk user-59=gogovan1 user-60=velmk user-61=univerz1 user-62=kujnamon user-63=datalink user-64=nefrolog user-65=oncolog1 user-66=ekostoc1 user-67=levantmk user-68=caramk user-69=frizered user-70=hidrommk user-71=evolvepl user-72=pelagoni user-73=socioloz user-74=avtogumi user-75=vmro user-76=trudovop user-77=viewinn user-78=enaspotc user-79=uhostmk5 user-80=bauerbg user-81=raremk user-82=oouslave user-83=stojnevi user-84=youthgua user-85=anitermc user-86=hotammk user-87=cajsproc user-88=rastiraz user-89=holiyayt user-90=wondersp user-91=robustco user-92=stravelm user-93=pecakome user-94=dnevnoin user-95=gjorgeiv user-96=tradeyou user-97=gocruise user-98=mstmmk user-99=goodnews user-100=proverim user-101=dadarmk user-102=tealmk user-103=nolimits user-104=centarba user-105=nlpmkorg
Sep 13 19:35:11 power sudo[22808]: wp-toolkit : (command continued) user-106=kolened1 user-107=seloviro user-108=sprintst user-109=herbalpl user-110=enochmk user-111=dikimk12 user-112=berbermk user-113=edomcomm user-114=electrol user-115=trigemat user-116=naksorgm user-117=eliksirz user-118=golakkom user-119=solarinv user-120=eurofarm user-121=viplastc user-122=wineberr user-123=mbmehani user-124=ismassag user-125=workbenc user-126=bbbustou user-127=biplmk user-128=kaoilmk user-129=pelagini user-130=solointe user-131=jaramk user-132=recorgmk user-133=taktcomm user-134=animatem user-135=cleanerm user-136=progress user-137=sssoluti user-138=atspedco user-139=peshkai1 user-140=fxxcom user-141=dimpalne user-142=eaptekam user-143=gradbai1 user-144=evacommk user-145=aptekafa user-146=madzomk user-147=jpkomuna user-148=izzomk user-149=makdrone user-150=tehnodro user-151=bonitavi user-152=evberasm user-153=conserva user-154=vegemk1 user-155=cupidpro user-156=euronic3 user-157=bauerin2
Sep 13 19:35:11 power sudo[22808]: wp-toolkit : (command continued) user-158=folklore user-159=tcieuroc user-160=mapaspla user-161=solemor1 user-162=nationa2 user-163=onlinesh user-164=versusmk user-165=fiziosmk user-166=ambitiou user-167=radekrat user-168=starluxm user-169=fffhpcwr user-170=inkigaic user-171=modernar user-172=tehnologija user-173=taneccom user-174=premiumi user-175=innofabl user-176=vacuacti user-177=bozinovm user-178=darkogor user-179=fnjorgmk user-180=prizmapl user-181=dslmk user-182=supremel user-183=v5srybi9dcdx user-184=gorsajmk user-185=aquatech user-186=zdmgpsor user-187=nutrivim user-188=samasped user-189=chemhemc user-190=zapovim1 user-191=elektrot user-192=cosmatob user-193=euromaki user-194=pravekom user-195=vtranseu user-196=infopor1 user-197=glammace user-198=albuname user-199=imdskopj user-200=nikolov1 user-201=hausmark user-202=forzares user-203=aptekazd user-204=nikimare user-205=lblawcom user-206=nucktra1 user-207=intelek1 user-208=mediatag
Sep 13 19:35:11 power sudo[22808]: wp-toolkit : (command continued) user-209=euronic2 user-210=matratze user-211=kardiome user-212=apgrupmk user-213=mediasol user-214=bogdanos user-215=carrent1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:35:11 power sudo[22808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:11 power sudo[22808]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:12 power sudo[22825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:35:12 power sudo[22825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:12 power sudo[22825]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:12 power sudo[22837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:35:12 power sudo[22837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:12 power sudo[22837]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:12 power sudo[22844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:35:12 power sudo[22844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:12 power sudo[22844]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:12 power sudo[22858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:35:12 power sudo[22858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:12 power sudo[22858]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:12 power sudo[22863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:35:12 power sudo[22863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:12 power sudo[22863]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:12 power sudo[22872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:35:12 power sudo[22872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:12 power sudo[22872]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:13 power sudo[22897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:35:13 power sudo[22897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:13 power sudo[22897]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:15 power sudo[22940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:35:15 power sudo[22940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:15 power sudo[22940]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:21 power sudo[23027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:35:21 power sudo[23027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:21 power sudo[23027]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:21 power sudo[23032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:35:21 power sudo[23032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:21 power sudo[23032]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:21 power sudo[23037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:35:21 power sudo[23037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:21 power sudo[23037]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:21 power sudo[23049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:35:21 power sudo[23049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:21 power sudo[23049]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:21 power sudo[23054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:35:21 power sudo[23054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:21 power sudo[23054]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:21 power sudo[23060]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:35:21 power sudo[23060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:21 power sudo[23060]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:32 power sudo[23223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:35:32 power sudo[23223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:32 power sudo[23223]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:32 power sudo[23229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:35:32 power sudo[23229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:32 power sudo[23229]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:32 power sudo[23235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:35:32 power sudo[23235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:32 power sudo[23235]: pam_unix(sudo:session): session closed for user root
Sep 13 19:35:32 power sudo[23242]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=izzomk user-2=jpkomuna user-3=makdrone user-4=tehnodro user-5=peshkai1 user-6=fxxcom user-7=eaptekam user-8=dimpalne user-9=gradbai1 user-10=evacommk user-11=madzomk user-12=aptekafa user-13=bauerin2 user-14=folklore user-15=bonitavi user-16=evberasm user-17=conserva user-18=euronic3 user-19=vegemk1 user-20=cupidpro user-21=wineberr user-22=viplastc user-23=mbmehani user-24=workbenc user-25=ismassag user-26=trigemat user-27=naksorgm user-28=eliksirz user-29=electrol user-30=golakkom user-31=solarinv user-32=eurofarm user-33=jaramk user-34=solointe user-35=recorgmk user-36=taktcomm user-37=progress user-38=animatem user-39=cleanerm user-40=sssoluti user-41=atspedco user-42=biplmk user-43=kaoilmk user-44=bbbustou user-45=pelagini user-46=vtranseu user-47=pravekom user-48=infopor1 user-49=glammace
Sep 13 19:35:32 power sudo[23242]: wp-toolkit : (command continued) user-50=albuname user-51=imdskopj user-52=nutrivim user-53=chemhemc user-54=samasped user-55=zapovim1 user-56=elektrot user-57=euromaki user-58=cosmatob user-59=euronic2 user-60=matratze user-61=kardiome user-62=mediasol user-63=carrent1 user-64=bogdanos user-65=apgrupmk user-66=nikolov1 user-67=hausmark user-68=aptekazd user-69=nikimare user-70=forzares user-71=nucktra1 user-72=lblawcom user-73=intelek1 user-74=mediatag user-75=versusmk user-76=ambitiou user-77=fiziosmk user-78=radekrat user-79=starluxm user-80=fffhpcwr user-81=tcieuroc user-82=solemor1 user-83=mapaspla user-84=onlinesh user-85=nationa2 user-86=v5srybi9dcdx user-87=supremel user-88=gorsajmk user-89=aquatech user-90=zdmgpsor user-91=inkigaic user-92=modernar user-93=taneccom user-94=tehnologija user-95=bozinovm user-96=darkogor user-97=fnjorgmk user-98=prizmapl user-99=dslmk user-100=premiumi user-101=innofabl user-102=vacuacti user-103=infobadi
Sep 13 19:35:32 power sudo[23242]: wp-toolkit : (command continued) user-104=mspmk user-105=spdcompu user-106=detskagr user-107=wikicamp user-108=urbanexp user-109=vfxnestc user-110=polyeste user-111=sedcmk user-112=ivanjord user-113=groskome user-114=datelcom user-115=maleshne user-116=bizporta user-117=agrosind user-118=mpbmk user-119=gogovan1 user-120=velmk user-121=kujnamon user-122=univerz1 user-123=datalink user-124=rasmorgm user-125=bianasho user-126=makoasmk user-127=skyapart user-128=goartsym user-129=volkanco user-130=dhamachi user-131=mfashion user-132=delcevca user-133=simbiome user-134=getaldus user-135=barececo user-136=workandt user-137=premiums user-138=daris user-139=butelmk user-140=ideaplus user-141=karpospo user-142=nasaidni user-143=arturaco user-144=screenme user-145=jpparkin user-146=inotekso user-147=drleomk user-148=cetplatf user-149=dalmacom user-150=kouzonco user-151=premiuma user-152=klimimk user-153=sparkupm user-154=stokovna user-155=custome1
Sep 13 19:35:32 power sudo[23242]: wp-toolkit : (command continued) user-156=palenzok user-157=busymard user-158=zvskopje user-159=zampmk user-160=vezilkac user-161=cabinetm user-162=janiboja user-163=itradeco user-164=bovincom user-165=stojano1 user-166=gocruise user-167=goodnews user-168=mstmmk user-169=dadarmk user-170=proverim user-171=tealmk user-172=holiyayt user-173=rastiraz user-174=pecakome user-175=wondersp user-176=robustco user-177=stravelm user-178=dnevnoin user-179=tradeyou user-180=gjorgeiv user-181=dikimk12 user-182=sprintst user-183=herbalpl user-184=enochmk user-185=edomcomm user-186=berbermk user-187=nolimits user-188=nlpmkorg user-189=centarba user-190=kolened1 user-191=seloviro user-192=evolvepl user-193=pelagoni user-194=avtogumi user-195=socioloz user-196=nefrolog user-197=ekostoc1 user-198=oncolog1 user-199=levantmk user-200=caramk user-201=frizered user-202=hidrommk user-203=youthgua user-204=anitermc user-205=cajsproc user-206=hotammk user-207=enaspotc
Sep 13 19:35:32 power sudo[23242]: wp-toolkit : (command continued) user-208=vmro user-209=trudovop user-210=viewinn user-211=raremk user-212=oouslave user-213=uhostmk5 user-214=bauerbg user-215=stojnevi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:35:32 power sudo[23242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:35:33 power sudo[23242]: pam_unix(sudo:session): session closed for user root
Sep 13 19:36:01 power systemd[23926]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 19:37:01 power systemd[24904]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 19:37:56 power sudo[26058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:37:56 power sudo[26058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:56 power sudo[26058]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:56 power sudo[26063]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:37:56 power sudo[26063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:56 power sudo[26063]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:56 power sudo[26071]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:37:56 power sudo[26071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:56 power sudo[26071]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:56 power sudo[26076]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:37:56 power sudo[26076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:56 power sudo[26076]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:56 power sudo[26085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=dimpalne user-2=eaptekam user-3=peshkai1 user-4=fxxcom user-5=evacommk user-6=aptekafa user-7=madzomk user-8=gradbai1 user-9=jpkomuna user-10=izzomk user-11=tehnodro user-12=makdrone user-13=bonitavi user-14=evberasm user-15=vegemk1 user-16=cupidpro user-17=euronic3 user-18=conserva user-19=folklore user-20=bauerin2 user-21=golakkom user-22=electrol user-23=trigemat user-24=eliksirz user-25=naksorgm user-26=eurofarm user-27=solarinv user-28=viplastc user-29=wineberr user-30=ismassag user-31=workbenc user-32=mbmehani user-33=bbbustou user-34=biplmk user-35=kaoilmk user-36=pelagini user-37=taktcomm user-38=recorgmk user-39=solointe user-40=jaramk user-41=sssoluti user-42=atspedco user-43=animatem user-44=cleanerm user-45=progress user-46=chemhemc user-47=samasped user-48=nutrivim user-49=cosmatob
Sep 13 19:37:56 power sudo[26085]: wp-toolkit : (command continued) user-50=euromaki user-51=elektrot user-52=zapovim1 user-53=infopor1 user-54=vtranseu user-55=pravekom user-56=imdskopj user-57=glammace user-58=albuname user-59=forzares user-60=aptekazd user-61=nikimare user-62=nikolov1 user-63=hausmark user-64=intelek1 user-65=mediatag user-66=lblawcom user-67=nucktra1 user-68=euronic2 user-69=matratze user-70=apgrupmk user-71=mediasol user-72=bogdanos user-73=carrent1 user-74=kardiome user-75=tcieuroc user-76=nationa2 user-77=onlinesh user-78=mapaspla user-79=solemor1 user-80=fiziosmk user-81=ambitiou user-82=versusmk user-83=fffhpcwr user-84=radekrat user-85=starluxm user-86=modernar user-87=inkigaic user-88=premiumi user-89=innofabl user-90=vacuacti user-91=bozinovm user-92=fnjorgmk user-93=darkogor user-94=dslmk user-95=prizmapl user-96=tehnologija user-97=taneccom user-98=gorsajmk user-99=aquatech user-100=supremel user-101=v5srybi9dcdx user-102=zdmgpsor user-103=ivanjord
Sep 13 19:37:56 power sudo[26085]: wp-toolkit : (command continued) user-104=groskome user-105=sedcmk user-106=vfxnestc user-107=polyeste user-108=bizporta user-109=datelcom user-110=maleshne user-111=detskagr user-112=spdcompu user-113=mspmk user-114=infobadi user-115=urbanexp user-116=wikicamp user-117=makoasmk user-118=bianasho user-119=skyapart user-120=rasmorgm user-121=workandt user-122=simbiome user-123=getaldus user-124=delcevca user-125=barececo user-126=mfashion user-127=volkanco user-128=goartsym user-129=dhamachi user-130=agrosind user-131=mpbmk user-132=datalink user-133=velmk user-134=gogovan1 user-135=univerz1 user-136=kujnamon user-137=premiuma user-138=kouzonco user-139=dalmacom user-140=cetplatf user-141=arturaco user-142=screenme user-143=ideaplus user-144=nasaidni user-145=karpospo user-146=premiums user-147=daris user-148=butelmk user-149=drleomk user-150=jpparkin user-151=inotekso user-152=itradeco user-153=janiboja user-154=cabinetm user-155=vezilkac
Sep 13 19:37:56 power sudo[26085]: wp-toolkit : (command continued) user-156=stojano1 user-157=bovincom user-158=sparkupm user-159=stokovna user-160=klimimk user-161=zvskopje user-162=busymard user-163=zampmk user-164=palenzok user-165=custome1 user-166=wondersp user-167=stravelm user-168=robustco user-169=pecakome user-170=rastiraz user-171=holiyayt user-172=gjorgeiv user-173=tradeyou user-174=dnevnoin user-175=mstmmk user-176=goodnews user-177=gocruise user-178=tealmk user-179=proverim user-180=dadarmk user-181=centarba user-182=nlpmkorg user-183=kolened1 user-184=nolimits user-185=seloviro user-186=sprintst user-187=enochmk user-188=herbalpl user-189=dikimk12 user-190=berbermk user-191=edomcomm user-192=nefrolog user-193=ekostoc1 user-194=oncolog1 user-195=levantmk user-196=frizered user-197=hidrommk user-198=caramk user-199=evolvepl user-200=socioloz user-201=avtogumi user-202=pelagoni user-203=vmro user-204=viewinn user-205=trudovop user-206=enaspotc user-207=stojnevi
Sep 13 19:37:56 power sudo[26085]: wp-toolkit : (command continued) user-208=uhostmk5 user-209=bauerbg user-210=raremk user-211=oouslave user-212=youthgua user-213=anitermc user-214=hotammk user-215=cajsproc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:37:56 power sudo[26085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:57 power sudo[26085]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:57 power sudo[26109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:37:57 power sudo[26109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:57 power sudo[26109]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:57 power sudo[26115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:37:57 power sudo[26115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:57 power sudo[26115]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:57 power sudo[26123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:37:58 power sudo[26123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:58 power sudo[26123]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:58 power sudo[26132]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mstmmk user-2=goodnews user-3=gocruise user-4=tealmk user-5=proverim user-6=dadarmk user-7=stravelm user-8=robustco user-9=wondersp user-10=pecakome user-11=rastiraz user-12=holiyayt user-13=tradeyou user-14=gjorgeiv user-15=dnevnoin user-16=herbalpl user-17=enochmk user-18=sprintst user-19=dikimk12 user-20=berbermk user-21=edomcomm user-22=kolened1 user-23=nlpmkorg user-24=centarba user-25=nolimits user-26=seloviro user-27=evolvepl user-28=avtogumi user-29=socioloz user-30=pelagoni user-31=ekostoc1 user-32=oncolog1 user-33=levantmk user-34=nefrolog user-35=hidrommk user-36=frizered user-37=caramk user-38=anitermc user-39=youthgua user-40=hotammk user-41=cajsproc user-42=viewinn user-43=trudovop user-44=vmro user-45=enaspotc user-46=stojnevi user-47=bauerbg user-48=uhostmk5 user-49=oouslave user-50=raremk
Sep 13 19:37:58 power sudo[26132]: wp-toolkit : (command continued) user-51=detskagr user-52=spdcompu user-53=mspmk user-54=infobadi user-55=urbanexp user-56=wikicamp user-57=ivanjord user-58=groskome user-59=sedcmk user-60=polyeste user-61=vfxnestc user-62=bizporta user-63=maleshne user-64=datelcom user-65=mpbmk user-66=agrosind user-67=datalink user-68=kujnamon user-69=univerz1 user-70=gogovan1 user-71=velmk user-72=skyapart user-73=bianasho user-74=makoasmk user-75=rasmorgm user-76=workandt user-77=barececo user-78=simbiome user-79=delcevca user-80=getaldus user-81=mfashion user-82=dhamachi user-83=volkanco user-84=goartsym user-85=screenme user-86=arturaco user-87=nasaidni user-88=karpospo user-89=ideaplus user-90=butelmk user-91=daris user-92=premiums user-93=drleomk user-94=inotekso user-95=jpparkin user-96=premiuma user-97=kouzonco user-98=dalmacom user-99=cetplatf user-100=stokovna user-101=sparkupm user-102=klimimk user-103=zvskopje user-104=busymard user-105=zampmk
Sep 13 19:37:58 power sudo[26132]: wp-toolkit : (command continued) user-106=palenzok user-107=custome1 user-108=itradeco user-109=janiboja user-110=cabinetm user-111=vezilkac user-112=stojano1 user-113=bovincom user-114=infopor1 user-115=pravekom user-116=vtranseu user-117=imdskopj user-118=albuname user-119=glammace user-120=samasped user-121=chemhemc user-122=nutrivim user-123=euromaki user-124=cosmatob user-125=elektrot user-126=zapovim1 user-127=matratze user-128=euronic2 user-129=apgrupmk user-130=bogdanos user-131=carrent1 user-132=mediasol user-133=kardiome user-134=forzares user-135=nikimare user-136=aptekazd user-137=hausmark user-138=nikolov1 user-139=mediatag user-140=intelek1 user-141=lblawcom user-142=nucktra1 user-143=fiziosmk user-144=ambitiou user-145=versusmk user-146=fffhpcwr user-147=starluxm user-148=radekrat user-149=tcieuroc user-150=nationa2 user-151=onlinesh user-152=mapaspla user-153=solemor1 user-154=aquatech user-155=gorsajmk user-156=supremel
Sep 13 19:37:58 power sudo[26132]: wp-toolkit : (command continued) user-157=v5srybi9dcdx user-158=zdmgpsor user-159=modernar user-160=inkigaic user-161=vacuacti user-162=premiumi user-163=innofabl user-164=fnjorgmk user-165=darkogor user-166=prizmapl user-167=dslmk user-168=bozinovm user-169=tehnologija user-170=taneccom user-171=jpkomuna user-172=izzomk user-173=tehnodro user-174=makdrone user-175=dimpalne user-176=eaptekam user-177=fxxcom user-178=peshkai1 user-179=madzomk user-180=aptekafa user-181=evacommk user-182=gradbai1 user-183=folklore user-184=bauerin2 user-185=evberasm user-186=bonitavi user-187=cupidpro user-188=vegemk1 user-189=euronic3 user-190=conserva user-191=viplastc user-192=wineberr user-193=ismassag user-194=workbenc user-195=mbmehani user-196=golakkom user-197=electrol user-198=naksorgm user-199=eliksirz user-200=trigemat user-201=eurofarm user-202=solarinv user-203=recorgmk user-204=taktcomm user-205=solointe user-206=jaramk user-207=atspedco
Sep 13 19:37:58 power sudo[26132]: wp-toolkit : (command continued) user-208=sssoluti user-209=cleanerm user-210=animatem user-211=progress user-212=bbbustou user-213=kaoilmk user-214=biplmk user-215=pelagini feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:37:58 power sudo[26132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:58 power sudo[26132]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:58 power sudo[26154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:37:58 power sudo[26154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:58 power sudo[26154]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:58 power sudo[26160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:37:58 power sudo[26160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:58 power sudo[26160]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:58 power sudo[26165]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:37:58 power sudo[26165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:59 power sudo[26165]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:59 power sudo[26183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:37:59 power sudo[26183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:59 power sudo[26183]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:59 power sudo[26188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:37:59 power sudo[26188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:59 power sudo[26188]: pam_unix(sudo:session): session closed for user root
Sep 13 19:37:59 power sudo[26193]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:37:59 power sudo[26193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:37:59 power sudo[26193]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:03 power sudo[26324]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:38:03 power sudo[26324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:03 power sudo[26324]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:03 power sudo[26329]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:38:03 power sudo[26329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:03 power sudo[26329]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:03 power sudo[26335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:38:03 power sudo[26335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:04 power sudo[26335]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:04 power sudo[26341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mstmmk user-2=goodnews user-3=gocruise user-4=tealmk user-5=proverim user-6=dadarmk user-7=wondersp user-8=robustco user-9=stravelm user-10=pecakome user-11=rastiraz user-12=holiyayt user-13=tradeyou user-14=gjorgeiv user-15=dnevnoin user-16=sprintst user-17=enochmk user-18=herbalpl user-19=dikimk12 user-20=berbermk user-21=edomcomm user-22=centarba user-23=nlpmkorg user-24=kolened1 user-25=nolimits user-26=seloviro user-27=evolvepl user-28=socioloz user-29=avtogumi user-30=pelagoni user-31=nefrolog user-32=oncolog1 user-33=ekostoc1 user-34=levantmk user-35=frizered user-36=hidrommk user-37=caramk user-38=youthgua user-39=anitermc user-40=hotammk user-41=cajsproc user-42=vmro user-43=trudovop user-44=viewinn user-45=enaspotc user-46=stojnevi user-47=uhostmk5 user-48=bauerbg user-49=raremk user-50=oouslave
Sep 13 19:38:04 power sudo[26341]: wp-toolkit : (command continued) user-51=detskagr user-52=spdcompu user-53=mspmk user-54=infobadi user-55=urbanexp user-56=wikicamp user-57=ivanjord user-58=groskome user-59=sedcmk user-60=vfxnestc user-61=polyeste user-62=bizporta user-63=datelcom user-64=maleshne user-65=agrosind user-66=mpbmk user-67=datalink user-68=gogovan1 user-69=velmk user-70=kujnamon user-71=univerz1 user-72=bianasho user-73=makoasmk user-74=skyapart user-75=rasmorgm user-76=workandt user-77=getaldus user-78=delcevca user-79=simbiome user-80=barececo user-81=mfashion user-82=volkanco user-83=goartsym user-84=dhamachi user-85=screenme user-86=arturaco user-87=ideaplus user-88=karpospo user-89=nasaidni user-90=premiums user-91=daris user-92=butelmk user-93=drleomk user-94=jpparkin user-95=inotekso user-96=premiuma user-97=kouzonco user-98=dalmacom user-99=cetplatf user-100=sparkupm user-101=stokovna user-102=klimimk user-103=zvskopje user-104=busymard user-105=zampmk
Sep 13 19:38:04 power sudo[26341]: wp-toolkit : (command continued) user-106=palenzok user-107=custome1 user-108=itradeco user-109=janiboja user-110=cabinetm user-111=vezilkac user-112=stojano1 user-113=bovincom user-114=infopor1 user-115=vtranseu user-116=pravekom user-117=imdskopj user-118=glammace user-119=albuname user-120=samasped user-121=chemhemc user-122=nutrivim user-123=cosmatob user-124=euromaki user-125=zapovim1 user-126=elektrot user-127=euronic2 user-128=matratze user-129=apgrupmk user-130=mediasol user-131=carrent1 user-132=bogdanos user-133=kardiome user-134=forzares user-135=aptekazd user-136=nikimare user-137=nikolov1 user-138=hausmark user-139=intelek1 user-140=mediatag user-141=lblawcom user-142=nucktra1 user-143=fiziosmk user-144=ambitiou user-145=versusmk user-146=fffhpcwr user-147=radekrat user-148=starluxm user-149=tcieuroc user-150=nationa2 user-151=onlinesh user-152=mapaspla user-153=solemor1 user-154=gorsajmk user-155=aquatech user-156=supremel
Sep 13 19:38:04 power sudo[26341]: wp-toolkit : (command continued) user-157=v5srybi9dcdx user-158=zdmgpsor user-159=modernar user-160=inkigaic user-161=premiumi user-162=innofabl user-163=vacuacti user-164=bozinovm user-165=darkogor user-166=fnjorgmk user-167=dslmk user-168=prizmapl user-169=tehnologija user-170=taneccom user-171=jpkomuna user-172=izzomk user-173=tehnodro user-174=makdrone user-175=dimpalne user-176=eaptekam user-177=peshkai1 user-178=fxxcom user-179=evacommk user-180=madzomk user-181=aptekafa user-182=gradbai1 user-183=folklore user-184=bauerin2 user-185=bonitavi user-186=evberasm user-187=vegemk1 user-188=cupidpro user-189=euronic3 user-190=conserva user-191=viplastc user-192=wineberr user-193=ismassag user-194=workbenc user-195=mbmehani user-196=golakkom user-197=electrol user-198=trigemat user-199=eliksirz user-200=naksorgm user-201=eurofarm user-202=solarinv user-203=recorgmk user-204=taktcomm user-205=solointe user-206=jaramk user-207=atspedco
Sep 13 19:38:04 power sudo[26341]: wp-toolkit : (command continued) user-208=sssoluti user-209=animatem user-210=cleanerm user-211=progress user-212=bbbustou user-213=kaoilmk user-214=biplmk user-215=pelagini feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:38:04 power sudo[26341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:04 power sudo[26341]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:04 power sudo[26356]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 13 19:38:04 power sudo[26356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:04 power sudo[26356]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:04 power sudo[26365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/wordpress-backups
Sep 13 19:38:04 power sudo[26365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:04 power sudo[26365]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:04 power sudo[26385]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/wordpress-backups
Sep 13 19:38:04 power sudo[26385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:04 power sudo[26385]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:06 power sudo[26422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:38:06 power sudo[26422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:06 power sudo[26422]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:06 power sudo[26430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:38:06 power sudo[26430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:06 power sudo[26430]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:06 power sudo[26435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:38:06 power sudo[26435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:07 power sudo[26435]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:07 power sudo[26443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=mbmehani user-2=ismassag user-3=workbenc user-4=viplastc user-5=wineberr user-6=solarinv user-7=eurofarm user-8=electrol user-9=trigemat user-10=naksorgm user-11=eliksirz user-12=golakkom user-13=animatem user-14=cleanerm user-15=progress user-16=sssoluti user-17=atspedco user-18=solointe user-19=jaramk user-20=recorgmk user-21=taktcomm user-22=pelagini user-23=bbbustou user-24=kaoilmk user-25=biplmk user-26=makdrone user-27=tehnodro user-28=jpkomuna user-29=izzomk user-30=gradbai1 user-31=evacommk user-32=aptekafa user-33=madzomk user-34=peshkai1 user-35=fxxcom user-36=dimpalne user-37=eaptekam user-38=bauerin2 user-39=folklore user-40=conserva user-41=vegemk1 user-42=cupidpro user-43=euronic3 user-44=bonitavi user-45=evberasm user-46=radekrat user-47=starluxm user-48=fffhpcwr user-49=versusmk
Sep 13 19:38:07 power sudo[26443]: wp-toolkit : (command continued) user-50=fiziosmk user-51=ambitiou user-52=mapaspla user-53=solemor1 user-54=nationa2 user-55=onlinesh user-56=tcieuroc user-57=zdmgpsor user-58=supremel user-59=v5srybi9dcdx user-60=gorsajmk user-61=aquatech user-62=tehnologija user-63=taneccom user-64=premiumi user-65=innofabl user-66=vacuacti user-67=bozinovm user-68=darkogor user-69=fnjorgmk user-70=prizmapl user-71=dslmk user-72=inkigaic user-73=modernar user-74=glammace user-75=albuname user-76=imdskopj user-77=pravekom user-78=vtranseu user-79=infopor1 user-80=elektrot user-81=zapovim1 user-82=cosmatob user-83=euromaki user-84=nutrivim user-85=samasped user-86=chemhemc user-87=kardiome user-88=apgrupmk user-89=mediasol user-90=carrent1 user-91=bogdanos user-92=euronic2 user-93=matratze user-94=lblawcom user-95=nucktra1 user-96=intelek1 user-97=mediatag user-98=nikolov1 user-99=hausmark user-100=forzares user-101=aptekazd user-102=nikimare user-103=drleomk
Sep 13 19:38:07 power sudo[26443]: wp-toolkit : (command continued) user-104=jpparkin user-105=inotekso user-106=premiums user-107=butelmk user-108=daris user-109=screenme user-110=arturaco user-111=ideaplus user-112=nasaidni user-113=karpospo user-114=dalmacom user-115=cetplatf user-116=premiuma user-117=kouzonco user-118=custome1 user-119=zampmk user-120=busymard user-121=zvskopje user-122=palenzok user-123=klimimk user-124=sparkupm user-125=stokovna user-126=bovincom user-127=stojano1 user-128=cabinetm user-129=vezilkac user-130=itradeco user-131=janiboja user-132=urbanexp user-133=wikicamp user-134=infobadi user-135=mspmk user-136=detskagr user-137=spdcompu user-138=datelcom user-139=maleshne user-140=bizporta user-141=vfxnestc user-142=polyeste user-143=groskome user-144=ivanjord user-145=sedcmk user-146=velmk user-147=gogovan1 user-148=univerz1 user-149=kujnamon user-150=datalink user-151=agrosind user-152=mpbmk user-153=mfashion user-154=goartsym user-155=volkanco
Sep 13 19:38:07 power sudo[26443]: wp-toolkit : (command continued) user-156=dhamachi user-157=workandt user-158=simbiome user-159=getaldus user-160=delcevca user-161=barececo user-162=rasmorgm user-163=bianasho user-164=makoasmk user-165=skyapart user-166=pelagoni user-167=socioloz user-168=avtogumi user-169=evolvepl user-170=caramk user-171=frizered user-172=hidrommk user-173=nefrolog user-174=ekostoc1 user-175=oncolog1 user-176=levantmk user-177=hotammk user-178=cajsproc user-179=youthgua user-180=anitermc user-181=uhostmk5 user-182=bauerbg user-183=raremk user-184=oouslave user-185=stojnevi user-186=vmro user-187=trudovop user-188=viewinn user-189=enaspotc user-190=proverim user-191=dadarmk user-192=tealmk user-193=gocruise user-194=mstmmk user-195=goodnews user-196=dnevnoin user-197=gjorgeiv user-198=tradeyou user-199=rastiraz user-200=holiyayt user-201=wondersp user-202=robustco user-203=stravelm user-204=pecakome user-205=berbermk user-206=edomcomm user-207=sprintst
Sep 13 19:38:07 power sudo[26443]: wp-toolkit : (command continued) user-208=herbalpl user-209=enochmk user-210=dikimk12 user-211=seloviro user-212=nolimits user-213=nlpmkorg user-214=centarba user-215=kolened1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:38:07 power sudo[26443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:07 power sudo[26443]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:08 power sudo[26475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:08 power sudo[26475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:08 power sudo[26475]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:08 power sudo[26484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:38:08 power sudo[26484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:08 power sudo[26484]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:08 power sudo[26490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 domainuserdata domain=berber.mk --output=json'
Sep 13 19:38:08 power sudo[26490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:08 power sudo[26490]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:08 power sudo[26497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status berbermk'
Sep 13 19:38:08 power sudo[26497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:08 power sudo[26497]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:08 power sudo[26506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/.wp-toolkit
Sep 13 19:38:08 power sudo[26506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:08 power sudo[26506]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:08 power sudo[26511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk mkdir -m 0700 /home/berbermk/.wp-toolkit
Sep 13 19:38:08 power sudo[26511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:08 power sudo[26511]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:08 power sudo[26522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/wordpress-backups
Sep 13 19:38:08 power sudo[26522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:08 power sudo[26522]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:09 power sudo[26558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/.wp-toolkit
Sep 13 19:38:09 power sudo[26558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26558]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:09 power sudo[26563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk mktemp -p /home/berbermk/.wp-toolkit
Sep 13 19:38:09 power sudo[26563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26563]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:09 power sudo[26568]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -f /home/berbermk/.wp-toolkit/tmp.GRhK3Gev59
Sep 13 19:38:09 power sudo[26568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26568]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:09 power sudo[26573]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk stat -c %a /home/berbermk/.wp-toolkit/tmp.GRhK3Gev59
Sep 13 19:38:09 power sudo[26573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26573]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:09 power sudo[26578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/.wp-toolkit/tmp-wpt-tmp-7E2Is7xT76mDWIAw.GRhK3Gev59
Sep 13 19:38:09 power sudo[26578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26578]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:09 power sudo[26583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cat > /home/berbermk/.wp-toolkit/tmp-wpt-tmp-7E2Is7xT76mDWIAw.GRhK3Gev59'
Sep 13 19:38:09 power sudo[26583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26583]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:09 power sudo[26589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk chmod 600 /home/berbermk/.wp-toolkit/tmp-wpt-tmp-7E2Is7xT76mDWIAw.GRhK3Gev59
Sep 13 19:38:09 power sudo[26589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26589]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:09 power sudo[26594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk mv /home/berbermk/.wp-toolkit/tmp-wpt-tmp-7E2Is7xT76mDWIAw.GRhK3Gev59 /home/berbermk/.wp-toolkit/tmp.GRhK3Gev59
Sep 13 19:38:09 power sudo[26594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26594]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:09 power sudo[26599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c '/bin/sh /home/berbermk/.wp-toolkit/tmp.GRhK3Gev59'
Sep 13 19:38:09 power sudo[26599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26616]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:09 power sudo[26616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:09 power sudo[26616]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:12 power sudo[26664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:12 power sudo[26664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:12 power sudo[26664]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:13 power sudo[26599]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:13 power sudo[26700]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk rm -f /home/berbermk/.wp-toolkit/tmp.GRhK3Gev59
Sep 13 19:38:13 power sudo[26700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:13 power sudo[26700]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:13 power sudo[26705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c '/usr/bin/mariadb-dump --help | grep \'column-statistics\' || exit 0'
Sep 13 19:38:13 power sudo[26705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:14 power sudo[26725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:14 power sudo[26725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:14 power sudo[26725]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:16 power sudo[26779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:16 power sudo[26779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:16 power sudo[26779]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:18 power sudo[26817]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:18 power sudo[26817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:18 power sudo[26817]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:18 power sudo[26705]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:18 power sudo[26831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/.wp-toolkit
Sep 13 19:38:18 power sudo[26831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:18 power sudo[26831]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:18 power sudo[26836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk mktemp -p /home/berbermk/.wp-toolkit
Sep 13 19:38:18 power sudo[26836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:18 power sudo[26836]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:18 power sudo[26841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -f /home/berbermk/.wp-toolkit/tmp.UkpreHieFr
Sep 13 19:38:18 power sudo[26841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:18 power sudo[26841]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:18 power sudo[26846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk stat -c %a /home/berbermk/.wp-toolkit/tmp.UkpreHieFr
Sep 13 19:38:18 power sudo[26846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:18 power sudo[26846]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:18 power sudo[26851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk test -e /home/berbermk/.wp-toolkit/tmp-wpt-tmp-tkNPsGk9HEnzUdrA.UkpreHieFr
Sep 13 19:38:18 power sudo[26851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:18 power sudo[26851]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:18 power sudo[26856]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cat > /home/berbermk/.wp-toolkit/tmp-wpt-tmp-tkNPsGk9HEnzUdrA.UkpreHieFr'
Sep 13 19:38:18 power sudo[26856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:18 power sudo[26856]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:18 power sudo[26863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk chmod 600 /home/berbermk/.wp-toolkit/tmp-wpt-tmp-tkNPsGk9HEnzUdrA.UkpreHieFr
Sep 13 19:38:19 power sudo[26863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:19 power sudo[26863]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:19 power sudo[26868]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk mv /home/berbermk/.wp-toolkit/tmp-wpt-tmp-tkNPsGk9HEnzUdrA.UkpreHieFr /home/berbermk/.wp-toolkit/tmp.UkpreHieFr
Sep 13 19:38:19 power sudo[26868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:19 power sudo[26868]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:19 power sudo[26873]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c '/bin/sh /home/berbermk/.wp-toolkit/tmp.UkpreHieFr'
Sep 13 19:38:19 power sudo[26873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:20 power sudo[26919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:20 power sudo[26919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:20 power sudo[26919]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:23 power sudo[26987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:23 power sudo[26987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:23 power sudo[26987]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:26 power sudo[27041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:26 power sudo[27041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:26 power sudo[27041]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:27 power sudo[26873]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:27 power sudo[27055]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk rm -f /home/berbermk/.wp-toolkit/tmp.UkpreHieFr
Sep 13 19:38:27 power sudo[27055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:27 power sudo[27055]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-activate.php /home/berbermk/.wp-toolkit/backups/305/files/wp-activate.php'
Sep 13 19:38:28 power sudo[27217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27217]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27222]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/license.txt /home/berbermk/.wp-toolkit/backups/305/files/license.txt'
Sep 13 19:38:28 power sudo[27222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27222]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-config.php /home/berbermk/.wp-toolkit/backups/305/files/wp-config.php'
Sep 13 19:38:28 power sudo[27227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27227]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27232]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-settings.php /home/berbermk/.wp-toolkit/backups/305/files/wp-settings.php'
Sep 13 19:38:28 power sudo[27232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27232]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-login.php /home/berbermk/.wp-toolkit/backups/305/files/wp-login.php'
Sep 13 19:38:28 power sudo[27237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27237]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-config-sample.php /home/berbermk/.wp-toolkit/backups/305/files/wp-config-sample.php'
Sep 13 19:38:28 power sudo[27247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27247]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/readme.html /home/berbermk/.wp-toolkit/backups/305/files/readme.html'
Sep 13 19:38:28 power sudo[27252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27252]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-links-opml.php /home/berbermk/.wp-toolkit/backups/305/files/wp-links-opml.php'
Sep 13 19:38:28 power sudo[27258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27258]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-cron.php /home/berbermk/.wp-toolkit/backups/305/files/wp-cron.php'
Sep 13 19:38:28 power sudo[27263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27263]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/index.php /home/berbermk/.wp-toolkit/backups/305/files/index.php'
Sep 13 19:38:28 power sudo[27268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27268]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-blog-header.php /home/berbermk/.wp-toolkit/backups/305/files/wp-blog-header.php'
Sep 13 19:38:28 power sudo[27273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27273]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-mail.php /home/berbermk/.wp-toolkit/backups/305/files/wp-mail.php'
Sep 13 19:38:28 power sudo[27278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27278]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/xmlrpc.php /home/berbermk/.wp-toolkit/backups/305/files/xmlrpc.php'
Sep 13 19:38:28 power sudo[27283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27283]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-load.php /home/berbermk/.wp-toolkit/backups/305/files/wp-load.php'
Sep 13 19:38:28 power sudo[27289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27289]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-comments-post.php /home/berbermk/.wp-toolkit/backups/305/files/wp-comments-post.php'
Sep 13 19:38:28 power sudo[27294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27294]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-signup.php /home/berbermk/.wp-toolkit/backups/305/files/wp-signup.php'
Sep 13 19:38:28 power sudo[27299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27299]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a /home/berbermk/public_html/wp-trackback.php /home/berbermk/.wp-toolkit/backups/305/files/wp-trackback.php'
Sep 13 19:38:28 power sudo[27304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:28 power sudo[27304]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:28 power sudo[27309]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user berbermk /bin/sh -c 'cp -a -r /home/berbermk/public_html/wp-content/. /home/berbermk/.wp-toolkit/backups/305/files/wp-content'
Sep 13 19:38:28 power sudo[27309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:29 power sudo[27336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:29 power sudo[27336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:29 power sudo[27336]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:32 power sudo[27378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:32 power sudo[27378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:32 power sudo[27378]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:35 power sudo[27414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:35 power sudo[27414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:35 power sudo[27414]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:38 power sudo[27467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:38 power sudo[27467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:38 power sudo[27467]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:41 power sudo[27531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:41 power sudo[27531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:41 power sudo[27531]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:44 power sudo[27609]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:44 power sudo[27609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:44 power sudo[27609]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:47 power sudo[27656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:47 power sudo[27656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:47 power sudo[27656]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:50 power sudo[27702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:50 power sudo[27702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:50 power sudo[27702]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:53 power sudo[27750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:53 power sudo[27750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:53 power sudo[27750]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:56 power sudo[27809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:56 power sudo[27809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:56 power sudo[27809]: pam_unix(sudo:session): session closed for user root
Sep 13 19:38:59 power sudo[27854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:38:59 power sudo[27854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:38:59 power sudo[27854]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:02 power sudo[27946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:02 power sudo[27946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:02 power sudo[27946]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:05 power sudo[27982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:05 power sudo[27982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:05 power sudo[27982]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:08 power sudo[28016]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:08 power sudo[28016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:08 power sudo[28016]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:11 power sudo[28046]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:11 power sudo[28046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:11 power sudo[28046]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:14 power sudo[28073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:14 power sudo[28073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:14 power sudo[28073]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:17 power sudo[28115]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:17 power sudo[28115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:17 power sudo[28115]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:20 power sudo[28166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:20 power sudo[28166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:20 power sudo[28166]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:23 power sudo[28205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:23 power sudo[28205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:23 power sudo[28205]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:25 power sudo[28257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:25 power sudo[28257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:25 power sudo[28257]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:28 power sudo[28299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:28 power sudo[28299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:28 power sudo[28299]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:31 power sudo[28339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:31 power sudo[28339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:31 power sudo[28339]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:34 power sudo[28391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:34 power sudo[28391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:34 power sudo[28391]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:37 power sudo[28435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:37 power sudo[28435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:37 power sudo[28435]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:40 power sudo[28483]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:40 power sudo[28483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:40 power sudo[28483]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:43 power sudo[28528]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:43 power sudo[28528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:43 power sudo[28528]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:46 power sudo[28569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:46 power sudo[28569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:46 power sudo[28569]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:49 power sudo[28615]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:49 power sudo[28615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:49 power sudo[28615]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:52 power sudo[28656]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:52 power sudo[28656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:52 power sudo[28656]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:55 power sudo[28716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:55 power sudo[28716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:55 power sudo[28716]: pam_unix(sudo:session): session closed for user root
Sep 13 19:39:58 power sudo[28758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:39:58 power sudo[28758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:39:58 power sudo[28758]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:01 power systemd[28918]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 19:40:01 power sudo[28919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:01 power sudo[28919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:01 power sudo[28919]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:04 power sudo[29049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:04 power sudo[29049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:05 power sudo[29049]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:07 power sudo[29096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:07 power sudo[29096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:07 power sudo[29096]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:10 power sudo[29137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:10 power sudo[29137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:10 power sudo[29137]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:10 power sudo[29151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:10 power sudo[29151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:10 power sudo[29151]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:10 power sudo[29156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:40:10 power sudo[29156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:10 power sudo[29156]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:10 power sudo[29163]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:40:10 power sudo[29163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:10 power sudo[29163]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:10 power sudo[29169]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:40:10 power sudo[29169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:10 power sudo[29169]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:10 power sudo[29178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=rasmorgm user-2=skyapart user-3=makoasmk user-4=bianasho user-5=mfashion user-6=dhamachi user-7=goartsym user-8=volkanco user-9=workandt user-10=barececo user-11=simbiome user-12=getaldus user-13=delcevca user-14=mpbmk user-15=agrosind user-16=kujnamon user-17=univerz1 user-18=velmk user-19=gogovan1 user-20=datalink user-21=polyeste user-22=vfxnestc user-23=ivanjord user-24=groskome user-25=sedcmk user-26=maleshne user-27=datelcom user-28=bizporta user-29=mspmk user-30=infobadi user-31=detskagr user-32=spdcompu user-33=urbanexp user-34=wikicamp user-35=cabinetm user-36=vezilkac user-37=itradeco user-38=janiboja user-39=bovincom user-40=stojano1 user-41=klimimk user-42=stokovna user-43=sparkupm user-44=custome1 user-45=busymard user-46=zvskopje user-47=zampmk user-48=palenzok user-49=dalmacom user-50=cetplatf
Sep 13 19:40:10 power sudo[29178]: wp-toolkit : (command continued) user-51=premiuma user-52=kouzonco user-53=butelmk user-54=daris user-55=premiums user-56=arturaco user-57=screenme user-58=nasaidni user-59=karpospo user-60=ideaplus user-61=drleomk user-62=inotekso user-63=jpparkin user-64=nolimits user-65=kolened1 user-66=nlpmkorg user-67=centarba user-68=seloviro user-69=enochmk user-70=herbalpl user-71=sprintst user-72=dikimk12 user-73=berbermk user-74=edomcomm user-75=rastiraz user-76=holiyayt user-77=stravelm user-78=robustco user-79=wondersp user-80=pecakome user-81=dnevnoin user-82=gjorgeiv user-83=tradeyou user-84=gocruise user-85=mstmmk user-86=goodnews user-87=proverim user-88=dadarmk user-89=tealmk user-90=viewinn user-91=trudovop user-92=vmro user-93=enaspotc user-94=bauerbg user-95=uhostmk5 user-96=oouslave user-97=raremk user-98=stojnevi user-99=anitermc user-100=youthgua user-101=hotammk user-102=cajsproc user-103=ekostoc1 user-104=levantmk user-105=oncolog1
Sep 13 19:40:10 power sudo[29178]: wp-toolkit : (command continued) user-106=nefrolog user-107=caramk user-108=hidrommk user-109=frizered user-110=evolvepl user-111=pelagoni user-112=avtogumi user-113=socioloz user-114=evberasm user-115=bonitavi user-116=conserva user-117=cupidpro user-118=vegemk1 user-119=euronic3 user-120=bauerin2 user-121=folklore user-122=fxxcom user-123=peshkai1 user-124=dimpalne user-125=eaptekam user-126=gradbai1 user-127=aptekafa user-128=madzomk user-129=evacommk user-130=jpkomuna user-131=izzomk user-132=makdrone user-133=tehnodro user-134=bbbustou user-135=biplmk user-136=kaoilmk user-137=pelagini user-138=solointe user-139=jaramk user-140=recorgmk user-141=taktcomm user-142=cleanerm user-143=animatem user-144=progress user-145=sssoluti user-146=atspedco user-147=electrol user-148=eliksirz user-149=naksorgm user-150=trigemat user-151=golakkom user-152=solarinv user-153=eurofarm user-154=viplastc user-155=wineberr user-156=mbmehani user-157=ismassag
Sep 13 19:40:10 power sudo[29178]: wp-toolkit : (command continued) user-158=workbenc user-159=nikolov1 user-160=hausmark user-161=forzares user-162=nikimare user-163=aptekazd user-164=lblawcom user-165=nucktra1 user-166=mediatag user-167=intelek1 user-168=matratze user-169=euronic2 user-170=kardiome user-171=apgrupmk user-172=bogdanos user-173=carrent1 user-174=mediasol user-175=nutrivim user-176=chemhemc user-177=samasped user-178=elektrot user-179=zapovim1 user-180=cosmatob user-181=euromaki user-182=vtranseu user-183=pravekom user-184=infopor1 user-185=albuname user-186=glammace user-187=imdskopj user-188=inkigaic user-189=modernar user-190=tehnologija user-191=taneccom user-192=vacuacti user-193=innofabl user-194=premiumi user-195=fnjorgmk user-196=darkogor user-197=prizmapl user-198=dslmk user-199=bozinovm user-200=supremel user-201=v5srybi9dcdx user-202=aquatech user-203=gorsajmk user-204=zdmgpsor user-205=tcieuroc user-206=mapaspla user-207=solemor1 user-208=nationa2
Sep 13 19:40:10 power sudo[29178]: wp-toolkit : (command continued) user-209=onlinesh user-210=versusmk user-211=fiziosmk user-212=ambitiou user-213=starluxm user-214=radekrat user-215=fffhpcwr feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:40:10 power sudo[29178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:11 power sudo[29178]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:11 power sudo[29194]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:40:11 power sudo[29194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:11 power sudo[29194]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:12 power sudo[29200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:40:12 power sudo[29200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:12 power sudo[29200]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:12 power sudo[29205]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:40:12 power sudo[29205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:12 power sudo[29205]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:12 power sudo[29210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=cosmatob user-2=euromaki user-3=zapovim1 user-4=elektrot user-5=chemhemc user-6=samasped user-7=nutrivim user-8=imdskopj user-9=glammace user-10=albuname user-11=infopor1 user-12=pravekom user-13=vtranseu user-14=intelek1 user-15=mediatag user-16=nucktra1 user-17=lblawcom user-18=aptekazd user-19=nikimare user-20=forzares user-21=hausmark user-22=nikolov1 user-23=mediasol user-24=bogdanos user-25=carrent1 user-26=apgrupmk user-27=kardiome user-28=euronic2 user-29=matratze user-30=onlinesh user-31=nationa2 user-32=solemor1 user-33=mapaspla user-34=tcieuroc user-35=fffhpcwr user-36=radekrat user-37=starluxm user-38=ambitiou user-39=fiziosmk user-40=versusmk user-41=bozinovm user-42=darkogor user-43=fnjorgmk user-44=prizmapl user-45=dslmk user-46=premiumi user-47=innofabl user-48=vacuacti user-49=taneccom
Sep 13 19:40:12 power sudo[29210]: wp-toolkit : (command continued) user-50=tehnologija user-51=modernar user-52=inkigaic user-53=zdmgpsor user-54=gorsajmk user-55=aquatech user-56=v5srybi9dcdx user-57=supremel user-58=evacommk user-59=aptekafa user-60=madzomk user-61=gradbai1 user-62=eaptekam user-63=dimpalne user-64=peshkai1 user-65=fxxcom user-66=tehnodro user-67=makdrone user-68=izzomk user-69=jpkomuna user-70=euronic3 user-71=vegemk1 user-72=cupidpro user-73=conserva user-74=bonitavi user-75=evberasm user-76=folklore user-77=bauerin2 user-78=eurofarm user-79=solarinv user-80=golakkom user-81=trigemat user-82=naksorgm user-83=eliksirz user-84=electrol user-85=workbenc user-86=ismassag user-87=mbmehani user-88=wineberr user-89=viplastc user-90=pelagini user-91=biplmk user-92=kaoilmk user-93=bbbustou user-94=atspedco user-95=sssoluti user-96=progress user-97=animatem user-98=cleanerm user-99=taktcomm user-100=recorgmk user-101=jaramk user-102=solointe user-103=tradeyou
Sep 13 19:40:12 power sudo[29210]: wp-toolkit : (command continued) user-104=gjorgeiv user-105=dnevnoin user-106=pecakome user-107=wondersp user-108=stravelm user-109=robustco user-110=holiyayt user-111=rastiraz user-112=tealmk user-113=dadarmk user-114=proverim user-115=goodnews user-116=mstmmk user-117=gocruise user-118=seloviro user-119=centarba user-120=nlpmkorg user-121=kolened1 user-122=nolimits user-123=edomcomm user-124=berbermk user-125=dikimk12 user-126=sprintst user-127=enochmk user-128=herbalpl user-129=frizered user-130=hidrommk user-131=caramk user-132=nefrolog user-133=oncolog1 user-134=ekostoc1 user-135=levantmk user-136=avtogumi user-137=socioloz user-138=pelagoni user-139=evolvepl user-140=stojnevi user-141=raremk user-142=oouslave user-143=uhostmk5 user-144=bauerbg user-145=enaspotc user-146=vmro user-147=trudovop user-148=viewinn user-149=cajsproc user-150=hotammk user-151=youthgua user-152=anitermc user-153=bizporta user-154=datelcom user-155=maleshne
Sep 13 19:40:12 power sudo[29210]: wp-toolkit : (command continued) user-156=sedcmk user-157=groskome user-158=ivanjord user-159=vfxnestc user-160=polyeste user-161=wikicamp user-162=urbanexp user-163=spdcompu user-164=detskagr user-165=mspmk user-166=infobadi user-167=delcevca user-168=simbiome user-169=getaldus user-170=barececo user-171=workandt user-172=volkanco user-173=goartsym user-174=dhamachi user-175=mfashion user-176=bianasho user-177=makoasmk user-178=skyapart user-179=rasmorgm user-180=datalink user-181=velmk user-182=gogovan1 user-183=univerz1 user-184=kujnamon user-185=agrosind user-186=mpbmk user-187=kouzonco user-188=premiuma user-189=cetplatf user-190=dalmacom user-191=jpparkin user-192=inotekso user-193=drleomk user-194=ideaplus user-195=nasaidni user-196=karpospo user-197=screenme user-198=arturaco user-199=premiums user-200=daris user-201=butelmk user-202=stojano1 user-203=bovincom user-204=janiboja user-205=itradeco user-206=vezilkac user-207=cabinetm
Sep 13 19:40:12 power sudo[29210]: wp-toolkit : (command continued) user-208=palenzok user-209=zvskopje user-210=busymard user-211=zampmk user-212=custome1 user-213=sparkupm user-214=stokovna user-215=klimimk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:40:12 power sudo[29210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:12 power sudo[29210]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:12 power sudo[29238]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:12 power sudo[29238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:12 power sudo[29238]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:12 power sudo[29251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:13 power sudo[29251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:13 power sudo[29251]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:13 power sudo[29257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:40:13 power sudo[29257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:13 power sudo[29257]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:13 power sudo[29263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:40:13 power sudo[29263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:13 power sudo[29263]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:13 power sudo[29276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:13 power sudo[29276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:13 power sudo[29276]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:13 power sudo[29284]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:40:13 power sudo[29284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:13 power sudo[29284]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:13 power sudo[29290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:40:13 power sudo[29290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:13 power sudo[29290]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:14 power sudo[29311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:14 power sudo[29311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:14 power sudo[29311]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:15 power sudo[29342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:15 power sudo[29342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:15 power sudo[29342]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:16 power sudo[29360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:16 power sudo[29360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:16 power sudo[29360]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:18 power sudo[29390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:18 power sudo[29390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:18 power sudo[29390]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:18 power sudo[29395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:40:18 power sudo[29395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:18 power sudo[29395]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:18 power sudo[29400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:40:18 power sudo[29400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:18 power sudo[29400]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:18 power sudo[29405]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:40:18 power sudo[29405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:19 power sudo[29405]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:19 power sudo[29414]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=chemhemc user-2=samasped user-3=nutrivim user-4=cosmatob user-5=euromaki user-6=zapovim1 user-7=elektrot user-8=infopor1 user-9=vtranseu user-10=pravekom user-11=imdskopj user-12=albuname user-13=glammace user-14=forzares user-15=nikimare user-16=aptekazd user-17=hausmark user-18=nikolov1 user-19=mediatag user-20=intelek1 user-21=lblawcom user-22=nucktra1 user-23=matratze user-24=euronic2 user-25=apgrupmk user-26=bogdanos user-27=carrent1 user-28=mediasol user-29=kardiome user-30=tcieuroc user-31=nationa2 user-32=onlinesh user-33=mapaspla user-34=solemor1 user-35=fiziosmk user-36=ambitiou user-37=versusmk user-38=fffhpcwr user-39=starluxm user-40=radekrat user-41=modernar user-42=inkigaic user-43=vacuacti user-44=premiumi user-45=innofabl user-46=fnjorgmk user-47=darkogor user-48=dslmk user-49=prizmapl
Sep 13 19:40:19 power sudo[29414]: wp-toolkit : (command continued) user-50=bozinovm user-51=tehnologija user-52=taneccom user-53=aquatech user-54=gorsajmk user-55=supremel user-56=v5srybi9dcdx user-57=zdmgpsor user-58=dimpalne user-59=eaptekam user-60=fxxcom user-61=peshkai1 user-62=aptekafa user-63=madzomk user-64=evacommk user-65=gradbai1 user-66=jpkomuna user-67=izzomk user-68=tehnodro user-69=makdrone user-70=evberasm user-71=bonitavi user-72=cupidpro user-73=vegemk1 user-74=euronic3 user-75=conserva user-76=folklore user-77=bauerin2 user-78=golakkom user-79=electrol user-80=eliksirz user-81=naksorgm user-82=trigemat user-83=eurofarm user-84=solarinv user-85=viplastc user-86=wineberr user-87=ismassag user-88=workbenc user-89=mbmehani user-90=bbbustou user-91=biplmk user-92=kaoilmk user-93=pelagini user-94=taktcomm user-95=recorgmk user-96=solointe user-97=jaramk user-98=atspedco user-99=sssoluti user-100=cleanerm user-101=animatem user-102=progress user-103=stravelm
Sep 13 19:40:19 power sudo[29414]: wp-toolkit : (command continued) user-104=robustco user-105=wondersp user-106=pecakome user-107=rastiraz user-108=holiyayt user-109=tradeyou user-110=gjorgeiv user-111=dnevnoin user-112=mstmmk user-113=goodnews user-114=gocruise user-115=tealmk user-116=proverim user-117=dadarmk user-118=kolened1 user-119=centarba user-120=nlpmkorg user-121=nolimits user-122=seloviro user-123=enochmk user-124=herbalpl user-125=sprintst user-126=dikimk12 user-127=berbermk user-128=edomcomm user-129=ekostoc1 user-130=levantmk user-131=oncolog1 user-132=nefrolog user-133=hidrommk user-134=frizered user-135=caramk user-136=evolvepl user-137=socioloz user-138=avtogumi user-139=pelagoni user-140=viewinn user-141=trudovop user-142=vmro user-143=enaspotc user-144=stojnevi user-145=bauerbg user-146=uhostmk5 user-147=oouslave user-148=raremk user-149=anitermc user-150=youthgua user-151=hotammk user-152=cajsproc user-153=ivanjord user-154=groskome user-155=sedcmk
Sep 13 19:40:19 power sudo[29414]: wp-toolkit : (command continued) user-156=polyeste user-157=vfxnestc user-158=bizporta user-159=maleshne user-160=datelcom user-161=detskagr user-162=spdcompu user-163=infobadi user-164=mspmk user-165=urbanexp user-166=wikicamp user-167=skyapart user-168=makoasmk user-169=bianasho user-170=rasmorgm user-171=workandt user-172=barececo user-173=simbiome user-174=getaldus user-175=delcevca user-176=mfashion user-177=dhamachi user-178=volkanco user-179=goartsym user-180=mpbmk user-181=agrosind user-182=datalink user-183=kujnamon user-184=univerz1 user-185=gogovan1 user-186=velmk user-187=premiuma user-188=kouzonco user-189=dalmacom user-190=cetplatf user-191=arturaco user-192=screenme user-193=nasaidni user-194=karpospo user-195=ideaplus user-196=butelmk user-197=daris user-198=premiums user-199=drleomk user-200=inotekso user-201=jpparkin user-202=itradeco user-203=janiboja user-204=cabinetm user-205=vezilkac user-206=stojano1 user-207=bovincom
Sep 13 19:40:19 power sudo[29414]: wp-toolkit : (command continued) user-208=stokovna user-209=sparkupm user-210=klimimk user-211=busymard user-212=zampmk user-213=zvskopje user-214=palenzok user-215=custome1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:40:19 power sudo[29420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:19 power sudo[29414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:19 power sudo[29420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:19 power sudo[29420]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:19 power sudo[29414]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:19 power sudo[29467]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:40:20 power sudo[29467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:20 power sudo[29467]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:20 power sudo[29472]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:40:20 power sudo[29472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:20 power sudo[29472]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:20 power sudo[29476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:40:20 power sudo[29476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:20 power sudo[29476]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:20 power sudo[29496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=vezilkac user-2=cabinetm user-3=janiboja user-4=itradeco user-5=bovincom user-6=stojano1 user-7=klimimk user-8=sparkupm user-9=stokovna user-10=custome1 user-11=palenzok user-12=zampmk user-13=busymard user-14=zvskopje user-15=cetplatf user-16=dalmacom user-17=kouzonco user-18=premiuma user-19=premiums user-20=butelmk user-21=daris user-22=ideaplus user-23=karpospo user-24=nasaidni user-25=arturaco user-26=screenme user-27=jpparkin user-28=inotekso user-29=drleomk user-30=rasmorgm user-31=bianasho user-32=makoasmk user-33=skyapart user-34=goartsym user-35=volkanco user-36=dhamachi user-37=mfashion user-38=getaldus user-39=simbiome user-40=delcevca user-41=barececo user-42=workandt user-43=agrosind user-44=mpbmk user-45=gogovan1 user-46=velmk user-47=kujnamon user-48=univerz1 user-49=datalink user-50=vfxnestc
Sep 13 19:40:20 power sudo[29496]: wp-toolkit : (command continued) user-51=polyeste user-52=sedcmk user-53=groskome user-54=ivanjord user-55=datelcom user-56=maleshne user-57=bizporta user-58=mspmk user-59=infobadi user-60=spdcompu user-61=detskagr user-62=wikicamp user-63=urbanexp user-64=enaspotc user-65=vmro user-66=viewinn user-67=trudovop user-68=raremk user-69=oouslave user-70=uhostmk5 user-71=bauerbg user-72=stojnevi user-73=youthgua user-74=anitermc user-75=cajsproc user-76=hotammk user-77=nefrolog user-78=levantmk user-79=ekostoc1 user-80=oncolog1 user-81=caramk user-82=frizered user-83=hidrommk user-84=evolvepl user-85=pelagoni user-86=avtogumi user-87=socioloz user-88=nolimits user-89=centarba user-90=nlpmkorg user-91=kolened1 user-92=seloviro user-93=dikimk12 user-94=sprintst user-95=herbalpl user-96=enochmk user-97=edomcomm user-98=berbermk user-99=holiyayt user-100=rastiraz user-101=pecakome user-102=wondersp user-103=robustco user-104=stravelm user-105=dnevnoin
Sep 13 19:40:20 power sudo[29496]: wp-toolkit : (command continued) user-106=gjorgeiv user-107=tradeyou user-108=gocruise user-109=goodnews user-110=mstmmk user-111=dadarmk user-112=proverim user-113=tealmk user-114=kaoilmk user-115=biplmk user-116=bbbustou user-117=pelagini user-118=jaramk user-119=solointe user-120=taktcomm user-121=recorgmk user-122=progress user-123=animatem user-124=cleanerm user-125=sssoluti user-126=atspedco user-127=trigemat user-128=naksorgm user-129=eliksirz user-130=electrol user-131=golakkom user-132=solarinv user-133=eurofarm user-134=wineberr user-135=viplastc user-136=mbmehani user-137=workbenc user-138=ismassag user-139=bonitavi user-140=evberasm user-141=conserva user-142=euronic3 user-143=vegemk1 user-144=cupidpro user-145=bauerin2 user-146=folklore user-147=peshkai1 user-148=fxxcom user-149=eaptekam user-150=dimpalne user-151=gradbai1 user-152=evacommk user-153=madzomk user-154=aptekafa user-155=izzomk user-156=jpkomuna user-157=makdrone
Sep 13 19:40:20 power sudo[29496]: wp-toolkit : (command continued) user-158=tehnodro user-159=inkigaic user-160=modernar user-161=taneccom user-162=tehnologija user-163=bozinovm user-164=darkogor user-165=dslmk user-166=fnjorgmk user-167=prizmapl user-168=innofabl user-169=premiumi user-170=vacuacti user-171=v5srybi9dcdx user-172=supremel user-173=gorsajmk user-174=aquatech user-175=zdmgpsor user-176=tcieuroc user-177=solemor1 user-178=mapaspla user-179=onlinesh user-180=nationa2 user-181=versusmk user-182=ambitiou user-183=fiziosmk user-184=radekrat user-185=starluxm user-186=fffhpcwr user-187=nikolov1 user-188=hausmark user-189=aptekazd user-190=nikimare user-191=forzares user-192=nucktra1 user-193=lblawcom user-194=intelek1 user-195=mediatag user-196=euronic2 user-197=matratze user-198=kardiome user-199=mediasol user-200=bogdanos user-201=carrent1 user-202=apgrupmk user-203=nutrivim user-204=samasped user-205=chemhemc user-206=elektrot user-207=zapovim1 user-208=euromaki
Sep 13 19:40:20 power sudo[29496]: wp-toolkit : (command continued) user-209=cosmatob user-210=vtranseu user-211=pravekom user-212=infopor1 user-213=glammace user-214=albuname user-215=imdskopj feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:40:20 power sudo[29496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:20 power sudo[29496]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:20 power sudo[29511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:21 power sudo[29511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:21 power sudo[29511]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:21 power sudo[29516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:40:21 power sudo[29516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:21 power sudo[29516]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:21 power sudo[29521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:40:21 power sudo[29521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:21 power sudo[29521]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:21 power sudo[29535]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:21 power sudo[29535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:21 power sudo[29535]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:21 power sudo[29544]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:40:21 power sudo[29544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:21 power sudo[29544]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:21 power sudo[29550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:40:21 power sudo[29550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:21 power sudo[29550]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:21 power sudo[29567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:21 power sudo[29567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:21 power sudo[29567]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:21 power sudo[29579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:21 power sudo[29579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:22 power sudo[29579]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:24 power sudo[29631]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:24 power sudo[29632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:24 power sudo[29631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:24 power sudo[29632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:24 power sudo[29631]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:24 power sudo[29632]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:27 power sudo[29674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:27 power sudo[29674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:27 power sudo[29674]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:27 power sudo[29699]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:27 power sudo[29699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:27 power sudo[29699]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:29 power sudo[29725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:29 power sudo[29725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:29 power sudo[29725]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:30 power sudo[29762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:30 power sudo[29762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:30 power sudo[29762]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:31 power sudo[29780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:31 power sudo[29780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:31 power sudo[29780]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:33 power sudo[29827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:33 power sudo[29827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:33 power sudo[29827]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:35 power sudo[29858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:35 power sudo[29858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:35 power sudo[29858]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:36 power sudo[29891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:36 power sudo[29891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:36 power sudo[29891]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:37 power sudo[29908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:37 power sudo[29908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:37 power sudo[29908]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:40 power sudo[29956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:40 power sudo[29956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:40 power sudo[29956]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:40 power sudo[29975]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:40 power sudo[29975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:40 power sudo[29975]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:42 power sudo[30030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:42 power sudo[30030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:42 power sudo[30030]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:43 power sudo[30073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:43 power sudo[30073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:43 power sudo[30073]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:46 power sudo[30104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:46 power sudo[30104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:46 power sudo[30104]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:46 power sudo[30117]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:46 power sudo[30117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:46 power sudo[30117]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:48 power sudo[30167]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:48 power sudo[30167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:48 power sudo[30167]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:51 power sudo[30235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:51 power sudo[30235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:51 power sudo[30235]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:55 power sudo[30296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:55 power sudo[30296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:55 power sudo[30296]: pam_unix(sudo:session): session closed for user root
Sep 13 19:40:57 power sudo[30348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:40:57 power sudo[30348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:40:57 power sudo[30348]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:00 power sudo[30380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:00 power sudo[30380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:00 power sudo[30380]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:03 power sudo[30432]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:03 power sudo[30432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:03 power sudo[30432]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:06 power sudo[30520]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:07 power sudo[30520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:07 power sudo[30520]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:09 power sudo[30546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:09 power sudo[30546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:09 power sudo[30546]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:12 power sudo[30665]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:12 power sudo[30665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:12 power sudo[30665]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:16 power sudo[30776]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:16 power sudo[30776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:16 power sudo[30776]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:18 power sudo[30826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:18 power sudo[30826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:18 power sudo[30826]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:21 power sudo[30889]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:21 power sudo[30889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:21 power sudo[30889]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:24 power sudo[30929]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:24 power sudo[30929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:24 power sudo[30929]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:27 power sudo[30993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:27 power sudo[30993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:27 power sudo[30993]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:30 power sudo[31072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:30 power sudo[31072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:30 power sudo[31072]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:33 power sudo[31147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:33 power sudo[31147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:33 power sudo[31147]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:36 power sudo[31204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:36 power sudo[31204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:36 power sudo[31204]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:39 power sudo[31259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:39 power sudo[31259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:39 power sudo[31259]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:42 power sudo[31297]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:42 power sudo[31297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:42 power sudo[31297]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:45 power sudo[31387]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:45 power sudo[31387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:45 power sudo[31387]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:48 power sudo[31436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:48 power sudo[31436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:48 power sudo[31436]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:51 power sudo[31507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:51 power sudo[31507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:51 power sudo[31507]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:54 power sudo[31553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:54 power sudo[31553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:54 power sudo[31553]: pam_unix(sudo:session): session closed for user root
Sep 13 19:41:57 power sudo[31606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:41:57 power sudo[31606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:41:57 power sudo[31606]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:00 power sudo[31651]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:00 power sudo[31651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:00 power sudo[31651]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:01 power systemd[31677]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 19:42:03 power sudo[31752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:03 power sudo[31752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:03 power sudo[31752]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:06 power sudo[31853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:06 power sudo[31853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:06 power sudo[31853]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:09 power sudo[31909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:09 power sudo[31909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:09 power sudo[31909]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:12 power sudo[31958]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:12 power sudo[31958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:12 power sudo[31958]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:15 power sudo[32003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:15 power sudo[32003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:15 power sudo[32003]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:18 power sudo[32051]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:18 power sudo[32051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:18 power sudo[32051]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:21 power sudo[32104]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:21 power sudo[32104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:21 power sudo[32104]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:24 power sudo[32146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:24 power sudo[32146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:24 power sudo[32146]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:26 power sudo[32179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:26 power sudo[32179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:26 power sudo[32179]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:29 power sudo[32219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:29 power sudo[32219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:29 power sudo[32219]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:32 power sudo[32260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:32 power sudo[32260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:32 power sudo[32260]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:35 power sudo[32306]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:35 power sudo[32306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:35 power sudo[32306]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:38 power sudo[32346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:38 power sudo[32346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:38 power sudo[32346]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:41 power sudo[32386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:41 power sudo[32386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:41 power sudo[32386]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 13 19:42:43 power sudo[32426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32426]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32430]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 13 19:42:43 power sudo[32430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32430]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 13 19:42:43 power sudo[32434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32434]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'curl --silent --insecure --request POST https://localhost:8443/check-plesk.php --data challenge=Z1ufNtWT4E'
Sep 13 19:42:43 power sudo[32438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32438]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32443]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 13 19:42:43 power sudo[32443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32443]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 13 19:42:43 power sudo[32447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32447]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type'
Sep 13 19:42:43 power sudo[32452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32452]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 19:42:43 power sudo[32456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32456]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 13 19:42:43 power sudo[32462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32462]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:43 power sudo[32466]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 13 19:42:43 power sudo[32466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:43 power sudo[32466]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:44 power sudo[32470]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 13 19:42:44 power sudo[32470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:44 power sudo[32470]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:44 power sudo[32474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 19:42:44 power sudo[32474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:44 power sudo[32474]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:44 power sudo[32481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/conf.d/wp-toolkit.cfg
Sep 13 19:42:44 power sudo[32481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:44 power sudo[32481]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:44 power sudo[32485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json'
Sep 13 19:42:44 power sudo[32485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:44 power sudo[32485]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:44 power sudo[32509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:44 power sudo[32509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:44 power sudo[32509]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:46 power sudo[32540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 19:42:46 power sudo[32540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:46 power sudo[32540]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:46 power sudo[32545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 19:42:46 power sudo[32545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:46 power sudo[32545]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:46 power sudo[32550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=youthgua user-2=anitermc user-3=hotammk user-4=cajsproc user-5=vmro user-6=viewinn user-7=trudovop user-8=enaspotc user-9=stojnevi user-10=uhostmk5 user-11=bauerbg user-12=raremk user-13=oouslave user-14=evolvepl user-15=avtogumi user-16=socioloz user-17=pelagoni user-18=nefrolog user-19=oncolog1 user-20=ekostoc1 user-21=levantmk user-22=frizered user-23=hidrommk user-24=caramk user-25=sprintst user-26=enochmk user-27=herbalpl user-28=dikimk12 user-29=berbermk user-30=edomcomm user-31=centarba user-32=nlpmkorg user-33=kolened1 user-34=nolimits user-35=seloviro user-36=mstmmk user-37=goodnews user-38=gocruise user-39=tealmk user-40=proverim user-41=dadarmk user-42=wondersp user-43=robustco user-44=stravelm user-45=pecakome user-46=rastiraz user-47=holiyayt user-48=tradeyou user-49=gjorgeiv user-50=dnevnoin
Sep 13 19:42:46 power sudo[32550]: wp-toolkit : (command continued) user-51=sparkupm user-52=stokovna user-53=klimimk user-54=zampmk user-55=busymard user-56=zvskopje user-57=palenzok user-58=custome1 user-59=itradeco user-60=janiboja user-61=cabinetm user-62=vezilkac user-63=stojano1 user-64=bovincom user-65=arturaco user-66=screenme user-67=ideaplus user-68=karpospo user-69=nasaidni user-70=premiums user-71=butelmk user-72=daris user-73=drleomk user-74=jpparkin user-75=inotekso user-76=premiuma user-77=kouzonco user-78=dalmacom user-79=cetplatf user-80=agrosind user-81=mpbmk user-82=datalink user-83=gogovan1 user-84=velmk user-85=kujnamon user-86=univerz1 user-87=bianasho user-88=makoasmk user-89=skyapart user-90=rasmorgm user-91=workandt user-92=simbiome user-93=delcevca user-94=getaldus user-95=barececo user-96=mfashion user-97=goartsym user-98=volkanco user-99=dhamachi user-100=detskagr user-101=spdcompu user-102=infobadi user-103=mspmk user-104=urbanexp user-105=wikicamp
Sep 13 19:42:46 power sudo[32550]: wp-toolkit : (command continued) user-106=groskome user-107=ivanjord user-108=sedcmk user-109=vfxnestc user-110=polyeste user-111=bizporta user-112=datelcom user-113=maleshne user-114=gorsajmk user-115=aquatech user-116=supremel user-117=v5srybi9dcdx user-118=zdmgpsor user-119=modernar user-120=inkigaic user-121=premiumi user-122=innofabl user-123=vacuacti user-124=bozinovm user-125=darkogor user-126=prizmapl user-127=fnjorgmk user-128=dslmk user-129=tehnologija user-130=taneccom user-131=fiziosmk user-132=ambitiou user-133=versusmk user-134=fffhpcwr user-135=radekrat user-136=starluxm user-137=tcieuroc user-138=nationa2 user-139=onlinesh user-140=mapaspla user-141=solemor1 user-142=euronic2 user-143=matratze user-144=apgrupmk user-145=mediasol user-146=carrent1 user-147=bogdanos user-148=kardiome user-149=forzares user-150=aptekazd user-151=nikimare user-152=hausmark user-153=nikolov1 user-154=intelek1 user-155=mediatag user-156=lblawcom
Sep 13 19:42:46 power sudo[32550]: wp-toolkit : (command continued) user-157=nucktra1 user-158=infopor1 user-159=vtranseu user-160=pravekom user-161=imdskopj user-162=glammace user-163=albuname user-164=samasped user-165=chemhemc user-166=nutrivim user-167=euromaki user-168=cosmatob user-169=elektrot user-170=zapovim1 user-171=taktcomm user-172=recorgmk user-173=solointe user-174=jaramk user-175=atspedco user-176=sssoluti user-177=animatem user-178=cleanerm user-179=progress user-180=bbbustou user-181=biplmk user-182=kaoilmk user-183=pelagini user-184=viplastc user-185=wineberr user-186=ismassag user-187=workbenc user-188=mbmehani user-189=golakkom user-190=electrol user-191=trigemat user-192=eliksirz user-193=naksorgm user-194=eurofarm user-195=solarinv user-196=folklore user-197=bauerin2 user-198=bonitavi user-199=evberasm user-200=vegemk1 user-201=cupidpro user-202=euronic3 user-203=conserva user-204=jpkomuna user-205=izzomk user-206=tehnodro user-207=makdrone
Sep 13 19:42:46 power sudo[32550]: wp-toolkit : (command continued) user-208=dimpalne user-209=eaptekam user-210=peshkai1 user-211=fxxcom user-212=evacommk user-213=aptekafa user-214=madzomk user-215=gradbai1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 19:42:46 power sudo[32550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:46 power sudo[32550]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:46 power sudo[32557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 19:42:46 power sudo[32557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:46 power sudo[32557]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:46 power sudo[32561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DI1wgxKJdgzDofCX.~
Sep 13 19:42:46 power sudo[32561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:46 power sudo[32561]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:46 power sudo[32565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DI1wgxKJdgzDofCX.~\''
Sep 13 19:42:46 power sudo[32565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:46 power sudo[32565]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:46 power sudo[32570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DI1wgxKJdgzDofCX.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 13 19:42:46 power sudo[32570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:46 power sudo[32570]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:46 power sudo[32574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs'
Sep 13 19:42:46 power sudo[32574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:46 power sudo[32574]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:47 power sudo[32581]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_licenses --output=json'
Sep 13 19:42:47 power sudo[32581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:47 power sudo[32581]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:47 power sudo[32691]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:47 power sudo[32691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:47 power sudo[32691]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:48 power sudo[33523]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json'
Sep 13 19:42:48 power sudo[33523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:48 power sudo[33523]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:50 power sudo[33565]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:50 power sudo[33565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:50 power sudo[33565]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:52 power sudo[33624]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:52 power sudo[33624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:52 power sudo[33624]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:55 power sudo[33677]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:55 power sudo[33677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:55 power sudo[33677]: pam_unix(sudo:session): session closed for user root
Sep 13 19:42:58 power sudo[33722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:42:58 power sudo[33722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:42:58 power sudo[33722]: pam_unix(sudo:session): session closed for user root
Sep 13 19:43:01 power sudo[33766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:43:01 power sudo[33766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:43:01 power sudo[33766]: pam_unix(sudo:session): session closed for user root
Sep 13 19:43:05 power sudo[33833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:43:05 power sudo[33833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:43:05 power sudo[33833]: pam_unix(sudo:session): session closed for user root
Sep 13 19:43:07 power sudo[33914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=berbermk Locale get_user_locale --output=json'
Sep 13 19:43:07 power sudo[33914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 19:43:07 power sudo[33914]: pam_unix(sudo:session): session closed for user root
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Sep 13 20:02:14 power polkitd[2202]: Loading rules from directory /etc/polkit-1/rules.d
Sep 13 20:02:14 power polkitd[2202]: Loading rules from directory /usr/share/polkit-1/rules.d
Sep 13 20:02:14 power polkitd[2202]: Finished loading, compiling and executing 5 rules
Sep 13 20:02:14 power polkitd[2202]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Sep 13 20:02:26 power sshd[4682]: Server listening on 0.0.0.0 port 2200.
Sep 13 20:02:26 power sshd[4682]: Server listening on :: port 2200.
Sep 13 20:02:32 power sudo[5403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:02:32 power systemd[5408]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:02:32 power sudo[5403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:32 power sudo[5403]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:32 power sudo[5426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:02:32 power sudo[5426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:33 power sudo[5426]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:33 power sudo[5442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:02:33 power sudo[5442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:33 power sudo[5442]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:33 power sudo[5449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:02:33 power sudo[5449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:33 power sudo[5449]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:33 power sudo[5460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=wineberr user-2=viplastc user-3=mbmehani user-4=workbenc user-5=ismassag user-6=naksorgm user-7=eliksirz user-8=trigemat user-9=electrol user-10=golakkom user-11=solarinv user-12=eurofarm user-13=jaramk user-14=solointe user-15=taktcomm user-16=recorgmk user-17=progress user-18=cleanerm user-19=animatem user-20=atspedco user-21=sssoluti user-22=biplmk user-23=kaoilmk user-24=bbbustou user-25=pelagini user-26=izzomk user-27=jpkomuna user-28=makdrone user-29=tehnodro user-30=fxxcom user-31=peshkai1 user-32=eaptekam user-33=dimpalne user-34=gradbai1 user-35=madzomk user-36=aptekafa user-37=evacommk user-38=bauerin2 user-39=folklore user-40=evberasm user-41=bonitavi user-42=conserva user-43=euronic3 user-44=cupidpro user-45=vegemk1 user-46=versusmk user-47=ambitiou user-48=fiziosmk user-49=starluxm
Sep 13 20:02:33 power sudo[5460]: wp-toolkit : (command continued) user-50=radekrat user-51=fffhpcwr user-52=tcieuroc user-53=solemor1 user-54=mapaspla user-55=onlinesh user-56=nationa2 user-57=v5srybi9dcdx user-58=supremel user-59=aquatech user-60=gorsajmk user-61=zdmgpsor user-62=inkigaic user-63=modernar user-64=taneccom user-65=tehnologija user-66=darkogor user-67=fnjorgmk user-68=prizmapl user-69=dslmk user-70=bozinovm user-71=vacuacti user-72=innofabl user-73=premiumi user-74=pravekom user-75=vtranseu user-76=infopor1 user-77=albuname user-78=glammace user-79=imdskopj user-80=nutrivim user-81=chemhemc user-82=samasped user-83=elektrot user-84=zapovim1 user-85=euromaki user-86=cosmatob user-87=matratze user-88=euronic2 user-89=kardiome user-90=bogdanos user-91=carrent1 user-92=mediasol user-93=apgrupmk user-94=nikolov1 user-95=hausmark user-96=nikimare user-97=aptekazd user-98=forzares user-99=nucktra1 user-100=lblawcom user-101=mediatag user-102=intelek1 user-103=daris
Sep 13 20:02:33 power sudo[5460]: wp-toolkit : (command continued) user-104=butelmk user-105=premiums user-106=nasaidni user-107=karpospo user-108=ideaplus user-109=screenme user-110=arturaco user-111=inotekso user-112=jpparkin user-113=drleomk user-114=cetplatf user-115=dalmacom user-116=kouzonco user-117=premiuma user-118=klimimk user-119=stokovna user-120=sparkupm user-121=custome1 user-122=palenzok user-123=zvskopje user-124=busymard user-125=zampmk user-126=vezilkac user-127=cabinetm user-128=janiboja user-129=itradeco user-130=bovincom user-131=stojano1 user-132=infobadi user-133=mspmk user-134=spdcompu user-135=detskagr user-136=wikicamp user-137=urbanexp user-138=polyeste user-139=vfxnestc user-140=sedcmk user-141=ivanjord user-142=groskome user-143=maleshne user-144=datelcom user-145=bizporta user-146=mpbmk user-147=agrosind user-148=univerz1 user-149=kujnamon user-150=velmk user-151=gogovan1 user-152=datalink user-153=rasmorgm user-154=skyapart user-155=bianasho
Sep 13 20:02:33 power sudo[5460]: wp-toolkit : (command continued) user-156=makoasmk user-157=dhamachi user-158=goartsym user-159=volkanco user-160=mfashion user-161=barececo user-162=delcevca user-163=simbiome user-164=getaldus user-165=workandt user-166=evolvepl user-167=pelagoni user-168=socioloz user-169=avtogumi user-170=oncolog1 user-171=ekostoc1 user-172=levantmk user-173=nefrolog user-174=caramk user-175=hidrommk user-176=frizered user-177=anitermc user-178=youthgua user-179=cajsproc user-180=hotammk user-181=enaspotc user-182=viewinn user-183=trudovop user-184=vmro user-185=oouslave user-186=raremk user-187=bauerbg user-188=uhostmk5 user-189=stojnevi user-190=gocruise user-191=goodnews user-192=mstmmk user-193=dadarmk user-194=proverim user-195=tealmk user-196=holiyayt user-197=rastiraz user-198=pecakome user-199=stravelm user-200=robustco user-201=wondersp user-202=dnevnoin user-203=gjorgeiv user-204=tradeyou user-205=dikimk12 user-206=herbalpl user-207=enochmk
Sep 13 20:02:33 power sudo[5460]: wp-toolkit : (command continued) user-208=sprintst user-209=edomcomm user-210=berbermk user-211=nolimits user-212=kolened1 user-213=centarba user-214=nlpmkorg user-215=seloviro feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:02:33 power sudo[5460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:34 power sudo[5460]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:35 power sudo[5536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:02:35 power sudo[5536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:35 power sudo[5536]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:35 power sudo[5542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:02:35 power sudo[5542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:35 power sudo[5542]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:35 power sudo[5548]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:02:35 power sudo[5548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:35 power sudo[5548]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:35 power sudo[5555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:02:35 power sudo[5555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:35 power sudo[5555]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:35 power sudo[5567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=dadarmk user-2=proverim user-3=tealmk user-4=gocruise user-5=goodnews user-6=mstmmk user-7=dnevnoin user-8=gjorgeiv user-9=tradeyou user-10=holiyayt user-11=rastiraz user-12=pecakome user-13=wondersp user-14=stravelm user-15=robustco user-16=edomcomm user-17=berbermk user-18=dikimk12 user-19=sprintst user-20=enochmk user-21=herbalpl user-22=seloviro user-23=nolimits user-24=centarba user-25=nlpmkorg user-26=kolened1 user-27=pelagoni user-28=socioloz user-29=avtogumi user-30=evolvepl user-31=caramk user-32=frizered user-33=hidrommk user-34=nefrolog user-35=levantmk user-36=ekostoc1 user-37=oncolog1 user-38=cajsproc user-39=hotammk user-40=youthgua user-41=anitermc user-42=raremk user-43=oouslave user-44=uhostmk5 user-45=bauerbg user-46=stojnevi user-47=enaspotc user-48=vmro user-49=trudovop user-50=viewinn
Sep 13 20:02:35 power sudo[5567]: wp-toolkit : (command continued) user-51=wikicamp user-52=urbanexp user-53=infobadi user-54=mspmk user-55=spdcompu user-56=detskagr user-57=datelcom user-58=maleshne user-59=bizporta user-60=vfxnestc user-61=polyeste user-62=sedcmk user-63=groskome user-64=ivanjord user-65=gogovan1 user-66=velmk user-67=kujnamon user-68=univerz1 user-69=datalink user-70=agrosind user-71=mpbmk user-72=volkanco user-73=goartsym user-74=dhamachi user-75=mfashion user-76=delcevca user-77=simbiome user-78=getaldus user-79=barececo user-80=workandt user-81=rasmorgm user-82=bianasho user-83=makoasmk user-84=skyapart user-85=jpparkin user-86=inotekso user-87=drleomk user-88=premiums user-89=daris user-90=butelmk user-91=ideaplus user-92=karpospo user-93=nasaidni user-94=screenme user-95=arturaco user-96=cetplatf user-97=dalmacom user-98=kouzonco user-99=premiuma user-100=custome1 user-101=palenzok user-102=zvskopje user-103=busymard user-104=zampmk user-105=klimimk
Sep 13 20:02:35 power sudo[5567]: wp-toolkit : (command continued) user-106=sparkupm user-107=stokovna user-108=bovincom user-109=stojano1 user-110=vezilkac user-111=cabinetm user-112=janiboja user-113=itradeco user-114=glammace user-115=albuname user-116=imdskopj user-117=pravekom user-118=vtranseu user-119=infopor1 user-120=zapovim1 user-121=elektrot user-122=euromaki user-123=cosmatob user-124=nutrivim user-125=chemhemc user-126=samasped user-127=kardiome user-128=mediasol user-129=bogdanos user-130=carrent1 user-131=apgrupmk user-132=euronic2 user-133=matratze user-134=nucktra1 user-135=lblawcom user-136=intelek1 user-137=mediatag user-138=nikolov1 user-139=hausmark user-140=aptekazd user-141=nikimare user-142=forzares user-143=radekrat user-144=starluxm user-145=fffhpcwr user-146=versusmk user-147=ambitiou user-148=fiziosmk user-149=solemor1 user-150=mapaspla user-151=onlinesh user-152=nationa2 user-153=tcieuroc user-154=zdmgpsor user-155=v5srybi9dcdx user-156=supremel
Sep 13 20:02:35 power sudo[5567]: wp-toolkit : (command continued) user-157=gorsajmk user-158=aquatech user-159=taneccom user-160=tehnologija user-161=bozinovm user-162=dslmk user-163=darkogor user-164=fnjorgmk user-165=prizmapl user-166=premiumi user-167=innofabl user-168=vacuacti user-169=inkigaic user-170=modernar user-171=makdrone user-172=tehnodro user-173=izzomk user-174=jpkomuna user-175=gradbai1 user-176=evacommk user-177=aptekafa user-178=madzomk user-179=peshkai1 user-180=fxxcom user-181=eaptekam user-182=dimpalne user-183=bauerin2 user-184=folklore user-185=conserva user-186=euronic3 user-187=vegemk1 user-188=cupidpro user-189=bonitavi user-190=evberasm user-191=mbmehani user-192=workbenc user-193=ismassag user-194=wineberr user-195=viplastc user-196=solarinv user-197=eurofarm user-198=trigemat user-199=naksorgm user-200=eliksirz user-201=electrol user-202=golakkom user-203=progress user-204=animatem user-205=cleanerm user-206=atspedco user-207=sssoluti
Sep 13 20:02:35 power sudo[5567]: wp-toolkit : (command continued) user-208=jaramk user-209=solointe user-210=taktcomm user-211=recorgmk user-212=pelagini user-213=kaoilmk user-214=biplmk user-215=bbbustou feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:02:35 power sudo[5567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:02:36 power sudo[5567]: pam_unix(sudo:session): session closed for user root
Sep 13 20:02:58 power sshd[5689]: Invalid user GQLbT9IGr2HJ17fYZu from 95.86.30.76 port 56522
Sep 13 20:03:03 power sshd[6397]: Accepted password for root from 95.86.30.76 port 56550 ssh2
Sep 13 20:03:04 power systemd[6481]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:03:04 power sshd[6397]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:03:20 power sudo[6982]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:03:20 power sudo[6982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:03:20 power sudo[6982]: pam_unix(sudo:session): session closed for user root
Sep 13 20:03:20 power sudo[6988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:03:20 power sudo[6988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:03:20 power sudo[6988]: pam_unix(sudo:session): session closed for user root
Sep 13 20:03:20 power sudo[6993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:03:20 power sudo[6993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:03:20 power sudo[6993]: pam_unix(sudo:session): session closed for user root
Sep 13 20:03:21 power sudo[6998]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:03:21 power sudo[6999]:    root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/bash -lc '#012set -u#012OUT="/root/freeze_diagnose_$(hostname)_$(date +%F_%H%M%S)"#012mkdir -p "$OUT"#012#012# Reboot timing (helps you correlate)#012{ echo "Reboots (newest first):"; last -x | grep -E "^reboot|^shutdown" | head -n 5; } > "$OUT/REBOOT_HISTORY.txt" || true#012#012# Journal from the PREVIOUS boot (the one that froze)#012journalctl -b -1 --no-pager -o short-iso > "$OUT/journal_prev_boot.log" 2>/dev/null || true#012journalctl -k -b -1 --no-pager -o short-iso > "$OUT/kernel_prev_boot.log" 2>/dev/null || true#012# High-priority events from previous boot#012journalctl -b -1 -p err..alert --no-pager -o short-iso > "$OUT/journal_prev_boot_errors.log" 2>/dev/null || true#012journalctl -k -b -1 -p warning..alert --no-pager -o short-iso > "$OUT/kernel_prev_boot_warn_errors.log" 2>/dev/null || true#012#012# Quick suspicion filter (OOM, hangs, I/O, panics, FS, segfaults)#012grep -Ei
Sep 13 20:03:21 power sudo[6999]:    root : (command continued) "oom-killer|out of memory|hung task|blocked for more than|call trace|BUG:|panic|I/O error|failed|EXT4|xfs|btrfs|nvme|sda|mdadm|segfault|no space left|resetting link|watchdog" \\#012  "$OUT/journal_prev_boot.log" > "$OUT/journal_prev_boot_suspect.log" 2>/dev/null || true#012#012# System logs (RHEL/CloudLinux style)#012cp -a /var/log/messages "$OUT/messages" 2>/dev/null || true#012cp -a /var/log/secure "$OUT/secure" 2>/dev/null || true#012#012# cPanel & services#012cp -a /usr/local/cpanel/logs/error_log "$OUT/cpanel_error_log" 2>/dev/null || true#012cp -a /usr/local/cpanel/logs/login_log "$OUT/cpanel_login_log" 2>/dev/null || true#012cp -a /usr/local/cpanel/logs/access_log "$OUT/cpanel_access_log" 2>/dev/null || true#012#012# Apache (EA/WHM on CL9 usually /etc/httpd or /usr/local/apache)#012{ cp -a /usr/local/apache/logs/error_log "$OUT/apache_error_log" 2>/dev/null || \\#012  cp -a /etc/httpd/logs/error_log
Sep 13 20:03:21 power sudo[6999]:    root : (command continued) "$OUT/apache_error_log" 2>/dev/null || true; }#012#012# PHP-FPM (if used by EA4)#012cp -a /var/log/php-fpm/error.log "$OUT/php-fpm_error.log" 2>/dev/null || true#012#012# MySQL/MariaDB#012for f in /var/lib/mysql/*.err /var/log/mysqld.log /var/log/mysql/mysqld.log /var/log/mariadb/mariadb.log; do#012  [ -r "$f" ] && cp -a "$f" "$OUT/$(basename "$f")" || true#012done#012#012# Exim (mail)#012for f in /var/log/exim_mainlog /var/log/exim_rejectlog /var/log/exim_paniclog; do#012  [ -r "$f" ] && tail -n 2000 "$f" > "$OUT/$(basename "$f").tail" || true#012done#012#012# Resource history (requires sysstat/sar if installed)#012if command -v sar >/dev/null 2>&1; then#012  for f in /var/log/sa/sa*; do#012    [ -r "$f" ] && sar -A -f "$f" > "$OUT/$(basename "$f").sar" 2>/dev/null || true#012  done#012fi#012#012# Disk health (optional; only if smartctl exists)#012if command -v smartctl >/dev/null 2>&1; then#012  for d in /dev/sd?
Sep 13 20:03:21 power sudo[6999]:    root : (command continued) /dev/nvme?n1; do#012    [ -b "$d" ] && { smartctl -H "$d" > "$OUT/smart_$(basename "$d").txt" 2>/dev/null || true; }#012  done#012fi#012#012# Disk state & mounts (to catch space/FS issues)#012df -hT > "$OUT/df_hT.txt"#012mount | sort > "$OUT/mounts.txt"#012#012# Also keep a short recent window from current boot for context#012journalctl --since "-2days" --no-pager -o short-iso > "$OUT/journal_last2days.log" 2>/dev/null || true#012#012# Bundle#012tar -C "$(dirname "$OUT")" -czf "$OUT.tar.gz" "$(basename "$OUT")" && echo "Collected logs in $OUT.tar.gz"#012'
Sep 13 20:03:21 power sudo[6998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:03:21 power sudo[6999]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:03:21 power sudo[6998]: pam_unix(sudo:session): session closed for user root
Sep 13 20:03:21 power sudo[7067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=solemor1 user-2=mapaspla user-3=onlinesh user-4=nationa2 user-5=tcieuroc user-6=radekrat user-7=starluxm user-8=fffhpcwr user-9=versusmk user-10=ambitiou user-11=fiziosmk user-12=taneccom user-13=tehnologija user-14=bozinovm user-15=darkogor user-16=prizmapl user-17=fnjorgmk user-18=dslmk user-19=innofabl user-20=premiumi user-21=vacuacti user-22=inkigaic user-23=modernar user-24=zdmgpsor user-25=v5srybi9dcdx user-26=supremel user-27=gorsajmk user-28=aquatech user-29=elektrot user-30=zapovim1 user-31=cosmatob user-32=euromaki user-33=nutrivim user-34=chemhemc user-35=samasped user-36=glammace user-37=albuname user-38=imdskopj user-39=vtranseu user-40=pravekom user-41=infopor1 user-42=nucktra1 user-43=lblawcom user-44=intelek1 user-45=mediatag user-46=hausmark user-47=nikolov1 user-48=aptekazd user-49=nikimare
Sep 13 20:03:21 power sudo[7067]: wp-toolkit : (command continued) user-50=forzares user-51=kardiome user-52=mediasol user-53=bogdanos user-54=carrent1 user-55=apgrupmk user-56=euronic2 user-57=matratze user-58=solarinv user-59=eurofarm user-60=trigemat user-61=naksorgm user-62=eliksirz user-63=electrol user-64=golakkom user-65=mbmehani user-66=workbenc user-67=ismassag user-68=wineberr user-69=viplastc user-70=pelagini user-71=biplmk user-72=kaoilmk user-73=bbbustou user-74=progress user-75=animatem user-76=cleanerm user-77=atspedco user-78=sssoluti user-79=jaramk user-80=solointe user-81=recorgmk user-82=taktcomm user-83=gradbai1 user-84=evacommk user-85=madzomk user-86=aptekafa user-87=peshkai1 user-88=fxxcom user-89=eaptekam user-90=dimpalne user-91=makdrone user-92=tehnodro user-93=izzomk user-94=jpkomuna user-95=conserva user-96=euronic3 user-97=vegemk1 user-98=cupidpro user-99=bonitavi user-100=evberasm user-101=bauerin2 user-102=folklore user-103=caramk user-104=frizered
Sep 13 20:03:21 power sudo[7067]: wp-toolkit : (command continued) user-105=hidrommk user-106=nefrolog user-107=levantmk user-108=ekostoc1 user-109=oncolog1 user-110=pelagoni user-111=socioloz user-112=avtogumi user-113=evolvepl user-114=raremk user-115=oouslave user-116=uhostmk5 user-117=bauerbg user-118=stojnevi user-119=enaspotc user-120=vmro user-121=trudovop user-122=viewinn user-123=cajsproc user-124=hotammk user-125=youthgua user-126=anitermc user-127=dnevnoin user-128=gjorgeiv user-129=tradeyou user-130=holiyayt user-131=rastiraz user-132=pecakome user-133=wondersp user-134=robustco user-135=stravelm user-136=dadarmk user-137=proverim user-138=tealmk user-139=gocruise user-140=goodnews user-141=mstmmk user-142=seloviro user-143=nolimits user-144=centarba user-145=nlpmkorg user-146=kolened1 user-147=edomcomm user-148=berbermk user-149=dikimk12 user-150=sprintst user-151=herbalpl user-152=enochmk user-153=cetplatf user-154=dalmacom user-155=kouzonco user-156=premiuma
Sep 13 20:03:21 power sudo[7067]: wp-toolkit : (command continued) user-157=jpparkin user-158=inotekso user-159=drleomk user-160=premiums user-161=butelmk user-162=daris user-163=ideaplus user-164=karpospo user-165=nasaidni user-166=arturaco user-167=screenme user-168=bovincom user-169=stojano1 user-170=vezilkac user-171=cabinetm user-172=janiboja user-173=itradeco user-174=custome1 user-175=palenzok user-176=busymard user-177=zampmk user-178=zvskopje user-179=klimimk user-180=sparkupm user-181=stokovna user-182=datelcom user-183=maleshne user-184=bizporta user-185=vfxnestc user-186=polyeste user-187=sedcmk user-188=ivanjord user-189=groskome user-190=wikicamp user-191=urbanexp user-192=mspmk user-193=infobadi user-194=spdcompu user-195=detskagr user-196=volkanco user-197=goartsym user-198=dhamachi user-199=mfashion user-200=getaldus user-201=delcevca user-202=simbiome user-203=barececo user-204=workandt user-205=rasmorgm user-206=makoasmk user-207=bianasho user-208=skyapart
Sep 13 20:03:21 power sudo[7067]: wp-toolkit : (command continued) user-209=velmk user-210=gogovan1 user-211=univerz1 user-212=kujnamon user-213=datalink user-214=agrosind user-215=mpbmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:03:21 power sudo[7067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:03:21 power sudo[7067]: pam_unix(sudo:session): session closed for user root
Sep 13 20:03:26 power sudo[6999]: pam_unix(sudo:session): session closed for user root
Sep 13 20:03:58 power sudo[7959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:03:58 power sudo[7959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:03:58 power sudo[7959]: pam_unix(sudo:session): session closed for user root
Sep 13 20:03:58 power sudo[7965]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:03:58 power sudo[7965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:03:58 power sudo[7965]: pam_unix(sudo:session): session closed for user root
Sep 13 20:03:58 power sudo[7971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:03:58 power sudo[7971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:03:58 power sudo[7971]: pam_unix(sudo:session): session closed for user root
Sep 13 20:03:58 power sudo[7977]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=premiums user-2=butelmk user-3=daris user-4=screenme user-5=arturaco user-6=ideaplus user-7=nasaidni user-8=karpospo user-9=drleomk user-10=jpparkin user-11=inotekso user-12=dalmacom user-13=cetplatf user-14=premiuma user-15=kouzonco user-16=klimimk user-17=sparkupm user-18=stokovna user-19=custome1 user-20=zvskopje user-21=busymard user-22=zampmk user-23=palenzok user-24=cabinetm user-25=vezilkac user-26=itradeco user-27=janiboja user-28=bovincom user-29=stojano1 user-30=infobadi user-31=mspmk user-32=detskagr user-33=spdcompu user-34=urbanexp user-35=wikicamp user-36=vfxnestc user-37=polyeste user-38=ivanjord user-39=groskome user-40=sedcmk user-41=datelcom user-42=maleshne user-43=bizporta user-44=agrosind user-45=mpbmk user-46=gogovan1 user-47=velmk user-48=kujnamon user-49=univerz1 user-50=datalink
Sep 13 20:03:58 power sudo[7977]: wp-toolkit : (command continued) user-51=rasmorgm user-52=makoasmk user-53=bianasho user-54=skyapart user-55=mfashion user-56=volkanco user-57=goartsym user-58=dhamachi user-59=workandt user-60=simbiome user-61=delcevca user-62=getaldus user-63=barececo user-64=evolvepl user-65=pelagoni user-66=socioloz user-67=avtogumi user-68=nefrolog user-69=oncolog1 user-70=ekostoc1 user-71=levantmk user-72=caramk user-73=frizered user-74=hidrommk user-75=youthgua user-76=anitermc user-77=hotammk user-78=cajsproc user-79=vmro user-80=trudovop user-81=viewinn user-82=enaspotc user-83=uhostmk5 user-84=bauerbg user-85=raremk user-86=oouslave user-87=stojnevi user-88=gocruise user-89=mstmmk user-90=goodnews user-91=proverim user-92=dadarmk user-93=tealmk user-94=rastiraz user-95=holiyayt user-96=wondersp user-97=robustco user-98=stravelm user-99=pecakome user-100=dnevnoin user-101=gjorgeiv user-102=tradeyou user-103=sprintst user-104=herbalpl user-105=enochmk
Sep 13 20:03:58 power sudo[7977]: wp-toolkit : (command continued) user-106=dikimk12 user-107=berbermk user-108=edomcomm user-109=nolimits user-110=nlpmkorg user-111=centarba user-112=kolened1 user-113=seloviro user-114=viplastc user-115=wineberr user-116=mbmehani user-117=ismassag user-118=workbenc user-119=electrol user-120=trigemat user-121=eliksirz user-122=naksorgm user-123=golakkom user-124=solarinv user-125=eurofarm user-126=solointe user-127=jaramk user-128=recorgmk user-129=taktcomm user-130=animatem user-131=cleanerm user-132=progress user-133=sssoluti user-134=atspedco user-135=bbbustou user-136=kaoilmk user-137=biplmk user-138=pelagini user-139=jpkomuna user-140=izzomk user-141=makdrone user-142=tehnodro user-143=peshkai1 user-144=fxxcom user-145=dimpalne user-146=eaptekam user-147=gradbai1 user-148=evacommk user-149=madzomk user-150=aptekafa user-151=bauerin2 user-152=folklore user-153=bonitavi user-154=evberasm user-155=conserva user-156=vegemk1 user-157=cupidpro
Sep 13 20:03:58 power sudo[7977]: wp-toolkit : (command continued) user-158=euronic3 user-159=versusmk user-160=fiziosmk user-161=ambitiou user-162=radekrat user-163=starluxm user-164=fffhpcwr user-165=tcieuroc user-166=mapaspla user-167=solemor1 user-168=nationa2 user-169=onlinesh user-170=supremel user-171=v5srybi9dcdx user-172=gorsajmk user-173=aquatech user-174=zdmgpsor user-175=inkigaic user-176=modernar user-177=tehnologija user-178=taneccom user-179=premiumi user-180=innofabl user-181=vacuacti user-182=bozinovm user-183=darkogor user-184=prizmapl user-185=fnjorgmk user-186=dslmk user-187=vtranseu user-188=pravekom user-189=infopor1 user-190=glammace user-191=albuname user-192=imdskopj user-193=nutrivim user-194=chemhemc user-195=samasped user-196=elektrot user-197=zapovim1 user-198=euromaki user-199=cosmatob user-200=euronic2 user-201=matratze user-202=kardiome user-203=apgrupmk user-204=mediasol user-205=bogdanos user-206=carrent1 user-207=hausmark user-208=nikolov1
Sep 13 20:03:58 power sudo[7977]: wp-toolkit : (command continued) user-209=forzares user-210=aptekazd user-211=nikimare user-212=lblawcom user-213=nucktra1 user-214=intelek1 user-215=mediatag feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:03:58 power sudo[7977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:03:59 power sudo[7977]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:00 power sudo[8020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:00 power sudo[8020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:00 power sudo[8020]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:00 power sudo[8025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:04:00 power sudo[8025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:00 power sudo[8025]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:00 power sudo[8030]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:04:00 power sudo[8030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:00 power sudo[8030]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:01 power sudo[8096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:01 power sudo[8096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:01 power sudo[8096]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:01 power sudo[8101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:04:01 power sudo[8101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:01 power sudo[8101]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:01 power sudo[8106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:04:01 power sudo[8106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:01 power sudo[8106]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:25 power sudo[8583]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:04:25 power sudo[8583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:25 power sudo[8583]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:25 power sudo[8588]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:04:25 power sudo[8588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:25 power sudo[8588]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:25 power sudo[8596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:04:25 power sudo[8596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:25 power sudo[8596]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:25 power sudo[8601]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=avtogumi user-2=socioloz user-3=pelagoni user-4=evolvepl user-5=frizered user-6=hidrommk user-7=caramk user-8=nefrolog user-9=levantmk user-10=ekostoc1 user-11=oncolog1 user-12=hotammk user-13=cajsproc user-14=youthgua user-15=anitermc user-16=stojnevi user-17=uhostmk5 user-18=bauerbg user-19=raremk user-20=oouslave user-21=vmro user-22=viewinn user-23=trudovop user-24=enaspotc user-25=tealmk user-26=proverim user-27=dadarmk user-28=mstmmk user-29=goodnews user-30=gocruise user-31=tradeyou user-32=gjorgeiv user-33=dnevnoin user-34=wondersp user-35=stravelm user-36=robustco user-37=pecakome user-38=rastiraz user-39=holiyayt user-40=berbermk user-41=edomcomm user-42=sprintst user-43=herbalpl user-44=enochmk user-45=dikimk12 user-46=seloviro user-47=centarba user-48=nlpmkorg user-49=kolened1 user-50=nolimits
Sep 13 20:04:25 power sudo[8601]: wp-toolkit : (command continued) user-51=drleomk user-52=jpparkin user-53=inotekso user-54=arturaco user-55=screenme user-56=ideaplus user-57=nasaidni user-58=karpospo user-59=premiums user-60=daris user-61=butelmk user-62=premiuma user-63=kouzonco user-64=dalmacom user-65=cetplatf user-66=zvskopje user-67=busymard user-68=zampmk user-69=palenzok user-70=custome1 user-71=sparkupm user-72=stokovna user-73=klimimk user-74=stojano1 user-75=bovincom user-76=itradeco user-77=janiboja user-78=cabinetm user-79=vezilkac user-80=urbanexp user-81=wikicamp user-82=detskagr user-83=spdcompu user-84=mspmk user-85=infobadi user-86=bizporta user-87=datelcom user-88=maleshne user-89=ivanjord user-90=groskome user-91=sedcmk user-92=vfxnestc user-93=polyeste user-94=datalink user-95=gogovan1 user-96=velmk user-97=univerz1 user-98=kujnamon user-99=agrosind user-100=mpbmk user-101=workandt user-102=delcevca user-103=getaldus user-104=simbiome user-105=barececo
Sep 13 20:04:25 power sudo[8601]: wp-toolkit : (command continued) user-106=mfashion user-107=volkanco user-108=goartsym user-109=dhamachi user-110=bianasho user-111=makoasmk user-112=skyapart user-113=rasmorgm user-114=fffhpcwr user-115=radekrat user-116=starluxm user-117=fiziosmk user-118=ambitiou user-119=versusmk user-120=nationa2 user-121=onlinesh user-122=mapaspla user-123=solemor1 user-124=tcieuroc user-125=zdmgpsor user-126=gorsajmk user-127=aquatech user-128=supremel user-129=v5srybi9dcdx user-130=premiumi user-131=innofabl user-132=vacuacti user-133=bozinovm user-134=fnjorgmk user-135=darkogor user-136=dslmk user-137=prizmapl user-138=tehnologija user-139=taneccom user-140=modernar user-141=inkigaic user-142=imdskopj user-143=glammace user-144=albuname user-145=infopor1 user-146=vtranseu user-147=pravekom user-148=cosmatob user-149=euromaki user-150=elektrot user-151=zapovim1 user-152=chemhemc user-153=samasped user-154=nutrivim user-155=apgrupmk user-156=mediasol
Sep 13 20:04:25 power sudo[8601]: wp-toolkit : (command continued) user-157=bogdanos user-158=carrent1 user-159=kardiome user-160=euronic2 user-161=matratze user-162=intelek1 user-163=mediatag user-164=lblawcom user-165=nucktra1 user-166=forzares user-167=aptekazd user-168=nikimare user-169=nikolov1 user-170=hausmark user-171=ismassag user-172=workbenc user-173=mbmehani user-174=viplastc user-175=wineberr user-176=eurofarm user-177=solarinv user-178=golakkom user-179=electrol user-180=trigemat user-181=eliksirz user-182=naksorgm user-183=atspedco user-184=sssoluti user-185=animatem user-186=cleanerm user-187=progress user-188=recorgmk user-189=taktcomm user-190=solointe user-191=jaramk user-192=pelagini user-193=bbbustou user-194=kaoilmk user-195=biplmk user-196=tehnodro user-197=makdrone user-198=jpkomuna user-199=izzomk user-200=evacommk user-201=aptekafa user-202=madzomk user-203=gradbai1 user-204=dimpalne user-205=eaptekam user-206=peshkai1 user-207=fxxcom user-208=folklore
Sep 13 20:04:25 power sudo[8601]: wp-toolkit : (command continued) user-209=bauerin2 user-210=vegemk1 user-211=cupidpro user-212=euronic3 user-213=conserva user-214=bonitavi user-215=evberasm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:04:25 power sudo[8601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:25 power sudo[8601]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:37 power sudo[8794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:04:37 power sudo[8794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:37 power sudo[8794]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:37 power sudo[8799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:04:37 power sudo[8799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:37 power sudo[8799]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:37 power sudo[8804]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:04:37 power sudo[8804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:38 power sudo[8804]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:38 power sudo[8809]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pravekom user-2=vtranseu user-3=infopor1 user-4=glammace user-5=albuname user-6=imdskopj user-7=nutrivim user-8=chemhemc user-9=samasped user-10=elektrot user-11=zapovim1 user-12=cosmatob user-13=euromaki user-14=euronic2 user-15=matratze user-16=kardiome user-17=mediasol user-18=carrent1 user-19=bogdanos user-20=apgrupmk user-21=hausmark user-22=nikolov1 user-23=aptekazd user-24=nikimare user-25=forzares user-26=nucktra1 user-27=lblawcom user-28=intelek1 user-29=mediatag user-30=versusmk user-31=ambitiou user-32=fiziosmk user-33=radekrat user-34=starluxm user-35=fffhpcwr user-36=tcieuroc user-37=solemor1 user-38=mapaspla user-39=onlinesh user-40=nationa2 user-41=v5srybi9dcdx user-42=supremel user-43=gorsajmk user-44=aquatech user-45=zdmgpsor user-46=inkigaic user-47=modernar user-48=taneccom
Sep 13 20:04:38 power sudo[8809]: wp-toolkit : (command continued) user-49=tehnologija user-50=bozinovm user-51=dslmk user-52=darkogor user-53=fnjorgmk user-54=prizmapl user-55=innofabl user-56=premiumi user-57=vacuacti user-58=izzomk user-59=jpkomuna user-60=makdrone user-61=tehnodro user-62=peshkai1 user-63=fxxcom user-64=eaptekam user-65=dimpalne user-66=gradbai1 user-67=evacommk user-68=aptekafa user-69=madzomk user-70=bauerin2 user-71=folklore user-72=bonitavi user-73=evberasm user-74=conserva user-75=euronic3 user-76=vegemk1 user-77=cupidpro user-78=wineberr user-79=viplastc user-80=mbmehani user-81=workbenc user-82=ismassag user-83=trigemat user-84=naksorgm user-85=eliksirz user-86=electrol user-87=golakkom user-88=solarinv user-89=eurofarm user-90=jaramk user-91=solointe user-92=taktcomm user-93=recorgmk user-94=progress user-95=animatem user-96=cleanerm user-97=sssoluti user-98=atspedco user-99=kaoilmk user-100=biplmk user-101=bbbustou user-102=pelagini
Sep 13 20:04:38 power sudo[8809]: wp-toolkit : (command continued) user-103=gocruise user-104=goodnews user-105=mstmmk user-106=dadarmk user-107=proverim user-108=tealmk user-109=holiyayt user-110=rastiraz user-111=pecakome user-112=wondersp user-113=robustco user-114=stravelm user-115=dnevnoin user-116=tradeyou user-117=gjorgeiv user-118=dikimk12 user-119=sprintst user-120=herbalpl user-121=enochmk user-122=edomcomm user-123=berbermk user-124=nolimits user-125=nlpmkorg user-126=centarba user-127=kolened1 user-128=seloviro user-129=evolvepl user-130=pelagoni user-131=socioloz user-132=avtogumi user-133=nefrolog user-134=levantmk user-135=ekostoc1 user-136=oncolog1 user-137=caramk user-138=frizered user-139=hidrommk user-140=youthgua user-141=anitermc user-142=cajsproc user-143=hotammk user-144=enaspotc user-145=vmro user-146=viewinn user-147=trudovop user-148=raremk user-149=oouslave user-150=uhostmk5 user-151=bauerbg user-152=stojnevi user-153=infobadi user-154=mspmk
Sep 13 20:04:38 power sudo[8809]: wp-toolkit : (command continued) user-155=spdcompu user-156=detskagr user-157=wikicamp user-158=urbanexp user-159=vfxnestc user-160=polyeste user-161=sedcmk user-162=groskome user-163=ivanjord user-164=datelcom user-165=maleshne user-166=bizporta user-167=agrosind user-168=mpbmk user-169=gogovan1 user-170=velmk user-171=univerz1 user-172=kujnamon user-173=datalink user-174=rasmorgm user-175=makoasmk user-176=bianasho user-177=skyapart user-178=volkanco user-179=goartsym user-180=dhamachi user-181=mfashion user-182=simbiome user-183=delcevca user-184=getaldus user-185=barececo user-186=workandt user-187=premiums user-188=butelmk user-189=daris user-190=ideaplus user-191=nasaidni user-192=karpospo user-193=screenme user-194=arturaco user-195=jpparkin user-196=inotekso user-197=drleomk user-198=cetplatf user-199=dalmacom user-200=kouzonco user-201=premiuma user-202=klimimk user-203=sparkupm user-204=stokovna user-205=custome1 user-206=palenzok
Sep 13 20:04:38 power sudo[8809]: wp-toolkit : (command continued) user-207=zvskopje user-208=busymard user-209=zampmk user-210=vezilkac user-211=cabinetm user-212=janiboja user-213=itradeco user-214=bovincom user-215=stojano1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:04:38 power sudo[8809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:38 power sudo[8809]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:38 power sudo[8826]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:38 power sudo[8826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:38 power sudo[8826]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:38 power sudo[8831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:04:38 power sudo[8831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:38 power sudo[8831]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:42 power sudo[8892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:42 power sudo[8892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:42 power sudo[8892]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:44 power sudo[8933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:44 power sudo[8933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:44 power sudo[8933]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:47 power sudo[8974]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:47 power sudo[8974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:47 power sudo[8974]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:50 power sudo[9004]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:50 power sudo[9004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:50 power sudo[9004]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:52 power sudo[9056]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:52 power sudo[9056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:52 power sudo[9056]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:54 power sudo[9096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:54 power sudo[9096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:54 power sudo[9096]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:56 power sudo[9138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:56 power sudo[9138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:56 power sudo[9138]: pam_unix(sudo:session): session closed for user root
Sep 13 20:04:59 power sudo[9174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:04:59 power sudo[9174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:04:59 power sudo[9174]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:01 power systemd[9267]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:05:01 power sudo[9302]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:01 power sudo[9302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:01 power sudo[9302]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:04 power sudo[9346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:04 power sudo[9346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:04 power sudo[9346]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:06 power sudo[9393]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:06 power sudo[9393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:06 power sudo[9393]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:08 power sudo[9434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:08 power sudo[9434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:08 power sudo[9434]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:11 power sudo[9469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:11 power sudo[9469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:11 power sudo[9469]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:13 power sudo[9521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:13 power sudo[9521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:13 power sudo[9521]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:15 power sudo[9567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:15 power sudo[9567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:15 power sudo[9567]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:18 power sudo[9604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:18 power sudo[9604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:18 power sudo[9604]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:20 power sudo[9664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:20 power sudo[9664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:20 power sudo[9664]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:23 power sudo[9739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:23 power sudo[9739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:23 power sudo[9739]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:26 power sudo[9800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:26 power sudo[9800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:26 power sudo[9800]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:28 power sudo[9847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:28 power sudo[9847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:28 power sudo[9847]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:31 power sudo[9894]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:31 power sudo[9894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:31 power sudo[9894]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:33 power sudo[9922]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:33 power sudo[9922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:33 power sudo[9922]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:36 power sudo[9966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:36 power sudo[9966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:36 power sudo[9966]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:38 power sudo[9992]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:38 power sudo[9992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:38 power sudo[9992]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:40 power sudo[10031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:40 power sudo[10031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:40 power sudo[10031]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:43 power sudo[10064]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:43 power sudo[10064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:43 power sudo[10064]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:45 power sudo[10097]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:45 power sudo[10097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:45 power sudo[10097]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:48 power sudo[10123]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:48 power sudo[10123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:48 power sudo[10123]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:50 power sudo[10176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:50 power sudo[10176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:50 power sudo[10176]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:52 power sudo[10202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:52 power sudo[10202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:52 power sudo[10202]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:55 power sudo[10236]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:55 power sudo[10236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:55 power sudo[10236]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:57 power sudo[10264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:57 power sudo[10264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:57 power sudo[10264]: pam_unix(sudo:session): session closed for user root
Sep 13 20:05:59 power sudo[10299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:05:59 power sudo[10299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:05:59 power sudo[10299]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:01 power systemd[10340]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 20:06:01 power sudo[10360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:01 power sudo[10360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:02 power sudo[10360]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:04 power sudo[10392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:04 power sudo[10392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:04 power sudo[10392]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:06 power sudo[10427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:06 power sudo[10427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:06 power sudo[10427]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:08 power sudo[10451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:08 power sudo[10451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:08 power sudo[10451]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:10 power sudo[10478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:10 power sudo[10478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:10 power sudo[10478]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:13 power sudo[10497]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:13 power sudo[10497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:13 power sudo[10497]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:15 power sudo[10532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:15 power sudo[10532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:15 power sudo[10532]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:17 power sudo[10563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:17 power sudo[10563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:17 power sudo[10563]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:19 power sudo[10596]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:19 power sudo[10596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:19 power sudo[10596]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:21 power sudo[10657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:21 power sudo[10657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:21 power sudo[10657]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:24 power sudo[10793]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:24 power sudo[10793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:24 power sudo[10793]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:24 power sudo[10812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:06:24 power sudo[10812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:24 power sudo[10812]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:24 power sudo[10822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:06:24 power sudo[10822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:24 power sudo[10822]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:24 power sudo[10827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:06:24 power sudo[10827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:24 power sudo[10827]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:24 power sudo[10835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=sssoluti user-2=atspedco user-3=progress user-4=animatem user-5=cleanerm user-6=taktcomm user-7=recorgmk user-8=jaramk user-9=solointe user-10=pelagini user-11=kaoilmk user-12=biplmk user-13=bbbustou user-14=workbenc user-15=ismassag user-16=mbmehani user-17=wineberr user-18=viplastc user-19=eurofarm user-20=solarinv user-21=golakkom user-22=trigemat user-23=naksorgm user-24=eliksirz user-25=electrol user-26=folklore user-27=bauerin2 user-28=euronic3 user-29=vegemk1 user-30=cupidpro user-31=conserva user-32=bonitavi user-33=evberasm user-34=tehnodro user-35=makdrone user-36=izzomk user-37=jpkomuna user-38=evacommk user-39=aptekafa user-40=madzomk user-41=gradbai1 user-42=eaptekam user-43=dimpalne user-44=peshkai1 user-45=fxxcom user-46=zdmgpsor user-47=gorsajmk user-48=aquatech user-49=v5srybi9dcdx
Sep 13 20:06:24 power sudo[10835]: wp-toolkit : (command continued) user-50=supremel user-51=bozinovm user-52=fnjorgmk user-53=darkogor user-54=prizmapl user-55=dslmk user-56=innofabl user-57=premiumi user-58=vacuacti user-59=taneccom user-60=tehnologija user-61=modernar user-62=inkigaic user-63=fffhpcwr user-64=radekrat user-65=starluxm user-66=ambitiou user-67=fiziosmk user-68=versusmk user-69=onlinesh user-70=nationa2 user-71=solemor1 user-72=mapaspla user-73=tcieuroc user-74=mediasol user-75=bogdanos user-76=carrent1 user-77=apgrupmk user-78=kardiome user-79=euronic2 user-80=matratze user-81=intelek1 user-82=mediatag user-83=nucktra1 user-84=lblawcom user-85=aptekazd user-86=nikimare user-87=forzares user-88=nikolov1 user-89=hausmark user-90=imdskopj user-91=glammace user-92=albuname user-93=infopor1 user-94=vtranseu user-95=pravekom user-96=euromaki user-97=cosmatob user-98=zapovim1 user-99=elektrot user-100=samasped user-101=chemhemc user-102=nutrivim user-103=palenzok
Sep 13 20:06:24 power sudo[10835]: wp-toolkit : (command continued) user-104=zvskopje user-105=busymard user-106=zampmk user-107=custome1 user-108=sparkupm user-109=stokovna user-110=klimimk user-111=stojano1 user-112=bovincom user-113=janiboja user-114=itradeco user-115=vezilkac user-116=cabinetm user-117=jpparkin user-118=inotekso user-119=drleomk user-120=ideaplus user-121=karpospo user-122=nasaidni user-123=arturaco user-124=screenme user-125=premiums user-126=butelmk user-127=daris user-128=kouzonco user-129=premiuma user-130=cetplatf user-131=dalmacom user-132=datalink user-133=gogovan1 user-134=velmk user-135=kujnamon user-136=univerz1 user-137=agrosind user-138=mpbmk user-139=simbiome user-140=getaldus user-141=delcevca user-142=barececo user-143=workandt user-144=volkanco user-145=goartsym user-146=dhamachi user-147=mfashion user-148=bianasho user-149=makoasmk user-150=skyapart user-151=rasmorgm user-152=wikicamp user-153=urbanexp user-154=spdcompu user-155=detskagr
Sep 13 20:06:24 power sudo[10835]: wp-toolkit : (command continued) user-156=mspmk user-157=infobadi user-158=bizporta user-159=datelcom user-160=maleshne user-161=sedcmk user-162=groskome user-163=ivanjord user-164=vfxnestc user-165=polyeste user-166=cajsproc user-167=hotammk user-168=youthgua user-169=anitermc user-170=stojnevi user-171=raremk user-172=oouslave user-173=uhostmk5 user-174=bauerbg user-175=enaspotc user-176=vmro user-177=viewinn user-178=trudovop user-179=socioloz user-180=avtogumi user-181=pelagoni user-182=evolvepl user-183=frizered user-184=hidrommk user-185=caramk user-186=nefrolog user-187=ekostoc1 user-188=levantmk user-189=oncolog1 user-190=edomcomm user-191=berbermk user-192=dikimk12 user-193=sprintst user-194=herbalpl user-195=enochmk user-196=seloviro user-197=nlpmkorg user-198=centarba user-199=kolened1 user-200=nolimits user-201=tealmk user-202=dadarmk user-203=proverim user-204=goodnews user-205=mstmmk user-206=gocruise user-207=tradeyou
Sep 13 20:06:24 power sudo[10835]: wp-toolkit : (command continued) user-208=gjorgeiv user-209=dnevnoin user-210=pecakome user-211=wondersp user-212=robustco user-213=stravelm user-214=holiyayt user-215=rastiraz feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:06:24 power sudo[10835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:25 power sudo[10835]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:34 power sudo[10960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:06:34 power sudo[10960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:34 power sudo[10960]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:35 power sudo[10971]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:06:35 power sudo[10971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:35 power sudo[10971]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:35 power sudo[10985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:06:35 power sudo[10987]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:06:35 power sudo[10985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:35 power sudo[10987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:35 power sudo[10985]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:35 power sudo[10995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:06:35 power sudo[10995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:35 power sudo[10995]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:35 power sudo[11001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:06:35 power sudo[11001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:35 power sudo[10987]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:35 power sudo[11006]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=premiums user-2=daris user-3=butelmk user-4=screenme user-5=arturaco user-6=ideaplus user-7=nasaidni user-8=karpospo user-9=drleomk user-10=jpparkin user-11=inotekso user-12=dalmacom user-13=cetplatf user-14=premiuma user-15=kouzonco user-16=klimimk user-17=sparkupm user-18=stokovna user-19=custome1 user-20=busymard user-21=zampmk user-22=zvskopje user-23=palenzok user-24=cabinetm user-25=vezilkac user-26=itradeco user-27=janiboja user-28=bovincom user-29=stojano1 user-30=mspmk user-31=infobadi user-32=detskagr user-33=spdcompu user-34=urbanexp user-35=wikicamp user-36=vfxnestc user-37=polyeste user-38=groskome user-39=ivanjord user-40=sedcmk user-41=datelcom user-42=maleshne user-43=bizporta user-44=agrosind user-45=mpbmk user-46=velmk user-47=gogovan1 user-48=kujnamon user-49=univerz1 user-50=datalink
Sep 13 20:06:35 power sudo[11006]: wp-toolkit : (command continued) user-51=rasmorgm user-52=bianasho user-53=makoasmk user-54=skyapart user-55=mfashion user-56=volkanco user-57=goartsym user-58=dhamachi user-59=workandt user-60=getaldus user-61=delcevca user-62=simbiome user-63=barececo user-64=evolvepl user-65=pelagoni user-66=socioloz user-67=avtogumi user-68=nefrolog user-69=ekostoc1 user-70=levantmk user-71=oncolog1 user-72=caramk user-73=frizered user-74=hidrommk user-75=youthgua user-76=anitermc user-77=hotammk user-78=cajsproc user-79=vmro user-80=viewinn user-81=trudovop user-82=enaspotc user-83=uhostmk5 user-84=bauerbg user-85=raremk user-86=oouslave user-87=stojnevi user-88=gocruise user-89=mstmmk user-90=goodnews user-91=proverim user-92=dadarmk user-93=tealmk user-94=rastiraz user-95=holiyayt user-96=wondersp user-97=robustco user-98=stravelm user-99=pecakome user-100=dnevnoin user-101=gjorgeiv user-102=tradeyou user-103=sprintst user-104=enochmk user-105=herbalpl
Sep 13 20:06:35 power sudo[11006]: wp-toolkit : (command continued) user-106=dikimk12 user-107=berbermk user-108=edomcomm user-109=nolimits user-110=centarba user-111=nlpmkorg user-112=kolened1 user-113=seloviro user-114=viplastc user-115=wineberr user-116=mbmehani user-117=ismassag user-118=workbenc user-119=electrol user-120=trigemat user-121=eliksirz user-122=naksorgm user-123=golakkom user-124=solarinv user-125=eurofarm user-126=solointe user-127=jaramk user-128=recorgmk user-129=taktcomm user-130=animatem user-131=cleanerm user-132=progress user-133=sssoluti user-134=atspedco user-135=bbbustou user-136=kaoilmk user-137=biplmk user-138=pelagini user-139=jpkomuna user-140=izzomk user-141=makdrone user-142=tehnodro user-143=peshkai1 user-144=fxxcom user-145=dimpalne user-146=eaptekam user-147=gradbai1 user-148=evacommk user-149=madzomk user-150=aptekafa user-151=bauerin2 user-152=folklore user-153=bonitavi user-154=evberasm user-155=conserva user-156=vegemk1 user-157=cupidpro
Sep 13 20:06:35 power sudo[11006]: wp-toolkit : (command continued) user-158=euronic3 user-159=versusmk user-160=fiziosmk user-161=ambitiou user-162=radekrat user-163=starluxm user-164=fffhpcwr user-165=tcieuroc user-166=mapaspla user-167=solemor1 user-168=nationa2 user-169=onlinesh user-170=supremel user-171=v5srybi9dcdx user-172=gorsajmk user-173=aquatech user-174=zdmgpsor user-175=inkigaic user-176=modernar user-177=tehnologija user-178=taneccom user-179=premiumi user-180=innofabl user-181=vacuacti user-182=bozinovm user-183=darkogor user-184=prizmapl user-185=fnjorgmk user-186=dslmk user-187=pravekom user-188=vtranseu user-189=infopor1 user-190=glammace user-191=albuname user-192=imdskopj user-193=nutrivim user-194=samasped user-195=chemhemc user-196=elektrot user-197=zapovim1 user-198=cosmatob user-199=euromaki user-200=euronic2 user-201=matratze user-202=kardiome user-203=apgrupmk user-204=mediasol user-205=bogdanos user-206=carrent1 user-207=hausmark user-208=nikolov1
Sep 13 20:06:35 power sudo[11006]: wp-toolkit : (command continued) user-209=forzares user-210=aptekazd user-211=nikimare user-212=lblawcom user-213=nucktra1 user-214=intelek1 user-215=mediatag feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:06:35 power sudo[11006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:35 power sudo[11001]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:35 power sudo[11015]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=nlpmkorg user-2=centarba user-3=kolened1 user-4=nolimits user-5=seloviro user-6=dikimk12 user-7=sprintst user-8=herbalpl user-9=enochmk user-10=edomcomm user-11=berbermk user-12=pecakome user-13=wondersp user-14=stravelm user-15=robustco user-16=holiyayt user-17=rastiraz user-18=tradeyou user-19=gjorgeiv user-20=dnevnoin user-21=goodnews user-22=mstmmk user-23=gocruise user-24=tealmk user-25=dadarmk user-26=proverim user-27=enaspotc user-28=vmro user-29=trudovop user-30=viewinn user-31=stojnevi user-32=raremk user-33=oouslave user-34=uhostmk5 user-35=bauerbg user-36=youthgua user-37=anitermc user-38=cajsproc user-39=hotammk user-40=nefrolog user-41=levantmk user-42=ekostoc1 user-43=oncolog1 user-44=frizered user-45=hidrommk user-46=caramk user-47=evolvepl user-48=avtogumi user-49=socioloz user-50=pelagoni
Sep 13 20:06:35 power sudo[11015]: wp-toolkit : (command continued) user-51=bianasho user-52=makoasmk user-53=skyapart user-54=rasmorgm user-55=simbiome user-56=delcevca user-57=getaldus user-58=barececo user-59=workandt user-60=volkanco user-61=goartsym user-62=dhamachi user-63=mfashion user-64=agrosind user-65=mpbmk user-66=datalink user-67=gogovan1 user-68=velmk user-69=univerz1 user-70=kujnamon user-71=sedcmk user-72=ivanjord user-73=groskome user-74=vfxnestc user-75=polyeste user-76=bizporta user-77=datelcom user-78=maleshne user-79=spdcompu user-80=detskagr user-81=mspmk user-82=infobadi user-83=wikicamp user-84=urbanexp user-85=janiboja user-86=itradeco user-87=vezilkac user-88=cabinetm user-89=stojano1 user-90=bovincom user-91=sparkupm user-92=stokovna user-93=klimimk user-94=palenzok user-95=busymard user-96=zvskopje user-97=zampmk user-98=custome1 user-99=kouzonco user-100=premiuma user-101=cetplatf user-102=dalmacom user-103=ideaplus user-104=karpospo user-105=nasaidni
Sep 13 20:06:35 power sudo[11015]: wp-toolkit : (command continued) user-106=screenme user-107=arturaco user-108=premiums user-109=butelmk user-110=daris user-111=jpparkin user-112=inotekso user-113=drleomk user-114=aptekazd user-115=nikimare user-116=forzares user-117=nikolov1 user-118=hausmark user-119=intelek1 user-120=mediatag user-121=nucktra1 user-122=lblawcom user-123=euronic2 user-124=matratze user-125=mediasol user-126=carrent1 user-127=bogdanos user-128=apgrupmk user-129=kardiome user-130=chemhemc user-131=samasped user-132=nutrivim user-133=cosmatob user-134=euromaki user-135=elektrot user-136=zapovim1 user-137=infopor1 user-138=pravekom user-139=vtranseu user-140=imdskopj user-141=glammace user-142=albuname user-143=modernar user-144=inkigaic user-145=bozinovm user-146=darkogor user-147=dslmk user-148=fnjorgmk user-149=prizmapl user-150=innofabl user-151=premiumi user-152=vacuacti user-153=taneccom user-154=tehnologija user-155=gorsajmk user-156=aquatech
Sep 13 20:06:35 power sudo[11015]: wp-toolkit : (command continued) user-157=v5srybi9dcdx user-158=supremel user-159=zdmgpsor user-160=tcieuroc user-161=onlinesh user-162=nationa2 user-163=solemor1 user-164=mapaspla user-165=ambitiou user-166=fiziosmk user-167=versusmk user-168=fffhpcwr user-169=radekrat user-170=starluxm user-171=bonitavi user-172=evberasm user-173=euronic3 user-174=vegemk1 user-175=cupidpro user-176=conserva user-177=folklore user-178=bauerin2 user-179=eaptekam user-180=dimpalne user-181=peshkai1 user-182=fxxcom user-183=evacommk user-184=aptekafa user-185=madzomk user-186=gradbai1 user-187=izzomk user-188=jpkomuna user-189=tehnodro user-190=makdrone user-191=biplmk user-192=kaoilmk user-193=bbbustou user-194=pelagini user-195=taktcomm user-196=recorgmk user-197=jaramk user-198=solointe user-199=sssoluti user-200=atspedco user-201=progress user-202=animatem user-203=cleanerm user-204=golakkom user-205=trigemat user-206=eliksirz user-207=naksorgm
Sep 13 20:06:35 power sudo[11015]: wp-toolkit : (command continued) user-208=electrol user-209=eurofarm user-210=solarinv user-211=wineberr user-212=viplastc user-213=workbenc user-214=ismassag user-215=mbmehani feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:06:35 power sudo[11015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:35 power sudo[11006]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:35 power sudo[11015]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:36 power sudo[11037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:06:36 power sudo[11038]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:06:36 power sudo[11037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:36 power sudo[11038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:36 power sudo[11038]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:36 power sudo[11037]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:36 power sudo[11047]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:06:36 power sudo[11048]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:06:36 power sudo[11047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:36 power sudo[11048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:36 power sudo[11048]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:36 power sudo[11047]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:36 power sudo[11057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:06:36 power sudo[11058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:06:36 power sudo[11057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:36 power sudo[11058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:36 power sudo[11058]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:36 power sudo[11057]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:36 power sudo[11078]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=sparkupm user-2=stokovna user-3=klimimk user-4=busymard user-5=zvskopje user-6=zampmk user-7=palenzok user-8=custome1 user-9=itradeco user-10=janiboja user-11=cabinetm user-12=vezilkac user-13=stojano1 user-14=bovincom user-15=screenme user-16=arturaco user-17=ideaplus user-18=nasaidni user-19=karpospo user-20=premiums user-21=butelmk user-22=daris user-23=drleomk user-24=jpparkin user-25=inotekso user-26=premiuma user-27=kouzonco user-28=dalmacom user-29=cetplatf user-30=agrosind user-31=mpbmk user-32=datalink user-33=velmk user-34=gogovan1 user-35=kujnamon user-36=univerz1 user-37=bianasho user-38=makoasmk user-39=skyapart user-40=rasmorgm user-41=workandt user-42=delcevca user-43=simbiome user-44=getaldus user-45=barececo user-46=mfashion user-47=goartsym user-48=volkanco user-49=dhamachi user-50=detskagr
Sep 13 20:06:36 power sudo[11078]: wp-toolkit : (command continued) user-51=spdcompu user-52=mspmk user-53=infobadi user-54=urbanexp user-55=wikicamp user-56=ivanjord user-57=groskome user-58=sedcmk user-59=vfxnestc user-60=polyeste user-61=bizporta user-62=datelcom user-63=maleshne user-64=youthgua user-65=anitermc user-66=hotammk user-67=cajsproc user-68=vmro user-69=trudovop user-70=viewinn user-71=enaspotc user-72=stojnevi user-73=uhostmk5 user-74=bauerbg user-75=raremk user-76=oouslave user-77=evolvepl user-78=avtogumi user-79=socioloz user-80=pelagoni user-81=nefrolog user-82=levantmk user-83=ekostoc1 user-84=oncolog1 user-85=frizered user-86=hidrommk user-87=caramk user-88=sprintst user-89=enochmk user-90=herbalpl user-91=dikimk12 user-92=berbermk user-93=edomcomm user-94=centarba user-95=nlpmkorg user-96=kolened1 user-97=nolimits user-98=seloviro user-99=mstmmk user-100=goodnews user-101=gocruise user-102=tealmk user-103=proverim user-104=dadarmk user-105=wondersp
Sep 13 20:06:36 power sudo[11078]: wp-toolkit : (command continued) user-106=robustco user-107=stravelm user-108=pecakome user-109=rastiraz user-110=holiyayt user-111=tradeyou user-112=gjorgeiv user-113=dnevnoin user-114=recorgmk user-115=taktcomm user-116=solointe user-117=jaramk user-118=atspedco user-119=sssoluti user-120=animatem user-121=cleanerm user-122=progress user-123=bbbustou user-124=kaoilmk user-125=biplmk user-126=pelagini user-127=viplastc user-128=wineberr user-129=ismassag user-130=workbenc user-131=mbmehani user-132=golakkom user-133=electrol user-134=trigemat user-135=naksorgm user-136=eliksirz user-137=eurofarm user-138=solarinv user-139=folklore user-140=bauerin2 user-141=bonitavi user-142=evberasm user-143=vegemk1 user-144=cupidpro user-145=euronic3 user-146=conserva user-147=jpkomuna user-148=izzomk user-149=tehnodro user-150=makdrone user-151=dimpalne user-152=eaptekam user-153=peshkai1 user-154=fxxcom user-155=evacommk user-156=aptekafa user-157=madzomk
Sep 13 20:06:36 power sudo[11078]: wp-toolkit : (command continued) user-158=gradbai1 user-159=gorsajmk user-160=aquatech user-161=supremel user-162=v5srybi9dcdx user-163=zdmgpsor user-164=modernar user-165=inkigaic user-166=innofabl user-167=premiumi user-168=vacuacti user-169=bozinovm user-170=dslmk user-171=darkogor user-172=fnjorgmk user-173=prizmapl user-174=tehnologija user-175=taneccom user-176=fiziosmk user-177=ambitiou user-178=versusmk user-179=fffhpcwr user-180=radekrat user-181=starluxm user-182=tcieuroc user-183=nationa2 user-184=onlinesh user-185=mapaspla user-186=solemor1 user-187=euronic2 user-188=matratze user-189=apgrupmk user-190=mediasol user-191=carrent1 user-192=bogdanos user-193=kardiome user-194=forzares user-195=aptekazd user-196=nikimare user-197=hausmark user-198=nikolov1 user-199=intelek1 user-200=mediatag user-201=lblawcom user-202=nucktra1 user-203=infopor1 user-204=vtranseu user-205=pravekom user-206=imdskopj user-207=glammace user-208=albuname
Sep 13 20:06:36 power sudo[11078]: wp-toolkit : (command continued) user-209=chemhemc user-210=samasped user-211=nutrivim user-212=euromaki user-213=cosmatob user-214=elektrot user-215=zapovim1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:06:36 power sudo[11080]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=datalink user-2=gogovan1 user-3=velmk user-4=univerz1 user-5=kujnamon user-6=agrosind user-7=mpbmk user-8=delcevca user-9=getaldus user-10=simbiome user-11=barececo user-12=workandt user-13=goartsym user-14=volkanco user-15=dhamachi user-16=mfashion user-17=makoasmk user-18=bianasho user-19=skyapart user-20=rasmorgm user-21=wikicamp user-22=urbanexp user-23=spdcompu user-24=detskagr user-25=infobadi user-26=mspmk user-27=bizporta user-28=datelcom user-29=maleshne user-30=sedcmk user-31=groskome user-32=ivanjord user-33=vfxnestc user-34=polyeste user-35=palenzok user-36=busymard user-37=zvskopje user-38=zampmk user-39=custome1 user-40=sparkupm user-41=stokovna user-42=klimimk user-43=stojano1 user-44=bovincom user-45=janiboja user-46=itradeco user-47=vezilkac user-48=cabinetm user-49=jpparkin user-50=inotekso
Sep 13 20:06:36 power sudo[11080]: wp-toolkit : (command continued) user-51=drleomk user-52=ideaplus user-53=karpospo user-54=nasaidni user-55=arturaco user-56=screenme user-57=premiums user-58=butelmk user-59=daris user-60=kouzonco user-61=premiuma user-62=cetplatf user-63=dalmacom user-64=edomcomm user-65=berbermk user-66=dikimk12 user-67=sprintst user-68=herbalpl user-69=enochmk user-70=seloviro user-71=centarba user-72=nlpmkorg user-73=kolened1 user-74=nolimits user-75=tealmk user-76=dadarmk user-77=proverim user-78=goodnews user-79=mstmmk user-80=gocruise user-81=tradeyou user-82=gjorgeiv user-83=dnevnoin user-84=pecakome user-85=wondersp user-86=stravelm user-87=robustco user-88=holiyayt user-89=rastiraz user-90=cajsproc user-91=hotammk user-92=youthgua user-93=anitermc user-94=stojnevi user-95=raremk user-96=oouslave user-97=uhostmk5 user-98=bauerbg user-99=enaspotc user-100=vmro user-101=trudovop user-102=viewinn user-103=socioloz user-104=avtogumi user-105=pelagoni
Sep 13 20:06:36 power sudo[11080]: wp-toolkit : (command continued) user-106=evolvepl user-107=frizered user-108=hidrommk user-109=caramk user-110=nefrolog user-111=levantmk user-112=ekostoc1 user-113=oncolog1 user-114=folklore user-115=bauerin2 user-116=euronic3 user-117=vegemk1 user-118=cupidpro user-119=conserva user-120=bonitavi user-121=evberasm user-122=tehnodro user-123=makdrone user-124=izzomk user-125=jpkomuna user-126=evacommk user-127=madzomk user-128=aptekafa user-129=gradbai1 user-130=eaptekam user-131=dimpalne user-132=peshkai1 user-133=fxxcom user-134=sssoluti user-135=atspedco user-136=progress user-137=animatem user-138=cleanerm user-139=recorgmk user-140=taktcomm user-141=jaramk user-142=solointe user-143=pelagini user-144=biplmk user-145=kaoilmk user-146=bbbustou user-147=workbenc user-148=ismassag user-149=mbmehani user-150=wineberr user-151=viplastc user-152=eurofarm user-153=solarinv user-154=golakkom user-155=trigemat user-156=eliksirz user-157=naksorgm
Sep 13 20:06:36 power sudo[11080]: wp-toolkit : (command continued) user-158=electrol user-159=mediasol user-160=carrent1 user-161=bogdanos user-162=apgrupmk user-163=kardiome user-164=euronic2 user-165=matratze user-166=intelek1 user-167=mediatag user-168=nucktra1 user-169=lblawcom user-170=aptekazd user-171=nikimare user-172=forzares user-173=hausmark user-174=nikolov1 user-175=imdskopj user-176=glammace user-177=albuname user-178=infopor1 user-179=vtranseu user-180=pravekom user-181=euromaki user-182=cosmatob user-183=zapovim1 user-184=elektrot user-185=chemhemc user-186=samasped user-187=nutrivim user-188=zdmgpsor user-189=gorsajmk user-190=aquatech user-191=v5srybi9dcdx user-192=supremel user-193=bozinovm user-194=darkogor user-195=fnjorgmk user-196=dslmk user-197=prizmapl user-198=innofabl user-199=premiumi user-200=vacuacti user-201=taneccom user-202=tehnologija user-203=modernar user-204=inkigaic user-205=fffhpcwr user-206=radekrat user-207=starluxm user-208=ambitiou
Sep 13 20:06:36 power sudo[11080]: wp-toolkit : (command continued) user-209=fiziosmk user-210=versusmk user-211=onlinesh user-212=nationa2 user-213=solemor1 user-214=mapaspla user-215=tcieuroc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:06:36 power sudo[11078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:36 power sudo[11080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:37 power sudo[11078]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:37 power sudo[11080]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:37 power sudo[11124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:37 power sudo[11124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:37 power sudo[11124]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:38 power sudo[11131]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:06:38 power sudo[11131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:38 power sudo[11131]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:38 power sudo[11177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit'
Sep 13 20:06:38 power sudo[11177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:38 power sudo[11177]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:38 power sudo[11182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\'
Sep 13 20:06:38 power sudo[11182]: wp-toolkit : (command continued) -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\'
Sep 13 20:06:38 power sudo[11182]: wp-toolkit : (command continued) -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\'
Sep 13 20:06:38 power sudo[11182]: wp-toolkit : (command continued) -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\'
Sep 13 20:06:38 power sudo[11182]: wp-toolkit : (command continued) -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 20:06:38 power sudo[11182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:38 power sudo[11182]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:38 power sudo[11188]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/sbin/cagefs_enter_user kolened1 /bin/sh -c 'cd /home/kolened1/public_html && find /home/kolened1/public_html/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user kolened1 \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014
Sep 13 20:06:38 power sudo[11188]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245
Sep 13 20:06:38 power sudo[11188]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500
Sep 13 20:06:38 power sudo[11188]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711
Sep 13 20:06:38 power sudo[11188]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit'
Sep 13 20:06:38 power sudo[11188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:38 power sudo[11188]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:39 power sudo[11249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:39 power sudo[11249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:39 power sudo[11249]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:39 power sudo[11263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:06:39 power sudo[11263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:39 power sudo[11263]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:39 power sudo[11269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:06:39 power sudo[11269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:39 power sudo[11269]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:39 power sudo[11275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=solemor1 user-2=mapaspla user-3=onlinesh user-4=nationa2 user-5=tcieuroc user-6=starluxm user-7=radekrat user-8=fffhpcwr user-9=versusmk user-10=ambitiou user-11=fiziosmk user-12=taneccom user-13=tehnologija user-14=darkogor user-15=prizmapl user-16=fnjorgmk user-17=dslmk user-18=bozinovm user-19=vacuacti user-20=premiumi user-21=innofabl user-22=inkigaic user-23=modernar user-24=zdmgpsor user-25=v5srybi9dcdx user-26=supremel user-27=aquatech user-28=gorsajmk user-29=elektrot user-30=zapovim1 user-31=cosmatob user-32=euromaki user-33=nutrivim user-34=samasped user-35=chemhemc user-36=albuname user-37=glammace user-38=imdskopj user-39=pravekom user-40=vtranseu user-41=infopor1 user-42=nucktra1 user-43=lblawcom user-44=mediatag user-45=intelek1 user-46=hausmark user-47=nikolov1 user-48=nikimare
Sep 13 20:06:39 power sudo[11275]: wp-toolkit : (command continued) user-49=aptekazd user-50=forzares user-51=kardiome user-52=carrent1 user-53=bogdanos user-54=mediasol user-55=apgrupmk user-56=matratze user-57=euronic2 user-58=solarinv user-59=eurofarm user-60=naksorgm user-61=eliksirz user-62=trigemat user-63=electrol user-64=golakkom user-65=mbmehani user-66=workbenc user-67=ismassag user-68=wineberr user-69=viplastc user-70=pelagini user-71=kaoilmk user-72=biplmk user-73=bbbustou user-74=progress user-75=cleanerm user-76=animatem user-77=atspedco user-78=sssoluti user-79=jaramk user-80=solointe user-81=taktcomm user-82=recorgmk user-83=gradbai1 user-84=aptekafa user-85=madzomk user-86=evacommk user-87=fxxcom user-88=peshkai1 user-89=eaptekam user-90=dimpalne user-91=makdrone user-92=tehnodro user-93=izzomk user-94=jpkomuna user-95=conserva user-96=euronic3 user-97=cupidpro user-98=vegemk1 user-99=evberasm user-100=bonitavi user-101=bauerin2 user-102=folklore user-103=caramk
Sep 13 20:06:39 power sudo[11275]: wp-toolkit : (command continued) user-104=hidrommk user-105=frizered user-106=levantmk user-107=ekostoc1 user-108=oncolog1 user-109=nefrolog user-110=pelagoni user-111=socioloz user-112=avtogumi user-113=evolvepl user-114=oouslave user-115=raremk user-116=bauerbg user-117=uhostmk5 user-118=stojnevi user-119=enaspotc user-120=trudovop user-121=viewinn user-122=vmro user-123=cajsproc user-124=hotammk user-125=anitermc user-126=youthgua user-127=dnevnoin user-128=gjorgeiv user-129=tradeyou user-130=holiyayt user-131=rastiraz user-132=pecakome user-133=robustco user-134=stravelm user-135=wondersp user-136=dadarmk user-137=proverim user-138=tealmk user-139=gocruise user-140=goodnews user-141=mstmmk user-142=seloviro user-143=nolimits user-144=kolened1 user-145=nlpmkorg user-146=centarba user-147=edomcomm user-148=berbermk user-149=dikimk12 user-150=herbalpl user-151=enochmk user-152=sprintst user-153=cetplatf user-154=dalmacom user-155=kouzonco
Sep 13 20:06:39 power sudo[11275]: wp-toolkit : (command continued) user-156=premiuma user-157=inotekso user-158=jpparkin user-159=drleomk user-160=daris user-161=butelmk user-162=premiums user-163=nasaidni user-164=karpospo user-165=ideaplus user-166=arturaco user-167=screenme user-168=bovincom user-169=stojano1 user-170=vezilkac user-171=cabinetm user-172=janiboja user-173=itradeco user-174=custome1 user-175=palenzok user-176=busymard user-177=zampmk user-178=zvskopje user-179=klimimk user-180=stokovna user-181=sparkupm user-182=maleshne user-183=datelcom user-184=bizporta user-185=polyeste user-186=vfxnestc user-187=sedcmk user-188=groskome user-189=ivanjord user-190=wikicamp user-191=urbanexp user-192=infobadi user-193=mspmk user-194=spdcompu user-195=detskagr user-196=dhamachi user-197=volkanco user-198=goartsym user-199=mfashion user-200=barececo user-201=simbiome user-202=getaldus user-203=delcevca user-204=workandt user-205=rasmorgm user-206=skyapart user-207=makoasmk
Sep 13 20:06:39 power sudo[11275]: wp-toolkit : (command continued) user-208=bianasho user-209=univerz1 user-210=kujnamon user-211=gogovan1 user-212=velmk user-213=datalink user-214=mpbmk user-215=agrosind feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:06:39 power sudo[11275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:40 power sudo[11275]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:40 power sudo[11292]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v'
Sep 13 20:06:40 power sudo[11292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:40 power sudo[11292]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:40 power sudo[11296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --user-status kolened1'
Sep 13 20:06:40 power sudo[11296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:40 power sudo[11296]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:40 power sudo[11304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 13 20:06:40 power sudo[11304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:40 power sudo[11304]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:40 power sudo[11308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 13 20:06:40 power sudo[11308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:40 power sudo[11308]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:40 power sudo[11313]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 13 20:06:40 power sudo[11313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:40 power sudo[11313]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:40 power sudo[11318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/kolened1/kolenedelkovski.edu.mk/wp-toolkit.conf
Sep 13 20:06:40 power sudo[11318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:40 power sudo[11318]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:41 power sudo[11340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:06:41 power sudo[11340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:41 power sudo[11340]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:41 power sudo[11352]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:06:41 power sudo[11352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:41 power sudo[11352]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:41 power sudo[11357]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:06:41 power sudo[11357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:42 power sudo[11357]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:42 power sudo[11363]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:06:42 power sudo[11363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:42 power sudo[11363]: pam_unix(sudo:session): session closed for user root
Sep 13 20:06:42 power sudo[11372]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=makdrone user-2=tehnodro user-3=jpkomuna user-4=izzomk user-5=gradbai1 user-6=evacommk user-7=madzomk user-8=aptekafa user-9=peshkai1 user-10=fxxcom user-11=dimpalne user-12=eaptekam user-13=bauerin2 user-14=folklore user-15=conserva user-16=vegemk1 user-17=cupidpro user-18=euronic3 user-19=bonitavi user-20=evberasm user-21=mbmehani user-22=ismassag user-23=workbenc user-24=viplastc user-25=wineberr user-26=solarinv user-27=eurofarm user-28=electrol user-29=trigemat user-30=eliksirz user-31=naksorgm user-32=golakkom user-33=animatem user-34=cleanerm user-35=progress user-36=sssoluti user-37=atspedco user-38=solointe user-39=jaramk user-40=taktcomm user-41=recorgmk user-42=pelagini user-43=bbbustou user-44=biplmk user-45=kaoilmk user-46=glammace user-47=albuname user-48=imdskopj user-49=pravekom
Sep 13 20:06:42 power sudo[11372]: wp-toolkit : (command continued) user-50=vtranseu user-51=infopor1 user-52=zapovim1 user-53=elektrot user-54=cosmatob user-55=euromaki user-56=nutrivim user-57=samasped user-58=chemhemc user-59=kardiome user-60=apgrupmk user-61=mediasol user-62=carrent1 user-63=bogdanos user-64=euronic2 user-65=matratze user-66=lblawcom user-67=nucktra1 user-68=intelek1 user-69=mediatag user-70=hausmark user-71=nikolov1 user-72=forzares user-73=aptekazd user-74=nikimare user-75=radekrat user-76=starluxm user-77=fffhpcwr user-78=versusmk user-79=fiziosmk user-80=ambitiou user-81=mapaspla user-82=solemor1 user-83=nationa2 user-84=onlinesh user-85=tcieuroc user-86=zdmgpsor user-87=supremel user-88=v5srybi9dcdx user-89=gorsajmk user-90=aquatech user-91=tehnologija user-92=taneccom user-93=innofabl user-94=premiumi user-95=vacuacti user-96=bozinovm user-97=dslmk user-98=darkogor user-99=fnjorgmk user-100=prizmapl user-101=inkigaic user-102=modernar user-103=urbanexp
Sep 13 20:06:42 power sudo[11372]: wp-toolkit : (command continued) user-104=wikicamp user-105=mspmk user-106=infobadi user-107=detskagr user-108=spdcompu user-109=datelcom user-110=maleshne user-111=bizporta user-112=vfxnestc user-113=polyeste user-114=groskome user-115=ivanjord user-116=sedcmk user-117=velmk user-118=gogovan1 user-119=univerz1 user-120=kujnamon user-121=datalink user-122=agrosind user-123=mpbmk user-124=mfashion user-125=volkanco user-126=goartsym user-127=dhamachi user-128=workandt user-129=simbiome user-130=delcevca user-131=getaldus user-132=barececo user-133=rasmorgm user-134=bianasho user-135=makoasmk user-136=skyapart user-137=drleomk user-138=jpparkin user-139=inotekso user-140=premiums user-141=butelmk user-142=daris user-143=screenme user-144=arturaco user-145=ideaplus user-146=karpospo user-147=nasaidni user-148=dalmacom user-149=cetplatf user-150=premiuma user-151=kouzonco user-152=custome1 user-153=busymard user-154=zvskopje user-155=zampmk
Sep 13 20:06:42 power sudo[11372]: wp-toolkit : (command continued) user-156=palenzok user-157=klimimk user-158=sparkupm user-159=stokovna user-160=bovincom user-161=stojano1 user-162=cabinetm user-163=vezilkac user-164=itradeco user-165=janiboja user-166=proverim user-167=dadarmk user-168=tealmk user-169=gocruise user-170=mstmmk user-171=goodnews user-172=dnevnoin user-173=tradeyou user-174=gjorgeiv user-175=rastiraz user-176=holiyayt user-177=wondersp user-178=stravelm user-179=robustco user-180=pecakome user-181=berbermk user-182=edomcomm user-183=sprintst user-184=enochmk user-185=herbalpl user-186=dikimk12 user-187=seloviro user-188=nolimits user-189=centarba user-190=nlpmkorg user-191=kolened1 user-192=pelagoni user-193=avtogumi user-194=socioloz user-195=evolvepl user-196=caramk user-197=frizered user-198=hidrommk user-199=nefrolog user-200=oncolog1 user-201=ekostoc1 user-202=levantmk user-203=hotammk user-204=cajsproc user-205=youthgua user-206=anitermc user-207=uhostmk5
Sep 13 20:06:42 power sudo[11372]: wp-toolkit : (command continued) user-208=bauerbg user-209=raremk user-210=oouslave user-211=stojnevi user-212=vmro user-213=viewinn user-214=trudovop user-215=enaspotc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:06:42 power sudo[11372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:06:42 power sudo[11372]: pam_unix(sudo:session): session closed for user root
Sep 13 20:07:02 power systemd[11670]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 20:08:20 power sudo[13235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:08:20 power sudo[13235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:08:20 power sudo[13235]: pam_unix(sudo:session): session closed for user root
Sep 13 20:08:20 power sudo[13241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:08:20 power sudo[13241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:08:20 power sudo[13241]: pam_unix(sudo:session): session closed for user root
Sep 13 20:08:21 power sudo[13246]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:08:21 power sudo[13246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:08:21 power sudo[13246]: pam_unix(sudo:session): session closed for user root
Sep 13 20:08:21 power sudo[13256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=pelagoni user-2=avtogumi user-3=socioloz user-4=evolvepl user-5=caramk user-6=frizered user-7=hidrommk user-8=nefrolog user-9=ekostoc1 user-10=levantmk user-11=oncolog1 user-12=hotammk user-13=cajsproc user-14=youthgua user-15=anitermc user-16=uhostmk5 user-17=bauerbg user-18=raremk user-19=oouslave user-20=stojnevi user-21=vmro user-22=trudovop user-23=viewinn user-24=enaspotc user-25=proverim user-26=dadarmk user-27=tealmk user-28=gocruise user-29=mstmmk user-30=goodnews user-31=dnevnoin user-32=tradeyou user-33=gjorgeiv user-34=rastiraz user-35=holiyayt user-36=wondersp user-37=stravelm user-38=robustco user-39=pecakome user-40=berbermk user-41=edomcomm user-42=sprintst user-43=enochmk user-44=herbalpl user-45=dikimk12 user-46=seloviro user-47=nolimits user-48=nlpmkorg user-49=centarba user-50=kolened1
Sep 13 20:08:21 power sudo[13256]: wp-toolkit : (command continued) user-51=drleomk user-52=jpparkin user-53=inotekso user-54=premiums user-55=butelmk user-56=daris user-57=screenme user-58=arturaco user-59=ideaplus user-60=nasaidni user-61=karpospo user-62=dalmacom user-63=cetplatf user-64=premiuma user-65=kouzonco user-66=custome1 user-67=zampmk user-68=busymard user-69=zvskopje user-70=palenzok user-71=klimimk user-72=sparkupm user-73=stokovna user-74=bovincom user-75=stojano1 user-76=cabinetm user-77=vezilkac user-78=itradeco user-79=janiboja user-80=urbanexp user-81=wikicamp user-82=infobadi user-83=mspmk user-84=detskagr user-85=spdcompu user-86=datelcom user-87=maleshne user-88=bizporta user-89=vfxnestc user-90=polyeste user-91=ivanjord user-92=groskome user-93=sedcmk user-94=velmk user-95=gogovan1 user-96=kujnamon user-97=univerz1 user-98=datalink user-99=agrosind user-100=mpbmk user-101=mfashion user-102=volkanco user-103=goartsym user-104=dhamachi user-105=workandt
Sep 13 20:08:21 power sudo[13256]: wp-toolkit : (command continued) user-106=delcevca user-107=simbiome user-108=getaldus user-109=barececo user-110=rasmorgm user-111=bianasho user-112=makoasmk user-113=skyapart user-114=radekrat user-115=starluxm user-116=fffhpcwr user-117=versusmk user-118=fiziosmk user-119=ambitiou user-120=mapaspla user-121=solemor1 user-122=nationa2 user-123=onlinesh user-124=tcieuroc user-125=zdmgpsor user-126=supremel user-127=v5srybi9dcdx user-128=gorsajmk user-129=aquatech user-130=tehnologija user-131=taneccom user-132=premiumi user-133=innofabl user-134=vacuacti user-135=bozinovm user-136=prizmapl user-137=darkogor user-138=fnjorgmk user-139=dslmk user-140=inkigaic user-141=modernar user-142=glammace user-143=albuname user-144=imdskopj user-145=pravekom user-146=vtranseu user-147=infopor1 user-148=elektrot user-149=zapovim1 user-150=euromaki user-151=cosmatob user-152=nutrivim user-153=samasped user-154=chemhemc user-155=kardiome user-156=apgrupmk
Sep 13 20:08:21 power sudo[13256]: wp-toolkit : (command continued) user-157=mediasol user-158=bogdanos user-159=carrent1 user-160=euronic2 user-161=matratze user-162=lblawcom user-163=nucktra1 user-164=intelek1 user-165=mediatag user-166=nikolov1 user-167=hausmark user-168=forzares user-169=aptekazd user-170=nikimare user-171=mbmehani user-172=ismassag user-173=workbenc user-174=viplastc user-175=wineberr user-176=solarinv user-177=eurofarm user-178=electrol user-179=trigemat user-180=naksorgm user-181=eliksirz user-182=golakkom user-183=animatem user-184=cleanerm user-185=progress user-186=atspedco user-187=sssoluti user-188=solointe user-189=jaramk user-190=recorgmk user-191=taktcomm user-192=pelagini user-193=bbbustou user-194=biplmk user-195=kaoilmk user-196=makdrone user-197=tehnodro user-198=jpkomuna user-199=izzomk user-200=gradbai1 user-201=evacommk user-202=aptekafa user-203=madzomk user-204=peshkai1 user-205=fxxcom user-206=dimpalne user-207=eaptekam user-208=bauerin2
Sep 13 20:08:21 power sudo[13256]: wp-toolkit : (command continued) user-209=folklore user-210=conserva user-211=vegemk1 user-212=cupidpro user-213=euronic3 user-214=bonitavi user-215=evberasm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:08:21 power sudo[13256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:08:21 power sudo[13256]: pam_unix(sudo:session): session closed for user root
Sep 13 20:10:01 power systemd[14989]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:11:19 power sudo[16190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:11:19 power sudo[16190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:19 power sudo[16190]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:19 power sudo[16195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:11:20 power sudo[16195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:20 power sudo[16195]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:20 power sudo[16208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:11:20 power sudo[16208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:20 power sudo[16208]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:20 power sudo[16227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:11:20 power sudo[16227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:20 power sudo[16227]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:20 power sudo[16237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=euronic2 user-2=matratze user-3=mediasol user-4=carrent1 user-5=bogdanos user-6=apgrupmk user-7=kardiome user-8=aptekazd user-9=nikimare user-10=forzares user-11=hausmark user-12=nikolov1 user-13=intelek1 user-14=mediatag user-15=nucktra1 user-16=lblawcom user-17=infopor1 user-18=vtranseu user-19=pravekom user-20=imdskopj user-21=glammace user-22=albuname user-23=samasped user-24=chemhemc user-25=nutrivim user-26=cosmatob user-27=euromaki user-28=elektrot user-29=zapovim1 user-30=gorsajmk user-31=aquatech user-32=v5srybi9dcdx user-33=supremel user-34=zdmgpsor user-35=modernar user-36=inkigaic user-37=bozinovm user-38=dslmk user-39=darkogor user-40=fnjorgmk user-41=prizmapl user-42=innofabl user-43=premiumi user-44=vacuacti user-45=taneccom user-46=tehnologija user-47=ambitiou user-48=fiziosmk user-49=versusmk
Sep 13 20:11:20 power sudo[16237]: wp-toolkit : (command continued) user-50=fffhpcwr user-51=radekrat user-52=starluxm user-53=tcieuroc user-54=onlinesh user-55=nationa2 user-56=solemor1 user-57=mapaspla user-58=folklore user-59=bauerin2 user-60=bonitavi user-61=evberasm user-62=euronic3 user-63=vegemk1 user-64=cupidpro user-65=conserva user-66=izzomk user-67=jpkomuna user-68=tehnodro user-69=makdrone user-70=eaptekam user-71=dimpalne user-72=peshkai1 user-73=fxxcom user-74=evacommk user-75=madzomk user-76=aptekafa user-77=gradbai1 user-78=taktcomm user-79=recorgmk user-80=jaramk user-81=solointe user-82=sssoluti user-83=atspedco user-84=progress user-85=animatem user-86=cleanerm user-87=biplmk user-88=kaoilmk user-89=bbbustou user-90=pelagini user-91=wineberr user-92=viplastc user-93=workbenc user-94=ismassag user-95=mbmehani user-96=golakkom user-97=trigemat user-98=naksorgm user-99=eliksirz user-100=electrol user-101=eurofarm user-102=solarinv user-103=dikimk12
Sep 13 20:11:20 power sudo[16237]: wp-toolkit : (command continued) user-104=sprintst user-105=enochmk user-106=herbalpl user-107=edomcomm user-108=berbermk user-109=nlpmkorg user-110=centarba user-111=kolened1 user-112=nolimits user-113=seloviro user-114=goodnews user-115=mstmmk user-116=gocruise user-117=tealmk user-118=dadarmk user-119=proverim user-120=pecakome user-121=wondersp user-122=stravelm user-123=robustco user-124=holiyayt user-125=rastiraz user-126=gjorgeiv user-127=tradeyou user-128=dnevnoin user-129=youthgua user-130=anitermc user-131=cajsproc user-132=hotammk user-133=enaspotc user-134=vmro user-135=trudovop user-136=viewinn user-137=stojnevi user-138=raremk user-139=oouslave user-140=uhostmk5 user-141=bauerbg user-142=evolvepl user-143=avtogumi user-144=socioloz user-145=pelagoni user-146=nefrolog user-147=oncolog1 user-148=ekostoc1 user-149=levantmk user-150=frizered user-151=hidrommk user-152=caramk user-153=agrosind user-154=mpbmk user-155=datalink
Sep 13 20:11:20 power sudo[16237]: wp-toolkit : (command continued) user-156=gogovan1 user-157=velmk user-158=univerz1 user-159=kujnamon user-160=bianasho user-161=makoasmk user-162=skyapart user-163=rasmorgm user-164=delcevca user-165=getaldus user-166=simbiome user-167=barececo user-168=workandt user-169=volkanco user-170=goartsym user-171=dhamachi user-172=mfashion user-173=spdcompu user-174=detskagr user-175=mspmk user-176=infobadi user-177=wikicamp user-178=urbanexp user-179=sedcmk user-180=ivanjord user-181=groskome user-182=vfxnestc user-183=polyeste user-184=bizporta user-185=datelcom user-186=maleshne user-187=sparkupm user-188=stokovna user-189=klimimk user-190=palenzok user-191=zampmk user-192=busymard user-193=zvskopje user-194=custome1 user-195=janiboja user-196=itradeco user-197=vezilkac user-198=cabinetm user-199=stojano1 user-200=bovincom user-201=ideaplus user-202=karpospo user-203=nasaidni user-204=screenme user-205=arturaco user-206=premiums user-207=daris
Sep 13 20:11:20 power sudo[16237]: wp-toolkit : (command continued) user-208=butelmk user-209=jpparkin user-210=inotekso user-211=drleomk user-212=kouzonco user-213=premiuma user-214=cetplatf user-215=dalmacom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:11:20 power sudo[16237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:20 power sudo[16237]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:21 power sudo[16279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:11:21 power sudo[16279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:21 power sudo[16279]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:21 power sudo[16287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:11:21 power sudo[16287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:21 power sudo[16287]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:21 power sudo[16293]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:11:21 power sudo[16293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:22 power sudo[16293]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:22 power sudo[16305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=zdmgpsor user-2=supremel user-3=v5srybi9dcdx user-4=gorsajmk user-5=aquatech user-6=tehnologija user-7=taneccom user-8=innofabl user-9=premiumi user-10=vacuacti user-11=bozinovm user-12=darkogor user-13=prizmapl user-14=fnjorgmk user-15=dslmk user-16=inkigaic user-17=modernar user-18=radekrat user-19=starluxm user-20=fffhpcwr user-21=versusmk user-22=fiziosmk user-23=ambitiou user-24=mapaspla user-25=solemor1 user-26=nationa2 user-27=onlinesh user-28=tcieuroc user-29=kardiome user-30=apgrupmk user-31=mediasol user-32=carrent1 user-33=bogdanos user-34=euronic2 user-35=matratze user-36=lblawcom user-37=nucktra1 user-38=intelek1 user-39=mediatag user-40=hausmark user-41=nikolov1 user-42=forzares user-43=aptekazd user-44=nikimare user-45=glammace user-46=albuname user-47=imdskopj user-48=vtranseu user-49=pravekom
Sep 13 20:11:22 power sudo[16305]: wp-toolkit : (command continued) user-50=infopor1 user-51=elektrot user-52=zapovim1 user-53=euromaki user-54=cosmatob user-55=nutrivim user-56=chemhemc user-57=samasped user-58=animatem user-59=cleanerm user-60=progress user-61=atspedco user-62=sssoluti user-63=solointe user-64=jaramk user-65=taktcomm user-66=recorgmk user-67=pelagini user-68=bbbustou user-69=biplmk user-70=kaoilmk user-71=mbmehani user-72=ismassag user-73=workbenc user-74=viplastc user-75=wineberr user-76=solarinv user-77=eurofarm user-78=electrol user-79=trigemat user-80=eliksirz user-81=naksorgm user-82=golakkom user-83=bauerin2 user-84=folklore user-85=conserva user-86=vegemk1 user-87=cupidpro user-88=euronic3 user-89=bonitavi user-90=evberasm user-91=makdrone user-92=tehnodro user-93=jpkomuna user-94=izzomk user-95=gradbai1 user-96=evacommk user-97=aptekafa user-98=madzomk user-99=peshkai1 user-100=fxxcom user-101=dimpalne user-102=eaptekam user-103=hotammk
Sep 13 20:11:22 power sudo[16305]: wp-toolkit : (command continued) user-104=cajsproc user-105=youthgua user-106=anitermc user-107=uhostmk5 user-108=bauerbg user-109=raremk user-110=oouslave user-111=stojnevi user-112=vmro user-113=viewinn user-114=trudovop user-115=enaspotc user-116=pelagoni user-117=socioloz user-118=avtogumi user-119=evolvepl user-120=caramk user-121=frizered user-122=hidrommk user-123=nefrolog user-124=ekostoc1 user-125=oncolog1 user-126=levantmk user-127=berbermk user-128=edomcomm user-129=sprintst user-130=herbalpl user-131=enochmk user-132=dikimk12 user-133=seloviro user-134=nolimits user-135=centarba user-136=nlpmkorg user-137=kolened1 user-138=proverim user-139=dadarmk user-140=tealmk user-141=gocruise user-142=mstmmk user-143=goodnews user-144=dnevnoin user-145=gjorgeiv user-146=tradeyou user-147=rastiraz user-148=holiyayt user-149=wondersp user-150=robustco user-151=stravelm user-152=pecakome user-153=custome1 user-154=busymard user-155=zampmk
Sep 13 20:11:22 power sudo[16305]: wp-toolkit : (command continued) user-156=zvskopje user-157=palenzok user-158=klimimk user-159=sparkupm user-160=stokovna user-161=bovincom user-162=stojano1 user-163=cabinetm user-164=vezilkac user-165=itradeco user-166=janiboja user-167=drleomk user-168=jpparkin user-169=inotekso user-170=premiums user-171=daris user-172=butelmk user-173=arturaco user-174=screenme user-175=ideaplus user-176=nasaidni user-177=karpospo user-178=dalmacom user-179=cetplatf user-180=premiuma user-181=kouzonco user-182=velmk user-183=gogovan1 user-184=kujnamon user-185=univerz1 user-186=datalink user-187=agrosind user-188=mpbmk user-189=mfashion user-190=volkanco user-191=goartsym user-192=dhamachi user-193=workandt user-194=simbiome user-195=delcevca user-196=getaldus user-197=barececo user-198=rasmorgm user-199=makoasmk user-200=bianasho user-201=skyapart user-202=urbanexp user-203=wikicamp user-204=mspmk user-205=infobadi user-206=detskagr user-207=spdcompu
Sep 13 20:11:22 power sudo[16305]: wp-toolkit : (command continued) user-208=datelcom user-209=maleshne user-210=bizporta user-211=vfxnestc user-212=polyeste user-213=ivanjord user-214=groskome user-215=sedcmk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:11:22 power sudo[16305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:22 power sudo[16305]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:22 power sudo[16335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:11:22 power sudo[16335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:22 power sudo[16335]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:22 power sudo[16341]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:11:22 power sudo[16341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:22 power sudo[16341]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:23 power sudo[16349]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:11:23 power sudo[16349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:23 power sudo[16349]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:23 power sudo[16377]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:11:23 power sudo[16377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:23 power sudo[16377]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:23 power sudo[16383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:11:23 power sudo[16383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:23 power sudo[16383]: pam_unix(sudo:session): session closed for user root
Sep 13 20:11:23 power sudo[16388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:11:23 power sudo[16388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:11:23 power sudo[16388]: pam_unix(sudo:session): session closed for user root
Sep 13 20:12:02 power systemd[17442]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 20:13:04 power sudo[18557]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:13:04 power sudo[18557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:13:04 power sudo[18557]: pam_unix(sudo:session): session closed for user root
Sep 13 20:13:04 power sudo[18562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:13:04 power sudo[18562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:13:04 power sudo[18562]: pam_unix(sudo:session): session closed for user root
Sep 13 20:13:04 power sudo[18569]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:13:04 power sudo[18569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:13:04 power sudo[18569]: pam_unix(sudo:session): session closed for user root
Sep 13 20:13:04 power sudo[18578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:13:04 power sudo[18578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:13:05 power sudo[18578]: pam_unix(sudo:session): session closed for user root
Sep 13 20:13:05 power sudo[18584]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=custome1 user-2=busymard user-3=zvskopje user-4=zampmk user-5=palenzok user-6=klimimk user-7=sparkupm user-8=stokovna user-9=bovincom user-10=stojano1 user-11=cabinetm user-12=vezilkac user-13=itradeco user-14=janiboja user-15=drleomk user-16=jpparkin user-17=inotekso user-18=premiums user-19=butelmk user-20=daris user-21=arturaco user-22=screenme user-23=ideaplus user-24=karpospo user-25=nasaidni user-26=dalmacom user-27=cetplatf user-28=premiuma user-29=kouzonco user-30=velmk user-31=gogovan1 user-32=univerz1 user-33=kujnamon user-34=datalink user-35=agrosind user-36=mpbmk user-37=mfashion user-38=goartsym user-39=volkanco user-40=dhamachi user-41=workandt user-42=simbiome user-43=delcevca user-44=getaldus user-45=barececo user-46=rasmorgm user-47=bianasho user-48=makoasmk user-49=skyapart user-50=urbanexp
Sep 13 20:13:05 power sudo[18584]: wp-toolkit : (command continued) user-51=wikicamp user-52=infobadi user-53=mspmk user-54=detskagr user-55=spdcompu user-56=datelcom user-57=maleshne user-58=bizporta user-59=vfxnestc user-60=polyeste user-61=groskome user-62=ivanjord user-63=sedcmk user-64=hotammk user-65=cajsproc user-66=youthgua user-67=anitermc user-68=uhostmk5 user-69=bauerbg user-70=raremk user-71=oouslave user-72=stojnevi user-73=vmro user-74=trudovop user-75=viewinn user-76=enaspotc user-77=pelagoni user-78=avtogumi user-79=socioloz user-80=evolvepl user-81=caramk user-82=frizered user-83=hidrommk user-84=nefrolog user-85=ekostoc1 user-86=oncolog1 user-87=levantmk user-88=berbermk user-89=edomcomm user-90=sprintst user-91=herbalpl user-92=enochmk user-93=dikimk12 user-94=seloviro user-95=nolimits user-96=nlpmkorg user-97=centarba user-98=kolened1 user-99=proverim user-100=dadarmk user-101=tealmk user-102=gocruise user-103=mstmmk user-104=goodnews user-105=dnevnoin
Sep 13 20:13:05 power sudo[18584]: wp-toolkit : (command continued) user-106=gjorgeiv user-107=tradeyou user-108=rastiraz user-109=holiyayt user-110=wondersp user-111=robustco user-112=stravelm user-113=pecakome user-114=animatem user-115=cleanerm user-116=progress user-117=sssoluti user-118=atspedco user-119=solointe user-120=jaramk user-121=taktcomm user-122=recorgmk user-123=pelagini user-124=bbbustou user-125=kaoilmk user-126=biplmk user-127=mbmehani user-128=ismassag user-129=workbenc user-130=viplastc user-131=wineberr user-132=solarinv user-133=eurofarm user-134=electrol user-135=trigemat user-136=eliksirz user-137=naksorgm user-138=golakkom user-139=bauerin2 user-140=folklore user-141=conserva user-142=vegemk1 user-143=cupidpro user-144=euronic3 user-145=bonitavi user-146=evberasm user-147=makdrone user-148=tehnodro user-149=jpkomuna user-150=izzomk user-151=gradbai1 user-152=evacommk user-153=aptekafa user-154=madzomk user-155=peshkai1 user-156=fxxcom user-157=dimpalne
Sep 13 20:13:05 power sudo[18584]: wp-toolkit : (command continued) user-158=eaptekam user-159=zdmgpsor user-160=supremel user-161=v5srybi9dcdx user-162=gorsajmk user-163=aquatech user-164=tehnologija user-165=taneccom user-166=premiumi user-167=innofabl user-168=vacuacti user-169=bozinovm user-170=fnjorgmk user-171=darkogor user-172=prizmapl user-173=dslmk user-174=inkigaic user-175=modernar user-176=radekrat user-177=starluxm user-178=fffhpcwr user-179=versusmk user-180=fiziosmk user-181=ambitiou user-182=mapaspla user-183=solemor1 user-184=nationa2 user-185=onlinesh user-186=tcieuroc user-187=kardiome user-188=apgrupmk user-189=mediasol user-190=bogdanos user-191=carrent1 user-192=euronic2 user-193=matratze user-194=lblawcom user-195=nucktra1 user-196=intelek1 user-197=mediatag user-198=nikolov1 user-199=hausmark user-200=forzares user-201=aptekazd user-202=nikimare user-203=glammace user-204=albuname user-205=imdskopj user-206=pravekom user-207=vtranseu user-208=infopor1
Sep 13 20:13:05 power sudo[18584]: wp-toolkit : (command continued) user-209=zapovim1 user-210=elektrot user-211=euromaki user-212=cosmatob user-213=nutrivim user-214=chemhemc user-215=samasped feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:13:05 power sudo[18584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:13:05 power sudo[18584]: pam_unix(sudo:session): session closed for user root
Sep 13 20:15:01 power systemd[20262]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:17:56 power sudo[23031]:    root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/tee /usr/local/sbin/collect_freeze_bundle.sh
Sep 13 20:17:56 power sudo[23031]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:17:56 power sudo[23031]: pam_unix(sudo:session): session closed for user root
Sep 13 20:17:56 power sudo[23034]:    root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/chmod +x /usr/local/sbin/collect_freeze_bundle.sh
Sep 13 20:17:56 power sudo[23034]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:17:56 power sudo[23034]: pam_unix(sudo:session): session closed for user root
Sep 13 20:20:01 power systemd[24714]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:25:01 power systemd[28662]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:30:01 power systemd[33534]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:30:01 power systemd[33535]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 20:30:01 power systemd[33536]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 20:30:01 power systemd[33538]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 20:35:01 power systemd[38522]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:36:01 power systemd[39395]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 20:37:02 power systemd[40122]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 20:37:21 power sudo[40370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:37:21 power sudo[40370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:21 power sudo[40370]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:21 power sudo[40381]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:37:21 power sudo[40381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:21 power sudo[40381]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:21 power sudo[40389]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:37:21 power sudo[40389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:22 power sudo[40389]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:22 power sudo[40398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=kardiome user-2=apgrupmk user-3=mediasol user-4=carrent1 user-5=bogdanos user-6=euronic2 user-7=matratze user-8=lblawcom user-9=nucktra1 user-10=intelek1 user-11=mediatag user-12=nikolov1 user-13=hausmark user-14=forzares user-15=aptekazd user-16=nikimare user-17=glammace user-18=albuname user-19=imdskopj user-20=vtranseu user-21=pravekom user-22=infopor1 user-23=elektrot user-24=zapovim1 user-25=euromaki user-26=cosmatob user-27=nutrivim user-28=chemhemc user-29=samasped user-30=zdmgpsor user-31=supremel user-32=v5srybi9dcdx user-33=gorsajmk user-34=aquatech user-35=tehnologija user-36=taneccom user-37=premiumi user-38=innofabl user-39=vacuacti user-40=bozinovm user-41=dslmk user-42=darkogor user-43=fnjorgmk user-44=prizmapl user-45=inkigaic user-46=modernar user-47=radekrat user-48=starluxm user-49=fffhpcwr
Sep 13 20:37:22 power sudo[40398]: wp-toolkit : (command continued) user-50=versusmk user-51=fiziosmk user-52=ambitiou user-53=mapaspla user-54=solemor1 user-55=nationa2 user-56=onlinesh user-57=tcieuroc user-58=bauerin2 user-59=folklore user-60=conserva user-61=vegemk1 user-62=cupidpro user-63=euronic3 user-64=bonitavi user-65=evberasm user-66=makdrone user-67=tehnodro user-68=jpkomuna user-69=izzomk user-70=gradbai1 user-71=evacommk user-72=aptekafa user-73=madzomk user-74=peshkai1 user-75=fxxcom user-76=dimpalne user-77=eaptekam user-78=animatem user-79=cleanerm user-80=progress user-81=atspedco user-82=sssoluti user-83=solointe user-84=jaramk user-85=taktcomm user-86=recorgmk user-87=pelagini user-88=bbbustou user-89=biplmk user-90=kaoilmk user-91=mbmehani user-92=ismassag user-93=workbenc user-94=viplastc user-95=wineberr user-96=solarinv user-97=eurofarm user-98=electrol user-99=trigemat user-100=eliksirz user-101=naksorgm user-102=golakkom user-103=berbermk
Sep 13 20:37:22 power sudo[40398]: wp-toolkit : (command continued) user-104=edomcomm user-105=sprintst user-106=herbalpl user-107=enochmk user-108=dikimk12 user-109=seloviro user-110=nolimits user-111=centarba user-112=nlpmkorg user-113=kolened1 user-114=proverim user-115=dadarmk user-116=tealmk user-117=gocruise user-118=mstmmk user-119=goodnews user-120=dnevnoin user-121=gjorgeiv user-122=tradeyou user-123=rastiraz user-124=holiyayt user-125=wondersp user-126=robustco user-127=stravelm user-128=pecakome user-129=hotammk user-130=cajsproc user-131=youthgua user-132=anitermc user-133=uhostmk5 user-134=bauerbg user-135=raremk user-136=oouslave user-137=stojnevi user-138=vmro user-139=viewinn user-140=trudovop user-141=enaspotc user-142=pelagoni user-143=socioloz user-144=avtogumi user-145=evolvepl user-146=caramk user-147=frizered user-148=hidrommk user-149=nefrolog user-150=ekostoc1 user-151=levantmk user-152=oncolog1 user-153=gogovan1 user-154=velmk user-155=kujnamon
Sep 13 20:37:22 power sudo[40398]: wp-toolkit : (command continued) user-156=univerz1 user-157=datalink user-158=agrosind user-159=mpbmk user-160=mfashion user-161=goartsym user-162=volkanco user-163=dhamachi user-164=workandt user-165=simbiome user-166=getaldus user-167=delcevca user-168=barececo user-169=rasmorgm user-170=makoasmk user-171=bianasho user-172=skyapart user-173=urbanexp user-174=wikicamp user-175=mspmk user-176=infobadi user-177=detskagr user-178=spdcompu user-179=datelcom user-180=maleshne user-181=bizporta user-182=vfxnestc user-183=polyeste user-184=groskome user-185=ivanjord user-186=sedcmk user-187=custome1 user-188=busymard user-189=zampmk user-190=zvskopje user-191=palenzok user-192=klimimk user-193=sparkupm user-194=stokovna user-195=bovincom user-196=stojano1 user-197=cabinetm user-198=vezilkac user-199=itradeco user-200=janiboja user-201=drleomk user-202=jpparkin user-203=inotekso user-204=premiums user-205=butelmk user-206=daris user-207=arturaco
Sep 13 20:37:22 power sudo[40398]: wp-toolkit : (command continued) user-208=screenme user-209=ideaplus user-210=nasaidni user-211=karpospo user-212=dalmacom user-213=cetplatf user-214=premiuma user-215=kouzonco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:37:22 power sudo[40398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:22 power sudo[40398]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:23 power sudo[40415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:37:23 power sudo[40415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:23 power sudo[40415]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:23 power sudo[40421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:37:23 power sudo[40421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:23 power sudo[40421]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:23 power sudo[40428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:37:23 power sudo[40428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:23 power sudo[40428]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:24 power sudo[40455]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:37:24 power sudo[40455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:24 power sudo[40455]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:24 power sudo[40460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:37:24 power sudo[40460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:24 power sudo[40460]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:24 power sudo[40465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:37:24 power sudo[40465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:24 power sudo[40465]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:39 power sudo[40623]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:37:39 power sudo[40623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:39 power sudo[40623]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:39 power sudo[40628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:37:39 power sudo[40628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:39 power sudo[40628]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:39 power sudo[40634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:37:39 power sudo[40634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:40 power sudo[40634]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:40 power sudo[40645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=arturaco user-2=screenme user-3=karpospo user-4=nasaidni user-5=ideaplus user-6=butelmk user-7=daris user-8=premiums user-9=drleomk user-10=inotekso user-11=jpparkin user-12=premiuma user-13=kouzonco user-14=dalmacom user-15=cetplatf user-16=stokovna user-17=sparkupm user-18=klimimk user-19=zvskopje user-20=busymard user-21=zampmk user-22=palenzok user-23=custome1 user-24=itradeco user-25=janiboja user-26=cabinetm user-27=vezilkac user-28=stojano1 user-29=bovincom user-30=detskagr user-31=spdcompu user-32=mspmk user-33=infobadi user-34=urbanexp user-35=wikicamp user-36=ivanjord user-37=groskome user-38=sedcmk user-39=polyeste user-40=vfxnestc user-41=bizporta user-42=maleshne user-43=datelcom user-44=mpbmk user-45=agrosind user-46=datalink user-47=univerz1 user-48=kujnamon user-49=velmk user-50=gogovan1
Sep 13 20:37:40 power sudo[40645]: wp-toolkit : (command continued) user-51=skyapart user-52=makoasmk user-53=bianasho user-54=rasmorgm user-55=workandt user-56=barececo user-57=delcevca user-58=getaldus user-59=simbiome user-60=mfashion user-61=dhamachi user-62=volkanco user-63=goartsym user-64=evolvepl user-65=avtogumi user-66=socioloz user-67=pelagoni user-68=oncolog1 user-69=ekostoc1 user-70=levantmk user-71=nefrolog user-72=hidrommk user-73=frizered user-74=caramk user-75=anitermc user-76=youthgua user-77=hotammk user-78=cajsproc user-79=trudovop user-80=viewinn user-81=vmro user-82=enaspotc user-83=stojnevi user-84=bauerbg user-85=uhostmk5 user-86=oouslave user-87=raremk user-88=mstmmk user-89=goodnews user-90=gocruise user-91=tealmk user-92=proverim user-93=dadarmk user-94=robustco user-95=stravelm user-96=wondersp user-97=pecakome user-98=rastiraz user-99=holiyayt user-100=tradeyou user-101=gjorgeiv user-102=dnevnoin user-103=enochmk user-104=herbalpl user-105=sprintst
Sep 13 20:37:40 power sudo[40645]: wp-toolkit : (command continued) user-106=dikimk12 user-107=berbermk user-108=edomcomm user-109=kolened1 user-110=nlpmkorg user-111=centarba user-112=nolimits user-113=seloviro user-114=viplastc user-115=wineberr user-116=ismassag user-117=workbenc user-118=mbmehani user-119=golakkom user-120=electrol user-121=eliksirz user-122=naksorgm user-123=trigemat user-124=eurofarm user-125=solarinv user-126=taktcomm user-127=recorgmk user-128=solointe user-129=jaramk user-130=atspedco user-131=sssoluti user-132=cleanerm user-133=animatem user-134=progress user-135=bbbustou user-136=kaoilmk user-137=biplmk user-138=pelagini user-139=jpkomuna user-140=izzomk user-141=tehnodro user-142=makdrone user-143=dimpalne user-144=eaptekam user-145=fxxcom user-146=peshkai1 user-147=madzomk user-148=aptekafa user-149=evacommk user-150=gradbai1 user-151=folklore user-152=bauerin2 user-153=evberasm user-154=bonitavi user-155=cupidpro user-156=vegemk1 user-157=euronic3
Sep 13 20:37:40 power sudo[40645]: wp-toolkit : (command continued) user-158=conserva user-159=fiziosmk user-160=ambitiou user-161=versusmk user-162=fffhpcwr user-163=starluxm user-164=radekrat user-165=tcieuroc user-166=nationa2 user-167=onlinesh user-168=mapaspla user-169=solemor1 user-170=aquatech user-171=gorsajmk user-172=supremel user-173=v5srybi9dcdx user-174=zdmgpsor user-175=modernar user-176=inkigaic user-177=vacuacti user-178=innofabl user-179=premiumi user-180=darkogor user-181=fnjorgmk user-182=dslmk user-183=prizmapl user-184=bozinovm user-185=tehnologija user-186=taneccom user-187=infopor1 user-188=pravekom user-189=vtranseu user-190=imdskopj user-191=albuname user-192=glammace user-193=samasped user-194=chemhemc user-195=nutrivim user-196=cosmatob user-197=euromaki user-198=elektrot user-199=zapovim1 user-200=matratze user-201=euronic2 user-202=apgrupmk user-203=carrent1 user-204=bogdanos user-205=mediasol user-206=kardiome user-207=forzares user-208=nikimare
Sep 13 20:37:40 power sudo[40645]: wp-toolkit : (command continued) user-209=aptekazd user-210=hausmark user-211=nikolov1 user-212=mediatag user-213=intelek1 user-214=lblawcom user-215=nucktra1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:37:40 power sudo[40645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:40 power sudo[40657]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:37:40 power sudo[40657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:40 power sudo[40657]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:40 power sudo[40662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:37:40 power sudo[40662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:40 power sudo[40662]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:40 power sudo[40667]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:37:40 power sudo[40667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:40 power sudo[40645]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:40 power sudo[40667]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:40 power sudo[40678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=euronic2 user-2=matratze user-3=apgrupmk user-4=mediasol user-5=carrent1 user-6=bogdanos user-7=kardiome user-8=forzares user-9=aptekazd user-10=nikimare user-11=nikolov1 user-12=hausmark user-13=intelek1 user-14=mediatag user-15=lblawcom user-16=nucktra1 user-17=infopor1 user-18=vtranseu user-19=pravekom user-20=imdskopj user-21=glammace user-22=albuname user-23=chemhemc user-24=samasped user-25=nutrivim user-26=euromaki user-27=cosmatob user-28=elektrot user-29=zapovim1 user-30=gorsajmk user-31=aquatech user-32=supremel user-33=v5srybi9dcdx user-34=zdmgpsor user-35=modernar user-36=inkigaic user-37=innofabl user-38=premiumi user-39=vacuacti user-40=bozinovm user-41=darkogor user-42=fnjorgmk user-43=dslmk user-44=prizmapl user-45=tehnologija user-46=taneccom user-47=fiziosmk user-48=ambitiou user-49=versusmk
Sep 13 20:37:40 power sudo[40678]: wp-toolkit : (command continued) user-50=fffhpcwr user-51=radekrat user-52=starluxm user-53=tcieuroc user-54=nationa2 user-55=onlinesh user-56=mapaspla user-57=solemor1 user-58=folklore user-59=bauerin2 user-60=bonitavi user-61=evberasm user-62=vegemk1 user-63=cupidpro user-64=euronic3 user-65=conserva user-66=jpkomuna user-67=izzomk user-68=tehnodro user-69=makdrone user-70=dimpalne user-71=eaptekam user-72=peshkai1 user-73=fxxcom user-74=evacommk user-75=aptekafa user-76=madzomk user-77=gradbai1 user-78=recorgmk user-79=taktcomm user-80=solointe user-81=jaramk user-82=sssoluti user-83=atspedco user-84=animatem user-85=cleanerm user-86=progress user-87=bbbustou user-88=kaoilmk user-89=biplmk user-90=pelagini user-91=viplastc user-92=wineberr user-93=ismassag user-94=workbenc user-95=mbmehani user-96=golakkom user-97=electrol user-98=trigemat user-99=naksorgm user-100=eliksirz user-101=eurofarm user-102=solarinv user-103=sprintst
Sep 13 20:37:40 power sudo[40678]: wp-toolkit : (command continued) user-104=herbalpl user-105=enochmk user-106=dikimk12 user-107=berbermk user-108=edomcomm user-109=nlpmkorg user-110=centarba user-111=kolened1 user-112=nolimits user-113=seloviro user-114=mstmmk user-115=goodnews user-116=gocruise user-117=tealmk user-118=proverim user-119=dadarmk user-120=wondersp user-121=robustco user-122=stravelm user-123=pecakome user-124=rastiraz user-125=holiyayt user-126=tradeyou user-127=gjorgeiv user-128=dnevnoin user-129=youthgua user-130=anitermc user-131=hotammk user-132=cajsproc user-133=vmro user-134=trudovop user-135=viewinn user-136=enaspotc user-137=stojnevi user-138=uhostmk5 user-139=bauerbg user-140=raremk user-141=oouslave user-142=evolvepl user-143=socioloz user-144=avtogumi user-145=pelagoni user-146=nefrolog user-147=oncolog1 user-148=ekostoc1 user-149=levantmk user-150=frizered user-151=hidrommk user-152=caramk user-153=agrosind user-154=mpbmk user-155=datalink
Sep 13 20:37:40 power sudo[40678]: wp-toolkit : (command continued) user-156=gogovan1 user-157=velmk user-158=kujnamon user-159=univerz1 user-160=bianasho user-161=makoasmk user-162=skyapart user-163=rasmorgm user-164=workandt user-165=getaldus user-166=simbiome user-167=delcevca user-168=barececo user-169=mfashion user-170=volkanco user-171=goartsym user-172=dhamachi user-173=detskagr user-174=spdcompu user-175=mspmk user-176=infobadi user-177=urbanexp user-178=wikicamp user-179=ivanjord user-180=groskome user-181=sedcmk user-182=vfxnestc user-183=polyeste user-184=bizporta user-185=datelcom user-186=maleshne user-187=sparkupm user-188=stokovna user-189=klimimk user-190=zampmk user-191=busymard user-192=zvskopje user-193=palenzok user-194=custome1 user-195=itradeco user-196=janiboja user-197=cabinetm user-198=vezilkac user-199=stojano1 user-200=bovincom user-201=arturaco user-202=screenme user-203=ideaplus user-204=karpospo user-205=nasaidni user-206=premiums user-207=butelmk
Sep 13 20:37:40 power sudo[40678]: wp-toolkit : (command continued) user-208=daris user-209=drleomk user-210=jpparkin user-211=inotekso user-212=premiuma user-213=kouzonco user-214=dalmacom user-215=cetplatf feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:37:40 power sudo[40678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:40 power sudo[40696]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:37:40 power sudo[40696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:40 power sudo[40696]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:40 power sudo[40702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:37:40 power sudo[40702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:40 power sudo[40678]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:41 power sudo[40702]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:41 power sudo[40708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:37:41 power sudo[40708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:41 power sudo[40708]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:41 power sudo[40717]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=jpparkin user-2=inotekso user-3=drleomk user-4=premiums user-5=daris user-6=butelmk user-7=ideaplus user-8=karpospo user-9=nasaidni user-10=screenme user-11=arturaco user-12=cetplatf user-13=dalmacom user-14=kouzonco user-15=premiuma user-16=custome1 user-17=palenzok user-18=zampmk user-19=busymard user-20=zvskopje user-21=klimimk user-22=sparkupm user-23=stokovna user-24=bovincom user-25=stojano1 user-26=vezilkac user-27=cabinetm user-28=janiboja user-29=itradeco user-30=wikicamp user-31=urbanexp user-32=mspmk user-33=infobadi user-34=spdcompu user-35=detskagr user-36=datelcom user-37=maleshne user-38=bizporta user-39=vfxnestc user-40=polyeste user-41=sedcmk user-42=ivanjord user-43=groskome user-44=gogovan1 user-45=velmk user-46=univerz1 user-47=kujnamon user-48=datalink user-49=agrosind user-50=mpbmk
Sep 13 20:37:41 power sudo[40717]: wp-toolkit : (command continued) user-51=goartsym user-52=volkanco user-53=dhamachi user-54=mfashion user-55=simbiome user-56=delcevca user-57=getaldus user-58=barececo user-59=workandt user-60=rasmorgm user-61=makoasmk user-62=bianasho user-63=skyapart user-64=pelagoni user-65=avtogumi user-66=socioloz user-67=evolvepl user-68=caramk user-69=frizered user-70=hidrommk user-71=nefrolog user-72=ekostoc1 user-73=levantmk user-74=oncolog1 user-75=cajsproc user-76=hotammk user-77=youthgua user-78=anitermc user-79=raremk user-80=oouslave user-81=uhostmk5 user-82=bauerbg user-83=stojnevi user-84=enaspotc user-85=vmro user-86=viewinn user-87=trudovop user-88=dadarmk user-89=proverim user-90=tealmk user-91=gocruise user-92=goodnews user-93=mstmmk user-94=dnevnoin user-95=tradeyou user-96=gjorgeiv user-97=holiyayt user-98=rastiraz user-99=pecakome user-100=wondersp user-101=stravelm user-102=robustco user-103=edomcomm user-104=berbermk user-105=dikimk12
Sep 13 20:37:41 power sudo[40717]: wp-toolkit : (command continued) user-106=sprintst user-107=herbalpl user-108=enochmk user-109=seloviro user-110=nolimits user-111=centarba user-112=nlpmkorg user-113=kolened1 user-114=mbmehani user-115=workbenc user-116=ismassag user-117=wineberr user-118=viplastc user-119=solarinv user-120=eurofarm user-121=trigemat user-122=eliksirz user-123=naksorgm user-124=electrol user-125=golakkom user-126=progress user-127=animatem user-128=cleanerm user-129=atspedco user-130=sssoluti user-131=jaramk user-132=solointe user-133=taktcomm user-134=recorgmk user-135=pelagini user-136=kaoilmk user-137=biplmk user-138=bbbustou user-139=makdrone user-140=tehnodro user-141=izzomk user-142=jpkomuna user-143=gradbai1 user-144=evacommk user-145=aptekafa user-146=madzomk user-147=peshkai1 user-148=fxxcom user-149=eaptekam user-150=dimpalne user-151=bauerin2 user-152=folklore user-153=conserva user-154=euronic3 user-155=vegemk1 user-156=cupidpro user-157=bonitavi
Sep 13 20:37:41 power sudo[40717]: wp-toolkit : (command continued) user-158=evberasm user-159=radekrat user-160=starluxm user-161=fffhpcwr user-162=versusmk user-163=ambitiou user-164=fiziosmk user-165=solemor1 user-166=mapaspla user-167=onlinesh user-168=nationa2 user-169=tcieuroc user-170=zdmgpsor user-171=v5srybi9dcdx user-172=supremel user-173=gorsajmk user-174=aquatech user-175=taneccom user-176=tehnologija user-177=bozinovm user-178=prizmapl user-179=darkogor user-180=fnjorgmk user-181=dslmk user-182=innofabl user-183=premiumi user-184=vacuacti user-185=inkigaic user-186=modernar user-187=glammace user-188=albuname user-189=imdskopj user-190=pravekom user-191=vtranseu user-192=infopor1 user-193=zapovim1 user-194=elektrot user-195=cosmatob user-196=euromaki user-197=nutrivim user-198=samasped user-199=chemhemc user-200=kardiome user-201=mediasol user-202=bogdanos user-203=carrent1 user-204=apgrupmk user-205=euronic2 user-206=matratze user-207=nucktra1 user-208=lblawcom
Sep 13 20:37:41 power sudo[40717]: wp-toolkit : (command continued) user-209=intelek1 user-210=mediatag user-211=hausmark user-212=nikolov1 user-213=aptekazd user-214=nikimare user-215=forzares feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:37:41 power sudo[40717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:41 power sudo[40717]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:49 power sudo[40872]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:37:49 power sudo[40872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:49 power sudo[40872]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:49 power sudo[40878]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:37:49 power sudo[40878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:49 power sudo[40878]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:49 power sudo[40884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:37:49 power sudo[40884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:50 power sudo[40884]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:50 power sudo[40898]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=dalmacom user-2=cetplatf user-3=premiuma user-4=kouzonco user-5=daris user-6=butelmk user-7=premiums user-8=arturaco user-9=screenme user-10=nasaidni user-11=karpospo user-12=ideaplus user-13=drleomk user-14=inotekso user-15=jpparkin user-16=cabinetm user-17=vezilkac user-18=itradeco user-19=janiboja user-20=bovincom user-21=stojano1 user-22=klimimk user-23=stokovna user-24=sparkupm user-25=custome1 user-26=zvskopje user-27=busymard user-28=zampmk user-29=palenzok user-30=polyeste user-31=vfxnestc user-32=groskome user-33=ivanjord user-34=sedcmk user-35=maleshne user-36=datelcom user-37=bizporta user-38=mspmk user-39=infobadi user-40=detskagr user-41=spdcompu user-42=urbanexp user-43=wikicamp user-44=rasmorgm user-45=skyapart user-46=bianasho user-47=makoasmk user-48=mfashion user-49=dhamachi user-50=volkanco
Sep 13 20:37:50 power sudo[40898]: wp-toolkit : (command continued) user-51=goartsym user-52=workandt user-53=barececo user-54=delcevca user-55=getaldus user-56=simbiome user-57=mpbmk user-58=agrosind user-59=kujnamon user-60=univerz1 user-61=gogovan1 user-62=velmk user-63=datalink user-64=ekostoc1 user-65=oncolog1 user-66=levantmk user-67=nefrolog user-68=caramk user-69=hidrommk user-70=frizered user-71=evolvepl user-72=pelagoni user-73=avtogumi user-74=socioloz user-75=viewinn user-76=trudovop user-77=vmro user-78=enaspotc user-79=bauerbg user-80=uhostmk5 user-81=oouslave user-82=raremk user-83=stojnevi user-84=anitermc user-85=youthgua user-86=hotammk user-87=cajsproc user-88=rastiraz user-89=holiyayt user-90=robustco user-91=stravelm user-92=wondersp user-93=pecakome user-94=dnevnoin user-95=tradeyou user-96=gjorgeiv user-97=gocruise user-98=mstmmk user-99=goodnews user-100=proverim user-101=dadarmk user-102=tealmk user-103=nolimits user-104=kolened1 user-105=nlpmkorg
Sep 13 20:37:50 power sudo[40898]: wp-toolkit : (command continued) user-106=centarba user-107=seloviro user-108=herbalpl user-109=enochmk user-110=sprintst user-111=dikimk12 user-112=berbermk user-113=edomcomm user-114=electrol user-115=eliksirz user-116=naksorgm user-117=trigemat user-118=golakkom user-119=solarinv user-120=eurofarm user-121=viplastc user-122=wineberr user-123=mbmehani user-124=ismassag user-125=workbenc user-126=bbbustou user-127=kaoilmk user-128=biplmk user-129=pelagini user-130=solointe user-131=jaramk user-132=taktcomm user-133=recorgmk user-134=cleanerm user-135=animatem user-136=progress user-137=sssoluti user-138=atspedco user-139=fxxcom user-140=peshkai1 user-141=dimpalne user-142=eaptekam user-143=gradbai1 user-144=madzomk user-145=aptekafa user-146=evacommk user-147=jpkomuna user-148=izzomk user-149=makdrone user-150=tehnodro user-151=evberasm user-152=bonitavi user-153=conserva user-154=cupidpro user-155=vegemk1 user-156=euronic3 user-157=bauerin2
Sep 13 20:37:50 power sudo[40898]: wp-toolkit : (command continued) user-158=folklore user-159=tcieuroc user-160=mapaspla user-161=solemor1 user-162=nationa2 user-163=onlinesh user-164=versusmk user-165=fiziosmk user-166=ambitiou user-167=starluxm user-168=radekrat user-169=fffhpcwr user-170=inkigaic user-171=modernar user-172=tehnologija user-173=taneccom user-174=vacuacti user-175=innofabl user-176=premiumi user-177=fnjorgmk user-178=darkogor user-179=prizmapl user-180=dslmk user-181=bozinovm user-182=supremel user-183=v5srybi9dcdx user-184=aquatech user-185=gorsajmk user-186=zdmgpsor user-187=nutrivim user-188=samasped user-189=chemhemc user-190=zapovim1 user-191=elektrot user-192=cosmatob user-193=euromaki user-194=vtranseu user-195=pravekom user-196=infopor1 user-197=albuname user-198=glammace user-199=imdskopj user-200=nikolov1 user-201=hausmark user-202=forzares user-203=nikimare user-204=aptekazd user-205=lblawcom user-206=nucktra1 user-207=mediatag user-208=intelek1
Sep 13 20:37:50 power sudo[40898]: wp-toolkit : (command continued) user-209=matratze user-210=euronic2 user-211=kardiome user-212=apgrupmk user-213=carrent1 user-214=bogdanos user-215=mediasol feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:37:50 power sudo[40898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:50 power sudo[40898]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:50 power sudo[40941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:37:50 power sudo[40941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:50 power sudo[40941]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:50 power sudo[40946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:37:50 power sudo[40946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:50 power sudo[40946]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:50 power sudo[40952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:37:50 power sudo[40952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:51 power sudo[40952]: pam_unix(sudo:session): session closed for user root
Sep 13 20:37:51 power sudo[40960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=kardiome user-2=mediasol user-3=carrent1 user-4=bogdanos user-5=apgrupmk user-6=euronic2 user-7=matratze user-8=nucktra1 user-9=lblawcom user-10=intelek1 user-11=mediatag user-12=hausmark user-13=nikolov1 user-14=aptekazd user-15=nikimare user-16=forzares user-17=glammace user-18=albuname user-19=imdskopj user-20=pravekom user-21=vtranseu user-22=infopor1 user-23=zapovim1 user-24=elektrot user-25=cosmatob user-26=euromaki user-27=nutrivim user-28=samasped user-29=chemhemc user-30=zdmgpsor user-31=v5srybi9dcdx user-32=supremel user-33=gorsajmk user-34=aquatech user-35=taneccom user-36=tehnologija user-37=bozinovm user-38=darkogor user-39=prizmapl user-40=fnjorgmk user-41=dslmk user-42=premiumi user-43=innofabl user-44=vacuacti user-45=inkigaic user-46=modernar user-47=radekrat user-48=starluxm user-49=fffhpcwr
Sep 13 20:37:51 power sudo[40960]: wp-toolkit : (command continued) user-50=versusmk user-51=ambitiou user-52=fiziosmk user-53=solemor1 user-54=mapaspla user-55=onlinesh user-56=nationa2 user-57=tcieuroc user-58=bauerin2 user-59=folklore user-60=conserva user-61=euronic3 user-62=vegemk1 user-63=cupidpro user-64=bonitavi user-65=evberasm user-66=makdrone user-67=tehnodro user-68=izzomk user-69=jpkomuna user-70=gradbai1 user-71=evacommk user-72=aptekafa user-73=madzomk user-74=peshkai1 user-75=fxxcom user-76=eaptekam user-77=dimpalne user-78=progress user-79=animatem user-80=cleanerm user-81=sssoluti user-82=atspedco user-83=jaramk user-84=solointe user-85=recorgmk user-86=taktcomm user-87=pelagini user-88=kaoilmk user-89=biplmk user-90=bbbustou user-91=mbmehani user-92=workbenc user-93=ismassag user-94=wineberr user-95=viplastc user-96=solarinv user-97=eurofarm user-98=trigemat user-99=eliksirz user-100=naksorgm user-101=electrol user-102=golakkom user-103=edomcomm
Sep 13 20:37:51 power sudo[40960]: wp-toolkit : (command continued) user-104=berbermk user-105=dikimk12 user-106=sprintst user-107=herbalpl user-108=enochmk user-109=seloviro user-110=nolimits user-111=nlpmkorg user-112=centarba user-113=kolened1 user-114=dadarmk user-115=proverim user-116=tealmk user-117=gocruise user-118=goodnews user-119=mstmmk user-120=dnevnoin user-121=gjorgeiv user-122=tradeyou user-123=holiyayt user-124=rastiraz user-125=pecakome user-126=wondersp user-127=stravelm user-128=robustco user-129=cajsproc user-130=hotammk user-131=youthgua user-132=anitermc user-133=raremk user-134=oouslave user-135=uhostmk5 user-136=bauerbg user-137=stojnevi user-138=enaspotc user-139=vmro user-140=viewinn user-141=trudovop user-142=pelagoni user-143=socioloz user-144=avtogumi user-145=evolvepl user-146=caramk user-147=frizered user-148=hidrommk user-149=nefrolog user-150=ekostoc1 user-151=oncolog1 user-152=levantmk user-153=gogovan1 user-154=velmk user-155=kujnamon
Sep 13 20:37:51 power sudo[40960]: wp-toolkit : (command continued) user-156=univerz1 user-157=datalink user-158=agrosind user-159=mpbmk user-160=volkanco user-161=goartsym user-162=dhamachi user-163=mfashion user-164=delcevca user-165=simbiome user-166=getaldus user-167=barececo user-168=workandt user-169=rasmorgm user-170=makoasmk user-171=bianasho user-172=skyapart user-173=wikicamp user-174=urbanexp user-175=infobadi user-176=mspmk user-177=spdcompu user-178=detskagr user-179=datelcom user-180=maleshne user-181=bizporta user-182=vfxnestc user-183=polyeste user-184=sedcmk user-185=ivanjord user-186=groskome user-187=custome1 user-188=palenzok user-189=busymard user-190=zvskopje user-191=zampmk user-192=klimimk user-193=sparkupm user-194=stokovna user-195=bovincom user-196=stojano1 user-197=vezilkac user-198=cabinetm user-199=janiboja user-200=itradeco user-201=jpparkin user-202=inotekso user-203=drleomk user-204=premiums user-205=butelmk user-206=daris user-207=ideaplus
Sep 13 20:37:51 power sudo[40960]: wp-toolkit : (command continued) user-208=nasaidni user-209=karpospo user-210=arturaco user-211=screenme user-212=cetplatf user-213=dalmacom user-214=kouzonco user-215=premiuma feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:37:51 power sudo[40960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:37:51 power sudo[40960]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:23 power sudo[41589]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:38:23 power sudo[41589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:23 power sudo[41589]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:23 power sudo[41598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:38:23 power sudo[41598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:23 power sudo[41598]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:23 power sudo[41604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:38:23 power sudo[41604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:23 power sudo[41604]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:23 power sudo[41611]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=aptekazd user-2=nikimare user-3=forzares user-4=hausmark user-5=nikolov1 user-6=intelek1 user-7=mediatag user-8=nucktra1 user-9=lblawcom user-10=euronic2 user-11=matratze user-12=mediasol user-13=bogdanos user-14=carrent1 user-15=apgrupmk user-16=kardiome user-17=samasped user-18=chemhemc user-19=nutrivim user-20=cosmatob user-21=euromaki user-22=zapovim1 user-23=elektrot user-24=infopor1 user-25=pravekom user-26=vtranseu user-27=imdskopj user-28=glammace user-29=albuname user-30=modernar user-31=inkigaic user-32=bozinovm user-33=prizmapl user-34=darkogor user-35=fnjorgmk user-36=dslmk user-37=innofabl user-38=premiumi user-39=vacuacti user-40=taneccom user-41=tehnologija user-42=gorsajmk user-43=aquatech user-44=v5srybi9dcdx user-45=supremel user-46=zdmgpsor user-47=tcieuroc user-48=onlinesh user-49=nationa2
Sep 13 20:38:23 power sudo[41611]: wp-toolkit : (command continued) user-50=solemor1 user-51=mapaspla user-52=ambitiou user-53=fiziosmk user-54=versusmk user-55=fffhpcwr user-56=radekrat user-57=starluxm user-58=bonitavi user-59=evberasm user-60=euronic3 user-61=vegemk1 user-62=cupidpro user-63=conserva user-64=folklore user-65=bauerin2 user-66=eaptekam user-67=dimpalne user-68=peshkai1 user-69=fxxcom user-70=evacommk user-71=madzomk user-72=aptekafa user-73=gradbai1 user-74=izzomk user-75=jpkomuna user-76=tehnodro user-77=makdrone user-78=kaoilmk user-79=biplmk user-80=bbbustou user-81=pelagini user-82=recorgmk user-83=taktcomm user-84=jaramk user-85=solointe user-86=atspedco user-87=sssoluti user-88=progress user-89=animatem user-90=cleanerm user-91=golakkom user-92=trigemat user-93=eliksirz user-94=naksorgm user-95=electrol user-96=eurofarm user-97=solarinv user-98=wineberr user-99=viplastc user-100=workbenc user-101=ismassag user-102=mbmehani user-103=nlpmkorg
Sep 13 20:38:23 power sudo[41611]: wp-toolkit : (command continued) user-104=centarba user-105=kolened1 user-106=nolimits user-107=seloviro user-108=dikimk12 user-109=sprintst user-110=enochmk user-111=herbalpl user-112=edomcomm user-113=berbermk user-114=pecakome user-115=wondersp user-116=stravelm user-117=robustco user-118=holiyayt user-119=rastiraz user-120=gjorgeiv user-121=tradeyou user-122=dnevnoin user-123=goodnews user-124=mstmmk user-125=gocruise user-126=tealmk user-127=dadarmk user-128=proverim user-129=enaspotc user-130=vmro user-131=viewinn user-132=trudovop user-133=stojnevi user-134=raremk user-135=oouslave user-136=uhostmk5 user-137=bauerbg user-138=youthgua user-139=anitermc user-140=cajsproc user-141=hotammk user-142=nefrolog user-143=levantmk user-144=ekostoc1 user-145=oncolog1 user-146=frizered user-147=hidrommk user-148=caramk user-149=evolvepl user-150=socioloz user-151=avtogumi user-152=pelagoni user-153=makoasmk user-154=bianasho user-155=skyapart
Sep 13 20:38:23 power sudo[41611]: wp-toolkit : (command continued) user-156=rasmorgm user-157=delcevca user-158=simbiome user-159=getaldus user-160=barececo user-161=workandt user-162=volkanco user-163=goartsym user-164=dhamachi user-165=mfashion user-166=agrosind user-167=mpbmk user-168=datalink user-169=gogovan1 user-170=velmk user-171=kujnamon user-172=univerz1 user-173=sedcmk user-174=ivanjord user-175=groskome user-176=vfxnestc user-177=polyeste user-178=bizporta user-179=datelcom user-180=maleshne user-181=spdcompu user-182=detskagr user-183=mspmk user-184=infobadi user-185=wikicamp user-186=urbanexp user-187=janiboja user-188=itradeco user-189=vezilkac user-190=cabinetm user-191=stojano1 user-192=bovincom user-193=sparkupm user-194=stokovna user-195=klimimk user-196=palenzok user-197=busymard user-198=zampmk user-199=zvskopje user-200=custome1 user-201=kouzonco user-202=premiuma user-203=cetplatf user-204=dalmacom user-205=ideaplus user-206=nasaidni user-207=karpospo
Sep 13 20:38:23 power sudo[41611]: wp-toolkit : (command continued) user-208=arturaco user-209=screenme user-210=premiums user-211=butelmk user-212=daris user-213=jpparkin user-214=inotekso user-215=drleomk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:38:23 power sudo[41611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:24 power sudo[41611]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:28 power sudo[41732]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:38:28 power sudo[41732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:28 power sudo[41732]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:28 power sudo[41738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:38:28 power sudo[41738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:28 power sudo[41738]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:28 power sudo[41743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:38:28 power sudo[41743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:28 power sudo[41743]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:28 power sudo[41748]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=hausmark user-2=nikolov1 user-3=aptekazd user-4=nikimare user-5=forzares user-6=nucktra1 user-7=lblawcom user-8=intelek1 user-9=mediatag user-10=euronic2 user-11=matratze user-12=kardiome user-13=mediasol user-14=carrent1 user-15=bogdanos user-16=apgrupmk user-17=nutrivim user-18=samasped user-19=chemhemc user-20=zapovim1 user-21=elektrot user-22=cosmatob user-23=euromaki user-24=vtranseu user-25=pravekom user-26=infopor1 user-27=glammace user-28=albuname user-29=imdskopj user-30=inkigaic user-31=modernar user-32=taneccom user-33=tehnologija user-34=bozinovm user-35=darkogor user-36=fnjorgmk user-37=prizmapl user-38=dslmk user-39=innofabl user-40=premiumi user-41=vacuacti user-42=v5srybi9dcdx user-43=supremel user-44=gorsajmk user-45=aquatech user-46=zdmgpsor user-47=tcieuroc user-48=solemor1 user-49=mapaspla
Sep 13 20:38:28 power sudo[41748]: wp-toolkit : (command continued) user-50=onlinesh user-51=nationa2 user-52=versusmk user-53=ambitiou user-54=fiziosmk user-55=radekrat user-56=starluxm user-57=fffhpcwr user-58=bonitavi user-59=evberasm user-60=conserva user-61=euronic3 user-62=vegemk1 user-63=cupidpro user-64=bauerin2 user-65=folklore user-66=peshkai1 user-67=fxxcom user-68=eaptekam user-69=dimpalne user-70=gradbai1 user-71=evacommk user-72=madzomk user-73=aptekafa user-74=izzomk user-75=jpkomuna user-76=makdrone user-77=tehnodro user-78=biplmk user-79=kaoilmk user-80=bbbustou user-81=pelagini user-82=jaramk user-83=solointe user-84=recorgmk user-85=taktcomm user-86=progress user-87=animatem user-88=cleanerm user-89=atspedco user-90=sssoluti user-91=trigemat user-92=eliksirz user-93=naksorgm user-94=electrol user-95=golakkom user-96=solarinv user-97=eurofarm user-98=wineberr user-99=viplastc user-100=mbmehani user-101=workbenc user-102=ismassag user-103=nolimits
Sep 13 20:38:28 power sudo[41748]: wp-toolkit : (command continued) user-104=nlpmkorg user-105=centarba user-106=kolened1 user-107=seloviro user-108=dikimk12 user-109=sprintst user-110=herbalpl user-111=enochmk user-112=edomcomm user-113=berbermk user-114=holiyayt user-115=rastiraz user-116=pecakome user-117=wondersp user-118=robustco user-119=stravelm user-120=dnevnoin user-121=gjorgeiv user-122=tradeyou user-123=gocruise user-124=goodnews user-125=mstmmk user-126=dadarmk user-127=proverim user-128=tealmk user-129=enaspotc user-130=vmro user-131=viewinn user-132=trudovop user-133=raremk user-134=oouslave user-135=uhostmk5 user-136=bauerbg user-137=stojnevi user-138=youthgua user-139=anitermc user-140=cajsproc user-141=hotammk user-142=nefrolog user-143=levantmk user-144=ekostoc1 user-145=oncolog1 user-146=caramk user-147=frizered user-148=hidrommk user-149=evolvepl user-150=pelagoni user-151=avtogumi user-152=socioloz user-153=rasmorgm user-154=makoasmk user-155=bianasho
Sep 13 20:38:28 power sudo[41748]: wp-toolkit : (command continued) user-156=skyapart user-157=goartsym user-158=volkanco user-159=dhamachi user-160=mfashion user-161=simbiome user-162=delcevca user-163=getaldus user-164=barececo user-165=workandt user-166=agrosind user-167=mpbmk user-168=velmk user-169=gogovan1 user-170=univerz1 user-171=kujnamon user-172=datalink user-173=vfxnestc user-174=polyeste user-175=sedcmk user-176=groskome user-177=ivanjord user-178=datelcom user-179=maleshne user-180=bizporta user-181=mspmk user-182=infobadi user-183=spdcompu user-184=detskagr user-185=wikicamp user-186=urbanexp user-187=vezilkac user-188=cabinetm user-189=janiboja user-190=itradeco user-191=bovincom user-192=stojano1 user-193=klimimk user-194=sparkupm user-195=stokovna user-196=custome1 user-197=palenzok user-198=zampmk user-199=busymard user-200=zvskopje user-201=cetplatf user-202=dalmacom user-203=kouzonco user-204=premiuma user-205=premiums user-206=daris user-207=butelmk
Sep 13 20:38:28 power sudo[41748]: wp-toolkit : (command continued) user-208=ideaplus user-209=karpospo user-210=nasaidni user-211=arturaco user-212=screenme user-213=jpparkin user-214=inotekso user-215=drleomk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:38:28 power sudo[41748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:29 power sudo[41748]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:32 power sudo[41810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:32 power sudo[41810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:32 power sudo[41810]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:32 power sudo[41816]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:38:32 power sudo[41816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:32 power sudo[41816]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:32 power sudo[41822]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:38:32 power sudo[41822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:33 power sudo[41822]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:33 power sudo[41827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:38:33 power sudo[41827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:33 power sudo[41827]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:33 power sudo[41834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=atspedco user-2=sssoluti user-3=progress user-4=animatem user-5=cleanerm user-6=recorgmk user-7=taktcomm user-8=jaramk user-9=solointe user-10=pelagini user-11=biplmk user-12=kaoilmk user-13=bbbustou user-14=workbenc user-15=ismassag user-16=mbmehani user-17=wineberr user-18=viplastc user-19=eurofarm user-20=solarinv user-21=golakkom user-22=trigemat user-23=naksorgm user-24=eliksirz user-25=electrol user-26=folklore user-27=bauerin2 user-28=euronic3 user-29=vegemk1 user-30=cupidpro user-31=conserva user-32=bonitavi user-33=evberasm user-34=tehnodro user-35=makdrone user-36=izzomk user-37=jpkomuna user-38=evacommk user-39=aptekafa user-40=madzomk user-41=gradbai1 user-42=eaptekam user-43=dimpalne user-44=peshkai1 user-45=fxxcom user-46=zdmgpsor user-47=gorsajmk user-48=aquatech user-49=v5srybi9dcdx
Sep 13 20:38:33 power sudo[41834]: wp-toolkit : (command continued) user-50=supremel user-51=bozinovm user-52=darkogor user-53=fnjorgmk user-54=dslmk user-55=prizmapl user-56=innofabl user-57=premiumi user-58=vacuacti user-59=taneccom user-60=tehnologija user-61=modernar user-62=inkigaic user-63=fffhpcwr user-64=radekrat user-65=starluxm user-66=ambitiou user-67=fiziosmk user-68=versusmk user-69=onlinesh user-70=nationa2 user-71=solemor1 user-72=mapaspla user-73=tcieuroc user-74=mediasol user-75=carrent1 user-76=bogdanos user-77=apgrupmk user-78=kardiome user-79=euronic2 user-80=matratze user-81=intelek1 user-82=mediatag user-83=nucktra1 user-84=lblawcom user-85=aptekazd user-86=nikimare user-87=forzares user-88=hausmark user-89=nikolov1 user-90=imdskopj user-91=glammace user-92=albuname user-93=infopor1 user-94=pravekom user-95=vtranseu user-96=cosmatob user-97=euromaki user-98=elektrot user-99=zapovim1 user-100=chemhemc user-101=samasped user-102=nutrivim user-103=palenzok
Sep 13 20:38:33 power sudo[41834]: wp-toolkit : (command continued) user-104=busymard user-105=zampmk user-106=zvskopje user-107=custome1 user-108=sparkupm user-109=stokovna user-110=klimimk user-111=stojano1 user-112=bovincom user-113=janiboja user-114=itradeco user-115=vezilkac user-116=cabinetm user-117=jpparkin user-118=inotekso user-119=drleomk user-120=ideaplus user-121=karpospo user-122=nasaidni user-123=screenme user-124=arturaco user-125=premiums user-126=butelmk user-127=daris user-128=kouzonco user-129=premiuma user-130=cetplatf user-131=dalmacom user-132=datalink user-133=gogovan1 user-134=velmk user-135=kujnamon user-136=univerz1 user-137=agrosind user-138=mpbmk user-139=delcevca user-140=simbiome user-141=getaldus user-142=barececo user-143=workandt user-144=goartsym user-145=volkanco user-146=dhamachi user-147=mfashion user-148=bianasho user-149=makoasmk user-150=skyapart user-151=rasmorgm user-152=wikicamp user-153=urbanexp user-154=spdcompu user-155=detskagr
Sep 13 20:38:33 power sudo[41834]: wp-toolkit : (command continued) user-156=infobadi user-157=mspmk user-158=bizporta user-159=datelcom user-160=maleshne user-161=sedcmk user-162=ivanjord user-163=groskome user-164=vfxnestc user-165=polyeste user-166=cajsproc user-167=hotammk user-168=youthgua user-169=anitermc user-170=stojnevi user-171=raremk user-172=oouslave user-173=uhostmk5 user-174=bauerbg user-175=enaspotc user-176=vmro user-177=viewinn user-178=trudovop user-179=socioloz user-180=avtogumi user-181=pelagoni user-182=evolvepl user-183=frizered user-184=hidrommk user-185=caramk user-186=nefrolog user-187=levantmk user-188=ekostoc1 user-189=oncolog1 user-190=edomcomm user-191=berbermk user-192=dikimk12 user-193=sprintst user-194=enochmk user-195=herbalpl user-196=seloviro user-197=centarba user-198=nlpmkorg user-199=kolened1 user-200=nolimits user-201=tealmk user-202=dadarmk user-203=proverim user-204=goodnews user-205=mstmmk user-206=gocruise user-207=tradeyou
Sep 13 20:38:33 power sudo[41834]: wp-toolkit : (command continued) user-208=gjorgeiv user-209=dnevnoin user-210=pecakome user-211=wondersp user-212=stravelm user-213=robustco user-214=holiyayt user-215=rastiraz feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:38:33 power sudo[41834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:33 power sudo[41834]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:39 power sudo[41909]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:39 power sudo[41909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:39 power sudo[41909]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:39 power sudo[41914]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:38:39 power sudo[41914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:39 power sudo[41914]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:39 power sudo[41919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:38:39 power sudo[41919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:39 power sudo[41919]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:39 power sudo[41923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:38:39 power sudo[41923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:39 power sudo[41923]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:39 power sudo[41932]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=evolvepl user-2=pelagoni user-3=socioloz user-4=avtogumi user-5=oncolog1 user-6=ekostoc1 user-7=levantmk user-8=nefrolog user-9=caramk user-10=hidrommk user-11=frizered user-12=anitermc user-13=youthgua user-14=hotammk user-15=cajsproc user-16=viewinn user-17=trudovop user-18=vmro user-19=enaspotc user-20=bauerbg user-21=uhostmk5 user-22=oouslave user-23=raremk user-24=stojnevi user-25=gocruise user-26=mstmmk user-27=goodnews user-28=proverim user-29=dadarmk user-30=tealmk user-31=rastiraz user-32=holiyayt user-33=robustco user-34=stravelm user-35=wondersp user-36=pecakome user-37=dnevnoin user-38=tradeyou user-39=gjorgeiv user-40=enochmk user-41=herbalpl user-42=sprintst user-43=dikimk12 user-44=berbermk user-45=edomcomm user-46=nolimits user-47=kolened1 user-48=nlpmkorg user-49=centarba user-50=seloviro
Sep 13 20:38:39 power sudo[41932]: wp-toolkit : (command continued) user-51=daris user-52=butelmk user-53=premiums user-54=arturaco user-55=screenme user-56=nasaidni user-57=karpospo user-58=ideaplus user-59=drleomk user-60=inotekso user-61=jpparkin user-62=dalmacom user-63=cetplatf user-64=premiuma user-65=kouzonco user-66=klimimk user-67=stokovna user-68=sparkupm user-69=custome1 user-70=busymard user-71=zampmk user-72=zvskopje user-73=palenzok user-74=cabinetm user-75=vezilkac user-76=itradeco user-77=janiboja user-78=bovincom user-79=stojano1 user-80=infobadi user-81=mspmk user-82=detskagr user-83=spdcompu user-84=urbanexp user-85=wikicamp user-86=polyeste user-87=vfxnestc user-88=ivanjord user-89=groskome user-90=sedcmk user-91=maleshne user-92=datelcom user-93=bizporta user-94=mpbmk user-95=agrosind user-96=univerz1 user-97=kujnamon user-98=gogovan1 user-99=velmk user-100=datalink user-101=rasmorgm user-102=skyapart user-103=makoasmk user-104=bianasho user-105=mfashion
Sep 13 20:38:39 power sudo[41932]: wp-toolkit : (command continued) user-106=dhamachi user-107=goartsym user-108=volkanco user-109=workandt user-110=barececo user-111=delcevca user-112=simbiome user-113=getaldus user-114=versusmk user-115=fiziosmk user-116=ambitiou user-117=starluxm user-118=radekrat user-119=fffhpcwr user-120=tcieuroc user-121=mapaspla user-122=solemor1 user-123=nationa2 user-124=onlinesh user-125=supremel user-126=v5srybi9dcdx user-127=aquatech user-128=gorsajmk user-129=zdmgpsor user-130=inkigaic user-131=modernar user-132=tehnologija user-133=taneccom user-134=vacuacti user-135=innofabl user-136=premiumi user-137=darkogor user-138=fnjorgmk user-139=dslmk user-140=prizmapl user-141=bozinovm user-142=pravekom user-143=vtranseu user-144=infopor1 user-145=albuname user-146=glammace user-147=imdskopj user-148=nutrivim user-149=chemhemc user-150=samasped user-151=zapovim1 user-152=elektrot user-153=euromaki user-154=cosmatob user-155=matratze user-156=euronic2
Sep 13 20:38:39 power sudo[41932]: wp-toolkit : (command continued) user-157=kardiome user-158=apgrupmk user-159=carrent1 user-160=bogdanos user-161=mediasol user-162=nikolov1 user-163=hausmark user-164=forzares user-165=nikimare user-166=aptekazd user-167=lblawcom user-168=nucktra1 user-169=mediatag user-170=intelek1 user-171=viplastc user-172=wineberr user-173=mbmehani user-174=ismassag user-175=workbenc user-176=electrol user-177=naksorgm user-178=eliksirz user-179=trigemat user-180=golakkom user-181=solarinv user-182=eurofarm user-183=solointe user-184=jaramk user-185=recorgmk user-186=taktcomm user-187=cleanerm user-188=animatem user-189=progress user-190=sssoluti user-191=atspedco user-192=bbbustou user-193=kaoilmk user-194=biplmk user-195=pelagini user-196=jpkomuna user-197=izzomk user-198=makdrone user-199=tehnodro user-200=fxxcom user-201=peshkai1 user-202=dimpalne user-203=eaptekam user-204=gradbai1 user-205=aptekafa user-206=madzomk user-207=evacommk user-208=bauerin2
Sep 13 20:38:39 power sudo[41932]: wp-toolkit : (command continued) user-209=folklore user-210=evberasm user-211=bonitavi user-212=conserva user-213=cupidpro user-214=vegemk1 user-215=euronic3 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:38:39 power sudo[41932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:39 power sudo[41932]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:40 power sudo[41960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:40 power sudo[41960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:40 power sudo[41960]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:40 power sudo[41966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:38:40 power sudo[41966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:40 power sudo[41966]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:42 power sudo[42013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:42 power sudo[42013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:42 power sudo[42013]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:44 power sudo[42050]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:44 power sudo[42050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:44 power sudo[42050]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:46 power sudo[42147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:46 power sudo[42147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:46 power sudo[42147]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:49 power sudo[42190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:49 power sudo[42190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:49 power sudo[42190]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:51 power sudo[42240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:51 power sudo[42240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:51 power sudo[42240]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:53 power sudo[42282]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:53 power sudo[42282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:53 power sudo[42282]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:54 power sudo[42296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cpapi2 --user=kolened1 Locale get_user_locale --output=json'
Sep 13 20:38:54 power sudo[42296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:54 power sudo[42296]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:54 power sudo[42305]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'
Sep 13 20:38:54 power sudo[42305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:54 power sudo[42305]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:54 power sudo[42311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'
Sep 13 20:38:54 power sudo[42311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:54 power sudo[42311]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:54 power sudo[42322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'cagefsctl --cagefs-status'
Sep 13 20:38:54 power sudo[42322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:54 power sudo[42322]: pam_unix(sudo:session): session closed for user root
Sep 13 20:38:54 power sudo[42336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=univerz1 user-2=kujnamon user-3=gogovan1 user-4=velmk user-5=datalink user-6=mpbmk user-7=agrosind user-8=dhamachi user-9=volkanco user-10=goartsym user-11=mfashion user-12=barececo user-13=delcevca user-14=getaldus user-15=simbiome user-16=workandt user-17=rasmorgm user-18=skyapart user-19=bianasho user-20=makoasmk user-21=wikicamp user-22=urbanexp user-23=infobadi user-24=mspmk user-25=spdcompu user-26=detskagr user-27=maleshne user-28=datelcom user-29=bizporta user-30=polyeste user-31=vfxnestc user-32=sedcmk user-33=ivanjord user-34=groskome user-35=custome1 user-36=palenzok user-37=zvskopje user-38=busymard user-39=zampmk user-40=klimimk user-41=stokovna user-42=sparkupm user-43=bovincom user-44=stojano1 user-45=vezilkac user-46=cabinetm user-47=janiboja user-48=itradeco user-49=inotekso user-50=jpparkin
Sep 13 20:38:54 power sudo[42336]: wp-toolkit : (command continued) user-51=drleomk user-52=daris user-53=butelmk user-54=premiums user-55=karpospo user-56=nasaidni user-57=ideaplus user-58=screenme user-59=arturaco user-60=cetplatf user-61=dalmacom user-62=kouzonco user-63=premiuma user-64=edomcomm user-65=berbermk user-66=dikimk12 user-67=herbalpl user-68=enochmk user-69=sprintst user-70=seloviro user-71=nolimits user-72=kolened1 user-73=nlpmkorg user-74=centarba user-75=dadarmk user-76=proverim user-77=tealmk user-78=gocruise user-79=goodnews user-80=mstmmk user-81=dnevnoin user-82=gjorgeiv user-83=tradeyou user-84=holiyayt user-85=rastiraz user-86=pecakome user-87=stravelm user-88=robustco user-89=wondersp user-90=cajsproc user-91=hotammk user-92=anitermc user-93=youthgua user-94=oouslave user-95=raremk user-96=bauerbg user-97=uhostmk5 user-98=stojnevi user-99=enaspotc user-100=trudovop user-101=viewinn user-102=vmro user-103=pelagoni user-104=socioloz user-105=avtogumi
Sep 13 20:38:54 power sudo[42336]: wp-toolkit : (command continued) user-106=evolvepl user-107=caramk user-108=hidrommk user-109=frizered user-110=levantmk user-111=ekostoc1 user-112=oncolog1 user-113=nefrolog user-114=bauerin2 user-115=folklore user-116=conserva user-117=euronic3 user-118=cupidpro user-119=vegemk1 user-120=evberasm user-121=bonitavi user-122=makdrone user-123=tehnodro user-124=izzomk user-125=jpkomuna user-126=gradbai1 user-127=aptekafa user-128=madzomk user-129=evacommk user-130=fxxcom user-131=peshkai1 user-132=eaptekam user-133=dimpalne user-134=progress user-135=cleanerm user-136=animatem user-137=sssoluti user-138=atspedco user-139=jaramk user-140=solointe user-141=taktcomm user-142=recorgmk user-143=pelagini user-144=biplmk user-145=kaoilmk user-146=bbbustou user-147=mbmehani user-148=workbenc user-149=ismassag user-150=wineberr user-151=viplastc user-152=solarinv user-153=eurofarm user-154=naksorgm user-155=eliksirz user-156=trigemat user-157=electrol
Sep 13 20:38:54 power sudo[42336]: wp-toolkit : (command continued) user-158=golakkom user-159=kardiome user-160=bogdanos user-161=carrent1 user-162=mediasol user-163=apgrupmk user-164=matratze user-165=euronic2 user-166=nucktra1 user-167=lblawcom user-168=mediatag user-169=intelek1 user-170=nikolov1 user-171=hausmark user-172=nikimare user-173=aptekazd user-174=forzares user-175=albuname user-176=glammace user-177=imdskopj user-178=vtranseu user-179=pravekom user-180=infopor1 user-181=zapovim1 user-182=elektrot user-183=euromaki user-184=cosmatob user-185=nutrivim user-186=chemhemc user-187=samasped user-188=zdmgpsor user-189=v5srybi9dcdx user-190=supremel user-191=aquatech user-192=gorsajmk user-193=taneccom user-194=tehnologija user-195=fnjorgmk user-196=darkogor user-197=dslmk user-198=prizmapl user-199=bozinovm user-200=vacuacti user-201=premiumi user-202=innofabl user-203=inkigaic user-204=modernar user-205=starluxm user-206=radekrat user-207=fffhpcwr user-208=versusmk
Sep 13 20:38:54 power sudo[42336]: wp-toolkit : (command continued) user-209=ambitiou user-210=fiziosmk user-211=solemor1 user-212=mapaspla user-213=onlinesh user-214=nationa2 user-215=tcieuroc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json'
Sep 13 20:38:54 power sudo[42336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=976)
Sep 13 20:38:54 power sudo[42336]: pam_unix(sudo:session): session closed for user root
Sep 13 20:40:02 power systemd[43322]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:46:42 power polkitd[2203]: Loading rules from directory /etc/polkit-1/rules.d
Sep 13 20:46:42 power polkitd[2203]: Loading rules from directory /usr/share/polkit-1/rules.d
Sep 13 20:46:42 power polkitd[2203]: Finished loading, compiling and executing 5 rules
Sep 13 20:46:42 power polkitd[2203]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Sep 13 20:46:54 power sshd[4668]: Server listening on 0.0.0.0 port 2200.
Sep 13 20:46:54 power sshd[4668]: Server listening on :: port 2200.
Sep 13 20:46:57 power sshd[4727]: Accepted password for root from 95.86.30.76 port 57171 ssh2
Sep 13 20:46:57 power systemd[5167]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:46:58 power sshd[4727]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:48:05 power sudo[7281]:    root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/tee /etc/sysctl.d/98-freeze-panic.conf
Sep 13 20:48:05 power sudo[7281]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:48:05 power sudo[7281]: pam_unix(sudo:session): session closed for user root
Sep 13 20:48:05 power sudo[7284]:    root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/sbin/sysctl --system
Sep 13 20:48:05 power sudo[7284]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:48:05 power sudo[7284]: pam_unix(sudo:session): session closed for user root
Sep 13 20:50:01 power systemd[8988]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:52:36 power sshd[57711]: Connection closed by 172.236.228.39 port 33046 [preauth]
Sep 13 20:52:38 power sshd[57774]: Connection closed by 172.236.228.39 port 33062 [preauth]
Sep 13 20:52:39 power sshd[58140]: Connection closed by 172.236.228.39 port 33064 [preauth]
Sep 13 20:55:01 power systemd[66305]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 20:56:08 power sshd[4727]: pam_unix(sshd:session): session closed for user root
Sep 13 20:56:10 power sshd[4668]: Received signal 15; terminating.
Sep 13 20:58:26 power polkitd[2145]: Loading rules from directory /etc/polkit-1/rules.d
Sep 13 20:58:26 power polkitd[2145]: Loading rules from directory /usr/share/polkit-1/rules.d
Sep 13 20:58:26 power polkitd[2145]: Finished loading, compiling and executing 5 rules
Sep 13 20:58:26 power polkitd[2145]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Sep 13 20:58:38 power sshd[8931]: Server listening on 0.0.0.0 port 2200.
Sep 13 20:58:38 power sshd[8931]: Server listening on :: port 2200.
Sep 13 20:59:48 power sshd[11066]: Accepted password for root from 95.86.30.76 port 57341 ssh2
Sep 13 20:59:48 power systemd[11157]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 20:59:48 power sshd[11066]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 21:00:01 power systemd[11550]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 21:00:01 power systemd[11552]: pam_unix(systemd-user:session): session opened for user eaptekam(uid=1074) by eaptekam(uid=0)
Sep 13 21:00:01 power systemd[11553]: pam_unix(systemd-user:session): session opened for user nutrivim(uid=1148) by nutrivim(uid=0)
Sep 13 21:00:01 power systemd[11556]: pam_unix(systemd-user:session): session opened for user stojano1(uid=1179) by stojano1(uid=0)
Sep 13 21:05:01 power systemd[16477]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 21:06:02 power systemd[17535]: pam_unix(systemd-user:session): session opened for user holiyayt(uid=1013) by holiyayt(uid=0)
Sep 13 21:07:01 power systemd[18383]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 21:10:01 power systemd[21184]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 21:12:01 power systemd[22888]: pam_unix(systemd-user:session): session opened for user enaspotc(uid=1009) by enaspotc(uid=0)
Sep 13 21:15:01 power systemd[26611]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 21:15:01 power systemd[26612]: pam_unix(systemd-user:session): session opened for user polyeste(uid=1217) by polyeste(uid=0)
Sep 13 21:20:02 power systemd[31833]: pam_unix(systemd-user:session): session opened for user vezilkac(uid=1026) by vezilkac(uid=0)
Sep 13 21:27:34 power polkitd[2158]: Loading rules from directory /etc/polkit-1/rules.d
Sep 13 21:27:34 power polkitd[2158]: Loading rules from directory /usr/share/polkit-1/rules.d
Sep 13 21:27:34 power polkitd[2158]: Finished loading, compiling and executing 5 rules
Sep 13 21:27:34 power polkitd[2158]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Sep 13 21:27:47 power sshd[4678]: Server listening on 0.0.0.0 port 2200.
Sep 13 21:27:47 power sshd[4678]: Server listening on :: port 2200.
Sep 13 21:27:54 power sshd[5074]: Accepted password for root from 185.172.53.41 port 16772 ssh2
Sep 13 21:27:54 power systemd[5430]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep 13 21:27:54 power sshd[5074]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
